last executing test programs: 54.84519107s ago: executing program 0 (id=657): r0 = syz_io_uring_setup(0x16d2, &(0x7f00000000c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 54.505790471s ago: executing program 0 (id=659): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1e, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) 53.487526232s ago: executing program 0 (id=663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r1, 0x1, 0x0, 0x0, {0x1c}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) 53.333032927s ago: executing program 0 (id=665): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_create(0x8) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5008, 0x0) pipe(&(0x7f0000000580)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) 52.18175808s ago: executing program 0 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 51.817253999s ago: executing program 0 (id=673): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 40.453103323s ago: executing program 2 (id=704): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000d40)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@nomblk_io_submit, 0x0}, {@noauto_da_alloc}, {@oldalloc}, {@grpjquota}, {@mblk_io_submit}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@grpid}, {@i_version}, {@acl}], [{@dont_hash}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f6, &(0x7f0000000700)="$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") open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 39.898571726s ago: executing program 2 (id=705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 39.632117056s ago: executing program 2 (id=706): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") chdir(&(0x7f0000000280)='./file0\x00') chown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r0, &(0x7f0000004200), 0x473) 39.236153065s ago: executing program 2 (id=707): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa1a, &(0x7f0000001540)="$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") socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x1670e68) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) 38.567739633s ago: executing program 2 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 38.400837971s ago: executing program 2 (id=712): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x70}}, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000340)={{r0}, "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"}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1111ce", 0x8, 0x0, 0x0, @local, @private2, {[@srh]}}}}}, 0x0) connect$netlink(r0, &(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc) 9.488555996s ago: executing program 1 (id=798): syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xa6, 0xdc, 0x34, 0x40, 0x61d, 0xc020, 0xa2bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0xb2, 0x81, 0x0, [], [{{0x9, 0x5, 0x5, 0x390998da063e1313}}]}}]}}]}}, 0x0) 9.020747588s ago: executing program 5 (id=800): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) 8.789095594s ago: executing program 5 (id=801): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000004c0), 0x60, r2}, 0x38) 8.266435259s ago: executing program 5 (id=803): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@abort}, {@lazytime}, {@noload}, {@nojournal_checksum}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000640)={0x10000, 0x2, 0x0, "000000000000004000000d0000000000000000000000000000000100"}) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}, 0x1000000}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) userfaultfd(0x800) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) 7.808144172s ago: executing program 1 (id=805): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0xfff, @dev={0xfe, 0x80, '\x00', 0x9}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)="a417c5da47867f8867eff735f5a442ba9fe380964b5268251087631761c0ddfc1ad96a4d37e9c653a84b363f95966739a9452b3a6b891d7419f4da887bc3f3ed6fb2479d9850ee711d32504e8d6151900c4638d9e9e1e23015ce48a506d7c3a9d3e717997a08fe852b5ab2590b18e960ce5dd68ae75fe88d46daf0196774701756d9d4c1731d5150c12a620860bea9ebe6d954b087f8af209e582c72edea1a322ae7b3a8d83c83a8fdf4375374b0bc4e2d6e788a804e9febc4a4", 0xba}], 0x1}, 0x8040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r1, 0x0, 0x408cd, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)=""/3, 0x3) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000023001100000008000300", @ANYBLOB="0a000600080211"], 0x28}}, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)={0x14, 0x35, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x22, 0x1, 0x0, r5, 0x0}]) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000340)="f3e24cbf12efa31835479c28da593a6b78dca6bf140becb5719b5d8ce2b6217a160e98e1ad3c52d355278af339221335ce8b859eef8549e1b15803bc9dbcf1b1286fda01abc09eee324e8f5d1289b680ce83a461d710a0233446000bd1019362f8450f77d661f7ef832dc43e8127e49ddb02b837a532769d848affc5b6b2908e5d8e967b0e", &(0x7f0000000240)=""/25}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1a036}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071173b000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="053900002000ef029dd2b97576b11d2180"], 0x33fe0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 7.073161061s ago: executing program 5 (id=806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x64}}, 0x0) 5.813735644s ago: executing program 3 (id=813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x965a, &(0x7f0000012c40)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0xc0385868, &(0x7f0000000180)=ANY=[]) 4.777937658s ago: executing program 4 (id=814): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=',,\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') 4.648613407s ago: executing program 4 (id=815): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x1, 0x21d, &(0x7f0000000240)="$eJzs3T9rU1EYB+C3ttVSkHQQiiJ4xcUptBX3FqkgBhQlg04W26I0sWAgoEPr5pfQr6Cjq+Cgrn4BEaQKLnarIETqjY2tiU1pb66Y51nyknt+509yySFDTm6drC7NL9cW19fXYmRkIIamYzo2BmIsDsVgpB4FAPA/2Wg04msjlfdcAIDesP8DQP/pcv+/2sMpAQAZ8/0fAPrP9Rs3L8+USrPXkmQkovq4Xq6X08f0+sxi3I1KLMREFOJ7RGNLWl+8VJqdSDZ9GotydbWZX62XB7fnJ6MQY+3zk0lqe344Rpv596OxEFNRiGPt81Nt84fj7Jnfxi9GId7djuWoxHxsZlv5lckkuXCltCN/5Gc7AAAAAAAAAAAAAAAAAAAAAADIQjHZ0vb8nmKx0/U03/35QDvP5xmKE0P5rh0AAAAAAAAAAAAAAAAAAAD+FbUHD5fmKpWF+38r7r199mq3Nl0WA81x99vP/oujpz8+6dRmcG+vz8EWL09lOcS3g+nn9dqd4+dq4+dzeweHI+LPZzreWl8KERnN53mut/GvVe/aePzp9NyLlQ+fu+255x9FAAAAAAAAAAAAAAAAAADQ91o/+t1T7E1mEwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHLT+/z+7Iu81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAjwAAAP//3cefEg==") openat$loop_ctrl(0xffffff9c, 0x0, 0x40040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="09df0ae0a93800146a0ecacd3a71ef8de54b4f6eb5c8d7bfefa7ba2e12338181bc6dce4a9d862c19f916f5c9dabdd5baaa4af2001487fe67811781b6fdc4733a61427364530579bbee07fb386bcc09e7197b15580044c4b0a71a2e31bf0d9f7162c02c4aac63ef923612f4be3502297a2c9bc0947607cbfb960455572c5ac73852bc96598a299ff5dd23d09fcf6ffdf166fbb5d2f3285f2c1037f747a650d22489f2520d1424d92407a50ae3dc4b95868b7d217cf5ef3cdc08f87a32857cd19d4389acf666cfced3ba7112bf"], 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r1, 0x0, 0x100801700) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010148000000000000000000000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002080009800400026b6b9776e91f33e5cd286ea86656a31b80140000001000010000000000000000000000000ab56d44d8143b513ab5e743e4a825e745d212032dd19a333b0a7cae0abffd5aa82397b476c08ed820c56732cac4d6ecaacd31a900000000ffffffff2ac3357514fa4858eb54726b5a385da218bc29096b3f6f81"], 0x6c}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000200)=0x10001, 0x4) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) mount$nfs4(&(0x7f0000000480)='\x9c[%[\'+,[)/:\x00', &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{'\x00'}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 4.397092087s ago: executing program 3 (id=816): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) io_setup(0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020) timerfd_create(0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r8, 0xffff) 3.457345641s ago: executing program 4 (id=817): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}]}]}, 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000001000000000000000000000000000000feffffff01000000030000000000000008000000000000008000000000000000000064756d6d79300000000000000000000001000000000030000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0001000000000180c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000047f000001ac14140000000000000033a2452db3cbe0bc64c2ff240000008441554449540000bcb92dfff07fca000000466ef58f5dc8438b000000000000000800"/376]}, 0x1f0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$igmp6(0xa, 0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) unshare(0x8020600) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r5, r6, 0x6, 0x7, 0x8, @prog_id}, 0x20) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x1932, 0x4) 2.991435693s ago: executing program 3 (id=818): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@data_writeback}, {@sysvgroups}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@noblock_validity}], [{@fowner_lt}, {@euid_eq}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x0, 0x4bb, &(0x7f0000002c40)="$eJzs3c1rHVUbAPBnJh/9TJP3ffv2fVtbrbZi8CNp0qpduFEUXCgIuqjgJiZprb1tpIlgS7FRpC6l4F5cCv4F7tyIuhDBhSAKLqVQtAitriLz1dzcfPTm87a9vx9MM2fm3J7zZObcOfecO5MA2tb+7J8kYntE/BwRvUUy8+NrdZmyfDeuXRj969qF0SRmZl7+PcnzXb92YbTKVr4utpWJ/jQi/SApC5lr8tz5UyO12vjZMj04NXNxcPLc+cdOnh45MX5i/Mzw0aNHDg89+cTw42sSZxbX9T3vTuzd/fyrl18cPXb59W8+z+q7a1+xvz6O5ZheYt/+LPA/ZnKN+x5cSWG3sZ669aSzhRVhWToiIjtcXXn7742OmD14vfHc+y2tHLCusmvTpsV3T88Ad7EkWl0DoDWqC332+bdaNqjrcVu4+nTE6E9F/DfKpdjTGWmZp2sdy98fEcem//4kW2IV4xAAAM3K+zaPLtT/S2NX/rOY1dlRzqH0RcS/IuLfEfGfiNgZEf+NyPP+LyL+X7x4prfJ8hunhub3f9IrqwrwFrL+31Pl3Fa1FHM6Ze8vjb6OMtWTx9+VHD9ZGz9U/k76o2tTlh5aoowvn/3ho8ZtW8qf9f2/bMnKr/qCpSudDQN0YyNTI9mB27z68OPqexF7OufGX+xJbs4EZGfA7ojYs7z/eke1cvLhz/YulqmJ+Be3BvNMM59GPFQc/+loiL+S5POTp99aZH5ycHPUxg8NVmfFfN9+f+mlxcpfVfxrIDv+W+ee/w05ev9MivnarqjVxs9O5ht7llPGpV8+XPQzza3jT680DlBn53938ko+Z/3dG8W2d0amps4ORXQnL+Tp7qjbPjz72ipd5c/i7z+w0Pmf5u9xUR7/eyIiO4n3RcS9EXFfWff7I+KBiDiwRPxfP3PwzZXHv76y+Mdi4fZf6kvq5+snz52vfrezW5Ze6Tj11RfJIuU3c/w7Nx3J59n7yy35+98tNFOvm2czAAAA3OXSiNgeSTpQfuDfHmk6MFB8h39nbE1rE5NTjxyfePvMWHGPQF90pdVIV2/deOhQUn0TvkgPl2PF1f7D5bjxxx1b8vTA6ERtrLWhQ9vbNtv+y/eCov1nfutode2Aded+LWhfje0/bVE9gI3n+g/ta4H2v6UV9QA23sqv/0s8OgC4IyzU/i82pM0FwN1pfvv/dYFH1lW617s6wAZacf9/PZ+MAWwI4//QvrR/aEtzbok/09PsbfNW7tiVWEbmzUtkjvS2CKeNV6o/PzG7pRq0b+7lnXWPyTg4L09r35cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWyj8BAAD//7oB69Q=") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x25dfdbff, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.730467925s ago: executing program 5 (id=819): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c000000000068"], 0x1c}}, 0x0) 1.727287999s ago: executing program 1 (id=820): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 1.725388593s ago: executing program 4 (id=821): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@dmask={'dmask', 0x3d, 0xaf}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@fmask={'fmask', 0x3d, 0x106}}, {@fmask={'fmask', 0x3d, 0x9}}, {@fmask={'fmask', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x1, 0x1524, &(0x7f0000002080)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.724828789s ago: executing program 3 (id=822): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = getpgid(r2) syz_open_procfs(r3, &(0x7f0000000040)='fdinfo/4\x00') 1.50491659s ago: executing program 3 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, &(0x7f0000000440)=""/177, &(0x7f0000000e40), &(0x7f0000000280), 0x7f, r3}, 0x38) 1.50452851s ago: executing program 1 (id=824): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x809, &(0x7f00000004c0)=ANY=[], 0x10, 0x21a, &(0x7f0000000c80)="$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") sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_emit_ethernet(0x34e, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) 1.503600479s ago: executing program 4 (id=825): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 1.187024654s ago: executing program 5 (id=826): syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b"], 0x0) 391.715901ms ago: executing program 4 (id=827): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x100000, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRESDEC, @ANYRES16=r3, @ANYBLOB="dede3b72bb5de9ec5cf5348c86e3a8b64d252f6b58504c5f51d98afac8f85e25c1075afb9449c53633718b0e998b715d7250bb472c2a1eb53caba3a70fc497685feb2aafe64b73438b48acfb30b2117d53fd1faac5416f69a9865bec42fa4b964cf97d721cd58d82916c027da2b4fecea844009a57", @ANYRES32=r1]) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e8, 0x3b8, 0x0, 0x2e8, 0x3b8, 0x2e8, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0xffff, 0xfffe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@dst={{0x48}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) 309.07728ms ago: executing program 3 (id=828): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000404c05680200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "841e310a"}]}}, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 297.722178ms ago: executing program 1 (id=829): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, 0x0) 0s ago: executing program 1 (id=830): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) kernel console output (not intermixed with test programs): dev loop1, logical block 62, lost sync page write [ 339.321544][ T7930] EXT4-fs error (device loop1): ext4_ext_grow_indepth:1366: inode #12: block 62: comm syz.1.431: IO error syncing itable block [ 339.339423][ T7930] syz.1.431: attempt to access beyond end of device [ 339.339423][ T7930] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 339.341408][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.383114][ T7930] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 339.390347][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.391733][ T7930] EXT4-fs (loop1): I/O error while writing superblock [ 339.419656][ T7930] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.431: Error while async write back metadata [ 339.422662][ T7840] bridge_slave_1: entered allmulticast mode [ 339.432852][ T7930] syz.1.431: attempt to access beyond end of device [ 339.432852][ T7930] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 339.472616][ T7840] bridge_slave_1: entered promiscuous mode [ 339.535760][ T7930] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 339.549596][ T7930] EXT4-fs (loop1): I/O error while writing superblock [ 339.581322][ T7930] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.431: Error while async write back metadata [ 339.624010][ T7930] syz.1.431: attempt to access beyond end of device [ 339.624010][ T7930] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 339.662555][ T7930] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 339.693039][ T5241] Bluetooth: hci5: command tx timeout [ 339.708067][ T7840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.728041][ T7930] EXT4-fs (loop1): I/O error while writing superblock [ 339.791617][ T7930] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.431: Error while async write back metadata [ 339.858823][ T7840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.910203][ T7930] syz.1.431: attempt to access beyond end of device [ 339.910203][ T7930] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 340.003741][ T7930] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 340.031189][ T7930] EXT4-fs (loop1): I/O error while writing superblock [ 340.150405][ T7840] team0: Port device team_slave_0 added [ 340.164006][ T7840] team0: Port device team_slave_1 added [ 340.245365][ T7407] syz-executor: attempt to access beyond end of device [ 340.245365][ T7407] loop1: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 340.327475][ T7407] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 340.385776][ T7407] syz-executor: attempt to access beyond end of device [ 340.385776][ T7407] loop1: rw=12288, sector=70, nr_sectors = 2 limit=0 [ 340.413489][ T7407] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #2: block 35: comm syz-executor: unable to read itable block [ 340.443163][ T7407] syz-executor: attempt to access beyond end of device [ 340.443163][ T7407] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 340.454907][ T7962] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.435'. [ 340.466535][ T7407] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 340.477260][ T7407] EXT4-fs (loop1): I/O error while writing superblock [ 340.494969][ T7407] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 340.505815][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.510514][ T7962] openvswitch: netlink: Duplicate key (type 0). [ 340.513965][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.534338][ T7407] syz-executor: attempt to access beyond end of device [ 340.534338][ T7407] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 340.557401][ T7407] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 340.567768][ T7407] EXT4-fs (loop1): I/O error while writing superblock [ 340.583042][ T7407] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 340.608514][ T7407] syz-executor: attempt to access beyond end of device [ 340.608514][ T7407] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 340.632739][ T7407] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 340.641428][ T7958] netlink: 'syz.3.435': attribute type 5 has an invalid length. [ 340.648398][ T7407] EXT4-fs (loop1): I/O error while writing superblock [ 340.699970][ T5329] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 340.751222][ T7840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.794045][ T7840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.809968][ T5288] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 340.820064][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.848345][ T7840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.859298][ T1833] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm kworker/u8:8: Error while async write back metadata [ 340.878405][ T1833] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 340.920741][ T1833] EXT4-fs (loop1): I/O error while writing superblock [ 340.928330][ T5329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.962028][ T5329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.978463][ T1833] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 12 starting block 37) [ 340.980625][ T7668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.991396][ T5329] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 341.007393][ T1833] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm kworker/u8:8: Error while async write back metadata [ 341.022553][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.030859][ T1833] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 341.045438][ T7840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.053629][ T5329] usb 3-1: config 0 descriptor?? [ 341.060005][ T1833] EXT4-fs (loop1): I/O error while writing superblock [ 341.067095][ T1833] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm kworker/u8:8: Error while async write back metadata [ 341.082281][ T7840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.109586][ T1833] Buffer I/O error on device loop1, logical block 37 [ 341.116675][ T1833] Buffer I/O error on device loop1, logical block 38 [ 341.117483][ T5288] usb 4-1: Using ep0 maxpacket: 16 [ 341.123336][ T1833] Buffer I/O error on device loop1, logical block 39 [ 341.123392][ T1833] Buffer I/O error on device loop1, logical block 40 [ 341.169543][ T7840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.178448][ T5288] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 341.182410][ T1833] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 12 starting block 29) [ 341.197779][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.208979][ T5288] usb 4-1: Product: syz [ 341.226594][ T5288] usb 4-1: Manufacturer: syz [ 341.229365][ T1833] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4853: inode #12: block 36: len 4: ext4_ext_map_blocks returned -5 [ 341.241504][ T7668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.290063][ T1833] Buffer I/O error on device loop1, logical block 29 [ 341.293600][ T7668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.296739][ T1833] Buffer I/O error on device loop1, logical block 30 [ 341.296759][ T1833] Buffer I/O error on device loop1, logical block 31 [ 341.296781][ T1833] Buffer I/O error on device loop1, logical block 32 [ 341.323478][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.354878][ T5288] usb 4-1: SerialNumber: syz [ 341.414373][ T5288] usb 4-1: config 0 descriptor?? [ 341.441067][ T7668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.458667][ T5288] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 341.599391][ T5329] itetech 0003:06CB:73F5.0006: unknown main item tag 0x0 [ 341.612073][ T5329] itetech 0003:06CB:73F5.0006: unknown main item tag 0x0 [ 341.649625][ T5329] itetech 0003:06CB:73F5.0006: hidraw0: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.2-1/input0 [ 341.770393][ T5241] Bluetooth: hci5: command tx timeout [ 341.868373][ T5241] Bluetooth: hci7: link tx timeout [ 341.879468][ T7840] hsr_slave_0: entered promiscuous mode [ 341.885988][ T5241] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 341.915564][ T7840] hsr_slave_1: entered promiscuous mode [ 341.936924][ T7840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.968219][ T7840] Cannot create hsr debugfs directory [ 342.069305][ T25] usb 4-1: USB disconnect, device number 7 [ 342.133738][ T5289] usb 3-1: USB disconnect, device number 9 [ 342.256893][ T2978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.543583][ T2978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.876746][ T2978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.113313][ T2978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.250400][ T5329] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 343.499800][ T5329] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6 [ 343.549072][ T5329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 343.608026][ T5329] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=39.78 [ 343.634347][ T7840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.641943][ T5329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.678442][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.695303][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.700086][ T5329] usb 3-1: Product: syz [ 343.706971][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.717992][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.727443][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.735170][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.742310][ T5290] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 343.749837][ T5329] usb 3-1: Manufacturer: syz [ 343.811979][ T5329] usb 3-1: SerialNumber: syz [ 343.852098][ T5329] usb 3-1: config 0 descriptor?? [ 343.901729][ T5329] usbtest 3-1:0.0: usb test device [ 343.906865][ T5329] usbtest 3-1:0.0: high-speed {control in/out iso-out} tests (+alt) [ 343.943056][ T5236] Bluetooth: hci7: command 0x0406 tx timeout [ 343.958760][ T5290] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 343.999194][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 344.059076][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.125684][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 344.171741][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 344.202174][ T1504] usb 3-1: USB disconnect, device number 10 [ 344.202544][ T7840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.220457][ T5290] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 344.245970][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 344.279576][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.292465][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 344.304898][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 344.333064][ T5290] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 344.367942][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 344.378437][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.388786][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 344.403312][ T5290] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 344.431790][ T5290] usb 4-1: string descriptor 0 read error: -22 [ 344.458501][ T5290] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 344.483112][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.528684][ T5290] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 344.606069][ T7840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.695053][ T8022] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.448'. [ 344.864940][ T7840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.006912][ T8026] loop5: detected capacity change from 0 to 8 [ 345.121117][ T7668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.135089][ T1504] usb 4-1: USB disconnect, device number 8 [ 345.218302][ T2978] bridge_slave_1: left allmulticast mode [ 345.225356][ T2978] bridge_slave_1: left promiscuous mode [ 345.231549][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.245783][ T2978] bridge_slave_0: left allmulticast mode [ 345.252561][ T2978] bridge_slave_0: left promiscuous mode [ 345.258487][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.840910][ T8034] loop2: detected capacity change from 0 to 512 [ 345.850565][ T5241] Bluetooth: hci2: command tx timeout [ 345.865720][ T8034] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 345.904039][ T8034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 345.913866][ T8034] System zones: 1-12 [ 345.943074][ T8034] EXT4-fs (loop2): 1 truncate cleaned up [ 345.973317][ T8034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.110004][ T8034] loop2: detected capacity change from 512 to 64 [ 346.248397][ T7401] EXT4-fs warning (device loop2): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 346.281214][ T7401] EXT4-fs warning (device loop2): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 346.315426][ T7401] EXT4-fs warning (device loop2): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 346.335229][ T7401] EXT4-fs warning (device loop2): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 346.364945][ T2978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.368869][ T7401] EXT4-fs warning (device loop2): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 346.399829][ T2978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.402505][ T7401] EXT4-fs warning (device loop2): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 346.444376][ T2978] bond0 (unregistering): Released all slaves [ 346.448068][ T7401] EXT4-fs warning (device loop2): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 346.482539][ T7401] EXT4-fs warning (device loop2): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 346.529824][ T7401] EXT4-fs warning (device loop2): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 346.562830][ T7401] EXT4-fs warning (device loop2): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 346.792202][ T7668] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.933063][ T5241] Bluetooth: unknown link type 32 [ 346.938130][ T5241] Bluetooth: hci0: connection err: -111 [ 346.967494][ T5241] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 347.271577][ T8043] loop5: detected capacity change from 0 to 2048 [ 347.308284][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.311458][ T7401] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.315495][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.443228][ T8043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.637525][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.644737][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.930175][ T5241] Bluetooth: hci2: command tx timeout [ 347.937518][ T2978] hsr_slave_0: left promiscuous mode [ 347.957010][ T2978] hsr_slave_1: left promiscuous mode [ 347.989732][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.013467][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.034587][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.048766][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.137883][ T2978] veth1_macvtap: left promiscuous mode [ 348.144549][ T7409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.160476][ T2978] veth0_macvtap: left promiscuous mode [ 348.166167][ T2978] veth1_vlan: left promiscuous mode [ 348.194697][ T2978] veth0_vlan: left promiscuous mode [ 348.709835][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.722944][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.733504][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.750081][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.754568][ T8064] loop5: detected capacity change from 0 to 40427 [ 348.758168][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 348.786534][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.792196][ T8064] F2FS-fs (loop5): invalid crc value [ 348.805065][ T8064] F2FS-fs (loop5): Found nat_bits in checkpoint [ 348.893418][ T8064] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 349.320918][ T8071] syz.5.460[8071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.321915][ T8071] syz.5.460[8071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.824694][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 349.930128][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 350.014406][ T5236] Bluetooth: hci2: command tx timeout [ 350.681886][ T7840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.772641][ T7840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.807914][ T8083] loop3: detected capacity change from 0 to 764 [ 350.859716][ T8083] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 350.890136][ T5236] Bluetooth: hci6: command tx timeout [ 350.929956][ T7840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.021360][ T7840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.368860][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 351.600821][ T8089] loop3: detected capacity change from 0 to 164 [ 352.153729][ T5236] Bluetooth: hci2: command tx timeout [ 352.672475][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.686871][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.737585][ T8011] bridge_slave_0: entered allmulticast mode [ 352.757438][ T8011] bridge_slave_0: entered promiscuous mode [ 352.809419][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.825840][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.836867][ T8011] bridge_slave_1: entered allmulticast mode [ 352.855366][ T8011] bridge_slave_1: entered promiscuous mode [ 352.971128][ T5236] Bluetooth: hci6: command tx timeout [ 353.140016][ T5288] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 353.223710][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.334988][ T2978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.350039][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 353.358570][ T5288] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 353.367023][ T5288] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 353.384598][ T5288] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 353.393124][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.394298][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 353.426404][ T5288] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 353.460735][ T5288] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 353.488380][ T5288] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 353.498880][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.527264][ T8112] loop5: detected capacity change from 0 to 32768 [ 353.536733][ T5288] usb 4-1: config 0 descriptor?? [ 353.638376][ T2978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.661585][ T8065] chnl_net:caif_netlink_parms(): no params data found [ 353.787226][ T8011] team0: Port device team_slave_0 added [ 353.913623][ T5288] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 353.920312][ T2978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.255953][ T8126] find_entry called with index = 0 [ 354.261556][ T8126] find_entry called with index = 0 [ 354.274933][ T8127] find_entry called with index >= next_index [ 354.281025][ T8127] find_entry called with index >= next_index [ 354.287086][ T8127] find_entry called with index >= next_index [ 354.293212][ T8127] find_entry called with index >= next_index [ 354.299268][ T8127] find_entry called with index >= next_index [ 354.387178][ T8126] find_entry called with index >= next_index [ 354.393352][ T8126] find_entry called with index >= next_index [ 354.749511][ T2978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.822620][ T8] usb 4-1: USB disconnect, device number 9 [ 354.878005][ T8011] team0: Port device team_slave_1 added [ 354.878496][ T8] usblp0: removed [ 355.052177][ T5236] Bluetooth: hci6: command tx timeout [ 355.107860][ T7668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.201656][ T7840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.236176][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.253972][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.296126][ T8011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.358311][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.380085][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.389274][ T8143] loop5: detected capacity change from 0 to 1024 [ 355.431000][ T8011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.623780][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.632609][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.646899][ T8065] bridge_slave_0: entered allmulticast mode [ 355.668339][ T8065] bridge_slave_0: entered promiscuous mode [ 355.707552][ T35] hfsplus: b-tree write err: -5, ino 4 [ 355.725735][ T8011] hsr_slave_0: entered promiscuous mode [ 355.742797][ T8011] hsr_slave_1: entered promiscuous mode [ 355.754128][ T8011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.769373][ T8011] Cannot create hsr debugfs directory [ 355.882626][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.898901][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.906839][ T8065] bridge_slave_1: entered allmulticast mode [ 355.921664][ T8065] bridge_slave_1: entered promiscuous mode [ 356.011488][ T8150] loop3: detected capacity change from 0 to 1024 [ 356.075397][ T7840] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.080595][ T8150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.135248][ T2978] bridge_slave_1: left allmulticast mode [ 356.141789][ T2978] bridge_slave_1: left promiscuous mode [ 356.149472][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.182134][ T2978] bridge_slave_0: left allmulticast mode [ 356.187808][ T2978] bridge_slave_0: left promiscuous mode [ 356.205555][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.233647][ T7403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.443343][ T8159] loop3: detected capacity change from 0 to 2048 [ 356.487216][ T8159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.599566][ T7403] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 356.650351][ T5329] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 356.663562][ T7403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.741551][ T8163] loop3: detected capacity change from 0 to 512 [ 356.751243][ T8163] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.777490][ T8163] EXT4-fs (loop3): 1 truncate cleaned up [ 356.786554][ T8163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.840263][ T5329] usb 6-1: Using ep0 maxpacket: 16 [ 356.847388][ T5329] usb 6-1: config 0 has an invalid interface number: 246 but max is 1 [ 356.856363][ T5329] usb 6-1: config 0 has no interface number 1 [ 356.865034][ T5329] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.875809][ T5329] usb 6-1: config 0 interface 246 has no altsetting 0 [ 356.920271][ T5329] usb 6-1: New USB device found, idVendor=2b73, idProduct=000d, bcdDevice=f1.b2 [ 356.930641][ T5329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.938659][ T5329] usb 6-1: Product: syz [ 356.946179][ T5329] usb 6-1: Manufacturer: syz [ 356.950859][ T5329] usb 6-1: SerialNumber: syz [ 356.958325][ T5329] usb 6-1: config 0 descriptor?? [ 357.075254][ T2978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.092599][ T2978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.105651][ T2978] bond0 (unregistering): Released all slaves [ 357.140188][ T5236] Bluetooth: hci6: command tx timeout [ 357.258616][ T5329] snd-usb-audio 6-1:0.246: probe with driver snd-usb-audio failed with error -22 [ 357.287080][ T5329] usb 6-1: USB disconnect, device number 5 [ 357.331828][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.355358][ T8065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.414491][ T7668] veth0_vlan: entered promiscuous mode [ 357.424777][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.431948][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.522772][ T7403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.580749][ T8065] team0: Port device team_slave_0 added [ 357.595390][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.246/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.604031][ T8065] team0: Port device team_slave_1 added [ 357.707819][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.715530][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.741932][ T8065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.898415][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.906067][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.959769][ T8065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.031393][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.038662][ T5449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.222114][ T2978] hsr_slave_0: left promiscuous mode [ 358.247726][ T2978] hsr_slave_1: left promiscuous mode [ 358.271330][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.278770][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.301073][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.308478][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.376083][ T2978] veth1_macvtap: left promiscuous mode [ 358.387529][ T2978] veth0_macvtap: left promiscuous mode [ 358.397830][ T2978] veth1_vlan: left promiscuous mode [ 358.398130][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.403196][ T2978] veth0_vlan: left promiscuous mode [ 358.429617][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.452694][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.462678][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.481754][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 358.489176][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.720781][ T8169] loop5: detected capacity change from 0 to 32768 [ 358.777717][ T29] audit: type=1800 audit(1723279121.343:21): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.481" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 359.355742][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 359.407793][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 359.898156][ T7668] veth1_vlan: entered promiscuous mode [ 360.018108][ T8065] hsr_slave_0: entered promiscuous mode [ 360.069067][ T8065] hsr_slave_1: entered promiscuous mode [ 360.075709][ T8065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.108966][ T8065] Cannot create hsr debugfs directory [ 360.302845][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.310639][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.427733][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.434976][ T8181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.442525][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.449697][ T8181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.462239][ T8181] bridge0: entered promiscuous mode [ 360.467473][ T8181] bridge0: entered allmulticast mode [ 360.572075][ T5236] Bluetooth: hci3: command tx timeout [ 360.865374][ T7668] veth0_macvtap: entered promiscuous mode [ 361.005767][ T7668] veth1_macvtap: entered promiscuous mode [ 361.197248][ T8011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 361.262695][ T8011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.276151][ T8011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.298544][ T8011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.314405][ T7668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.325732][ T7668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.336214][ T7668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.347363][ T7668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.357591][ T7668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.368165][ T7668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.381390][ T7668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.486310][ T2978] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.522356][ T7668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.533735][ T7668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.544289][ T7668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.554975][ T7668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.567700][ T7668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.592844][ T7668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.606569][ T7668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.739243][ T2978] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.883327][ T7668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.899842][ T7668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.922123][ T7668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.945634][ T7668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.979215][ T7840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.124686][ T8204] loop5: detected capacity change from 0 to 32768 [ 362.127411][ T2978] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.170634][ T8204] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 362.339136][ T8204] XFS (loop5): Ending clean mount [ 362.353183][ T8204] XFS (loop5): Quotacheck needed: Please wait. [ 362.383621][ T2978] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.409185][ T8204] XFS (loop5): Quotacheck: Done. [ 362.536368][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 362.662241][ T5236] Bluetooth: hci3: command tx timeout [ 364.523890][ T7409] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 364.740240][ T5236] Bluetooth: hci3: command tx timeout [ 364.893941][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.031877][ T8065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 365.057725][ T8065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 365.086162][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.101943][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.109275][ T8170] bridge_slave_0: entered allmulticast mode [ 365.117323][ T8170] bridge_slave_0: entered promiscuous mode [ 365.134458][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.141867][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.149063][ T8170] bridge_slave_1: entered allmulticast mode [ 365.156912][ T8170] bridge_slave_1: entered promiscuous mode [ 365.220040][ T8065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 365.266129][ T8227] loop5: detected capacity change from 0 to 32768 [ 365.274023][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.284406][ T8227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.487 (8227) [ 365.311220][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.319248][ T8227] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.329810][ T8227] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 365.336595][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.349599][ T8227] BTRFS info (device loop5): using free-space-tree [ 365.357273][ T2978] bridge_slave_1: left allmulticast mode [ 365.380263][ T2978] bridge_slave_1: left promiscuous mode [ 365.392895][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.418508][ T2978] bridge_slave_0: left allmulticast mode [ 365.430122][ T2978] bridge_slave_0: left promiscuous mode [ 365.436916][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.658045][ T8227] BTRFS info (device loop5): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 365.773265][ T7409] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 366.197843][ T2978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.212479][ T2978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.224095][ T2978] bond0 (unregistering): Released all slaves [ 366.243786][ T8065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.268258][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.311515][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.393858][ T8170] team0: Port device team_slave_0 added [ 366.410493][ T5290] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 366.434354][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.437287][ T7840] veth0_vlan: entered promiscuous mode [ 366.456978][ T8170] team0: Port device team_slave_1 added [ 366.460512][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.533563][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.540709][ T5449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.594939][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.601994][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.622097][ T5290] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 366.630394][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.653801][ T5290] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.663011][ T5290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 366.671320][ T5290] usb 6-1: SerialNumber: syz [ 366.704374][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.738677][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.766055][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.796609][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.803901][ T5449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.811564][ T5236] Bluetooth: hci3: command tx timeout [ 366.906522][ T7840] veth1_vlan: entered promiscuous mode [ 367.133272][ T2978] hsr_slave_0: left promiscuous mode [ 367.139551][ T2978] hsr_slave_1: left promiscuous mode [ 367.155802][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.176857][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.190828][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.198707][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.268470][ T2978] veth1_macvtap: left promiscuous mode [ 367.277237][ T2978] veth0_macvtap: left promiscuous mode [ 367.282241][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.283966][ T2978] veth1_vlan: left promiscuous mode [ 367.301228][ T2978] veth0_vlan: left promiscuous mode [ 367.310374][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.563539][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.581169][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.382666][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 368.438686][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 369.035502][ T8170] hsr_slave_0: entered promiscuous mode [ 369.064449][ T8170] hsr_slave_1: entered promiscuous mode [ 369.100308][ T8170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.107902][ T8170] Cannot create hsr debugfs directory [ 369.237702][ T8252] netlink: 19 bytes leftover after parsing attributes in process `syz.5.488'. [ 369.405772][ T5290] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 369.481937][ T5290] usb 6-1: USB disconnect, device number 6 [ 369.484446][ T7840] veth0_macvtap: entered promiscuous mode [ 369.548535][ T8259] loop0: detected capacity change from 0 to 1024 [ 369.697788][ T7840] veth1_macvtap: entered promiscuous mode [ 369.752410][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.799899][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.809713][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.821046][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.830932][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.843838][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.864080][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.879453][ T5449] hfsplus: b-tree write err: -5, ino 4 [ 369.984801][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.019069][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.040701][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.068875][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.090774][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.110516][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.131286][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.245984][ T8271] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 370.306249][ T7840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.333549][ T7840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.363225][ T7840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.380090][ T7840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.446059][ T8278] loop5: detected capacity change from 0 to 4096 [ 371.497426][ T8278] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 371.568454][ T5447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.656518][ T5447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.755673][ T8278] ntfs3: loop5: failed to convert "c46c" to macceltic [ 371.790355][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.832755][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.849564][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.937711][ T8011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.295208][ T8065] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.356861][ T8011] veth0_vlan: entered promiscuous mode [ 372.502702][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.509941][ T5447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.534167][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.541372][ T5447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.568801][ T8011] veth1_vlan: entered promiscuous mode [ 372.803026][ T8295] netlink: 48 bytes leftover after parsing attributes in process `syz.4.503'. [ 372.815007][ T8170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 372.824717][ T8297] loop5: detected capacity change from 0 to 256 [ 372.841473][ T8297] exfat: Deprecated parameter 'utf8' [ 372.874886][ T8170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 372.883905][ T8284] loop0: detected capacity change from 0 to 32768 [ 372.905741][ T8297] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 372.926967][ T8170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 372.937740][ T8284] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 372.961920][ T8284] dlm: no local IP address has been set [ 372.967841][ T8284] dlm: cannot start dlm midcomms -107 [ 372.979708][ T8170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.018753][ T8284] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 373.034572][ T8065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.120301][ T8011] veth0_macvtap: entered promiscuous mode [ 373.255587][ T8011] veth1_macvtap: entered promiscuous mode [ 373.445391][ T8306] loop5: detected capacity change from 0 to 1024 [ 373.448151][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.481883][ T8306] hfsplus: unable to parse mount options [ 373.505853][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.548312][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.585116][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.602268][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.639901][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.649721][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.671769][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.696104][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.783029][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.840019][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.879915][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.893912][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.933474][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.961587][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.990098][ T29] audit: type=1326 audit(1723279136.553:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.5.508" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79d33779f9 code=0x0 [ 374.016879][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.036308][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.079267][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.150090][ T8011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.178849][ T8011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.197884][ T8011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.206830][ T8011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.404342][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.437583][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.594028][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.686461][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.693757][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.714517][ T8327] loop0: detected capacity change from 0 to 512 [ 374.774320][ T8327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.792218][ T8327] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.849964][ T5288] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 374.867954][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.912625][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.940871][ T8327] xt_ipvs: protocol family 7 not supported [ 374.970282][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.977438][ T5447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.036463][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.045607][ T8065] veth0_vlan: entered promiscuous mode [ 375.076297][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 375.103196][ T8342] loop5: detected capacity change from 0 to 512 [ 375.105458][ T5448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.130231][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 375.150952][ T8342] tmpfs: Unknown parameter 'nouid32' [ 375.181916][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.201501][ T5448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.206125][ T8065] veth1_vlan: entered promiscuous mode [ 375.248816][ T5288] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.284341][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.332035][ T5288] usb 5-1: config 0 descriptor?? [ 375.429878][ T8065] veth0_macvtap: entered promiscuous mode [ 375.468692][ T8065] veth1_macvtap: entered promiscuous mode [ 375.500007][ T5290] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 375.615348][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.734722][ T5290] usb 6-1: Using ep0 maxpacket: 32 [ 375.789779][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.806030][ T5288] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 375.835650][ T5290] usb 6-1: unable to get BOS descriptor or descriptor too short [ 375.887820][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.920226][ T5290] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 375.932243][ T5288] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 375.939673][ T5288] plantronics 0003:047F:FFFF.0007: unbalanced collection at end of report description [ 375.991197][ T8350] loop1: detected capacity change from 0 to 32768 [ 375.994192][ T5290] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 376.015177][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.047244][ T5288] plantronics 0003:047F:FFFF.0007: parse failed [ 376.054696][ T5288] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 376.056220][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.067454][ T5290] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.087326][ T5290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 376.099387][ T5290] usb 6-1: SerialNumber: syz [ 376.104539][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.132194][ T8350] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 376.134729][ T8342] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 376.161521][ T5288] usb 5-1: USB disconnect, device number 5 [ 376.190307][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.203406][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.213779][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.264268][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.287267][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.357316][ T8350] XFS (loop1): Ending clean mount [ 376.369047][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.372880][ T8350] XFS (loop1): Quotacheck needed: Please wait. [ 376.396403][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.440034][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.480894][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.502297][ T8350] XFS (loop1): Quotacheck: Done. [ 376.559950][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.952549][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.008824][ T8342] loop5: detected capacity change from 0 to 512 [ 377.050097][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.795781][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.128692][ T8342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.181855][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.201226][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.321970][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.332591][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.360246][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.396596][ T8065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.405905][ T8065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.419103][ T8065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.480178][ T8065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.602887][ T8342] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.687907][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.895165][ T8011] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 378.945608][ T5290] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 379.061743][ T5290] usb 6-1: USB disconnect, device number 7 [ 379.088131][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.126743][ T8375] Bluetooth: MGMT ver 1.23 [ 379.181787][ T8374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.185440][ T7668] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.461754][ T5447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.469610][ T5447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.716882][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.746365][ T8170] veth0_vlan: entered promiscuous mode [ 379.760035][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.854831][ T8170] veth1_vlan: entered promiscuous mode [ 379.892554][ T8393] loop5: detected capacity change from 0 to 512 [ 379.943314][ T8393] EXT4-fs (loop5): Test dummy encryption mode enabled [ 380.031883][ T8393] EXT4-fs error (device loop5): __ext4_iget:4985: inode #11: block 1: comm syz.5.523: invalid block [ 380.098185][ T8393] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.523: couldn't read orphan inode 11 (err -117) [ 380.181226][ T8403] loop0: detected capacity change from 0 to 16 [ 380.254141][ T8393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.646259][ T8403] erofs: (device loop0): mounted with root inode @ nid 36. [ 382.735413][ T8170] veth0_macvtap: entered promiscuous mode [ 382.812299][ T8170] veth1_macvtap: entered promiscuous mode [ 383.202121][ T8416] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 383.233124][ T5289] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 383.420190][ T5289] usb 5-1: Using ep0 maxpacket: 32 [ 383.430473][ T5289] usb 5-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 383.454850][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.701339][ T8416] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 383.714502][ T8416] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 383.732452][ T8416] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 383.744431][ T8416] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 383.755868][ T8416] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 383.774113][ T8416] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 383.785405][ T8416] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 383.796814][ T8416] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 383.836556][ T5289] usb 5-1: config 0 descriptor?? [ 384.326449][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.380104][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.413993][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.480114][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.570784][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.590398][ T5289] usb 5-1: can't set config #0, error -71 [ 384.628481][ T5289] usb 5-1: USB disconnect, device number 6 [ 384.649980][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.695676][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.749904][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.771613][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.810043][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.834787][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.848838][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.873621][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.898997][ T7409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.951802][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.998099][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.030258][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.095864][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.145021][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.180745][ T8435] binder: BINDER_SET_CONTEXT_MGR already set [ 385.229013][ T8435] binder: 8433:8435 ioctl 4018620d 20000100 returned -16 [ 385.248044][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.289915][ T8435] binder: 8433:8435 ioctl c018620c 20000000 returned -1 [ 385.309475][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.338850][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.349297][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.363623][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.376070][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.412592][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.472330][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.534756][ T8170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.624450][ T8170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.654796][ T8170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.705878][ T8170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.154981][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.222076][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.436616][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.472096][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.771798][ T8426] loop0: detected capacity change from 0 to 32768 [ 386.822830][ T8426] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.528 (8426) [ 386.830474][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.539'. [ 386.878722][ T8426] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 386.942125][ T8426] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 387.100065][ T8426] BTRFS info (device loop0): using free-space-tree [ 387.443250][ T8477] loop3: detected capacity change from 0 to 65536 [ 387.515298][ T8477] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 387.624677][ T8477] XFS (loop3): Ending clean mount [ 387.636648][ T8477] XFS (loop3): Quotacheck needed: Please wait. [ 387.728754][ T8477] XFS (loop3): Quotacheck: Done. [ 387.752372][ T8426] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 387.752976][ T8426] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 387.830788][ T8426] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 387.866530][ T8426] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 389.147265][ T8170] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 389.324277][ T8426] BTRFS error (device loop0): open_ctree failed [ 389.460078][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 389.500018][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 389.690265][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 389.719955][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 389.720385][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.727377][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.788459][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 389.797779][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.797838][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 389.797870][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.867152][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.919064][ T8521] loop2: detected capacity change from 0 to 2048 [ 389.931253][ T25] usb 5-1: config 0 descriptor?? [ 389.949581][ T8] usb 6-1: config 0 descriptor?? [ 389.957490][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 389.988594][ T8] hub 6-1:0.0: USB hub found [ 390.127848][ T8526] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.188551][ T8525] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 390.199809][ T8] hub 6-1:0.0: 1 port detected [ 390.224493][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 390.362626][ T8529] loop1: detected capacity change from 0 to 256 [ 390.411412][ T8529] vfat: Unknown parameter '0x0000000000000000' [ 390.907741][ T5329] hub 6-1:0.0: activate --> -90 [ 391.122635][ T59] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 391.135472][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'. [ 391.158172][ T25] gspca_vc032x: reg_w err -71 [ 391.163303][ T25] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 391.170243][ T59] usb 6-1: USB disconnect, device number 8 [ 391.414661][ T25] usb 5-1: USB disconnect, device number 7 [ 391.605674][ T5777] block nbd64: NBD_DISCONNECT [ 392.101116][ T8555] loop5: detected capacity change from 0 to 1024 [ 392.147312][ T8555] hfsplus: failed to load root directory [ 392.265275][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.5.554'. [ 393.959955][ T5289] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 394.125063][ T8574] loop0: detected capacity change from 0 to 128 [ 394.234199][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.5.558'. [ 394.283573][ T5289] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 394.530725][ T5289] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 394.547705][ T5289] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.401641][ T1504] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 395.481681][ T5289] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 395.641619][ T5289] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 395.779666][ T5289] usb 5-1: unable to read config index 1 descriptor/start: -71 [ 395.812943][ T1504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 395.834594][ T5289] usb 5-1: can't read configurations, error -71 [ 395.854690][ T1504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 395.926597][ T1504] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.989193][ T1504] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 396.049995][ T1504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.095466][ T1504] usb 2-1: config 0 descriptor?? [ 396.584177][ T8570] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 396.722438][ T8590] loop0: detected capacity change from 0 to 512 [ 396.754295][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 396.769178][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 396.780549][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 396.788274][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 396.810897][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 396.857210][ T8590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.870542][ T8590] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.941867][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.016047][ T1504] usbhid 2-1:0.0: can't add hid device: -71 [ 397.027972][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.050425][ T1504] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 397.058276][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.077319][ T1504] usb 2-1: USB disconnect, device number 3 [ 397.083300][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.098586][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.116552][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.149652][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.180096][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.190309][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.251861][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.295332][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.353593][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.404741][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.431506][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.470033][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.497960][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.520271][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.538518][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.576219][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.610283][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.617778][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.670860][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.730520][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.737919][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.819326][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.830095][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.837722][ T5288] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.890463][ T5288] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 398.130685][ T7668] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.724514][ T8620] loop0: detected capacity change from 0 to 8 [ 399.102908][ T8605] loop5: detected capacity change from 0 to 32768 [ 399.344498][ T8605] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.567 (8605) [ 400.304247][ T8605] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.400375][ T8605] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 400.428612][ T8605] BTRFS info (device loop5): using free-space-tree [ 400.511934][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 400.512853][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 400.520879][ T8634] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.578'. [ 400.570773][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 400.586691][ T8634] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 400.588398][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 400.698110][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 400.785898][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 400.882358][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 400.920732][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 400.971268][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 401.010288][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 401.073892][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 401.113273][ T8605] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 401.157998][ T8605] BTRFS error (device loop5): open_ctree failed [ 401.259774][ T8657] loop1: detected capacity change from 0 to 64 [ 402.986712][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.5.587'. [ 403.138809][ T29] audit: type=1326 audit(1723279165.703:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.1.588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90ab5779f9 code=0x0 [ 407.718288][ T8592] syz.3.562 (8592): drop_caches: 1 [ 408.444684][ T8745] loop5: detected capacity change from 0 to 164 [ 409.438878][ T5243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 409.455749][ T5243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 409.470434][ T5243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 409.505634][ T5243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 409.515858][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 409.530575][ T5243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 409.664458][ T8752] fuse: Invalid rootmode [ 410.232683][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.299904][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.359894][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.551519][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.611'. [ 410.604264][ T8758] loop5: detected capacity change from 0 to 2048 [ 410.756255][ T8758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 410.895501][ T5236] Bluetooth: hci0: command 0x0406 tx timeout [ 410.903556][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 411.111834][ T7409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.634954][ T5241] Bluetooth: hci7: command tx timeout [ 416.207248][ T5241] Bluetooth: hci7: command tx timeout [ 416.283417][ T8792] loop2: detected capacity change from 0 to 164 [ 417.344325][ T8794] loop0: detected capacity change from 0 to 512 [ 417.840326][ T8794] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.624: casefold flag without casefold feature [ 417.900544][ T8794] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.624: couldn't read orphan inode 15 (err -117) [ 418.005957][ T8794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.251170][ T5228] Bluetooth: hci7: command tx timeout [ 418.286922][ T8807] loop1: detected capacity change from 0 to 512 [ 418.306488][ T7668] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.355879][ T8807] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.628: casefold flag without casefold feature [ 418.491748][ T8807] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.628: couldn't read orphan inode 15 (err -117) [ 418.542076][ T8807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.654977][ T5447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.700433][ T8807] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.628: Directory hole found for htree leaf block 0 [ 418.762684][ T8800] loop5: detected capacity change from 0 to 32768 [ 418.798066][ T8807] netlink: 72 bytes leftover after parsing attributes in process `syz.1.628'. [ 418.807224][ T8800] XFS: ikeep mount option is deprecated. [ 418.830032][ T8818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.632'. [ 418.847103][ T8807] netlink: 72 bytes leftover after parsing attributes in process `syz.1.628'. [ 418.891105][ T8800] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 419.091116][ T8819] input: syz0 as /devices/virtual/input/input14 [ 419.100534][ T8800] XFS (loop5): Ending clean mount [ 419.116241][ T8833] loop2: detected capacity change from 0 to 16 [ 419.131374][ T8833] erofs: (device loop2): mounted with root inode @ nid 36. [ 419.140482][ T8800] XFS (loop5): Quotacheck needed: Please wait. [ 419.205929][ T5447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.229172][ T8011] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.316935][ T8747] chnl_net:caif_netlink_parms(): no params data found [ 419.335263][ T8800] XFS (loop5): Quotacheck: Done. [ 419.583944][ T5447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.838034][ T8065] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 419.895009][ T8065] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 419.950532][ T8065] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 420.006622][ T5447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.236057][ T8854] Bluetooth: MGMT ver 1.23 [ 420.332050][ T5228] Bluetooth: hci7: command tx timeout [ 420.550751][ T8851] tipc: Started in network mode [ 420.565567][ T8851] tipc: Node identity f7, cluster identity 4711 [ 420.598650][ T8851] tipc: Node number set to 247 [ 420.629080][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.651390][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.690390][ T8747] bridge_slave_0: entered allmulticast mode [ 420.716264][ T8747] bridge_slave_0: entered promiscuous mode [ 420.751453][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.787967][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.826721][ T8747] bridge_slave_1: entered allmulticast mode [ 420.855804][ T8747] bridge_slave_1: entered promiscuous mode [ 421.231478][ T8747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.505855][ T8747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.519803][ T8872] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 422.358568][ T8872] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.649'. [ 422.633533][ T7409] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 422.726350][ T5447] bridge_slave_1: left allmulticast mode [ 422.748439][ T5447] bridge_slave_1: left promiscuous mode [ 422.787119][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.449229][ T5447] bridge_slave_0: left allmulticast mode [ 423.481838][ T5447] bridge_slave_0: left promiscuous mode [ 423.487633][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.761005][ T8886] evm: overlay not supported [ 424.405624][ T8896] input: syz1 as /devices/virtual/input/input15 [ 424.817892][ T8881] loop2: detected capacity change from 0 to 32768 [ 424.876264][ T8881] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 425.040158][ T8881] XFS (loop2): Ending clean mount [ 425.075918][ T8881] XFS (loop2): Quotacheck needed: Please wait. [ 425.123926][ T1504] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 [ 425.170573][ T1504] XFS (loop2): Unmount and run xfs_repair [ 425.194606][ T1504] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 425.217438][ T1504] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 425.239156][ T1504] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 425.254932][ T8917] loop5: detected capacity change from 0 to 1024 [ 425.268972][ T1504] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 425.293329][ T1504] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 425.307015][ T1504] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 425.318310][ T1504] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 425.327866][ T1504] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 425.337712][ T1504] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 425.351673][ T63] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74 [ 425.368752][ T8917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.377059][ T8881] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 425.394797][ T5447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.410403][ T5447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.434198][ T5447] bond0 (unregistering): Released all slaves [ 425.438649][ T8917] EXT4-fs error (device loop5): ext4_empty_dir:3115: inode #11: block 623: comm syz.5.664: Attempting to read directory block (623) that is past i_size (638464) [ 425.472727][ T8747] team0: Port device team_slave_0 added [ 425.499384][ T8747] team0: Port device team_slave_1 added [ 425.500090][ T5290] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 [ 425.553726][ T5290] XFS (loop2): Unmount and run xfs_repair [ 425.569786][ T5290] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 425.581745][ T5290] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 425.592816][ T7409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.648028][ T5290] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 425.668214][ T5290] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 425.734427][ T5290] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 425.805238][ T5290] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 425.829468][ T5290] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 425.853643][ T5290] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 426.103255][ T5290] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 426.115263][ T8881] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74 [ 426.185491][ T8881] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 426.201694][ T8881] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 426.228333][ T29] audit: type=1804 audit(426.215:24): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.652" name="/newroot/24/file0/file3" dev="loop2" ino=9287 res=1 errno=0 [ 426.320360][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.385062][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.536897][ T8747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.548160][ T8065] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.584841][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.654388][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.770021][ T8747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.129836][ T8747] hsr_slave_0: entered promiscuous mode [ 427.172846][ T8747] hsr_slave_1: entered promiscuous mode [ 427.225623][ T8747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.257290][ T8747] Cannot create hsr debugfs directory [ 427.298816][ T8953] loop1: detected capacity change from 0 to 256 [ 427.321353][ T8953] exfat: Unknown parameter 'allo˙˙utime' [ 428.334878][ T5228] Bluetooth: hci1: command 0x0406 tx timeout [ 428.342334][ T5289] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 428.348946][ T5289] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 428.808428][ T8963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.677'. [ 429.115068][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 429.476852][ T8975] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.650525][ T5228] Bluetooth: hci0: command 0x0406 tx timeout [ 430.658876][ T5289] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 430.693034][ T5289] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 432.072851][ T8995] loop5: detected capacity change from 0 to 16 [ 432.182077][ T8995] erofs: (device loop5): mounted with root inode @ nid 36. [ 432.540352][ T5288] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 432.683467][ T9005] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 432.721146][ T9008] loop1: detected capacity change from 0 to 2048 [ 433.149936][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 433.228264][ T5288] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 433.239984][ T5288] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 433.255233][ T5288] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 433.266745][ T5288] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 433.283045][ T5288] usb 3-1: config 0 interface 0 has no altsetting 0 [ 433.295331][ T5288] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 433.314595][ T5288] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 433.326329][ T5288] usb 3-1: Product: syz [ 433.334009][ T5288] usb 3-1: Manufacturer: syz [ 433.338598][ T5288] usb 3-1: SerialNumber: syz [ 433.371262][ T5288] usb 3-1: config 0 descriptor?? [ 433.377737][ T8747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 433.403913][ T5288] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 433.460828][ T5288] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 433.521456][ T8747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 433.645669][ T8747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 433.704128][ T7561] usb 3-1: USB disconnect, device number 11 [ 433.735015][ T7561] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 433.744782][ T8747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.203522][ T5228] Bluetooth: hci4: command 0x0c1a tx timeout [ 434.231165][ T5289] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 434.237879][ T5289] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 434.257426][ T8747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.261852][ T9028] loop1: detected capacity change from 0 to 512 [ 434.294404][ T8747] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.308377][ T7561] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 434.528618][ T9028] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 434.589769][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.597013][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.909479][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.916708][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.154097][ T9028] EXT4-fs (loop1): 1 truncate cleaned up [ 435.198333][ T9028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.270707][ T7561] usb 3-1: Using ep0 maxpacket: 16 [ 435.283533][ T7561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.337555][ T7561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.344083][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 435.357456][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 435.395145][ T7561] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 435.419169][ T7561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.460203][ T7561] usb 3-1: config 0 descriptor?? [ 435.686001][ T8011] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.885089][ T7561] smartjoyplus 0003:6666:8804.0009: item fetching failed at offset 2/5 [ 435.949025][ T7561] smartjoyplus 0003:6666:8804.0009: parse failed [ 435.986793][ T7561] smartjoyplus 0003:6666:8804.0009: probe with driver smartjoyplus failed with error -22 [ 436.104101][ T5241] Bluetooth: unknown link type 32 [ 436.109212][ T5241] Bluetooth: hci2: connection err: -111 [ 436.147337][ T5241] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 436.226251][ T7561] usb 3-1: USB disconnect, device number 12 [ 436.452229][ T9062] loop1: detected capacity change from 0 to 2048 [ 436.488708][ T8747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.496624][ T5241] Bluetooth: hci7: command 0x0405 tx timeout [ 436.600005][ T9062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.748450][ T8747] veth0_vlan: entered promiscuous mode [ 436.766832][ T8747] veth1_vlan: entered promiscuous mode [ 436.903038][ T8747] veth0_macvtap: entered promiscuous mode [ 436.936870][ T8747] veth1_macvtap: entered promiscuous mode [ 437.040018][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.094763][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.140361][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.200533][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.244436][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.290083][ T5241] Bluetooth: hci5: command 0x0c1a tx timeout [ 437.296682][ T5289] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 437.320063][ T5289] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 437.380540][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.430629][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.474098][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.509954][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.549957][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.559786][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.630481][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.670067][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.706892][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.771263][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.778953][ T8011] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.873273][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.941520][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.980214][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.042719][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.089682][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.092365][ T9093] xt_limit: Overflow, try lower: 0/0 [ 438.137888][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.170089][ T9096] loop2: detected capacity change from 0 to 512 [ 438.179265][ T9096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.186259][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.210165][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.230452][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.260469][ T9096] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 438.273892][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.280810][ T9096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 438.299927][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.303404][ T9096] EXT4-fs (loop2): orphan cleanup on readonly fs [ 438.332040][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.332064][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.332084][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.338188][ T9096] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.704: attempt to clear invalid blocks 1024 len 1 [ 438.347304][ T9096] EXT4-fs (loop2): Remounting filesystem read-only [ 438.354169][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.402466][ T9096] EXT4-fs (loop2): 1 truncate cleaned up [ 438.417993][ T9096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 438.455799][ T9096] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.704: dx entry: limit 0 != root limit 125 [ 438.489950][ T9096] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.704: Corrupt directory, running e2fsck is recommended [ 438.505245][ T9101] trusted_key: encrypted_key: insufficient parameters specified [ 438.539393][ T9100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.703'. [ 438.596566][ T8747] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.611229][ T8747] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.627522][ T8747] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.639619][ T8747] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.665841][ T8065] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 439.004001][ T9109] loop2: detected capacity change from 0 to 512 [ 439.025979][ T9109] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.706: Invalid inode bitmap blk 4 in block_group 0 [ 439.041036][ T9109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.135769][ T9109] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 439.299274][ T8065] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.466188][ T9124] loop2: detected capacity change from 0 to 1024 [ 439.518056][ T9124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.549762][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.556253][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.850355][ T5241] Bluetooth: hci2: command 0x0c1a tx timeout [ 439.856807][ T5289] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 439.870176][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 439.879532][ T5289] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 439.922359][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 439.962944][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 441.930541][ T5241] Bluetooth: hci6: command 0x0c1a tx timeout [ 441.939450][ T5289] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 441.945645][ T5289] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 444.250240][ T5289] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 444.250607][ T5241] Bluetooth: hci7: command 0x0405 tx timeout [ 444.256338][ T5289] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 444.339541][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.349744][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.359091][ T5228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.374210][ T5228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.389363][ T5228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 444.397598][ T5228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.551861][ T9181] loop1: detected capacity change from 0 to 512 [ 444.572036][ T9181] EXT4-fs (loop1): filesystem is read-only [ 444.644430][ T9181] EXT4-fs (loop1): filesystem is read-only [ 444.690080][ T9181] EXT4-fs (loop1): orphan cleanup on readonly fs [ 444.696531][ T9181] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.713: bad orphan inode 16 [ 444.712585][ T9181] ext4_test_bit(bit=15, block=3) = 0 [ 444.719343][ T9181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 444.858419][ T9189] netlink: 'syz.5.716': attribute type 8 has an invalid length. [ 445.548868][ T8011] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.754958][ T9199] loop1: detected capacity change from 0 to 256 [ 446.017322][ T9198] loop5: detected capacity change from 0 to 32768 [ 446.026079][ T9198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.719 (9198) [ 446.050922][ T9198] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 446.072933][ T9198] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 446.081444][ T9198] BTRFS info (device loop5): using free-space-tree [ 446.159039][ T7409] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 446.491744][ T5228] Bluetooth: hci3: command tx timeout [ 446.492092][ T8747] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 446.510795][ T8747] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 446.801255][ T5447] hsr_slave_0: left promiscuous mode [ 446.840232][ T5447] hsr_slave_1: left promiscuous mode [ 446.870334][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.898348][ T5447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.931494][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.960098][ T5447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.051508][ T5447] veth1_macvtap: left promiscuous mode [ 447.057069][ T5447] veth0_macvtap: left promiscuous mode [ 447.090632][ T5447] veth1_vlan: left promiscuous mode [ 447.096038][ T5447] veth0_vlan: left promiscuous mode [ 448.854200][ T9253] ubi0: attaching mtd0 [ 448.875098][ T9253] ubi0: scanning is finished [ 448.879761][ T9253] ubi0: empty MTD device detected [ 449.010894][ T5230] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 449.335119][ T9253] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 449.347779][ T5230] usb 5-1: Using ep0 maxpacket: 16 [ 449.494983][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.511037][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.520851][ T5230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 449.535374][ T5230] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.544521][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.561055][ T5230] usb 5-1: config 0 descriptor?? [ 450.033509][ T5230] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 450.070402][ T5230] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input16 [ 450.186331][ T5230] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 450.214927][ T5447] team0 (unregistering): Port device team_slave_1 removed [ 450.265380][ T5230] usb 5-1: USB disconnect, device number 10 [ 450.465575][ T9259] loop1: detected capacity change from 0 to 32768 [ 450.481524][ T9259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.731 (9259) [ 450.538293][ T9259] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 450.560799][ T9259] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 450.590171][ T9259] BTRFS info (device loop1): using free-space-tree [ 450.636267][ T5447] team0 (unregistering): Port device team_slave_0 removed [ 451.449712][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 451.459813][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 451.467810][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 451.479460][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 451.487544][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 451.495601][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.710199][ T8011] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 452.217524][ T9285] kernel read not supported for file /cpuset.effective_cpus (pid: 9285 comm: syz.1.734) [ 452.236948][ T29] audit: type=1800 audit(452.225:25): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.734" name="cpuset.effective_cpus" dev="mqueue" ino=34327 res=0 errno=0 [ 452.748592][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.776393][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.306929][ T5601] Bluetooth: hci6: Frame reassembly failed (-84) [ 453.530679][ T5241] Bluetooth: hci4: command tx timeout [ 453.578746][ T9301] loop1: detected capacity change from 0 to 256 [ 453.911273][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.926887][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.129410][ T9095] chnl_net:caif_netlink_parms(): no params data found [ 454.362608][ T9308] input: syz1 as /devices/virtual/input/input17 [ 454.816092][ T9095] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.859638][ T9095] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.879645][ T9095] bridge_slave_0: entered allmulticast mode [ 454.900852][ T9095] bridge_slave_0: entered promiscuous mode [ 454.921881][ T9095] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.934150][ T9095] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.990423][ T9095] bridge_slave_1: entered allmulticast mode [ 455.011988][ T9095] bridge_slave_1: entered promiscuous mode [ 455.630032][ T5243] Bluetooth: hci4: command tx timeout [ 455.630318][ T5241] Bluetooth: hci6: command 0x1003 tx timeout [ 455.632700][ T5228] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 455.757065][ T9324] tty tty27: ldisc open failed (-12), clearing slot 26 [ 456.245472][ T9329] loop3: detected capacity change from 0 to 512 [ 456.272004][ T9329] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.281266][ T9329] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 456.407481][ T9332] loop1: detected capacity change from 0 to 512 [ 456.477588][ T9332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.506777][ T9095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.525667][ T9335] loop3: detected capacity change from 0 to 512 [ 456.575575][ T5230] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 456.588352][ T5447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.599596][ T5230] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 456.808933][ T9095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.300781][ T8011] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.326749][ T9335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.631693][ T9335] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.749: bg 0: block 256: padding at end of block bitmap is not set [ 458.645024][ T9348] loop5: detected capacity change from 0 to 2048 [ 458.693824][ T9348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.718251][ T5447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.738973][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 458.753789][ T9335] Quota error (device loop3): write_blk: dquota write failed [ 458.759585][ T9354] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 458.794432][ T9335] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 458.812499][ T9335] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 458.828526][ T29] audit: type=1800 audit(458.815:26): pid=9348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.754" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 458.848413][ T9335] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.749: Failed to acquire dquot type 1 [ 458.849391][ T9348] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 458.952340][ T9348] EXT4-fs (loop5): Remounting filesystem read-only [ 459.042455][ T9280] chnl_net:caif_netlink_parms(): no params data found [ 459.242119][ T5447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.253162][ T9095] team0: Port device team_slave_0 added [ 459.257498][ T9095] team0: Port device team_slave_1 added [ 459.371798][ T9357] loop1: detected capacity change from 0 to 128 [ 459.388803][ T9357] FAT-fs (loop1): bogus logical sector size 0 [ 459.393438][ T9357] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 459.393463][ T9357] FAT-fs (loop1): Can't find a valid FAT filesystem [ 459.420802][ T9361] can: request_module (can-proto-0) failed. [ 459.598354][ T8747] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.645145][ T5447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.819430][ T7409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.821321][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.886932][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.912898][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.940720][ T9095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.994452][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.032566][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.189760][ T9095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.483642][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'. [ 461.151794][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.172451][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.207459][ T9280] bridge_slave_0: entered allmulticast mode [ 461.216414][ T9280] bridge_slave_0: entered promiscuous mode [ 461.233160][ T9095] hsr_slave_0: entered promiscuous mode [ 461.254277][ T9095] hsr_slave_1: entered promiscuous mode [ 461.271278][ T9095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.299929][ T9095] Cannot create hsr debugfs directory [ 461.316924][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.336388][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.371209][ T9280] bridge_slave_1: entered allmulticast mode [ 461.392943][ T9280] bridge_slave_1: entered promiscuous mode [ 461.516958][ T9369] loop3: detected capacity change from 0 to 32768 [ 461.540325][ T5329] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 461.560190][ T9369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.758 (9369) [ 461.572583][ T9280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.627026][ T9369] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 461.646150][ T9369] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 461.664193][ T9401] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 461.668659][ T9399] team_slave_0: entered promiscuous mode [ 461.680214][ T9399] team_slave_1: entered promiscuous mode [ 461.690021][ T9369] BTRFS info (device loop3): using free-space-tree [ 461.709039][ T9399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 461.731045][ T9399] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 461.782358][ T5329] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 461.792270][ T5329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.815628][ T5329] usb 6-1: config 0 descriptor?? [ 461.824849][ T5329] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 461.853787][ T9395] bond0: entered promiscuous mode [ 461.858966][ T9395] bond_slave_0: entered promiscuous mode [ 461.868104][ T9395] bond_slave_1: entered promiscuous mode [ 461.887342][ T9395] macvlan2: entered promiscuous mode [ 461.893279][ T9395] team0: entered promiscuous mode [ 461.915914][ T29] audit: type=1800 audit(461.905:27): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.758" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 461.966172][ T9280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.036013][ T5329] gspca_cpia1: usb_control_msg 05, error -71 [ 462.047576][ T5329] gspca_cpia1: usb_control_msg 01, error -71 [ 462.060607][ T5329] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 462.104573][ T5329] usb 6-1: USB disconnect, device number 9 [ 462.113531][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 462.130070][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.771'. [ 462.160566][ T8747] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 462.329053][ T9280] team0: Port device team_slave_0 added [ 462.566805][ T5447] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.690508][ T5329] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 462.700543][ T9280] team0: Port device team_slave_1 added [ 462.921330][ T5329] usb 5-1: Using ep0 maxpacket: 16 [ 462.954445][ T5329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 462.989299][ T5329] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 463.031518][ T5329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.059771][ T5329] usb 5-1: config 0 descriptor?? [ 463.064821][ T5447] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.218899][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.240041][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.330023][ T9280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.373604][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.390004][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.476400][ T9280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.623216][ T5447] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.786100][ T9455] loop5: detected capacity change from 0 to 16 [ 464.438047][ T9423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.492815][ T9423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.618073][ T5329] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 464.626929][ T5329] hid-generic 0003:0158:0100.000B: unexpected long global item [ 464.637148][ T5329] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 464.769808][ T5447] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.820927][ T5230] usb 5-1: USB disconnect, device number 11 [ 464.910910][ T9431] loop1: detected capacity change from 0 to 32768 [ 464.930079][ T9431] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.776 (9431) [ 464.943780][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.781'. [ 464.966511][ T9431] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 464.992925][ T9280] hsr_slave_0: entered promiscuous mode [ 465.009296][ T9431] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 465.020237][ T9280] hsr_slave_1: entered promiscuous mode [ 465.027059][ T9431] BTRFS info (device loop1): using free-space-tree [ 465.032686][ T9280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.041774][ T9280] Cannot create hsr debugfs directory [ 465.389594][ T29] audit: type=1804 audit(465.365:28): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.776" name="/newroot/60/bus/file0/file0" dev="loop1" ino=258 res=1 errno=0 [ 465.663291][ T8011] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 465.726622][ T5447] bridge_slave_1: left allmulticast mode [ 465.750063][ T5447] bridge_slave_1: left promiscuous mode [ 465.755852][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.902824][ T5447] bridge_slave_0: left allmulticast mode [ 465.908506][ T5447] bridge_slave_0: left promiscuous mode [ 465.941498][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.063126][ T5447] bridge_slave_1: left allmulticast mode [ 466.090917][ T5447] bridge_slave_1: left promiscuous mode [ 466.097844][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.228218][ T5447] bridge_slave_0: left allmulticast mode [ 466.251506][ T5447] bridge_slave_0: left promiscuous mode [ 466.257230][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.316354][ T9496] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 466.378737][ T9496] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.787'. [ 466.390188][ T9496] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 466.852194][ T9485] loop3: detected capacity change from 0 to 32768 [ 468.556551][ T5447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.560131][ T59] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 468.583945][ T5447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.601199][ T5447] bond0 (unregistering): Released all slaves [ 468.756849][ T5447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.769402][ T5447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.772138][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 468.799592][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 468.803578][ T5447] bond0 (unregistering): Released all slaves [ 468.816583][ T59] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 468.835277][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.850617][ T59] usb 4-1: Product: syz [ 468.854817][ T59] usb 4-1: Manufacturer: syz [ 468.859416][ T59] usb 4-1: SerialNumber: syz [ 468.886823][ T59] usb 4-1: config 0 descriptor?? [ 468.945880][ T59] redrat3 4-1:0.0: Couldn't find all endpoints [ 469.090480][ T5447] tipc: Left network mode [ 469.112959][ T9534] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 469.226425][ T1504] usb 4-1: USB disconnect, device number 10 [ 469.359982][ T5287] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 469.573514][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 469.605758][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.608814][ T5287] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 469.608849][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.608877][ T5287] usb 2-1: Product: syz [ 469.608903][ T5287] usb 2-1: Manufacturer: syz [ 469.608923][ T5287] usb 2-1: SerialNumber: syz [ 469.612758][ T5287] usb 2-1: config 0 descriptor?? [ 469.617752][ T5287] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 469.841009][ T5287] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 469.896785][ T5287] usb 2-1: USB disconnect, device number 4 [ 470.128892][ T9095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 470.327981][ T9095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 470.379771][ T9095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 470.487752][ T9560] loop5: detected capacity change from 0 to 1024 [ 470.560922][ T9560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.461852][ T9095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 471.472754][ T7409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.591318][ T5447] hsr_slave_0: left promiscuous mode [ 471.597692][ T5447] hsr_slave_1: left promiscuous mode [ 471.618545][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.670402][ T5447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.704017][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.714783][ T5447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.816211][ T5447] hsr_slave_0: left promiscuous mode [ 471.883740][ T5447] hsr_slave_1: left promiscuous mode [ 471.915874][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.936702][ T5447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.973433][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.982119][ T5447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.157191][ T5447] veth1_macvtap: left promiscuous mode [ 472.185007][ T5447] veth0_macvtap: left promiscuous mode [ 472.194651][ T9582] loop3: detected capacity change from 0 to 2048 [ 472.195315][ T5447] veth1_vlan: left promiscuous mode [ 472.227360][ T5447] veth0_vlan: left promiscuous mode [ 472.231347][ T9582] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 472.251004][ T5447] veth1_macvtap: left promiscuous mode [ 472.256566][ T5447] veth0_macvtap: left promiscuous mode [ 472.265853][ T9582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.286303][ T5447] veth1_vlan: left promiscuous mode [ 472.302112][ T5447] veth0_vlan: left promiscuous mode [ 472.650983][ T9590] syz.3.812 (9590): /proc/9590/oom_adj is deprecated, please use /proc/9590/oom_score_adj instead. [ 473.786388][ T9592] loop3: detected capacity change from 0 to 32768 [ 473.833197][ T9592] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 473.981459][ T9592] XFS (loop3): Ending clean mount [ 474.071886][ T8747] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 474.256941][ T5447] team0 (unregistering): Port device team_slave_1 removed [ 474.426715][ T5447] team0 (unregistering): Port device team_slave_0 removed [ 474.595053][ T9610] binder: 9609:9610 ioctl c0306201 0 returned -14 [ 475.624647][ T9616] loop3: detected capacity change from 0 to 512 [ 475.645187][ T9616] ext4: Unknown parameter 'fowner<00000000000000000000' [ 475.996199][ T5447] team0 (unregistering): Port device team_slave_1 removed [ 476.046496][ T5447] team0 (unregistering): Port device team_slave_0 removed [ 476.658916][ T9577] netlink: 14569 bytes leftover after parsing attributes in process `syz.1.805'. [ 476.672597][ T9579] tipc: Enabling of bearer rejected, failed to enable media [ 477.210715][ T9633] loop1: detected capacity change from 0 to 16 [ 477.281798][ T9633] erofs: (device loop1): mounted with root inode @ nid 36. [ 477.878915][ T9095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.216500][ T9095] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.290277][ T59] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 478.477002][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.484222][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.511935][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 478.535543][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.542759][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.544622][ T59] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.584515][ T30] INFO: task syz.4.388:7716 blocked for more than 143 seconds. [ 478.627861][ T9649] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 478.650308][ T9649] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 478.795029][ T30] Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 478.986346][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.271695][ T30] task:syz.4.388 state:D stack:24792 pid:7716 tgid:7705 ppid:7405 flags:0x00004006 [ 479.308007][ T30] Call Trace: [ 479.319325][ T30] [ 479.331362][ T30] __schedule+0x1800/0x4a60 [ 479.356450][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.391752][ T9280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 479.402016][ T59] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 479.415360][ T30] ? __pfx___schedule+0x10/0x10 [ 479.420680][ T30] ? __pfx_lock_release+0x10/0x10 [ 479.426370][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 479.426696][ T59] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.441930][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.447595][ T30] ? __wait_on_freeing_inode+0x267/0x420 [ 479.453489][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 479.461668][ T5291] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 479.469454][ T30] ? schedule+0x90/0x320 [ 479.474231][ T30] schedule+0x14b/0x320 [ 479.479082][ T59] usb 6-1: SerialNumber: syz [ 479.483994][ T30] ? __wait_on_freeing_inode+0x267/0x420 [ 479.496083][ T30] __wait_on_freeing_inode+0x2bb/0x420 [ 479.513102][ T30] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 479.522095][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 479.529349][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.537439][ T30] find_inode_fast+0x2a0/0x460 [ 479.551122][ T30] ? find_inode_fast+0xcd/0x460 [ 479.557994][ T30] iget_locked+0xab/0x820 [ 479.569672][ T30] __ext4_iget+0x267/0x4090 [ 479.575965][ T30] ? __pfx___ext4_iget+0x10/0x10 [ 479.581020][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.586679][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.592418][ T30] ? __kmalloc_node_noprof+0x247/0x440 [ 479.597896][ T30] ? __kvmalloc_node_noprof+0x72/0x190 [ 479.603520][ T30] ext4_xattr_inode_lookup_create+0x4f8/0x1f90 [ 479.609731][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.615585][ T30] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 479.622258][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.627925][ T30] ? __pfx___schedule+0x10/0x10 [ 479.632925][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.638596][ T30] ? ext4_xattr_block_set+0xf8/0x3980 [ 479.644064][ T30] ext4_xattr_block_set+0x274/0x3980 [ 479.649360][ T30] ? preempt_schedule+0xe1/0xf0 [ 479.654329][ T30] ? __pfx_preempt_schedule+0x10/0x10 [ 479.659731][ T30] ? __pfx_lock_release+0x10/0x10 [ 479.664819][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.670690][ T30] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 479.672231][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.676462][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.693419][ T30] ? _raw_spin_unlock+0x3e/0x50 [ 479.696934][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.698280][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.698318][ T30] ? ext4_xattr_ibody_set+0x590/0x730 [ 479.713343][ T5291] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 479.713986][ T30] ext4_xattr_set_handle+0xce0/0x1580 [ 479.719118][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.741907][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.747652][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 479.755592][ T5291] usb 4-1: config 0 descriptor?? [ 479.757432][ T30] ? __pfx_ext4_xattr_set_handle+0x10/0x10 [ 479.778912][ T30] ? __pfx___dquot_initialize+0x10/0x10 [ 479.779722][ T59] usb 6-1: USB disconnect, device number 10 [ 479.788133][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.805387][ T30] ? ext4_journal_check_start+0x175/0x250 [ 479.814727][ T30] ? __ext4_journal_start_sb+0x290/0x600 [ 479.825488][ T30] ext4_xattr_set+0x241/0x3d0 [ 479.830397][ T30] ? __pfx_ext4_xattr_set+0x10/0x10 [ 479.836880][ T30] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 479.843328][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.849255][ T30] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 479.855863][ T30] __vfs_setxattr+0x46a/0x4a0 [ 479.861875][ T30] __vfs_setxattr_noperm+0x12e/0x660 [ 479.868827][ T30] vfs_setxattr+0x221/0x430 [ 479.873688][ T30] ? __pfx_vfs_setxattr+0x10/0x10 [ 479.878783][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.884833][ T30] path_setxattr+0x37e/0x4d0 [ 479.889513][ T30] ? __pfx_path_setxattr+0x10/0x10 [ 479.894840][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.901016][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.906745][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 479.913383][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.919064][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 479.925604][ T30] ? exc_page_fault+0x590/0x8c0 [ 479.930812][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.936491][ T30] __x64_sys_setxattr+0xbb/0xd0 [ 479.946685][ T30] do_syscall_64+0xf3/0x230 [ 479.952688][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.958806][ T30] RIP: 0033:0x7f48bad779f9 [ 479.963864][ T30] RSP: 002b:00007f48bbab7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 479.972877][ T30] RAX: ffffffffffffffda RBX: 00007f48baf06058 RCX: 00007f48bad779f9 [ 479.981583][ T30] RDX: 0000000020001400 RSI: 00000000200001c0 RDI: 0000000020000200 [ 479.989591][ T30] RBP: 00007f48bade58ee R08: 0000000000000000 R09: 0000000000000000 [ 479.997672][ T30] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000000 [ 480.006180][ T30] R13: 0000000000000001 R14: 00007f48baf06058 R15: 00007ffc737f0868 [ 480.015178][ T30] [ 480.018375][ T30] INFO: task syz.4.388:7718 blocked for more than 144 seconds. [ 480.030055][ T30] Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 480.037702][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 480.052754][ T30] task:syz.4.388 state:D stack:25296 pid:7718 tgid:7705 ppid:7405 flags:0x00004006 [ 480.063155][ T30] Call Trace: [ 480.066452][ T30] [ 480.069401][ T30] __schedule+0x1800/0x4a60 [ 480.074066][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.079735][ T30] ? __pfx___schedule+0x10/0x10 [ 480.084778][ T30] ? __pfx_lock_release+0x10/0x10 [ 480.089840][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 480.095968][ T30] ? schedule+0x90/0x320 [ 480.100547][ T30] schedule+0x14b/0x320 [ 480.104740][ T30] mb_cache_entry_wait_unused+0x166/0x250 [ 480.118689][ T30] ? __pfx_mb_cache_entry_wait_unused+0x10/0x10 [ 480.125071][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 480.130628][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.136319][ T30] ? mb_cache_entry_delete_or_get+0x16a/0x1f0 [ 480.142509][ T30] ext4_evict_ea_inode+0x14a/0x2f0 [ 480.147665][ T30] ext4_evict_inode+0x194/0xf50 [ 480.152584][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.158247][ T30] ? _raw_spin_unlock+0x28/0x50 [ 480.163225][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.169325][ T30] ? inode_wait_for_writeback+0x224/0x290 [ 480.175125][ T30] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 480.181297][ T30] ? __pfx_ext4_evict_inode+0x10/0x10 [ 480.186697][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.192420][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 480.197655][ T30] ? list_lru_del_obj+0x3b5/0x400 [ 480.202773][ T30] ? __pfx_ext4_evict_inode+0x10/0x10 [ 480.208201][ T30] evict+0x2aa/0x630 [ 480.212220][ T30] ext4_xattr_set_entry+0x17f2/0x1f60 [ 480.217677][ T30] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 480.224011][ T30] ? check_xattrs+0x6c7/0xbc0 [ 480.228736][ T30] ext4_xattr_ibody_set+0x268/0x730 [ 480.234100][ T30] ext4_xattr_set_handle+0xba6/0x1580 [ 480.239511][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.245250][ T30] ? __pfx_ext4_xattr_set_handle+0x10/0x10 [ 480.251964][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 480.257836][ T5291] sony 0003:054C:0268.000C: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 480.258221][ T30] ? __pfx___dquot_initialize+0x10/0x10 [ 480.273927][ T5291] sony 0003:054C:0268.000C: failed to claim input [ 480.291637][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.309940][ T30] ? ext4_journal_check_start+0x175/0x250 [ 480.315933][ T30] ? __ext4_journal_start_sb+0x290/0x600 [ 480.321825][ T30] ext4_xattr_set+0x241/0x3d0 [ 480.327172][ T30] ? __pfx_ext4_xattr_set+0x10/0x10 [ 480.332801][ T30] ? __vfs_setxattr+0x9d/0x4a0 [ 480.337747][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.343999][ T30] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 480.350317][ T30] __vfs_setxattr+0x46a/0x4a0 [ 480.355126][ T30] __vfs_setxattr_noperm+0x12e/0x660 [ 480.361062][ T30] vfs_setxattr+0x221/0x430 [ 480.365695][ T30] ? __pfx_vfs_setxattr+0x10/0x10 [ 480.371311][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.377069][ T30] path_setxattr+0x37e/0x4d0 [ 480.382419][ T30] ? __pfx_path_setxattr+0x10/0x10 [ 480.387658][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.395020][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.405129][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 480.420507][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 480.429829][ T30] ? exc_page_fault+0x590/0x8c0 [ 480.435419][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.441619][ T30] __x64_sys_setxattr+0xbb/0xd0 [ 480.446981][ T30] do_syscall_64+0xf3/0x230 [ 480.452112][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.458127][ T30] RIP: 0033:0x7f48bad779f9 [ 480.463293][ T30] RSP: 002b:00007f48bba96038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 480.472105][ T30] RAX: ffffffffffffffda RBX: 00007f48baf06130 RCX: 00007f48bad779f9 [ 480.480624][ T30] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000180 [ 480.488177][ T1504] usb 4-1: USB disconnect, device number 11 [ 480.488684][ T30] RBP: 00007f48bade58ee R08: 0000000000000000 R09: 0000000000000000 [ 480.516384][ T30] R10: 000000000000090f R11: 0000000000000246 R12: 0000000000000000 [ 480.528407][ T30] R13: 0000000000000001 R14: 00007f48baf06130 R15: 00007ffc737f0868 [ 480.536882][ T30] [ 480.540392][ T30] [ 480.540392][ T30] Showing all locks held in the system: [ 480.548392][ T30] 3 locks held by kworker/u8:0/11: [ 480.557637][ T30] 1 lock held by khungtaskd/30: [ 480.572933][ T9280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 480.577221][ T30] #0: ffffffff8e9382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 480.589815][ T30] 3 locks held by kworker/u8:4/63: [ 480.595135][ T30] #0: ffff888015881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 480.606932][ T30] #1: ffffc900015e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 480.618162][ T30] #2: ffffffff8fc81c08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 480.627458][ T30] 3 locks held by kworker/1:2/1504: [ 480.632718][ T30] #0: ffff88801c6a9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 480.644993][ T30] #1: ffffc90004a9fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 480.657194][ T30] #2: ffff8880241d3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 480.666498][ T30] 3 locks held by kworker/u8:9/2978: [ 480.672667][ T30] #0: ffff888015881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 480.684450][ T30] #1: ffffc90009dd7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 480.696240][ T30] #2: ffffffff8e93d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 480.707324][ T30] 1 lock held by syslogd/4656: [ 480.712148][ T30] #0: ffff8880b923ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 480.723408][ T30] 2 locks held by dhcpcd/4888: [ 480.728186][ T30] #0: ffff88805f14e678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 480.737955][ T30] #1: ffffffff8fc81c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 480.746902][ T30] 2 locks held by getty/4980: [ 480.751625][ T30] #0: ffff88802b15b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 480.762770][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 480.773299][ T30] 3 locks held by kworker/1:4/5287: [ 480.778509][ T30] #0: ffff888015878948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 480.789604][ T30] #1: ffffc90004abfd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 480.805805][ T30] #2: ffff888069216240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 480.824046][ T30] 4 locks held by kworker/u8:10/5447: [ 480.829457][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 480.847084][ T30] #1: ffffc90003e47d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 480.857722][ T30] #2: ffffffff8fc75090 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 480.867448][ T30] #3: ffff88807a2bd428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x110/0x2e0 [ 480.877704][ T30] 2 locks held by kworker/u8:14/5601: [ 480.883363][ T30] #0: ffff8880b923ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 480.893373][ T30] #1: ffffc90004acfd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 480.906718][ T30] 3 locks held by syz.4.388/7716: [ 480.912166][ T30] #0: ffff8880698f0420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 480.922177][ T30] #1: ffff8880782321e0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_setxattr+0x1e1/0x430 [ 480.933392][ T30] #2: ffff888078231eb0 (&ei->xattr_sem){++++}-{3:3}, at: ext4_xattr_set_handle+0x277/0x1580 [ 480.943687][ T30] 3 locks held by syz.4.388/7718: [ 480.948717][ T30] #0: ffff8880698f0420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 480.958063][ T30] #1: ffff88807e3621e0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_setxattr+0x1e1/0x430 [ 480.969974][ T30] #2: ffff88807e361eb0 (&ei->xattr_sem){++++}-{3:3}, at: ext4_xattr_set_handle+0x277/0x1580 [ 480.980306][ T30] 1 lock held by syz-executor/9095: [ 480.985509][ T30] #0: ffffffff8fc81c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 480.995343][ T30] 2 locks held by syz-executor/9280: [ 481.000692][ T30] #0: ffffffff8fc81c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 481.010216][ T30] #1: ffffffff8e93d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 481.021256][ T30] [ 481.023607][ T30] ============================================= [ 481.023607][ T30] [ 481.028525][ T9280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 481.056070][ T30] NMI backtrace for cpu 1 [ 481.060417][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 481.070932][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 481.080987][ T30] Call Trace: [ 481.084276][ T30] [ 481.087216][ T30] dump_stack_lvl+0x241/0x360 [ 481.091937][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.097173][ T30] ? __pfx__printk+0x10/0x10 [ 481.101795][ T30] ? vprintk_emit+0x631/0x770 [ 481.106492][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 481.111533][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 481.116499][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 481.121977][ T30] ? _printk+0xd5/0x120 [ 481.126154][ T30] ? __pfx__printk+0x10/0x10 [ 481.130748][ T30] ? __wake_up_klogd+0xcc/0x110 [ 481.135639][ T30] ? __pfx__printk+0x10/0x10 [ 481.140236][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.145870][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 481.150906][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 481.156913][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 481.162913][ T30] watchdog+0xfee/0x1030 [ 481.167210][ T30] ? watchdog+0x1ea/0x1030 [ 481.171673][ T30] ? __pfx_watchdog+0x10/0x10 [ 481.176374][ T30] kthread+0x2f2/0x390 [ 481.180468][ T30] ? __pfx_watchdog+0x10/0x10 [ 481.185161][ T30] ? __pfx_kthread+0x10/0x10 [ 481.189769][ T30] ret_from_fork+0x4d/0x80 [ 481.194201][ T30] ? __pfx_kthread+0x10/0x10 [ 481.198811][ T30] ret_from_fork_asm+0x1a/0x30 [ 481.203605][ T30] [ 481.206979][ T30] Sending NMI from CPU 1 to CPUs 0: [ 481.212286][ C0] NMI backtrace for cpu 0 [ 481.212301][ C0] CPU: 0 UID: 0 PID: 2978 Comm: kworker/u8:9 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 481.212328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 481.212342][ C0] Workqueue: bat_events batadv_nc_worker [ 481.212375][ C0] RIP: 0010:trace_irq_enable+0x3d/0x120 [ 481.212408][ C0] Code: 48 89 d8 48 c1 e8 06 48 8d 3c c5 e8 c6 17 90 be 08 00 00 00 e8 04 e6 5f 00 48 0f a3 1d 24 ec 7c 0e 73 12 e8 a5 d6 de ff 84 c0 <75> 09 80 3d 29 ba 66 0e 00 74 0e 5b 41 5e e9 2b 66 55 0a 90 0f 0b [ 481.212428][ C0] RSP: 0018:ffffc90009dd79e0 EFLAGS: 00000002 [ 481.212447][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff819adabc [ 481.212462][ C0] RDX: 0000000000000000 RSI: ffffffff8c606020 RDI: ffffffff8c605fe0 [ 481.212479][ C0] RBP: ffffc90009dd7ab0 R08: ffffffff9017c6ef R09: 1ffffffff202f8dd [ 481.212497][ C0] R10: dffffc0000000000 R11: fffffbfff202f8de R12: dffffc0000000000 [ 481.212514][ C0] R13: 1ffff920013baf48 R14: ffffc90009dd7a40 R15: 0000000000000201 [ 481.212533][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 481.212553][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.212569][ C0] CR2: 00007fdf02cd2ab8 CR3: 000000002dece000 CR4: 0000000000350ef0 [ 481.212587][ C0] Call Trace: [ 481.212596][ C0] [ 481.212606][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 481.212633][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 481.212670][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 481.212695][ C0] ? nmi_handle+0x2a/0x5a0 [ 481.212731][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 481.212760][ C0] ? nmi_handle+0x151/0x5a0 [ 481.212783][ C0] ? nmi_handle+0x2a/0x5a0 [ 481.212806][ C0] ? trace_irq_enable+0x3d/0x120 [ 481.212836][ C0] ? default_do_nmi+0x63/0x160 [ 481.212884][ C0] ? exc_nmi+0x123/0x1f0 [ 481.212909][ C0] ? end_repeat_nmi+0xf/0x53 [ 481.212942][ C0] ? trace_irq_enable+0x2c/0x120 [ 481.212972][ C0] ? trace_irq_enable+0x3d/0x120 [ 481.213002][ C0] ? trace_irq_enable+0x3d/0x120 [ 481.213033][ C0] ? trace_irq_enable+0x3d/0x120 [ 481.213063][ C0] [ 481.213070][ C0] [ 481.213079][ C0] trace_hardirqs_on+0x18/0x40 [ 481.213108][ C0] __local_bh_enable_ip+0x168/0x200 [ 481.213141][ C0] ? batadv_nc_purge_paths+0x30f/0x3b0 [ 481.213174][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 481.213204][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.213233][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.213262][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 481.213295][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 481.213331][ C0] batadv_nc_purge_paths+0x30f/0x3b0 [ 481.213374][ C0] batadv_nc_worker+0x365/0x610 [ 481.213409][ C0] ? process_scheduled_works+0x945/0x1830 [ 481.213440][ C0] process_scheduled_works+0xa2e/0x1830 [ 481.213493][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 481.213532][ C0] ? assign_work+0x364/0x3d0 [ 481.213566][ C0] worker_thread+0x86d/0xd40 [ 481.213605][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 481.213641][ C0] ? __kthread_parkme+0x169/0x1d0 [ 481.213677][ C0] ? __pfx_worker_thread+0x10/0x10 [ 481.213709][ C0] kthread+0x2f2/0x390 [ 481.213744][ C0] ? __pfx_worker_thread+0x10/0x10 [ 481.213777][ C0] ? __pfx_kthread+0x10/0x10 [ 481.213814][ C0] ret_from_fork+0x4d/0x80 [ 481.213847][ C0] ? __pfx_kthread+0x10/0x10 [ 481.213887][ C0] ret_from_fork_asm+0x1a/0x30 [ 481.213934][ C0] [ 481.235770][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 481.235792][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 481.235823][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 481.235839][ T30] Call Trace: [ 481.235851][ T30] [ 481.235862][ T30] dump_stack_lvl+0x241/0x360 [ 481.235912][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.235953][ T30] ? __pfx__printk+0x10/0x10 [ 481.235988][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 481.236034][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.236068][ T30] ? vscnprintf+0x5d/0x90 [ 481.236099][ T30] panic+0x349/0x860 [ 481.236140][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.236174][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 481.236206][ T30] ? __pfx_panic+0x10/0x10 [ 481.236240][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 481.236271][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.236303][ T30] ? __irq_work_queue_local+0x137/0x410 [ 481.236341][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.236372][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 481.236402][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 481.236431][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 481.236464][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.236496][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 481.236531][ T30] watchdog+0x102d/0x1030 [ 481.236572][ T30] ? watchdog+0x1ea/0x1030 [ 481.236616][ T30] ? __pfx_watchdog+0x10/0x10 [ 481.236654][ T30] kthread+0x2f2/0x390 [ 481.236695][ T30] ? __pfx_watchdog+0x10/0x10 [ 481.236732][ T30] ? __pfx_kthread+0x10/0x10 [ 481.236773][ T30] ret_from_fork+0x4d/0x80 [ 481.236811][ T30] ? __pfx_kthread+0x10/0x10 [ 481.236852][ T30] ret_from_fork_asm+0x1a/0x30 [ 481.236908][ T30] [ 481.245358][ T30] Kernel Offset: disabled [ 481.739419][ T30] Rebooting in 86400 seconds..