last executing test programs: 2m1.417787622s ago: executing program 2 (id=97): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) 2m0.791956045s ago: executing program 32 (id=101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 2m0.775553575s ago: executing program 2 (id=103): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 2m0.406210747s ago: executing program 2 (id=106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1210003, &(0x7f00000000c0)={[{@discard}, {@discard}, {@nobarrier}, {@discard}, {@norecovery}], [], 0x2c}, 0x3, 0xeb0, &(0x7f0000000f40)="$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") r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0xa0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m58.384055959s ago: executing program 33 (id=115): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x3, 0x1ff, 0x4, 0x3132564e, [0x8, 0x9], [0x0, 0x3d0], 0x13a}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) 1m46.912668544s ago: executing program 2 (id=106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1210003, &(0x7f00000000c0)={[{@discard}, {@discard}, {@nobarrier}, {@discard}, {@norecovery}], [], 0x2c}, 0x3, 0xeb0, &(0x7f0000000f40)="$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") r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0xa0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m46.166368128s ago: executing program 2 (id=142): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x400147042, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7e6}) fallocate(r1, 0x0, 0x0, 0x1001f0) 1m45.214202553s ago: executing program 2 (id=144): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004ec0)=ANY=[@ANYBLOB="c803000000000000", @ANYRES64=r1], 0x3c8) 1m45.117580754s ago: executing program 34 (id=144): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004ec0)=ANY=[@ANYBLOB="c803000000000000", @ANYRES64=r1], 0x3c8) 1m28.845946516s ago: executing program 5 (id=238): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1210080, &(0x7f0000000140)=ANY=[@ANYBLOB="747970653d5f3b48d82c63726561746f723d888aaae62c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030373636363736343134362c71756965742c71756965742c6769643d", @ANYRESHEX=0xee01, @ANYBLOB="2c004ff5234dd9ed4318"], 0x4, 0x32f, &(0x7f0000000c80)="$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") ioctl$BLKRRPART(r1, 0x125f, 0x0) 1m28.442252668s ago: executing program 5 (id=243): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) 1m27.391712754s ago: executing program 5 (id=251): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r0, 0x96ef) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 1m26.923777007s ago: executing program 5 (id=253): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000180)={[{@attr2}, {@uquota}, {@grpquota}]}, 0x3, 0x9856, &(0x7f000001c900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) 1m24.916592838s ago: executing program 5 (id=262): capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000040)) r0 = fanotify_init(0x200, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x34}], 0x8) unshare(0x20000400) fanotify_mark(r0, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) 1m22.466538802s ago: executing program 5 (id=268): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x3a12c0, 0x0) unshare(0x400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x20) 1m22.288217943s ago: executing program 35 (id=268): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x3a12c0, 0x0) unshare(0x400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x20) 1m16.740968315s ago: executing program 3 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}, 0xfdef) 1m16.477689486s ago: executing program 3 (id=308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x84, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x3, 0x8}}, @val={0x76, 0x6, {0x10, 0xd, 0x1c}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x84}}, 0x0) 1m16.371349137s ago: executing program 3 (id=309): add_key(0x0, 0x0, &(0x7f0000000180)="02", 0x1, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000700)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 1m16.322113017s ago: executing program 3 (id=310): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x7, 0x44a, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)) 1m15.81577053s ago: executing program 3 (id=312): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0xd) utime(&(0x7f0000001880)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x4, 0x0) 1m14.874281445s ago: executing program 3 (id=317): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x3, '\x00\x00\x00'}, 0x0}) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) 1m14.764691026s ago: executing program 36 (id=317): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x3, '\x00\x00\x00'}, 0x0}) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) 1m2.670757265s ago: executing program 8 (id=398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="26650fc735ea3c47fa002ef30f09da87638f66b8000001000f23d00f21f866352000000a0f23f8363e0f01c30f79310f79b90000baf80c66b8a08d5a8066efbafc0c66ed66b98b0b000066b80e00000066ba000000000f30", 0x58}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m2.250463227s ago: executing program 8 (id=401): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c600, &(0x7f0000000140)}) 1m2.118153408s ago: executing program 8 (id=402): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="0486d85c918a8950863a640fea17c88750f7f0948b2c4bd06e1c72", 0x1b}, {&(0x7f0000000180)="2abce30f9a7ed894fe7c62dda26be01e210458c64fdc129edc40ce6a288fade5ef27c2396949b0", 0x27}], 0x2, 0x0, 0x0, 0x2840}], 0x1, 0x4044090) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/65, 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1}, 0x9}], 0x2, 0x0, 0x0) 1m2.069446618s ago: executing program 8 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") acct(&(0x7f0000000200)='./file1\x00') 1m1.73277717s ago: executing program 8 (id=404): unshare(0x20000400) openat$vsock(0xffffffffffffff9c, 0x0, 0x101402, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 1m1.050693614s ago: executing program 8 (id=411): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/895, @ANYRESOCT=0x0, @ANYRES32], 0x0, 0x2b1, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000140)) 1m0.875581335s ago: executing program 37 (id=411): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/895, @ANYRESOCT=0x0, @ANYRES32], 0x0, 0x2b1, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000140)) 52.644344402s ago: executing program 9 (id=471): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0xe80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x5afe, 0x0, 0x0, 0x0, 0x0) 52.504081663s ago: executing program 9 (id=473): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14d802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x11, r2, 0x0) read(r0, &(0x7f0000000080)=""/42, 0xffffff9b) 52.319314803s ago: executing program 9 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 51.1359269s ago: executing program 9 (id=477): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000013c0)='./file0\x00', 0x10090, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0, 0x14de, &(0x7f0000002a40)="$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") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 49.728453208s ago: executing program 9 (id=489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 49.209634221s ago: executing program 9 (id=494): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=""/146, 0x92, 0x0, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r1, 0x20, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000001340)=""/4096, 0x1000}}, 0x10) 49.099271602s ago: executing program 38 (id=494): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=""/146, 0x92, 0x0, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r1, 0x20, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000001340)=""/4096, 0x1000}}, 0x10) 33.993268588s ago: executing program 0 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 33.45835725s ago: executing program 0 (id=607): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0200"], 0x10) socket$kcm(0x2, 0x2, 0x73) 33.082615372s ago: executing program 0 (id=609): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x10000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 32.417942826s ago: executing program 0 (id=616): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) read$dsp(r1, 0x0, 0x0) write$tun(r1, &(0x7f0000002140)=ANY=[], 0x16e) 20.971389272s ago: executing program 0 (id=616): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) read$dsp(r1, 0x0, 0x0) write$tun(r1, &(0x7f0000002140)=ANY=[], 0x16e) 17.055533644s ago: executing program 6 (id=724): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.052523359s ago: executing program 6 (id=728): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x4000006, 0x8000, 0x8001, 0x0, 0x40000}, 0x1c) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x41, 0x800) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r0, 0x0, 0x0, 0xd9481726d31966ef, 0x0) 15.89863033s ago: executing program 6 (id=729): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x1, 0x400000, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 15.782858361s ago: executing program 6 (id=730): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2) 15.317994853s ago: executing program 6 (id=731): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000040)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@nodatacow}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x1ff}}, {@nodiscard}, {@space_cache_v2}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$UHID_INPUT(r1, &(0x7f00000025c0)={0x8, {"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", 0x1000}}, 0x1006) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 9.079229969s ago: executing program 0 (id=616): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) read$dsp(r1, 0x0, 0x0) write$tun(r1, &(0x7f0000002140)=ANY=[], 0x16e) 8.305171253s ago: executing program 7 (id=767): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private}, 0x4}}, 0x26) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}, "0a790cc55a8e"}}}}}}}, 0x0) 8.185966814s ago: executing program 7 (id=768): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="0d09a8612c3b1afe40b5e64db90f3c1b041cf2378892ed16dfa313eca69367f1", 0x20}], 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.005962615s ago: executing program 7 (id=771): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000002640)='track_foreign_dirty\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2f8, &(0x7f00000003c0)="$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") socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0xe7b}}}}}, 0x0) 7.661442547s ago: executing program 7 (id=772): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) 7.483545548s ago: executing program 7 (id=774): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/255, 0xff}, 0x20}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.817197677s ago: executing program 7 (id=786): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ac28", 0x2}], 0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) 5.615842669s ago: executing program 39 (id=786): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ac28", 0x2}], 0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) 2.590313076s ago: executing program 6 (id=731): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000040)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@nodatacow}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x1ff}}, {@nodiscard}, {@space_cache_v2}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$UHID_INPUT(r1, &(0x7f00000025c0)={0x8, {"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", 0x1000}}, 0x1006) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 1.96235464s ago: executing program 1 (id=808): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x180, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@mcast1, @empty, [], [], 'xfrm0\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1.87932994s ago: executing program 1 (id=809): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@jqfmt_vfsv1}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0xffffffffffffffff}}, {@norecovery}, {@bh}, {@lazytime}, {@resuid}, {@acl}, {@debug}]}, 0xfc, 0x56e, &(0x7f0000000ec0)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x49) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) fallocate(r0, 0x0, 0x0, 0x1000f4) 1.630740001s ago: executing program 1 (id=810): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000280)=[{r0}, {r0, 0x150}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 1.342389083s ago: executing program 1 (id=813): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000080)=[{r0, 0x104a}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 1.099259014s ago: executing program 4 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) 1.067579144s ago: executing program 4 (id=817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2}) close_range(r0, 0xffffffffffffffff, 0x0) 506.460007ms ago: executing program 4 (id=818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6215e3c3}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 440.267838ms ago: executing program 1 (id=819): bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 402.735348ms ago: executing program 4 (id=820): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xfb, &(0x7f0000000000), &(0x7f0000000080)=0x4) 258.417449ms ago: executing program 4 (id=821): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303034363032362c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d63703733372c756d61736b3d303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030363734352c00"/124], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) 159.191799ms ago: executing program 1 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 4 (id=823): r0 = io_uring_setup(0x1d3, &(0x7f0000000080)) iopl(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x94}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 144.541221][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.571172][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.585758][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.605869][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.674121][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.699484][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.720657][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.750724][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.788498][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.816979][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.836876][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.854974][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.885093][ T4732] Bluetooth: hci0: command 0x0419 tx timeout [ 144.905228][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.972097][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.029781][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.127163][ T6059] loop9: detected capacity change from 0 to 40427 [ 145.135412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.192442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.227640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.244267][ T6059] F2FS-fs (loop9): Found nat_bits in checkpoint [ 145.291473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.308641][ T6059] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 145.335351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.504130][ T4579] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.557699][ T6076] attempt to access beyond end of device [ 145.557699][ T6076] loop9: rw=2049, want=79904, limit=40427 [ 145.572815][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 145.672992][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.701498][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.726672][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.739993][ T6076] attempt to access beyond end of device [ 145.739993][ T6076] loop9: rw=2049, want=81920, limit=40427 [ 145.753249][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.774888][ T6076] attempt to access beyond end of device [ 145.774888][ T6076] loop9: rw=2049, want=51208, limit=40427 [ 145.803834][ T6076] attempt to access beyond end of device [ 145.803834][ T6076] loop9: rw=2049, want=53248, limit=40427 [ 145.806696][ T4579] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.850965][ T6076] attempt to access beyond end of device [ 145.850965][ T6076] loop9: rw=2049, want=58456, limit=40427 [ 145.904221][ T6064] loop7: detected capacity change from 0 to 40427 [ 145.941188][ T5554] attempt to access beyond end of device [ 145.941188][ T5554] loop9: rw=2049, want=45104, limit=40427 [ 146.028823][ T6064] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 146.037559][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.045823][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.065494][ T6064] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 146.109784][ T6064] F2FS-fs (loop7): invalid crc value [ 146.144469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.202685][ T5553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.241044][ T6064] F2FS-fs (loop7): Found nat_bits in checkpoint [ 146.251086][ T5553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.312762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.369837][ T6085] loop2: detected capacity change from 0 to 7 [ 146.419838][ T6085] Dev loop2: unable to read RDB block 7 [ 146.432588][ T6064] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 146.441449][ T6064] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 146.478425][ T6085] loop2: AHDI p1 p2 p3 [ 146.507316][ T6085] loop2: partition table partially beyond EOD, truncated [ 146.534389][ T6085] loop2: p1 start 2037277535 is beyond EOD, truncated [ 146.554680][ T6085] loop2: p2 start 1852052399 is beyond EOD, truncated [ 147.109897][ T6105] loop9: detected capacity change from 0 to 256 [ 147.117914][ T6100] loop4: detected capacity change from 0 to 2048 [ 147.149315][ T6105] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 147.260533][ T6100] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.277632][ T6100] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.751176][ T6117] input: syz0 as /devices/virtual/input/input15 [ 147.897460][ T6121] netlink: 'syz.7.492': attribute type 14 has an invalid length. [ 148.094263][ T6133] loop0: detected capacity change from 0 to 1024 [ 148.095694][ T6136] loop6: detected capacity change from 0 to 256 [ 148.149737][ T6131] ALSA: seq fatal error: cannot create timer (-16) [ 148.211034][ T4579] device hsr_slave_0 left promiscuous mode [ 148.229034][ T6138] loop4: detected capacity change from 0 to 128 [ 148.261142][ T4579] device hsr_slave_1 left promiscuous mode [ 148.296758][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.326943][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.339417][ T6138] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.360385][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.374893][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.418155][ T6138] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.452031][ T4579] device bridge_slave_1 left promiscuous mode [ 148.537775][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.589944][ T6138] syz.4.501 (pid 6138) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 148.606724][ T6147] loop6: detected capacity change from 0 to 512 [ 148.629348][ T4579] device bridge_slave_0 left promiscuous mode [ 148.635737][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.652094][ T4579] device veth1_macvtap left promiscuous mode [ 148.657609][ T6149] loop0: detected capacity change from 0 to 512 [ 148.658479][ T4579] device veth0_macvtap left promiscuous mode [ 148.670756][ T4579] device veth1_vlan left promiscuous mode [ 148.676578][ T4579] device veth0_vlan left promiscuous mode [ 148.721264][ T6147] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.787540][ T6149] EXT4-fs (loop0): Ignoring removed orlov option [ 148.817071][ T26] audit: type=1804 audit(1731607846.540:26): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.503" name="/newroot/103/file0/bus/file0" dev="loop6" ino=19 res=1 errno=0 [ 148.875279][ T6149] EXT4-fs (loop0): 1 truncate cleaned up [ 148.882547][ T6149] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,quota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,orlov,init_itable=0x0000000000000007,max_batch_time=0x000000000000006e,errors=remount-ro,auto_da_alloc,. Quota mode: writeback. [ 149.017982][ T6158] loop4: detected capacity change from 0 to 2048 [ 149.206679][ T6158] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.361005][ T6173] loop0: detected capacity change from 0 to 256 [ 149.430813][ T6164] loop6: detected capacity change from 0 to 8192 [ 149.491824][ T6164] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 149.533236][ T4579] team0 (unregistering): Port device team_slave_1 removed [ 149.537533][ T6164] REISERFS (device loop6): using ordered data mode [ 149.617404][ T6164] reiserfs: using flush barriers [ 149.653023][ T6164] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.675517][ T4579] team0 (unregistering): Port device team_slave_0 removed [ 149.724333][ T6176] loop7: detected capacity change from 0 to 4096 [ 149.732441][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.741577][ T6164] REISERFS (device loop6): checking transaction log (loop6) [ 149.752524][ T6164] REISERFS (device loop6): Using r5 hash to sort names [ 149.769098][ T6164] REISERFS (device loop6): using 3.5.x disk format [ 149.776110][ T6164] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 149.788588][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.800509][ T6176] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 149.944754][ T6164] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 149.983360][ T6183] loop0: detected capacity change from 0 to 256 [ 150.018028][ T6164] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 150.033348][ T6164] REISERFS (device loop6): Remounting filesystem read-only [ 150.215100][ T4579] bond0 (unregistering): Released all slaves [ 150.226975][ T6185] loop7: detected capacity change from 0 to 512 [ 150.349715][ T6185] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.515: inode #1: comm syz.7.515: iget: illegal inode # [ 150.419561][ T6185] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.515: error while reading EA inode 1 err=-117 [ 150.494730][ T6185] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.515: inode #1: comm syz.7.515: iget: illegal inode # [ 150.530509][ T6185] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.515: error while reading EA inode 1 err=-117 [ 150.634881][ T6185] EXT4-fs (loop7): 1 orphan inode deleted [ 150.645247][ T6193] netlink: 'syz.0.518': attribute type 30 has an invalid length. [ 150.649830][ T4370] Bluetooth: hci3: command 0x0409 tx timeout [ 150.653683][ T6185] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,abort,delalloc,usrjquota=,,errors=continue. Quota mode: none. [ 150.666762][ T6179] loop4: detected capacity change from 0 to 40427 [ 150.816902][ T6179] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 150.824680][ T6179] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 150.837077][ T26] audit: type=1800 audit(1731607848.570:27): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.515" name="bus" dev="loop7" ino=15 res=0 errno=0 [ 150.940112][ T6179] F2FS-fs (loop4): Found nat_bits in checkpoint [ 151.073976][ T6179] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 151.101685][ T6179] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 151.126971][ T5636] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.162255][ T6189] loop6: detected capacity change from 0 to 32768 [ 151.194427][ T26] audit: type=1800 audit(1731607848.920:28): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.511" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 151.235755][ T6179] attempt to access beyond end of device [ 151.235755][ T6179] loop4: rw=34817, want=78688, limit=40427 [ 151.284088][ T6189] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.516 (6189) [ 151.313501][ T6189] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 151.337120][ T6189] BTRFS info (device loop6): enabling auto defrag [ 151.343621][ T6189] BTRFS info (device loop6): max_inline at 0 [ 151.353268][ T6143] chnl_net:caif_netlink_parms(): no params data found [ 151.386965][ T6189] BTRFS info (device loop6): enabling ssd optimizations [ 151.393957][ T6189] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 151.442298][ T6189] BTRFS info (device loop6): use lzo compression, level 0 [ 151.485769][ T6189] BTRFS info (device loop6): using free space tree [ 151.507183][ T5636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.512525][ T6189] BTRFS info (device loop6): has skinny extents [ 151.537006][ T5636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.557305][ T5636] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 151.566412][ T5636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.651172][ T5636] usb 1-1: config 0 descriptor?? [ 151.733126][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.762962][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.873049][ T6143] device bridge_slave_0 entered promiscuous mode [ 151.922266][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.941631][ T26] audit: type=1800 audit(1731607849.670:29): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.516" name="bus" dev="loop6" ino=264 res=0 errno=0 [ 151.976987][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.020329][ T6143] device bridge_slave_1 entered promiscuous mode [ 152.113498][ T6143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.128892][ T5636] cp2112 0003:10C4:EA90.0005: unbalanced collection at end of report description [ 152.166204][ T5636] cp2112 0003:10C4:EA90.0005: parse failed [ 152.169955][ T6143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.174735][ T5636] cp2112: probe of 0003:10C4:EA90.0005 failed with error -22 [ 152.378165][ T4891] usb 1-1: USB disconnect, device number 2 [ 152.436636][ T6143] team0: Port device team_slave_0 added [ 152.472150][ T6143] team0: Port device team_slave_1 added [ 152.807527][ T4383] Bluetooth: hci3: command 0x041b tx timeout [ 152.860044][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.894436][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.937427][ T26] audit: type=1326 audit(1731607850.670:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.4.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03b70f4719 code=0x0 [ 153.043079][ T6143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.097220][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.104202][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.217734][ T6143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.317834][ T6143] device hsr_slave_0 entered promiscuous mode [ 153.324907][ T6143] device hsr_slave_1 entered promiscuous mode [ 153.331415][ T5635] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 153.387470][ T6143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.387916][ T6262] loop6: detected capacity change from 0 to 1024 [ 153.395365][ T6143] Cannot create hsr debugfs directory [ 153.437091][ T4891] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.522208][ T6262] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 153.586983][ T5635] usb 8-1: Using ep0 maxpacket: 32 [ 153.596699][ T6262] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 153.709366][ T5635] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.727200][ T5635] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.764490][ T5635] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.775675][ T5635] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.795743][ T5635] usb 8-1: config 0 descriptor?? [ 153.807067][ T4891] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.820089][ T6265] loop6: detected capacity change from 0 to 8 [ 153.836280][ T4891] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.873467][ T4891] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.908110][ T5635] hub 8-1:0.0: USB hub found [ 154.067203][ T4891] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.097621][ T4891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.112727][ T4891] usb 1-1: Product: syz [ 154.117202][ T4891] usb 1-1: Manufacturer: syz [ 154.122035][ T4891] usb 1-1: SerialNumber: syz [ 154.132276][ T5635] hub 8-1:0.0: 1 port detected [ 154.401280][ T4891] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 154.403394][ T6278] loop6: detected capacity change from 0 to 1024 [ 154.440310][ T6143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.467293][ T6143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.493753][ T6143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.516317][ T6143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 154.642773][ T5635] usb 1-1: USB disconnect, device number 3 [ 154.663338][ T5553] hfsplus: b-tree write err: -5, ino 4 [ 154.730225][ T6282] device batadv1 entered promiscuous mode [ 154.796269][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.805197][ T4891] hub 8-1:0.0: activate --> -90 [ 154.856593][ T6256] usblp0: removed [ 154.877237][ T4731] Bluetooth: hci3: command 0x040f tx timeout [ 154.910575][ T6143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.944937][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.973712][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.004305][ T6143] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.023660][ T4579] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.074764][ T6290] loop6: detected capacity change from 0 to 1024 [ 155.105259][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.115943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.156127][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.163282][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.172128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.183002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.192851][ T144] hfsplus: b-tree write err: -5, ino 4 [ 155.192859][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.198413][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.220208][ T5636] usb 8-1: USB disconnect, device number 5 [ 155.229042][ T4579] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.260823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.279679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.329336][ T6294] loop6: detected capacity change from 0 to 64 [ 155.339023][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.434343][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.470083][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.525905][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.536046][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.663064][ T4579] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.700091][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.716480][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.726213][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.760607][ T4579] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.828494][ T6307] loop0: detected capacity change from 0 to 8 [ 155.838162][ T6143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.880838][ T6143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.905985][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.957695][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.021734][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.559'. [ 156.155738][ T6315] loop6: detected capacity change from 0 to 2048 [ 156.232213][ T6292] loop4: detected capacity change from 0 to 40427 [ 156.304290][ T6315] NILFS (loop6): invalid segment: Checksum error in segment payload [ 156.365530][ T6292] F2FS-fs (loop4): invalid crc value [ 156.366986][ T6315] NILFS (loop6): trying rollback from an earlier position [ 156.393524][ T6292] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.429311][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.462704][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.506207][ T6143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.525675][ T6315] NILFS (loop6): recovery complete [ 156.537760][ T6328] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.577172][ T5635] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.592021][ T6292] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.601805][ T26] audit: type=1800 audit(1731607854.340:31): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.560" name="bus" dev="loop6" ino=12 res=0 errno=0 [ 156.678905][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.709437][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.812983][ T6143] device veth0_vlan entered promiscuous mode [ 156.822260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.831698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.839881][ T6331] attempt to access beyond end of device [ 156.839881][ T6331] loop4: rw=0, want=71688, limit=40427 [ 156.860189][ T6143] device veth1_vlan entered promiscuous mode [ 156.884601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.890032][ T6331] attempt to access beyond end of device [ 156.890032][ T6331] loop4: rw=0, want=71688, limit=40427 [ 156.906495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.920634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.952422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.961446][ T4891] Bluetooth: hci3: command 0x0419 tx timeout [ 156.968330][ T5635] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.978355][ T6331] attempt to access beyond end of device [ 156.978355][ T6331] loop4: rw=0, want=71688, limit=40427 [ 156.980755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.998801][ T5635] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.025552][ T5107] attempt to access beyond end of device [ 157.025552][ T5107] loop4: rw=2049, want=45104, limit=40427 [ 157.029495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.069737][ T6143] device veth0_macvtap entered promiscuous mode [ 157.093723][ T6143] device veth1_macvtap entered promiscuous mode [ 157.097430][ T5635] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.115946][ T5635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.126196][ T5635] usb 1-1: SerialNumber: syz [ 157.129690][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.159303][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.177073][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.191703][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.202059][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.213028][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.222973][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.233575][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.243652][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.254567][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.274053][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.317634][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.342934][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.386450][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.406862][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.416761][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.420111][ T5635] usb 1-1: 0:2 : does not exist [ 157.447247][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.458234][ T5635] usb 1-1: USB disconnect, device number 4 [ 157.498693][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.544299][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.559500][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.584395][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.605519][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.626859][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.641800][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.661238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.675215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.698531][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.849523][ T6143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.869384][ T6143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.900421][ T6143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.967952][ T6143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.200010][ T4172] Bluetooth: hci5: sending frame failed (-49) [ 158.260066][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.290584][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.290736][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.312353][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.329811][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.432407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.522745][ T6355] loop0: detected capacity change from 0 to 128 [ 158.686305][ T6355] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.697096][ T6338] loop4: detected capacity change from 0 to 32768 [ 158.715512][ T6355] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.858206][ T6338] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 158.879595][ T6338] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 158.944793][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.965134][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.006492][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.022604][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.041650][ T6338] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 159.050589][ T4579] device bridge_slave_1 left promiscuous mode [ 159.058553][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.074351][ T4383] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 159.082718][ T4383] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 159.187575][ T4579] device bridge_slave_0 left promiscuous mode [ 159.193831][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.204446][ T4383] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 159.220132][ T4383] gfs2: fsid=syz:syz.0: jid=0: Done [ 159.227597][ T6338] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 159.244807][ T4579] device veth1_macvtap left promiscuous mode [ 159.251310][ T4579] device veth0_macvtap left promiscuous mode [ 159.260211][ T4579] device veth1_vlan left promiscuous mode [ 159.289442][ T6338] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 159.305385][ T6338] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 159.305385][ T6338] inode = 12 2341 [ 159.305385][ T6338] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 159.326266][ T4579] device veth0_vlan left promiscuous mode [ 159.367865][ T6338] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 159.375696][ T6338] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 159.394772][ T6338] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 159.433250][ T6338] gfs2: fsid=syz:syz.0: File system withdrawn [ 159.446973][ T6338] CPU: 1 PID: 6338 Comm: syz.4.567 Not tainted 5.15.172-syzkaller #0 [ 159.455080][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.465165][ T6338] Call Trace: [ 159.468441][ T6338] [ 159.471361][ T6338] dump_stack_lvl+0x1e3/0x2d0 [ 159.476033][ T6338] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 159.481652][ T6338] ? panic+0x860/0x860 [ 159.485716][ T6338] ? do_raw_spin_unlock+0x137/0x8b0 [ 159.490908][ T6338] gfs2_withdraw+0xe9e/0x14e0 [ 159.495591][ T6338] ? gfs2_lm+0x230/0x230 [ 159.499820][ T6338] ? gfs2_dirent_scan+0x276/0x640 [ 159.504830][ T6338] ? panic+0x860/0x860 [ 159.508902][ T6338] ? gfs2_consist_inode_i+0xc0/0xe0 [ 159.514125][ T6338] gfs2_dirent_scan+0x512/0x640 [ 159.518993][ T6338] ? gfs2_dirent_scan+0x640/0x640 [ 159.524010][ T6338] gfs2_dir_read+0x831/0x1af0 [ 159.528691][ T6338] ? gfs2_dir_hash_inval+0x80/0x80 [ 159.533798][ T6338] ? _raw_spin_unlock+0x24/0x40 [ 159.538662][ T6338] ? gfs2_glock_nq+0xc6e/0x15e0 [ 159.543537][ T6338] ? gfs2_glock_wait+0x137/0x1c0 [ 159.548482][ T6338] gfs2_readdir+0x146/0x1a0 [ 159.553060][ T6338] ? __fdget_pos+0x2cb/0x380 [ 159.557648][ T6338] ? gfs2_fallocate+0x490/0x490 [ 159.562621][ T6338] ? gfs2_readdir+0x102/0x1a0 [ 159.567320][ T6338] ? iterate_dir+0x10a/0x570 [ 159.571928][ T6338] ? iterate_dir+0x10a/0x570 [ 159.576531][ T6338] ? fsnotify_perm+0x442/0x590 [ 159.581290][ T6338] iterate_dir+0x224/0x570 [ 159.585819][ T6338] ? gfs2_fallocate+0x490/0x490 [ 159.590702][ T6338] __se_sys_getdents64+0x209/0x4f0 [ 159.595858][ T6338] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 159.601841][ T6338] ? __x64_sys_getdents64+0x80/0x80 [ 159.607039][ T6338] ? filldir+0x720/0x720 [ 159.611393][ T6338] ? syscall_enter_from_user_mode+0x2e/0x240 [ 159.617390][ T6338] ? lockdep_hardirqs_on+0x94/0x130 [ 159.622587][ T6338] ? syscall_enter_from_user_mode+0x2e/0x240 [ 159.628559][ T6338] do_syscall_64+0x3b/0xb0 [ 159.632967][ T6338] ? clear_bhb_loop+0x15/0x70 [ 159.637643][ T6338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.643547][ T6338] RIP: 0033:0x7f03b70f4719 [ 159.648040][ T6338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.667638][ T6338] RSP: 002b:00007f03b556c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 159.676050][ T6338] RAX: ffffffffffffffda RBX: 00007f03b72abf80 RCX: 00007f03b70f4719 [ 159.684011][ T6338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 159.691968][ T6338] RBP: 00007f03b716775e R08: 0000000000000000 R09: 0000000000000000 [ 159.699947][ T6338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.707919][ T6338] R13: 0000000000000000 R14: 00007f03b72abf80 R15: 00007ffed54d6848 [ 159.715933][ T6338] [ 159.727298][ T4383] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 160.137041][ T4383] usb 8-1: config 0 has an invalid interface number: 78 but max is 0 [ 160.150069][ T4383] usb 8-1: config 0 has no interface number 0 [ 160.157805][ T4383] usb 8-1: too many endpoints for config 0 interface 78 altsetting 96: 144, using maximum allowed: 30 [ 160.172802][ T4383] usb 8-1: config 0 interface 78 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 160.193406][ T4383] usb 8-1: config 0 interface 78 has no altsetting 0 [ 160.215934][ T4383] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.216392][ T4579] team0 (unregistering): Port device team_slave_1 removed [ 160.250876][ T4383] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.276209][ T4727] Bluetooth: hci5: command 0x1003 tx timeout [ 160.287987][ T4383] usb 8-1: config 0 descriptor?? [ 160.293299][ T4172] Bluetooth: hci5: sending frame failed (-49) [ 160.305285][ T4579] team0 (unregistering): Port device team_slave_0 removed [ 160.322466][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.338454][ T4383] cp210x 8-1:0.78: cp210x converter detected [ 160.346429][ T6397] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.365604][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.462014][ T6401] loop4: detected capacity change from 0 to 128 [ 160.533968][ T4579] bond0 (unregistering): Released all slaves [ 160.545131][ T6401] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.574038][ T6401] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.648652][ T6390] device syzkaller1 entered promiscuous mode [ 160.787320][ T4383] cp210x 8-1:0.78: failed to get vendor val 0x000e size 3: -32 [ 160.924016][ T6406] loop0: detected capacity change from 0 to 4096 [ 161.014362][ T6411] Zero length message leads to an empty skb [ 161.032718][ T6406] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 161.060133][ T6406] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 161.081233][ T6406] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 161.097281][ T4383] cp210x 8-1:0.78: GPIO initialisation failed: -19 [ 161.104098][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 161.114024][ T4383] usb 8-1: cp210x converter now attached to ttyUSB0 [ 161.182296][ T6406] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 161.211835][ T6406] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 161.272632][ T6406] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 161.299214][ T6406] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 161.340918][ T4215] usb 8-1: USB disconnect, device number 6 [ 161.350943][ T4215] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.371479][ T4215] cp210x 8-1:0.78: device disconnected [ 161.387117][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 161.388190][ T6406] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 161.421596][ T6406] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 161.457476][ T6406] ntfs: volume version 3.1. [ 161.547173][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.566898][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.586896][ T13] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 161.605156][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.627206][ T13] usb 5-1: config 0 descriptor?? [ 161.759483][ T6425] delete_channel: no stack [ 162.085781][ T6427] loop1: detected capacity change from 0 to 8192 [ 162.221022][ T6427] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 162.293243][ T6427] REISERFS (device loop1): using ordered data mode [ 162.327743][ T13] macally 0003:060B:0001.0006: unexpected long global item [ 162.331391][ T6427] reiserfs: using flush barriers [ 162.335533][ T13] macally: probe of 0003:060B:0001.0006 failed with error -22 [ 162.371499][ T4383] Bluetooth: hci5: command 0x1001 tx timeout [ 162.377950][ T4172] Bluetooth: hci5: sending frame failed (-49) [ 162.385031][ T6427] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.487389][ T6427] REISERFS (device loop1): checking transaction log (loop1) [ 162.531916][ T4383] usb 5-1: USB disconnect, device number 7 [ 162.545090][ T6434] loop0: detected capacity change from 0 to 4096 [ 162.615251][ T6434] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 162.667546][ T6429] loop7: detected capacity change from 0 to 32768 [ 162.694455][ T6434] ntfs3: loop0: Failed to load $Extend. [ 162.752959][ T6429] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.602 (6429) [ 162.816503][ T6427] REISERFS (device loop1): Using tea hash to sort names [ 162.834227][ T6427] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 162.843743][ T6429] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 162.870012][ T6429] BTRFS info (device loop7): enabling disk space caching [ 162.906138][ T6429] BTRFS info (device loop7): force clearing of disk cache [ 162.931565][ T6427] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 1) [ 162.933663][ T6429] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 163.003417][ T6429] BTRFS info (device loop7): use zstd compression, level 3 [ 163.027020][ T6429] BTRFS info (device loop7): disk space caching is enabled [ 163.044581][ T6429] BTRFS info (device loop7): has skinny extents [ 163.252116][ T6444] loop0: detected capacity change from 0 to 2048 [ 163.374479][ T6444] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.391460][ T6429] BTRFS info (device loop7): enabling ssd optimizations [ 163.409936][ T6429] BTRFS info (device loop7): clearing free space tree [ 163.467579][ T6429] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.547010][ T6429] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.796564][ T6464] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 164.417345][ T4383] Bluetooth: hci5: command 0x1009 tx timeout [ 164.671648][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.688964][ T6483] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 164.724418][ T6483] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 164.819860][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.926220][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.060146][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.502792][ T6501] loop7: detected capacity change from 0 to 32768 [ 165.546314][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 165.565332][ T6501] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.623 (6501) [ 165.637139][ T6501] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 165.651496][ T6501] BTRFS info (device loop7): using free space tree [ 165.675903][ T6501] BTRFS info (device loop7): has skinny extents [ 165.727894][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.735078][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.795400][ T6495] device bridge_slave_0 entered promiscuous mode [ 165.804139][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.804244][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.805426][ T6495] device bridge_slave_1 entered promiscuous mode [ 165.857732][ T6517] loop1: detected capacity change from 0 to 2048 [ 165.901909][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.948026][ T6524] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.965302][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.030590][ T6501] BTRFS info (device loop7): enabling ssd optimizations [ 166.051835][ T6495] team0: Port device team_slave_0 added [ 166.112129][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 166.112146][ T26] audit: type=1800 audit(1731607863.840:32): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.634" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 166.116150][ T6533] gfs2: gfs2 mount does not exist [ 166.144163][ T6510] CPU: 1 PID: 6510 Comm: syz.1.634 Not tainted 5.15.172-syzkaller #0 [ 166.153252][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.163330][ T6510] Call Trace: [ 166.166639][ T6510] [ 166.169592][ T6510] dump_stack_lvl+0x1e3/0x2d0 [ 166.174300][ T6510] ? __x64_sys_pwrite64+0x1a9/0x230 [ 166.179546][ T6510] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 166.185231][ T6510] nilfs_btree_do_lookup+0xb61/0xcd0 [ 166.190570][ T6510] ? nilfs_btree_gather_data+0x690/0x690 [ 166.196239][ T6510] ? nilfs_btree_lookup_contig+0x153/0xfc0 [ 166.202079][ T6510] ? rcu_is_watching+0x11/0xa0 [ 166.206877][ T6510] ? nilfs_btree_lookup_contig+0x153/0xfc0 [ 166.212722][ T6510] ? kmem_cache_alloc+0x128/0x280 [ 166.217788][ T6510] nilfs_btree_lookup_contig+0x2b1/0xfc0 [ 166.223562][ T6510] ? read_lock_is_recursive+0x10/0x10 [ 166.228969][ T6510] ? __might_sleep+0xc0/0xc0 [ 166.233592][ T6510] ? nilfs_btree_lookup+0x1d0/0x1d0 [ 166.238829][ T6510] ? __might_sleep+0xc0/0xc0 [ 166.243460][ T6510] ? down_read+0x1b3/0x2e0 [ 166.247893][ T6510] ? nilfs_bmap_lookup_contig+0x27/0x160 [ 166.253538][ T6510] nilfs_bmap_lookup_contig+0x87/0x160 [ 166.259024][ T6510] nilfs_get_block+0x241/0x8e0 [ 166.263828][ T6510] ? create_page_buffers+0x1d4/0x330 [ 166.269162][ T6510] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 166.274566][ T6510] ? create_empty_buffers+0x5c0/0x6d0 [ 166.279982][ T6510] ? create_page_buffers+0x24b/0x330 [ 166.285307][ T6510] __block_write_begin_int+0x60b/0x1650 [ 166.290913][ T6510] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 166.296318][ T6510] ? page_zero_new_buffers+0x510/0x510 [ 166.301805][ T6510] ? rcu_read_lock_any_held+0xb3/0x160 [ 166.307303][ T6510] ? rcu_is_watching+0x11/0xa0 [ 166.312102][ T6510] ? wait_for_stable_page+0xe2/0x110 [ 166.317429][ T6510] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 166.322835][ T6510] block_write_begin+0x4f/0xc0 [ 166.327639][ T6510] nilfs_write_begin+0xa6/0x120 [ 166.332529][ T6510] generic_perform_write+0x2bf/0x5b0 [ 166.337927][ T6510] ? grab_cache_page_write_begin+0x90/0x90 [ 166.343788][ T6510] __generic_file_write_iter+0x381/0x4f0 [ 166.349462][ T6510] generic_file_write_iter+0xa7/0x1b0 [ 166.354874][ T6510] vfs_write+0xacd/0xe50 [ 166.359156][ T6510] ? file_end_write+0x250/0x250 [ 166.364046][ T6510] ? __fget_files+0x413/0x480 [ 166.368856][ T6510] ? __fdget+0x191/0x220 [ 166.373141][ T6510] __x64_sys_pwrite64+0x1a9/0x230 [ 166.378229][ T6510] ? ksys_pwrite64+0x1d0/0x1d0 [ 166.383156][ T6510] ? syscall_enter_from_user_mode+0x2e/0x240 [ 166.389175][ T6510] ? lockdep_hardirqs_on+0x94/0x130 [ 166.394416][ T6510] ? syscall_enter_from_user_mode+0x2e/0x240 [ 166.400437][ T6510] do_syscall_64+0x3b/0xb0 [ 166.404897][ T6510] ? clear_bhb_loop+0x15/0x70 [ 166.409611][ T6510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.415514][ T6510] RIP: 0033:0x7f5bc5daf719 [ 166.419926][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.439536][ T6510] RSP: 002b:00007f5bc4227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 166.447971][ T6510] RAX: ffffffffffffffda RBX: 00007f5bc5f66f80 RCX: 00007f5bc5daf719 [ 166.455939][ T6510] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000005 [ 166.463920][ T6510] RBP: 00007f5bc5e2275e R08: 0000000000000000 R09: 0000000000000000 [ 166.471910][ T6510] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 166.479901][ T6510] R13: 0000000000000000 R14: 00007f5bc5f66f80 R15: 00007ffd30d1bb78 [ 166.487908][ T6510] [ 166.491014][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.521135][ T6510] NILFS (loop1): btree level mismatch (ino=16): 1 != 7 [ 166.533689][ T6495] team0: Port device team_slave_1 added [ 166.543226][ T6510] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 166.562397][ T6510] Remounting filesystem read-only [ 166.575317][ T6510] CPU: 0 PID: 6510 Comm: syz.1.634 Not tainted 5.15.172-syzkaller #0 [ 166.583419][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.593495][ T6510] Call Trace: [ 166.596775][ T6510] [ 166.599723][ T6510] dump_stack_lvl+0x1e3/0x2d0 [ 166.604427][ T6510] ? __x64_sys_pwrite64+0x1a9/0x230 [ 166.609658][ T6510] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 166.615356][ T6510] nilfs_btree_do_lookup+0xb61/0xcd0 [ 166.620691][ T6510] ? nilfs_btree_gather_data+0x690/0x690 [ 166.626400][ T6510] ? nilfs_btree_lookup_contig+0x153/0xfc0 [ 166.632330][ T6510] ? rcu_is_watching+0x11/0xa0 [ 166.637130][ T6510] ? nilfs_btree_lookup_contig+0x153/0xfc0 [ 166.643000][ T6510] ? kmem_cache_alloc+0x128/0x280 [ 166.648106][ T6510] nilfs_btree_lookup_contig+0x2b1/0xfc0 [ 166.653813][ T6510] ? read_lock_is_recursive+0x10/0x10 [ 166.659223][ T6510] ? __might_sleep+0xc0/0xc0 [ 166.663844][ T6510] ? nilfs_btree_lookup+0x1d0/0x1d0 [ 166.669079][ T6510] ? __might_sleep+0xc0/0xc0 [ 166.673712][ T6510] ? down_read+0x1b3/0x2e0 [ 166.678154][ T6510] ? nilfs_bmap_lookup_contig+0x27/0x160 [ 166.683827][ T6510] nilfs_bmap_lookup_contig+0x87/0x160 [ 166.689338][ T6510] nilfs_get_block+0x241/0x8e0 [ 166.694142][ T6510] ? PageHuge+0x90/0x130 [ 166.698435][ T6510] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 166.703867][ T6510] block_truncate_page+0x427/0xae0 [ 166.709029][ T6510] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 166.714438][ T6510] ? nobh_truncate_page+0xb20/0xb20 [ 166.719779][ T6510] ? nilfs_transaction_begin+0x4fa/0x6e0 [ 166.725456][ T6510] nilfs_truncate+0x27c/0x500 [ 166.730181][ T6510] ? nilfs_write_failed+0x90/0x90 [ 166.735248][ T6510] nilfs_write_begin+0xeb/0x120 [ 166.740120][ T6510] generic_perform_write+0x2bf/0x5b0 [ 166.745457][ T6510] ? grab_cache_page_write_begin+0x90/0x90 [ 166.751327][ T6510] __generic_file_write_iter+0x381/0x4f0 [ 166.757109][ T6510] generic_file_write_iter+0xa7/0x1b0 [ 166.762514][ T6510] vfs_write+0xacd/0xe50 [ 166.766798][ T6510] ? file_end_write+0x250/0x250 [ 166.771686][ T6510] ? __fget_files+0x413/0x480 [ 166.776409][ T6510] ? __fdget+0x191/0x220 [ 166.780687][ T6510] __x64_sys_pwrite64+0x1a9/0x230 [ 166.785752][ T6510] ? ksys_pwrite64+0x1d0/0x1d0 [ 166.790547][ T6510] ? syscall_enter_from_user_mode+0x2e/0x240 [ 166.796732][ T6510] ? lockdep_hardirqs_on+0x94/0x130 [ 166.801968][ T6510] ? syscall_enter_from_user_mode+0x2e/0x240 [ 166.807982][ T6510] do_syscall_64+0x3b/0xb0 [ 166.812435][ T6510] ? clear_bhb_loop+0x15/0x70 [ 166.817147][ T6510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.823076][ T6510] RIP: 0033:0x7f5bc5daf719 [ 166.827521][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.847158][ T6510] RSP: 002b:00007f5bc4227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 166.855610][ T6510] RAX: ffffffffffffffda RBX: 00007f5bc5f66f80 RCX: 00007f5bc5daf719 [ 166.863623][ T6510] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000005 [ 166.871633][ T6510] RBP: 00007f5bc5e2275e R08: 0000000000000000 R09: 0000000000000000 [ 166.879642][ T6510] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 166.887646][ T6510] R13: 0000000000000000 R14: 00007f5bc5f66f80 R15: 00007ffd30d1bb78 [ 166.895685][ T6510] [ 166.917943][ T6510] NILFS (loop1): btree level mismatch (ino=16): 1 != 7 [ 166.942758][ T6510] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 166.963418][ T6510] CPU: 0 PID: 6510 Comm: syz.1.634 Not tainted 5.15.172-syzkaller #0 [ 166.983015][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.993116][ T6510] Call Trace: [ 166.996427][ T6510] [ 166.999491][ T6510] dump_stack_lvl+0x1e3/0x2d0 [ 167.004206][ T6510] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 167.009882][ T6510] ? slab_post_alloc_hook+0x73/0x380 [ 167.015204][ T6510] ? nilfs_btree_last_key+0x52/0x720 [ 167.020526][ T6510] ? rcu_is_watching+0x11/0xa0 [ 167.025330][ T6510] ? nilfs_btree_last_key+0x52/0x720 [ 167.030658][ T6510] ? kmem_cache_alloc+0x128/0x280 [ 167.035998][ T6510] nilfs_btree_last_key+0x5a4/0x720 [ 167.036084][ T6510] nilfs_bmap_last_key+0x6d/0x120 [ 167.046677][ T6510] nilfs_truncate_bmap+0x125/0x3c0 [ 167.051802][ T6510] ? nilfs_update_inode+0x1e0/0x1e0 [ 167.057047][ T6510] ? nilfs_transaction_begin+0x4fa/0x6e0 [ 167.062690][ T6510] nilfs_truncate+0x28b/0x500 [ 167.067473][ T6510] ? nilfs_write_failed+0x90/0x90 [ 167.072564][ T6510] nilfs_write_begin+0xeb/0x120 [ 167.077440][ T6510] generic_perform_write+0x2bf/0x5b0 [ 167.082758][ T6510] ? grab_cache_page_write_begin+0x90/0x90 [ 167.088589][ T6510] __generic_file_write_iter+0x381/0x4f0 [ 167.094260][ T6510] generic_file_write_iter+0xa7/0x1b0 [ 167.099658][ T6510] vfs_write+0xacd/0xe50 [ 167.103906][ T6510] ? file_end_write+0x250/0x250 [ 167.108767][ T6510] ? __fget_files+0x413/0x480 [ 167.113486][ T6510] ? __fdget+0x191/0x220 [ 167.117760][ T6510] __x64_sys_pwrite64+0x1a9/0x230 [ 167.122797][ T6510] ? ksys_pwrite64+0x1d0/0x1d0 [ 167.127565][ T6510] ? syscall_enter_from_user_mode+0x2e/0x240 [ 167.133577][ T6510] ? lockdep_hardirqs_on+0x94/0x130 [ 167.138817][ T6510] ? syscall_enter_from_user_mode+0x2e/0x240 [ 167.144796][ T6510] do_syscall_64+0x3b/0xb0 [ 167.149207][ T6510] ? clear_bhb_loop+0x15/0x70 [ 167.153902][ T6510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.159811][ T6510] RIP: 0033:0x7f5bc5daf719 [ 167.164219][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.183824][ T6510] RSP: 002b:00007f5bc4227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 167.192247][ T6510] RAX: ffffffffffffffda RBX: 00007f5bc5f66f80 RCX: 00007f5bc5daf719 [ 167.200243][ T6510] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000005 [ 167.208228][ T6510] RBP: 00007f5bc5e2275e R08: 0000000000000000 R09: 0000000000000000 [ 167.216214][ T6510] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 167.224200][ T6510] R13: 0000000000000000 R14: 00007f5bc5f66f80 R15: 00007ffd30d1bb78 [ 167.232199][ T6510] [ 167.242513][ T4383] Bluetooth: hci0: command 0x0409 tx timeout [ 167.248178][ T6510] NILFS (loop1): btree level mismatch (ino=16): 1 != 7 [ 167.255432][ T6510] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 167.283400][ T6510] NILFS (loop1): error -5 truncating bmap (ino=16) [ 167.336048][ T6143] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 167.346975][ T6143] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 167.354341][ T6143] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 167.373023][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.380644][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.407812][ T6143] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 167.416740][ T6143] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 167.426270][ T6143] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 167.446729][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.462966][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.476714][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.502690][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.551081][ T6538] loop7: detected capacity change from 0 to 2048 [ 167.572831][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.585407][ T6542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.628'. [ 167.718044][ T6538] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.785491][ T26] audit: type=1800 audit(1731607865.510:33): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.627" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 167.845282][ T6538] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 167.875197][ T6538] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 28 with error 28 [ 167.889894][ T6538] EXT4-fs (loop7): This should not happen!! Data will be lost [ 167.889894][ T6538] [ 167.900099][ T6538] EXT4-fs (loop7): Total free blocks count 0 [ 167.906199][ T6538] EXT4-fs (loop7): Free/Dirty block details [ 167.915778][ T6538] EXT4-fs (loop7): free_blocks=2415919104 [ 167.932035][ T6538] EXT4-fs (loop7): dirty_blocks=32 [ 167.946914][ T6538] EXT4-fs (loop7): Block reservation details [ 167.956977][ T6538] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 167.957027][ T6556] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 167.977793][ T6556] syzkaller0: linktype set to 1 [ 167.994754][ T6495] device hsr_slave_0 entered promiscuous mode [ 167.994931][ T6537] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 168.024853][ T6495] device hsr_slave_1 entered promiscuous mode [ 168.028198][ T6537] EXT4-fs (loop7): This should not happen!! Data will be lost [ 168.028198][ T6537] [ 168.041175][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.049372][ T6495] Cannot create hsr debugfs directory [ 168.391850][ T6562] loop4: detected capacity change from 0 to 512 [ 168.471978][ T144] device hsr_slave_0 left promiscuous mode [ 168.673793][ T144] device hsr_slave_1 left promiscuous mode [ 168.703771][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.721673][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.779399][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.796479][ T6568] loop6: detected capacity change from 0 to 512 [ 168.797017][ T6562] EXT4-fs (loop4): 1 truncate cleaned up [ 168.829106][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.839216][ T6562] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 168.865155][ T144] device bridge_slave_1 left promiscuous mode [ 168.957360][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.979443][ T6568] EXT4-fs (loop6): 1 orphan inode deleted [ 169.046970][ T6568] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 169.068651][ T6568] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.115943][ T144] device bridge_slave_0 left promiscuous mode [ 169.151354][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.264503][ T144] device veth1_macvtap left promiscuous mode [ 169.272681][ T144] device veth0_macvtap left promiscuous mode [ 169.287960][ T4370] Bluetooth: hci0: command 0x041b tx timeout [ 169.294949][ T144] device veth1_vlan left promiscuous mode [ 169.302867][ T144] device veth0_vlan left promiscuous mode [ 169.423928][ T6578] loop6: detected capacity change from 0 to 764 [ 169.491471][ T6580] block nbd4: shutting down sockets [ 169.521380][ T6578] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 169.806515][ T144] team0 (unregistering): Port device team_slave_1 removed [ 169.829662][ T144] team0 (unregistering): Port device team_slave_0 removed [ 169.843334][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.861932][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.946502][ T144] bond0 (unregistering): Released all slaves [ 170.003089][ T6584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.644'. [ 170.012320][ T4889] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 170.150858][ T6594] loop4: detected capacity change from 0 to 64 [ 170.277069][ T4889] usb 7-1: Using ep0 maxpacket: 16 [ 170.534173][ T6495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.545534][ T6495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.556559][ T6495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.586674][ T6495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.593979][ T4889] usb 7-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 170.611539][ T4889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.632371][ T4889] usb 7-1: Product: syz [ 170.636571][ T4889] usb 7-1: Manufacturer: syz [ 170.645836][ T4889] usb 7-1: SerialNumber: syz [ 170.656996][ T4370] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 170.664557][ T4383] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 170.694289][ T4889] usb 7-1: config 0 descriptor?? [ 170.738366][ T4889] ftdi_sio 7-1:0.0: Ignoring interface reserved for JTAG [ 170.783371][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.803165][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.812905][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.825491][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.837863][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.849870][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.859540][ T5553] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.866735][ T5553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.886470][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.896166][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.905426][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.916605][ T5553] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.923744][ T5553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.933245][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.960384][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.976249][ T26] audit: type=1326 audit(1731607868.700:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca4a5c719 code=0x7ffc0000 [ 171.001538][ T4885] usb 7-1: USB disconnect, device number 4 [ 171.027014][ T26] audit: type=1326 audit(1731607868.700:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca4a5c719 code=0x7ffc0000 [ 171.029775][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.049415][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.061574][ T26] audit: type=1326 audit(1731607868.700:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f9ca4a5c719 code=0x7ffc0000 [ 171.087458][ T4370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.094086][ T26] audit: type=1326 audit(1731607868.710:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca4a5c719 code=0x7ffc0000 [ 171.106873][ T4370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.123226][ T26] audit: type=1326 audit(1731607868.710:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca4a5c719 code=0x7ffc0000 [ 171.137116][ T4383] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 171.168263][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.187389][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.204096][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.213452][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.218181][ T4383] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.231183][ T4370] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.248082][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.256537][ T4383] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 171.267661][ T4370] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.276733][ T4370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.277626][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.291814][ T4383] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 171.303571][ T4383] usb 8-1: config 1 interface 1 has no altsetting 0 [ 171.311294][ T4370] usb 2-1: config 0 descriptor?? [ 171.319869][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.338878][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.355532][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.367317][ T4731] Bluetooth: hci0: command 0x040f tx timeout [ 171.509528][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.518097][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.544540][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.587198][ T4383] usb 8-1: string descriptor 0 read error: -22 [ 171.603671][ T4383] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.627878][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.638428][ T4383] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.648000][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.693457][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.711153][ T4383] usb 8-1: low speed audio streaming not supported [ 171.729532][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.758282][ T6495] device veth0_vlan entered promiscuous mode [ 171.809338][ T4370] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 171.834820][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.843596][ T4370] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 171.850784][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.884344][ T6495] device veth1_vlan entered promiscuous mode [ 171.919856][ T4370] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 172.023370][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.041636][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.072600][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.127690][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.146358][ T4383] usb 8-1: USB disconnect, device number 7 [ 172.161509][ T6495] device veth0_macvtap entered promiscuous mode [ 172.182680][ T6495] device veth1_macvtap entered promiscuous mode [ 172.243125][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.297843][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.325408][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.348909][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.369896][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.391587][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.414130][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.437240][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.482545][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.506376][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.525155][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.553303][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.588212][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.617018][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.647605][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.717069][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.738084][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.776882][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.786755][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.827721][ T6616] loop6: detected capacity change from 0 to 32768 [ 172.834317][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.859046][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.862106][ T6618] loop4: detected capacity change from 0 to 32768 [ 172.883547][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.906021][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.927415][ T6616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.656 (6616) [ 172.941606][ T6495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.958397][ T6495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.006903][ T6616] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 173.015771][ T6495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.046161][ T6616] BTRFS info (device loop6): using free space tree [ 173.052936][ T6495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.072250][ T6616] BTRFS info (device loop6): has skinny extents [ 173.161680][ T6618] JBD2: Ignoring recovery information on journal [ 173.280711][ T6618] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 173.394250][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.405075][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.437998][ T4383] Bluetooth: hci0: command 0x0419 tx timeout [ 173.475605][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.480012][ T6652] loop7: detected capacity change from 0 to 64 [ 173.495370][ T6616] BTRFS info (device loop6): enabling ssd optimizations [ 173.592133][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.602896][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.618550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.677456][ T5107] ocfs2: Unmounting device (7,4) on (node local) [ 174.268279][ T4889] usb 2-1: USB disconnect, device number 3 [ 174.282574][ T6667] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.337217][ T4215] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 174.515863][ T4212] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 174.717467][ T4215] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 174.763169][ T4215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.797554][ T4215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.817606][ T4215] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 174.928068][ T4215] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 174.947025][ T4215] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 174.955256][ T4215] usb 8-1: Manufacturer: syz [ 174.967974][ T4215] usb 8-1: config 0 descriptor?? [ 175.017144][ T4370] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 175.215845][ T6700] loop1: detected capacity change from 0 to 256 [ 175.291711][ T6689] loop4: detected capacity change from 0 to 40427 [ 175.351949][ T6689] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 175.370950][ T6689] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 175.385239][ T6689] F2FS-fs (loop4): invalid crc value [ 175.431201][ T6689] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.450880][ T4215] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 175.472987][ T4215] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 175.496321][ T4215] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 175.542559][ T6689] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 175.566970][ T6689] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 175.627200][ T6711] bridge0: port 3(syz_tun) entered blocking state [ 175.633778][ T6711] bridge0: port 3(syz_tun) entered disabled state [ 175.642521][ T4370] usb 7-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 175.669772][ T6711] device syz_tun entered promiscuous mode [ 175.678168][ T4370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.686212][ T4370] usb 7-1: Product: syz [ 175.688664][ T6711] bridge0: port 3(syz_tun) entered blocking state [ 175.693540][ T6689] attempt to access beyond end of device [ 175.693540][ T6689] loop4: rw=2049, want=45104, limit=40427 [ 175.697033][ T6711] bridge0: port 3(syz_tun) entered forwarding state [ 175.713163][ T4370] usb 7-1: Manufacturer: syz [ 175.721662][ T4370] usb 7-1: SerialNumber: syz [ 175.731851][ T4370] usb 7-1: config 0 descriptor?? [ 175.732762][ T4215] usb 8-1: USB disconnect, device number 8 [ 175.806025][ T4370] comedi comedi0: This driver needs USB 2.0 to operate. Aborting... [ 175.826698][ T4370] usbduxfast 7-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 176.007293][ T4727] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.047691][ T6685] udc-core: couldn't find an available UDC or it's busy [ 176.077531][ T6685] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 176.109059][ T1401] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.123672][ T4383] usb 7-1: USB disconnect, device number 5 [ 176.266937][ T4727] usb 2-1: Using ep0 maxpacket: 8 [ 176.427761][ T4727] usb 2-1: config 251 has an invalid interface number: 29 but max is 0 [ 176.436072][ T4727] usb 2-1: config 251 has no interface number 0 [ 176.455073][ T4727] usb 2-1: config 251 interface 29 altsetting 71 has an invalid endpoint with address 0x0, skipping [ 176.478663][ T4727] usb 2-1: config 251 interface 29 altsetting 71 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 176.503684][ T4727] usb 2-1: config 251 interface 29 has no altsetting 0 [ 176.517641][ T4727] usb 2-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 176.526719][ T4727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.625065][ T1401] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.751097][ T1401] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.792069][ T6736] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 176.897180][ T4727] usb 2-1: string descriptor 0 read error: -71 [ 176.924258][ T4727] usb-storage 2-1:251.29: USB Mass Storage device detected [ 176.937056][ T1401] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.969911][ T4727] usb-storage 2-1:251.29: Quirks match for vid 054c pid 0069: 1 [ 177.051024][ T6720] chnl_net:caif_netlink_parms(): no params data found [ 177.086639][ T4727] usb 2-1: USB disconnect, device number 4 [ 177.259802][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.267345][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.297466][ T6720] device bridge_slave_0 entered promiscuous mode [ 177.354742][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.386154][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.400888][ T6720] device bridge_slave_1 entered promiscuous mode [ 177.495121][ T6720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.619427][ T6720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.732841][ T6720] team0: Port device team_slave_0 added [ 177.769070][ T4891] kernel read not supported for file /235/net/fib_triestat (pid: 4891 comm: kworker/1:18) [ 177.783219][ T6720] team0: Port device team_slave_1 added [ 177.826900][ T4215] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 177.920607][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.969641][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.009814][ T6720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.046638][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.065632][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.147539][ T6720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.193109][ T4215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.206745][ T4215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.224537][ T4215] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.238738][ T4215] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.248475][ T4215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.259826][ T4215] usb 2-1: config 0 descriptor?? [ 178.319923][ T4370] Bluetooth: hci0: command 0x0409 tx timeout [ 178.410341][ T6720] device hsr_slave_0 entered promiscuous mode [ 178.436216][ T6720] device hsr_slave_1 entered promiscuous mode [ 178.563235][ T6800] loop7: detected capacity change from 0 to 256 [ 178.740875][ T4215] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 178.791407][ T4215] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 179.007262][ T4370] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 179.383684][ T1401] device hsr_slave_0 left promiscuous mode [ 179.394435][ T1401] device hsr_slave_1 left promiscuous mode [ 179.421359][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.438221][ T4370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 179.447203][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.467776][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.472514][ T4370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 179.475846][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.519000][ T4370] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.538412][ T4370] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.557069][ T1401] device bridge_slave_1 left promiscuous mode [ 179.557906][ T4370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.588224][ T4370] usb 5-1: config 0 descriptor?? [ 179.597291][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.636173][ T6814] loop6: detected capacity change from 0 to 16 [ 179.642914][ T6807] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 179.654291][ T1401] device bridge_slave_0 left promiscuous mode [ 179.665537][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.692145][ T1401] device veth1_macvtap left promiscuous mode [ 179.703195][ T1401] device veth0_macvtap left promiscuous mode [ 179.711907][ T1401] device veth1_vlan left promiscuous mode [ 179.727700][ T6814] erofs: (device loop6): mounted with root inode @ nid 36. [ 179.734699][ T1401] device veth0_vlan left promiscuous mode [ 179.863795][ T6809] loop7: detected capacity change from 0 to 40427 [ 179.947486][ T6809] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 179.960151][ T6809] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 179.992544][ T6809] F2FS-fs (loop7): invalid crc value [ 180.036508][ T6809] F2FS-fs (loop7): Found nat_bits in checkpoint [ 180.118971][ T4370] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 180.131216][ T6809] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 180.138644][ T4370] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 180.156935][ T6809] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 180.185878][ T4370] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 180.397030][ T4370] Bluetooth: hci0: command 0x041b tx timeout [ 180.427135][ T4370] usb 5-1: USB disconnect, device number 8 [ 180.551860][ T1401] team0 (unregistering): Port device team_slave_1 removed [ 180.680281][ T1401] team0 (unregistering): Port device team_slave_0 removed [ 180.906116][ T1401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.983589][ T4383] usb 2-1: USB disconnect, device number 5 [ 181.037608][ T1401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.391666][ T1401] bond0 (unregistering): Released all slaves [ 181.542868][ T6720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.583098][ T6720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.600142][ T6720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.628298][ T6720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.636460][ T6824] loop1: detected capacity change from 0 to 40427 [ 181.709788][ T6824] F2FS-fs (loop1): invalid crc value [ 181.754969][ T6824] F2FS-fs (loop1): Found nat_bits in checkpoint [ 181.855212][ T6720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.881552][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.894246][ T6826] loop4: detected capacity change from 0 to 32768 [ 181.894589][ T6824] F2FS-fs (loop1): Start checkpoint disabled! [ 181.911040][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.923846][ T6720] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.937912][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.967954][ T6826] XFS: ikeep mount option is deprecated. [ 181.969814][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.015138][ T6824] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 182.017864][ T5553] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.029816][ T5553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.108023][ T6826] XFS (loop4): Mounting V5 Filesystem [ 182.136399][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.172109][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.203469][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.257502][ T5553] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.264633][ T5553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.300433][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.337993][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.381764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.397201][ T6826] XFS (loop4): Ending clean mount [ 182.404858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.421455][ T6826] XFS (loop4): Quotacheck needed: Please wait. [ 182.439759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.487156][ T4370] Bluetooth: hci0: command 0x040f tx timeout [ 182.504930][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.525953][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.555342][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.562404][ T6826] XFS (loop4): Quotacheck: Done. [ 182.618591][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.648695][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.658975][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.681149][ T6720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.790255][ T5107] XFS (loop4): Unmounting Filesystem [ 182.951727][ T1413] attempt to access beyond end of device [ 182.951727][ T1413] loop1: rw=2049, want=40968, limit=40427 [ 182.986407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.997242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.041092][ T6720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.104310][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.130237][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.275012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.285833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.304830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.333893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.387877][ T6720] device veth0_vlan entered promiscuous mode [ 183.466289][ T6720] device veth1_vlan entered promiscuous mode [ 183.514090][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.526718][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.827951][ T6720] device veth0_macvtap entered promiscuous mode [ 183.856102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.877705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.894614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.915337][ T6720] device veth1_macvtap entered promiscuous mode [ 183.988720][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.015580][ T6876] loop4: detected capacity change from 0 to 24 [ 184.023575][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.035857][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.047317][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.066767][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.079597][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.094137][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.105068][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.118317][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.132666][ T6844] chnl_net:caif_netlink_parms(): no params data found [ 184.230968][ T6878] tipc: Started in network mode [ 184.235871][ T6878] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 184.245307][ T4372] Bluetooth: hci2: command 0x0409 tx timeout [ 184.279085][ T6878] tipc: Enabled bearer , priority 10 [ 184.285493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.317773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.326786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.368836][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.387401][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.416844][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.436924][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.457008][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.476836][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.496909][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.516926][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.539393][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.600155][ T4727] Bluetooth: hci0: command 0x0419 tx timeout [ 184.623351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.657703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.689547][ T6720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.726867][ T6720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.735604][ T6720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.775565][ T6720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.068538][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.075795][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.087405][ T6844] device bridge_slave_0 entered promiscuous mode [ 185.096936][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.104397][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.113251][ T6844] device bridge_slave_1 entered promiscuous mode [ 185.153118][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.172122][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.189683][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.214218][ T6881] loop1: detected capacity change from 0 to 32768 [ 185.237110][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.309923][ T6844] team0: Port device team_slave_0 added [ 185.322115][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.326521][ T4727] tipc: Node number set to 4269801491 [ 185.340709][ T6881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.743 (6881) [ 185.350197][ T6844] team0: Port device team_slave_1 added [ 185.365597][ T4579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.396671][ T4579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.438055][ T6881] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 185.458510][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.484916][ T6881] BTRFS info (device loop1): setting nodatacow, compression disabled [ 185.490097][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.497281][ T6881] BTRFS info (device loop1): turning on flush-on-commit [ 185.535145][ T6881] BTRFS info (device loop1): max_inline at 0 [ 185.564072][ T6881] BTRFS info (device loop1): enabling auto defrag [ 185.566034][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.570647][ T6881] BTRFS info (device loop1): max_inline at 0 [ 185.570671][ T6881] BTRFS info (device loop1): using free space tree [ 185.570688][ T6881] BTRFS info (device loop1): has skinny extents [ 185.643978][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.671032][ T6905] loop7: detected capacity change from 0 to 8192 [ 185.677916][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.685127][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.714416][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.779013][ T6905] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 185.807042][ T6905] REISERFS (device loop7): using ordered data mode [ 185.813578][ T6905] reiserfs: using flush barriers [ 185.830564][ T6844] device hsr_slave_0 entered promiscuous mode [ 185.896994][ T6905] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.941519][ T6844] device hsr_slave_1 entered promiscuous mode [ 185.958519][ T6905] REISERFS (device loop7): checking transaction log (loop7) [ 185.966211][ T6844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.974124][ T6881] BTRFS info (device loop1): enabling ssd optimizations [ 185.981969][ T6844] Cannot create hsr debugfs directory [ 185.990617][ T6905] REISERFS (device loop7): Using r5 hash to sort names [ 186.006982][ T6905] REISERFS (device loop7): using 3.5.x disk format [ 186.014060][ T6905] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 186.120757][ T26] audit: type=1800 audit(1731607883.850:39): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.743" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 186.324374][ T6931] loop4: detected capacity change from 0 to 512 [ 186.331100][ T4372] Bluetooth: hci2: command 0x041b tx timeout [ 186.506691][ T6931] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #16: comm syz.4.754: iget: bad extended attribute block 128 [ 186.517705][ T6844] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.543371][ T6931] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.754: couldn't read orphan inode 16 (err -117) [ 186.572157][ T6931] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.585393][ T6931] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.653477][ T6844] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.756263][ T1401] tipc: Disabling bearer [ 186.768314][ T1401] tipc: Left network mode [ 186.773874][ T6931] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 186.855508][ T6931] EXT4-fs error (device loop4): ext4_quota_write:6592: inode #4: comm syz.4.754: mark_inode_dirty error [ 186.946541][ T6931] Quota error (device loop4): write_blk: dquota write failed [ 186.954505][ T6931] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 186.967524][ T6931] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.754: Failed to acquire dquot type 1 [ 187.045855][ T6844] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.078358][ T5107] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 187.117559][ T5107] EXT4-fs error (device loop4): ext4_quota_off:6486: inode #4: comm syz-executor: mark_inode_dirty error [ 187.199325][ T6844] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.325320][ T6942] loop1: detected capacity change from 0 to 4096 [ 187.448592][ T6947] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.651925][ T6844] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 187.668341][ T6951] loop7: detected capacity change from 0 to 4096 [ 187.696178][ T6844] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 187.726858][ T6951] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 187.738945][ T6844] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 187.782450][ T6956] loop1: detected capacity change from 0 to 1024 [ 187.790641][ T6951] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 187.796205][ T6954] loop4: detected capacity change from 0 to 8192 [ 187.824947][ T6844] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 187.858583][ T6956] EXT4-fs (loop1): Ignoring removed nobh option [ 187.896352][ T6956] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,nobh,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 187.933004][ T6954] REISERFS warning (device loop4): super-6508 reiserfs_parse_options: bad value 0x0000010000000008 for -ocommit [ 187.933004][ T6954] [ 187.969673][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.029292][ T4877] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 188.061892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.104487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.165362][ T6844] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.218907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.241222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.262087][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.269257][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.332969][ T6956] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 188.333949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.350862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.366288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.380389][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.387548][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.436897][ T4383] Bluetooth: hci2: command 0x040f tx timeout [ 188.452889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.462625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.497867][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.512562][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.538983][ T6844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.574114][ T6844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.608249][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.616572][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.655862][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.677876][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.685565][ T6971] loop1: detected capacity change from 0 to 64 [ 188.686572][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.704253][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.713553][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.722428][ T4891] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.725156][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.977050][ T4891] usb 5-1: Using ep0 maxpacket: 16 [ 189.034874][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.053008][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.091699][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.097440][ T4891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 189.126214][ T4891] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 189.145969][ T4891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.205139][ T6985] loop7: detected capacity change from 0 to 512 [ 189.205737][ T6983] loop1: detected capacity change from 0 to 2048 [ 189.226351][ T4891] usb 5-1: config 0 descriptor?? [ 189.343458][ T1401] device hsr_slave_0 left promiscuous mode [ 189.364038][ T1401] device hsr_slave_1 left promiscuous mode [ 189.373719][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.420222][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.440216][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.467252][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.504928][ T1401] device bridge_slave_1 left promiscuous mode [ 189.532213][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.569671][ T1401] device bridge_slave_0 left promiscuous mode [ 189.575941][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.661249][ T1401] device veth1_macvtap left promiscuous mode [ 189.668560][ T6997] loop1: detected capacity change from 0 to 512 [ 189.671565][ T1401] device veth0_macvtap left promiscuous mode [ 189.682633][ T1401] device veth1_vlan left promiscuous mode [ 189.689309][ T1401] device veth0_vlan left promiscuous mode [ 189.698210][ T6967] udc-core: couldn't find an available UDC or it's busy [ 189.705200][ T6967] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 189.740674][ T4891] hid (null): unknown global tag 0x83 [ 189.751493][ T4891] hid (null): unknown global tag 0xc [ 189.766387][ T6997] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.782573][ T4891] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 189.797888][ T4891] hid-generic 0003:0158:0100.000B: unexpected long global item [ 189.806974][ T4891] hid-generic: probe of 0003:0158:0100.000B failed with error -22 [ 189.815911][ T6997] EXT4-fs (loop1): 1 truncate cleaned up [ 189.841769][ T6997] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,data=journal,lazytime,noblock_validity,quota,mb_optimize_scan=0x0000000000000001,nodelalloc,,errors=continue. Quota mode: writeback. [ 189.969787][ T4210] usb 5-1: USB disconnect, device number 9 [ 190.194247][ T1401] team0 (unregistering): Port device team_slave_1 removed [ 190.257771][ T1401] team0 (unregistering): Port device team_slave_0 removed [ 190.284807][ T1401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.302085][ T1401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.328733][ T7005] loop1: detected capacity change from 0 to 1024 [ 190.366564][ T1401] team0 (unregistering): Port device batadv0 removed [ 190.413502][ T7005] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 190.494370][ T4383] Bluetooth: hci2: command 0x0419 tx timeout [ 190.500701][ T4383] Bluetooth: hci0: command 0x0409 tx timeout [ 190.508696][ T1401] bond0 (unregistering): Released all slaves [ 190.746102][ T7016] : renamed from ipvlan1 [ 190.852900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.883972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.946857][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 190.955858][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 190.964898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 190.973850][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 190.982867][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 190.991819][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 191.000826][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 191.009818][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 191.018801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 191.027936][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 191.174637][ T7025] loop4: detected capacity change from 0 to 40427 [ 191.215846][ T6964] chnl_net:caif_netlink_parms(): no params data found [ 191.233520][ T6844] device veth0_vlan entered promiscuous mode [ 191.268660][ T7025] F2FS-fs (loop4): invalid crc value [ 191.280915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.307870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.335180][ T7025] F2FS-fs (loop4): Found nat_bits in checkpoint [ 191.384360][ T6844] device veth1_vlan entered promiscuous mode [ 191.393620][ T7025] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 191.461099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.495340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.506238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.672772][ T6844] device veth0_macvtap entered promiscuous mode [ 191.748017][ T7038] loop1: detected capacity change from 0 to 164 [ 191.807324][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.817941][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.837950][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.856577][ T6844] device veth1_macvtap entered promiscuous mode [ 191.883483][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.895321][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.917933][ T6964] device bridge_slave_0 entered promiscuous mode [ 191.924806][ T7038] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 191.933151][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.948966][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.956254][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.983394][ T7038] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 191.989450][ T6964] device bridge_slave_1 entered promiscuous mode [ 192.037073][ T7038] virtio-fs: tag [ 192.037073][ T7038] [ 192.037073][ T7038] name : adiantum(xchacha20,anubis) [ 192.037073][ T7038] driver : adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2) [ 192.037073][ T7038] module : kernel [ 192.037073][ T7038] priority : 228 [ 192.037073][ T7038] refcnt : 1 [ 192.037073][ T7038] selftest : passed [ 192.037073][ T7038] internal : no [ 192.037073][ T7038] type : skcipher [ 192.037073][ T7038] async : no [ 192.037073][ T7038] blocksize : 16 [ 192.037073][ T7038] min keysize : 32 [ 192.037073][ T7038] max keysize : 32 [ 192.037073][ T7038] ivsize : 32 [ 192.037073][ T7038] chunksize : 16 [ 192.037073][ T7038] walksize : 16 [ 192.037073][ T7038] [ 192.037073][ T7038] name : hmac(md5) [ 192.136685][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.166262][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.176660][ T4370] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 192.185064][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.196326][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.207004][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.225685][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.239256][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.258624][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.275764][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.297661][ T6964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.310171][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.327854][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.371080][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.404373][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.448190][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.466858][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.507992][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.526454][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.536729][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.547663][ T4370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.559023][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.569042][ T4370] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 192.580014][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.589028][ T4370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.600447][ T6964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.611448][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 192.625631][ T4370] usb 5-1: config 0 descriptor?? [ 192.661050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.684312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.699880][ T6844] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.713974][ T6844] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.727225][ T6844] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.735962][ T6844] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.818993][ T6964] team0: Port device team_slave_0 added [ 192.898952][ T6964] team0: Port device team_slave_1 added [ 192.968614][ T4370] usbhid 5-1:0.0: can't add hid device: -71 [ 192.974817][ T4370] usbhid: probe of 5-1:0.0 failed with error -71 [ 193.032710][ T4370] usb 5-1: USB disconnect, device number 10 [ 193.045868][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.073483][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.140088][ T6964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.166147][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.180823][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.215339][ T6964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.266089][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.304259][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.330426][ T6964] device hsr_slave_0 entered promiscuous mode [ 193.386732][ T6964] device hsr_slave_1 entered promiscuous mode [ 193.408631][ T6964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.432078][ T7058] loop2: detected capacity change from 0 to 7 [ 193.445936][ T6964] Cannot create hsr debugfs directory [ 193.476909][ T4370] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 193.482285][ T7058] Dev loop2: unable to read RDB block 7 [ 193.496180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.507153][ T7058] loop2: unable to read partition table [ 193.533868][ T7058] loop2: partition table beyond EOD, truncated [ 193.540607][ T7058] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.560168][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.577206][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.619589][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.679842][ T7037] chnl_net:caif_netlink_parms(): no params data found [ 193.736954][ T4370] usb 5-1: Using ep0 maxpacket: 16 [ 193.869471][ T4370] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.880914][ T4370] usb 5-1: config 0 interface 0 has no altsetting 0 [ 193.888755][ T4370] usb 5-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 193.898300][ T4370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.925509][ T4886] Bluetooth: hci1: command 0x0409 tx timeout [ 193.932415][ T4370] usb 5-1: config 0 descriptor?? [ 194.080225][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.086565][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.118252][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.160687][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.171048][ T7037] device bridge_slave_0 entered promiscuous mode [ 194.185021][ T6964] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.212698][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.220652][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.230384][ T7037] device bridge_slave_1 entered promiscuous mode [ 194.285744][ T7076] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 194.303970][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.363662][ T6964] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.428292][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.429533][ T7080] loop1: detected capacity change from 0 to 128 [ 194.473850][ T4370] logitech-djreceiver 0003:046D:C517.000C: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.4-1/input0 [ 194.484656][ T7037] team0: Port device team_slave_0 added [ 194.519229][ T7037] team0: Port device team_slave_1 added [ 194.589375][ T6964] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.637049][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 194.644072][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.663365][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.730024][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.774751][ T6964] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.809804][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.817278][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.894943][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.933063][ T4383] usb 5-1: USB disconnect, device number 11 [ 195.067720][ T7037] device hsr_slave_0 entered promiscuous mode [ 195.076657][ T7037] device hsr_slave_1 entered promiscuous mode [ 195.103940][ T7037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.116069][ T7037] Cannot create hsr debugfs directory [ 195.126124][ T7093] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 195.126124][ T7093] cct.usage_percpu_sys' [ 195.180512][ T1401] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.216132][ T7095] loop1: detected capacity change from 0 to 1024 [ 195.276609][ T1401] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.294305][ T7095] EXT4-fs (loop1): Ignoring removed bh option [ 195.314076][ T7095] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c118, mo2=0002] [ 195.326708][ T7095] System zones: 0-1, 3-12 [ 195.343916][ T7095] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,nobarrier,barrier=0xffffffffffffffff,norecovery,bh,lazytime,resuid=0x0000000000000000,acl,debug,,errors=continue. Quota mode: none. [ 195.389828][ T1401] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.463916][ T1401] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.700438][ T1401] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.752294][ T7084] chnl_net:caif_netlink_parms(): no params data found [ 195.801739][ T1401] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.806591][ T7113] loop4: detected capacity change from 0 to 256 [ 195.855151][ T1401] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.878142][ T7084] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.885286][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.894034][ T7084] device bridge_slave_0 entered promiscuous mode [ 195.911760][ T1401] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.933194][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.949083][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.969321][ T7084] device bridge_slave_1 entered promiscuous mode [ 195.997719][ T4886] Bluetooth: hci1: command 0x041b tx timeout [ 196.044241][ T7084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.065561][ T7084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.131739][ T26] audit: type=1326 audit(1731607893.860:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b70f4719 code=0x7fc00000 [ 196.139416][ T7084] team0: Port device team_slave_0 added [ 196.174624][ T26] audit: type=1326 audit(1731607893.900:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03b70f4719 code=0x7fc00000 [ 196.208376][ T26] audit: type=1326 audit(1731607893.900:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b70f4719 code=0x7fc00000 [ 196.254939][ T26] audit: type=1326 audit(1731607893.900:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b70f4719 code=0x7fc00000 [ 196.311466][ T26] audit: type=1326 audit(1731607893.900:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b70f4719 code=0x7fc00000 [ 196.334816][ T26] audit: type=1326 audit(1731607893.900:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b70f4719 code=0x7fc00000 [ 196.399833][ T6964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.413950][ T26] audit: type=1326 audit(1731607893.900:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b70f4719 code=0x7fc00000 [ 196.414040][ T7084] team0: Port device team_slave_1 added [ 196.443277][ T1401] tipc: Disabling bearer [ 196.445234][ T26] audit: type=1326 audit(1731607893.900:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b70f4719 code=0x7fc00000 [ 196.452021][ T6964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.472123][ T26] audit: type=1326 audit(1731607893.900:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b70f4719 code=0x7fc00000 [ 196.481148][ T1401] tipc: Left network mode [ 196.503042][ T26] audit: type=1326 audit(1731607893.900:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b70f4719 code=0x7fc00000 [ 196.539839][ T6964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.560588][ T6964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.694108][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.702707][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.705009][ T7127] cgroup: fork rejected by pids controller in [ 196.730399][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 196.743667][ T7084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.746742][ T7127] /syz1 [ 196.869133][ T7132] loop4: detected capacity change from 0 to 1024 [ 196.890741][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.898205][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.926131][ T7084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.956889][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 197.072882][ T6694] ------------[ cut here ]------------ [ 197.079700][ T6694] sysfs group 'power' not found for kobject 'bnep0' [ 197.086615][ T6694] WARNING: CPU: 0 PID: 6694 at fs/sysfs/group.c:281 sysfs_remove_group+0x179/0x2a0 [ 197.097011][ T6694] Modules linked in: [ 197.099113][ T155] hfsplus: b-tree write err: -5, ino 4 [ 197.100933][ T6694] CPU: 0 PID: 6694 Comm: kbnepd bnep0 Not tainted 5.15.172-syzkaller #0 [ 197.115886][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.126326][ T6694] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 197.132328][ T6694] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 4a a1 cc ff 49 8b 14 24 48 c7 c7 40 bc 99 8a 4c 89 f6 e8 77 65 4e ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 91 c9 82 ff [ 197.152347][ T6694] RSP: 0018:ffffc90002dc78e0 EFLAGS: 00010246 [ 197.158507][ T6694] RAX: 95ca1ebf5e1f8e00 RBX: ffff88807aa2c638 RCX: ffff88807d8cd940 [ 197.166591][ T6694] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 197.174694][ T6694] RBP: dffffc0000000000 R08: ffffffff81669a1c R09: ffffed1017204f24 [ 197.183013][ T6694] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807aa2c608 [ 197.191140][ T6694] R13: 1ffffffff15f61a0 R14: ffffffff8afb0ce0 R15: ffff888062dac2b8 [ 197.200100][ T6694] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 197.209607][ T6694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.216239][ T6694] CR2: 00005555637195c8 CR3: 00000000231f4000 CR4: 00000000003506f0 [ 197.235902][ T6694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.244196][ T6694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.252389][ T6694] Call Trace: [ 197.255691][ T6694] [ 197.261659][ T6694] ? __warn+0x15b/0x300 [ 197.265913][ T6694] ? sysfs_remove_group+0x179/0x2a0 [ 197.271744][ T6694] ? report_bug+0x1b7/0x2e0 [ 197.276307][ T6694] ? handle_bug+0x3d/0x70 [ 197.282869][ T6694] ? exc_invalid_op+0x16/0x40 [ 197.288254][ T6694] ? asm_exc_invalid_op+0x16/0x20 [ 197.293409][ T6694] ? __wake_up_klogd+0xcc/0x100 [ 197.299881][ T6694] ? sysfs_remove_group+0x179/0x2a0 [ 197.305121][ T6694] ? sysfs_unmerge_group+0x108/0x130 [ 197.310531][ T6694] device_del+0x2f1/0xbd0 [ 197.314954][ T6694] ? kill_device+0x160/0x160 [ 197.319723][ T6694] ? netdev_unregister_kobject+0x178/0x250 [ 197.325627][ T6694] unregister_netdevice_many+0x13a6/0x18f0 [ 197.331974][ T6694] ? alloc_netdev_mqs+0xc10/0xc10 [ 197.337986][ T6694] ? mutex_lock_io_nested+0x60/0x60 [ 197.343229][ T6694] ? read_lock_is_recursive+0x10/0x10 [ 197.348773][ T6694] unregister_netdev+0x19b/0x210 [ 197.353750][ T6694] ? clear_nonspinnable+0x60/0x60 [ 197.359061][ T6694] ? unlist_netdevice+0x5b0/0x5b0 [ 197.364131][ T6694] bnep_session+0x2b57/0x2d40 [ 197.368934][ T6694] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 197.375001][ T6694] ? bnep_add_connection+0xdb0/0xdb0 [ 197.380488][ T6694] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 197.386426][ T6694] ? _raw_spin_unlock+0x40/0x40 [ 197.391640][ T6694] ? lockdep_hardirqs_on+0x94/0x130 [ 197.396982][ T6694] ? wait_woken+0x1b0/0x1b0 [ 197.402054][ T6694] ? __kthread_parkme+0x15c/0x1c0 [ 197.407362][ T6694] kthread+0x3f6/0x4f0 [ 197.411462][ T6694] ? bnep_add_connection+0xdb0/0xdb0 [ 197.416771][ T6694] ? kthread_blkcg+0xd0/0xd0 [ 197.421530][ T6694] ret_from_fork+0x1f/0x30 [ 197.425963][ T6694] [ 197.429255][ T6694] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 197.436542][ T6694] CPU: 0 PID: 6694 Comm: kbnepd bnep0 Not tainted 5.15.172-syzkaller #0 [ 197.444886][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.454955][ T6694] Call Trace: [ 197.458266][ T6694] [ 197.461210][ T6694] dump_stack_lvl+0x1e3/0x2d0 [ 197.465892][ T6694] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 197.471542][ T6694] ? panic+0x860/0x860 [ 197.475734][ T6694] ? sysfs_remove_group+0x80/0x2a0 [ 197.480858][ T6694] ? sysfs_remove_group+0x80/0x2a0 [ 197.485984][ T6694] panic+0x318/0x860 [ 197.489888][ T6694] ? __warn+0x16a/0x300 [ 197.494150][ T6694] ? fb_is_primary_device+0xd0/0xd0 [ 197.499385][ T6694] ? ret_from_fork+0x1f/0x30 [ 197.503994][ T6694] ? sysfs_remove_group+0x179/0x2a0 [ 197.509216][ T6694] __warn+0x2b2/0x300 [ 197.513224][ T6694] ? sysfs_remove_group+0x179/0x2a0 [ 197.518442][ T6694] report_bug+0x1b7/0x2e0 [ 197.522809][ T6694] handle_bug+0x3d/0x70 [ 197.526967][ T6694] exc_invalid_op+0x16/0x40 [ 197.531490][ T6694] asm_exc_invalid_op+0x16/0x20 [ 197.536360][ T6694] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 197.542164][ T6694] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 4a a1 cc ff 49 8b 14 24 48 c7 c7 40 bc 99 8a 4c 89 f6 e8 77 65 4e ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 91 c9 82 ff [ 197.561763][ T6694] RSP: 0018:ffffc90002dc78e0 EFLAGS: 00010246 [ 197.567834][ T6694] RAX: 95ca1ebf5e1f8e00 RBX: ffff88807aa2c638 RCX: ffff88807d8cd940 [ 197.575930][ T6694] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 197.583904][ T6694] RBP: dffffc0000000000 R08: ffffffff81669a1c R09: ffffed1017204f24 [ 197.591879][ T6694] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807aa2c608 [ 197.599872][ T6694] R13: 1ffffffff15f61a0 R14: ffffffff8afb0ce0 R15: ffff888062dac2b8 [ 197.607875][ T6694] ? __wake_up_klogd+0xcc/0x100 [ 197.612757][ T6694] ? sysfs_unmerge_group+0x108/0x130 [ 197.618066][ T6694] device_del+0x2f1/0xbd0 [ 197.622445][ T6694] ? kill_device+0x160/0x160 [ 197.627042][ T6694] ? netdev_unregister_kobject+0x178/0x250 [ 197.632873][ T6694] unregister_netdevice_many+0x13a6/0x18f0 [ 197.638712][ T6694] ? alloc_netdev_mqs+0xc10/0xc10 [ 197.643750][ T6694] ? mutex_lock_io_nested+0x60/0x60 [ 197.648964][ T6694] ? read_lock_is_recursive+0x10/0x10 [ 197.654367][ T6694] unregister_netdev+0x19b/0x210 [ 197.659325][ T6694] ? clear_nonspinnable+0x60/0x60 [ 197.664392][ T6694] ? unlist_netdevice+0x5b0/0x5b0 [ 197.669433][ T6694] bnep_session+0x2b57/0x2d40 [ 197.674151][ T6694] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 197.680164][ T6694] ? bnep_add_connection+0xdb0/0xdb0 [ 197.685479][ T6694] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 197.691378][ T6694] ? _raw_spin_unlock+0x40/0x40 [ 197.696252][ T6694] ? lockdep_hardirqs_on+0x94/0x130 [ 197.701453][ T6694] ? wait_woken+0x1b0/0x1b0 [ 197.705956][ T6694] ? __kthread_parkme+0x15c/0x1c0 [ 197.710986][ T6694] kthread+0x3f6/0x4f0 [ 197.715087][ T6694] ? bnep_add_connection+0xdb0/0xdb0 [ 197.720392][ T6694] ? kthread_blkcg+0xd0/0xd0 [ 197.725003][ T6694] ret_from_fork+0x1f/0x30 [ 197.729441][ T6694] [ 197.732842][ T6694] Kernel Offset: disabled [ 197.737538][ T6694] Rebooting in 86400 seconds..