last executing test programs: 7m4.556541917s ago: executing program 32 (id=96): r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='sched_kthread_stop\x00', r2}, 0x18) close_range(r0, r1, 0x0) 6m48.914610548s ago: executing program 33 (id=147): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 6m43.695343807s ago: executing program 34 (id=157): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x982a, &(0x7f0000009b80)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x20142, 0x10) 6m38.816713317s ago: executing program 35 (id=170): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 5m6.194116091s ago: executing program 36 (id=512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x24, r1, 0x926fdb2c68a18847, 0x70bd29, 0x2, {0x6}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) 4m18.478080253s ago: executing program 37 (id=727): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xd, 0x1, '/'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m41.541670364s ago: executing program 7 (id=960): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x4) read$nci(r0, 0x0, 0x0) 3m40.124743113s ago: executing program 7 (id=972): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000f800030000000000fb1532fe"], 0x830200) 3m39.609056058s ago: executing program 7 (id=975): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x1, 0xfffffffc], 0x9}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 3m36.953262753s ago: executing program 7 (id=984): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000}) 3m35.424743864s ago: executing program 7 (id=991): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 3m34.267737477s ago: executing program 7 (id=1001): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a80)={0x0, 0x5, 0x4, "9d905a24"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000580)={0x20, 0x17, 0x8, "43ae922842ed29c8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m33.41491628s ago: executing program 38 (id=1001): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a80)={0x0, 0x5, 0x4, "9d905a24"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000580)={0x20, 0x17, 0x8, "43ae922842ed29c8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m33.404661684s ago: executing program 6 (id=1004): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x5, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) 3m33.018556644s ago: executing program 6 (id=1010): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) fadvise64(r0, 0x8000000000000002, 0xd, 0x3) 3m32.240235439s ago: executing program 6 (id=1027): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffdfe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x800000, 0x0, 0x1, 0xfffffffe, 0x1}) 3m31.223238857s ago: executing program 6 (id=1022): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000200)={[{@lastblock}, {@undelete}, {@undelete}, {@longad}, {@unhide}, {@uid_forget}, {@undelete}, {@noadinicb}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@dmode}, {@noadinicb}, {@session}, {@partition={'partition', 0x3d, 0x6}}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) creat(&(0x7f0000000000)='./file0\x00', 0x0) 3m30.191732877s ago: executing program 6 (id=1029): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x19) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x1) 3m28.693104838s ago: executing program 6 (id=1041): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)={[{@check_relaxed}, {@gid}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@map_acorn}, {@nojoliet}, {@map_normal}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@unhide}, {@utf8}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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") bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 3m27.996693582s ago: executing program 39 (id=1041): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)={[{@check_relaxed}, {@gid}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@map_acorn}, {@nojoliet}, {@map_normal}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@unhide}, {@utf8}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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") bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 2m25.291692193s ago: executing program 5 (id=1270): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r0 = open(&(0x7f0000000240)='./file1\x00', 0x1c5142, 0x44) sendfile(r0, r0, 0x0, 0x80000080000000d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) io_uring_setup(0x30df, 0x0) 2m22.981346441s ago: executing program 5 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 2m21.601414093s ago: executing program 5 (id=1293): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f00000002c0)="8156", 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) close(r0) 2m21.152258951s ago: executing program 5 (id=1296): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESHEX], 0xfc, 0xc41, &(0x7f0000001b80)="$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") mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2m20.048585472s ago: executing program 5 (id=1302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xfffffffd, 0x7fff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {0xfffa, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 2m18.81660487s ago: executing program 5 (id=1307): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, 0x0, 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) 2m17.837790802s ago: executing program 40 (id=1307): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, 0x0, 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) 2m2.702802268s ago: executing program 1 (id=1380): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000ed00850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m36.21225642s ago: executing program 1 (id=1382): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m11.295185921s ago: executing program 1 (id=1382): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 53.64294563s ago: executing program 1 (id=1382): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35.393722276s ago: executing program 8 (id=1675): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) write$cgroup_type(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) 34.915382181s ago: executing program 8 (id=1677): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 34.535608262s ago: executing program 8 (id=1681): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0x5, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 34.112073096s ago: executing program 8 (id=1685): mkdir(&(0x7f00000000c0)='./file1\x00', 0x154) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x6e) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f00000000c0)) 33.437456019s ago: executing program 8 (id=1689): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') 32.321496496s ago: executing program 8 (id=1692): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) 31.854956822s ago: executing program 41 (id=1692): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) 26.962460846s ago: executing program 1 (id=1382): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.688319871s ago: executing program 3 (id=1819): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xd0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7.357033586s ago: executing program 1 (id=1382): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.260377448s ago: executing program 9 (id=1822): set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) 5.974240152s ago: executing program 3 (id=1824): socket(0x10, 0x803, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 5.973813253s ago: executing program 9 (id=1825): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3) r1 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000079c0)={0x2020}, 0x2020) 5.657307108s ago: executing program 9 (id=1828): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x9}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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") r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) 4.991805757s ago: executing program 4 (id=1833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d90000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1) close(r2) 4.644035148s ago: executing program 0 (id=1834): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r0, 0x0, 0xa) 4.52530523s ago: executing program 0 (id=1835): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = socket(0x8, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 4.330241467s ago: executing program 0 (id=1836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.216183523s ago: executing program 2 (id=1837): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0x4}, {0x0, 0x9}}}, 0x24}}, 0x4000004) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.064052209s ago: executing program 4 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4008301}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000580)=""/226, 0xe2}, {&(0x7f0000000040)=""/53, 0x35}], 0x3}, 0x80000000}], 0x4, 0x2120, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 3.392156437s ago: executing program 3 (id=1839): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc000200060000ec05"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r2}, 0x38) 3.352776511s ago: executing program 2 (id=1840): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000440)=ANY=[@ANYBLOB="636865636b3d72656c617865642c757466382c6f76657272696465726f636b7065726d2c636865636b3d7374726963742c6e6f726f636b2c696f636861727365743d63703836392c636865636b3d7374726963742c626c6f636b3d30783030b0303030303030303030303230302c6d6f64653d3078303030303030303030303030303030342c6d61703d61636f726e2c636865636b3d7374726963742c6f76657272696465726f636b7065726d2c756e686964652c756e686964652c636865636b3d7374726963742c00"], 0x1, 0xa23, &(0x7f0000000e80)="$eJzs3c1vHGcZAPBn1nbiuiVJ21BK1NaTlKRua5y1TROsHoqzu3a22F5kO1IjDk1pHBTFUGhBaiukphLi1AokEAe4VZw4VeqFckC9ILjREwck1H+h4hRORjO7ttf2rtc2/kr6+1m7Ox/PvO8zOx+vd3d23+DusnR8zdjSUn7b4fiVP+5Dxhxil8qfffDh+9nt3dtxJLriueRPEb0RkUZ0R8SjET2l8mxtukNBtyKuRcQnEUlEHI3645Zci+SX8cDq+CeR/D6rt60jWy2ZTpb4Qjvo/Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6jpFQuFoeTI1GdufJSWheRblAqz9aSWFraOGd5mbqP816/k4871huRZLfo7V3u6vvRk6uzH4mI9Ew8Vh97LO+QPHrj7fsfOfH8w92F5eXbZfN/Obr1Yt946+1brywuLrzecm6S7GJWh9JkZaY6V6tOj09W0upcLR27cKF4/vLEXDpRnarMXZ2br0ynpdnK+HxtNh0oPZ0Oj42NppWhq7UrM5PloanK8sSLXx8pFi+kLw59pzI+O1ebOf/i0FzpcnVqqjozmcdks7OYi9mO+O3qfDpfGZ9O0xs3FxdG1+XUFev23yxouNOaZEEjnYJGiiMjw8MjI8PvNnrPXplw4bmx5y4Wi93FdWJDxB7ttBwu97XfzLt/EocdKtTb/4ipqMZMXImXIm35V4pyzEYtptvMb1hu/8+er2xabTS1/41Wvrtp/qns7kw80RjtbdP+t8ll//7eiLfi7bgVr8RiLMZCvH7gGe3v32RUYiaqMRe1qMZ0jOdT0saUNMbiQlyIYrwcl6M/5qI7JqIaU1GJubgaczEflXyPKsVsVGI85qMWs5HGQJTi6UhjOMZiLEYjjUoMxdWoxZWYickox3heyo24mT/vo5vkuBI0vJWgkU2CNjTm227/K+v/OeEeVNh0K+/BWRx2ZqnR/h/pHDpQ2o+EAAAAgF331b/HsZMP/e3fEUk8nn8uP1GdqhQPOi0AAABgF+WX6z2WPfRkQ49H4vU/AAAA3GuS/Dt2SUT0RX99aPmbUN4EAAAAgHtE/vn/E5H0r07w+h8AAADuMZ1/Y79jRDK4/PO/6fX64/VGRH0s6ZuoTlWGSrWp54fjXP4rA/k3DTaU1hWR9ORfP3gmTtejTvfVH/tWS8zq7M2ihoeeH45n4kxjRQaezB6eHGgROVKPfKoe+VRzZFesiRzNIgHgXndmk/Z4q+3/MzFYjxg8lTf53afWtMFdecta1LICwGGx0sfOfxtdmrVo/xsRT7Rr/7+xyev/LOKhuNFfv6RgKF6N12IxrsdgNK446G9V6nJvBPXLEAY7vBvQ17hk4dOLhRjc8H5A78q6NscuxEgMtnxHoKncZDmH0Xpc195sAwDYb2c2bYdX2v/uzdr/wc1f/ze1uS4pBIDDYKUH++0O9G89+KDXEQBYSysNAAAAAAAAAAAAAAAAAAAAAAAAAAAAu29LP+D/j3MRi4sLETvtLKDFwKd//fOX2sa8d39E73Yy3HygELuT8+Ef6IqIg6r9hdj2Utk2PixPnYG1Awd8YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBfJBFdraYXIo5GRDEizu9/Vnvn9kEnsFvSnS2W3Ik78WYc2+10AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6Bq//1+I+uP99UnRXYg4GxHXIuK7B53jdvR2mH9nn/I4fH6Q3zf9/n8hoieWkuiub/ZIekrl2dp0tiskR7P5n33w4fvZrW2R7ywPbOxVISsgq2FN5xKNGpqm9Kxd6sF8qb7ywhu3fvLaj9LypXzHvDQ/MVWenpz91mrgI8lH9S4QmrtBWM73Z2f/8qumyUcalX+UrWlr6+udyOstb6z3K62WblPvFtxcXBjJapqvvDT/0x8Wmmc9FKcjnhyIGFhb0/ezW5uaTq9/PtdKPk9+kRyL38a1fPtnz0aylGSb6Hi+/vfduLm4MPTqa4vXV3J65+abTQWciP6IuL72KOuQU39+Pmkp3+sKPVmtxTwouzvZobxNNZU4vPq8rlmHB/Ndpm9b65C2X4dch+e9kdHo+oyWsoPk1z9+OM5tuqWPtijxXIcaW0o+T/6VXI5/xs+b+v8oZNv/bLQ8OlsUkUc27SnN89YcXoWzq2s+0jzj5fVltj0q2QPvxffimyvbv9B0/m9sqzbHzcr56IWmiTs/HzXVuOG4aOh0XGys8Q/HN7Qoq/LD6OS6Fqlx9mm3TCPPk/WoNnl+OZ6N6D61rTPKsx3OKJ2W3+nx/7tkIP4Tt/X/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHH5JRFer6YWIsxFxIiKOZ+NpxNL6mNs7qK/Ql+wkzV2zk5zvPknbFU3uxJ14M47td0YAAAAAAAAA7I1L5c8++PD97JZ/Ht8VXys05qQR3RFxIvlNT6k8W5vuUFBPxLXlj/R7t5fDtezugdXxT7KxRzssdLCXDwDAXe1/AQAA///rmG2Q") r0 = socket(0x8, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c884) 3.285376972s ago: executing program 0 (id=1841): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "020093", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @opaque="17b7deea995c97d9ab"}}}}}}, 0x0) 3.284830055s ago: executing program 9 (id=1842): sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x4ee3, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0x15, 0x0, r3, 0x0, 0x0, r3, 0x1400, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.087093586s ago: executing program 0 (id=1843): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{}, {@oldalloc}, {@resuid}, {@noblock_validity}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x6, 0x447, &(0x7f0000003380)="$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") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x810c9365, 0x0) 2.960126295s ago: executing program 3 (id=1844): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffb3, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x8029}) 2.893050308s ago: executing program 2 (id=1845): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0, 0x801, 0x1}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x0, 0x350, 0x0, 0xf8, 0x274, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wg0\x00', 'ip6gre0\x00'}, 0x5e02, 0xd8, 0x100, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@physdev={{0x68}, {'bond_slave_1\x00', {0xff}, 'nicvf0\x00', {}, 0x11, 0x4}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x6000}}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 2.704147415s ago: executing program 9 (id=1846): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.68658035s ago: executing program 0 (id=1847): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) 2.445285832s ago: executing program 2 (id=1848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x6}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x2, 0x1d, 0x58, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x1f, 0x1, 0x1, 0x2, 0x1, 0xd4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0xf, 0x3, 0x0, 0x0, 0x3}, 0x2, {0xc9, 0x1fe, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}}, 0x6e) 854.578165ms ago: executing program 4 (id=1849): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x6e}, 0x0) 697.33175ms ago: executing program 3 (id=1850): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 640.749892ms ago: executing program 2 (id=1851): r0 = socket$inet(0x2, 0x80001, 0x84) setreuid(0x0, 0xee00) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) 640.248954ms ago: executing program 4 (id=1852): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 518.645494ms ago: executing program 2 (id=1853): socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 384.941441ms ago: executing program 3 (id=1854): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000300)={0x20, 0x5, 0x2, "a478"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 285.335378ms ago: executing program 4 (id=1855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 147.995125ms ago: executing program 4 (id=1856): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 0s ago: executing program 9 (id=1857): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r2}, 0x10) sendmsg$IPSET_CMD_TYPE(r1, 0x0, 0x200000b0) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): [ T6005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.932631][ T6005] usb 3-1: config 0 descriptor?? [ 436.278298][T11308] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 436.439701][ T6005] nintendo 0003:057E:200E.0016: ignoring exceeding usage max [ 436.473633][ T6005] nintendo 0003:057E:200E.0016: unbalanced collection at end of report description [ 436.488350][ T6005] nintendo 0003:057E:200E.0016: HID parse failed [ 436.503133][ T6005] nintendo 0003:057E:200E.0016: probe - fail = -22 [ 436.510228][ T6005] nintendo 0003:057E:200E.0016: probe with driver nintendo failed with error -22 [ 436.643629][ T6005] usb 3-1: USB disconnect, device number 8 [ 436.930872][T11195] chnl_net:caif_netlink_parms(): no params data found [ 437.011184][ T36] IPVS: stop unused estimator thread 0... [ 437.422705][T11195] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.464665][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.500030][T11195] bridge_slave_0: entered allmulticast mode [ 437.546325][T11195] bridge_slave_0: entered promiscuous mode [ 437.578989][T11195] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.599060][T11195] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.618043][T11195] bridge_slave_1: entered allmulticast mode [ 437.640865][T11195] bridge_slave_1: entered promiscuous mode [ 437.864099][T11195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.886618][T11195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.189679][T11195] team0: Port device team_slave_0 added [ 438.205230][T11412] loop1: detected capacity change from 0 to 2048 [ 438.236315][T11195] team0: Port device team_slave_1 added [ 438.362346][ T6534] loop1: p1 < > p4 [ 438.391074][ T6534] loop1: p4 size 8388608 extends beyond EOD, truncated [ 438.542358][T11416] loop3: detected capacity change from 0 to 32768 [ 438.576946][T11412] loop1: p1 < > p4 [ 438.608643][T11412] loop1: p4 size 8388608 extends beyond EOD, truncated [ 438.657656][T11195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.673056][T11416] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 438.673107][T11416] allowing incompatible features above 0.0: (unknown version) [ 438.673130][T11416] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 438.717920][T11416] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 438.726182][T11416] bcachefs (loop3): initializing new filesystem [ 438.742639][T11416] bcachefs (loop3): going read-write [ 438.755236][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.833557][T11195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.848244][T11416] bcachefs (loop3): marking superblocks [ 438.859918][T11195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.863462][T11416] bcachefs (loop3): initializing freespace [ 438.875315][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.879022][T11416] bcachefs (loop3): done initializing freespace [ 438.910848][T11416] bcachefs (loop3): reading snapshots table [ 438.916855][T11416] bcachefs (loop3): reading snapshots done [ 438.997292][T11416] bcachefs (loop3): done starting filesystem [ 439.027851][T11195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.264712][T11433] loop8: detected capacity change from 0 to 512 [ 439.305700][T11433] EXT4-fs (loop8): Invalid log block size: 7 [ 439.378891][ T9958] bcachefs (loop3): shutting down [ 439.417890][ T9958] bcachefs (loop3): going read-only [ 439.423147][ T9958] bcachefs (loop3): finished waiting for writes to stop [ 439.431970][T11195] hsr_slave_0: entered promiscuous mode [ 439.486668][T11195] hsr_slave_1: entered promiscuous mode [ 439.535371][T11195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.542604][ T6534] udevd[6534]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 439.542944][T11195] Cannot create hsr debugfs directory [ 439.557214][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 439.610253][ T9958] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 439.711605][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 439.720141][ T6534] udevd[6534]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 439.930596][ T9958] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 439.943795][ T9958] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 439.952847][ T9958] bcachefs (loop3): marking filesystem clean [ 440.146420][T11415] loop4: detected capacity change from 0 to 32768 [ 440.215521][ T9958] bcachefs (loop3): shutdown complete [ 440.300250][T11415] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 440.429738][T11415] XFS (loop4): Ending clean mount [ 440.459391][T11415] XFS (loop4): Quotacheck needed: Please wait. [ 440.481204][T11428] loop2: detected capacity change from 0 to 32768 [ 440.521362][T11428] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1363 (11428) [ 440.592037][T11428] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 440.630898][T11428] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 440.661206][T11428] BTRFS info (device loop2): using free-space-tree [ 440.677294][T11415] XFS (loop4): Quotacheck: Done. [ 440.737573][ T6016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.005277][ T6016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.074165][T10060] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 441.624071][ T8965] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 441.935560][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 441.966465][ T6016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.101819][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 442.128771][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 442.150879][ T10] usb 9-1: too many configurations: 105, using maximum allowed: 8 [ 442.181924][ T10] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 442.190266][ T10] usb 9-1: can't read configurations, error -71 [ 442.204747][T11471] loop2: detected capacity change from 32768 to 64 [ 442.547967][ T6016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.559692][T11477] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 442.915230][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.925605][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.949645][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.967231][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.977876][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.028412][T11483] netlink: 'syz.2.1373': attribute type 1 has an invalid length. [ 443.224155][T11483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.525057][T11485] bond1: (slave gretap1): making interface the new active one [ 443.552123][T11485] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 444.181381][ T6016] bridge_slave_1: left allmulticast mode [ 444.189122][ T6016] bridge_slave_1: left promiscuous mode [ 444.195962][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.333937][ T6016] bridge_slave_0: left allmulticast mode [ 444.348187][ T6016] bridge_slave_0: left promiscuous mode [ 444.362582][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.062387][ T5835] Bluetooth: hci5: command tx timeout [ 445.243873][T11494] loop8: detected capacity change from 0 to 32768 [ 445.252807][T11502] loop4: detected capacity change from 0 to 32768 [ 445.271607][T11502] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1381 (11502) [ 445.302501][T11502] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 445.306679][T11494] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 445.355329][T11502] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 445.385109][T11502] BTRFS info (device loop4): using free-space-tree [ 445.755275][T11494] XFS (loop8): Ending clean mount [ 445.802687][T11494] XFS (loop8): Quotacheck needed: Please wait. [ 445.847537][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.872573][ T30] audit: type=1804 audit(1751033634.461:66): pid=11502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1381" name="/newroot/37/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 445.891511][T11494] XFS (loop8): Quotacheck: Done. [ 445.956465][T11530] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 445.971325][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.027779][ T6016] bond0 (unregistering): Released all slaves [ 446.403121][T11530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.453211][T10060] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 446.495598][ T6596] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 446.551036][T11532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.655980][T11532] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 446.703235][T11532] bond2: (slave vti0): Error -95 calling set_mac_address [ 446.902491][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 447.134461][ T5835] Bluetooth: hci5: command tx timeout [ 447.303751][T11195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 447.421317][T11195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 447.588072][T11195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 447.700574][T11195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 448.080996][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 448.148054][T11573] usb usb1: usbfs: process 11573 (syz.8.1399) did not claim interface 0 before use [ 448.221059][T11569] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.230664][T11569] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.234404][ T5919] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 448.240018][T11569] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.257271][T11569] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.286736][T11569] vxlan0: entered promiscuous mode [ 448.371134][ T6016] hsr_slave_0: left promiscuous mode [ 448.393218][ T6016] hsr_slave_1: left promiscuous mode [ 448.400853][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.404599][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 448.420463][ T5919] usb 3-1: config 0 has no interfaces? [ 448.427199][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.428499][ T5919] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 448.447426][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.465444][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.478457][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.504561][ T5919] usb 3-1: config 0 descriptor?? [ 448.553844][ T6016] veth1_macvtap: left promiscuous mode [ 448.560736][ T6016] veth0_macvtap: left promiscuous mode [ 448.568251][ T6016] veth1_vlan: left promiscuous mode [ 448.573770][ T6016] veth0_vlan: left promiscuous mode [ 448.785382][ T5919] usb 3-1: USB disconnect, device number 9 [ 449.224357][ T5835] Bluetooth: hci5: command tx timeout [ 449.290568][T11592] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 449.629253][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.768744][T11584] loop8: detected capacity change from 0 to 32768 [ 449.836845][T11584] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1402 (11584) [ 449.954012][T11584] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 450.001903][T11584] BTRFS info (device loop8): using sha256 (sha256-x86_64) checksum algorithm [ 450.050560][T11584] BTRFS info (device loop8): using free-space-tree [ 450.750007][ T6596] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 450.843954][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 451.114213][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 451.295125][ T5835] Bluetooth: hci5: command tx timeout [ 451.890353][T11632] loop8: detected capacity change from 0 to 512 [ 451.903679][T11632] EXT4-fs: Ignoring removed mblk_io_submit option [ 451.977381][T11632] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 451.993021][T11632] EXT4-fs error (device loop8): ext4_clear_blocks:874: inode #13: comm syz.8.1417: attempt to clear invalid blocks 2 len 1 [ 452.048740][T11632] EXT4-fs (loop8): Remounting filesystem read-only [ 452.057333][T11632] EXT4-fs (loop8): 1 truncate cleaned up [ 452.071483][T11632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.350702][ T6596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.740032][ T5970] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 452.779239][T11638] netlink: 'syz.4.1419': attribute type 3 has an invalid length. [ 452.793419][T11638] netlink: 'syz.4.1419': attribute type 3 has an invalid length. [ 452.843809][T11478] chnl_net:caif_netlink_parms(): no params data found [ 452.920682][ T5970] usb 9-1: Using ep0 maxpacket: 8 [ 452.941301][ T5970] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.994938][ T5970] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 453.044816][ T5970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.070649][ T5970] usb 9-1: config 0 descriptor?? [ 453.134045][ T5970] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 453.477259][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.507425][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.527131][T11478] bridge_slave_0: entered allmulticast mode [ 453.583949][T11478] bridge_slave_0: entered promiscuous mode [ 453.644770][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.652000][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.663562][T11478] bridge_slave_1: entered allmulticast mode [ 453.673469][T11478] bridge_slave_1: entered promiscuous mode [ 453.836197][T11478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.873015][T11195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.892265][T11478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.082287][T11195] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.141474][T11478] team0: Port device team_slave_0 added [ 454.178135][T11478] team0: Port device team_slave_1 added [ 454.188348][T11653] loop2: detected capacity change from 0 to 32768 [ 454.223512][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.230747][ T5950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.243450][ T5918] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 454.251904][T11653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1423 (11653) [ 454.289414][T11653] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 454.301046][T11653] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 454.311207][T11653] BTRFS info (device loop2): using free-space-tree [ 454.389381][T11478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.416055][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 454.433099][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.461813][ T5918] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 454.489817][ T5918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.528954][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.548823][T11478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.573451][ T5970] usb 9-1: USB disconnect, device number 20 [ 454.575573][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.619190][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.626405][ T5950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.662458][ T5918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.712383][T11669] syzkaller1: entered promiscuous mode [ 454.720786][ T5918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.727184][T11669] syzkaller1: entered allmulticast mode [ 454.752542][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.765864][T11478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.781359][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.844137][T11478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.993908][ T8965] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 455.010791][ T5918] usb 4-1: GET_CAPABILITIES returned 0 [ 455.043174][ T5918] usbtmc 4-1:16.0: can't read capabilities [ 455.326554][ T5918] usb 4-1: USB disconnect, device number 5 [ 455.355421][T11478] hsr_slave_0: entered promiscuous mode [ 455.388289][T11478] hsr_slave_1: entered promiscuous mode [ 455.450505][T11478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.460858][T11694] netlink: 'syz.4.1431': attribute type 1 has an invalid length. [ 455.491466][T11478] Cannot create hsr debugfs directory [ 455.600200][T11694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.701204][T11699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.795111][T11699] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 455.848213][T11699] bond1: (slave vti0): Error -95 calling set_mac_address [ 456.949841][T11709] loop4: detected capacity change from 0 to 8192 [ 457.248417][T11717] loop2: detected capacity change from 0 to 2048 [ 457.347884][T11195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.378452][T11717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.690875][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 457.982105][T11195] veth0_vlan: entered promiscuous mode [ 458.084196][T11195] veth1_vlan: entered promiscuous mode [ 458.246984][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 458.275319][T11195] veth0_macvtap: entered promiscuous mode [ 458.454730][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 458.457922][T11195] veth1_macvtap: entered promiscuous mode [ 458.467646][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.511599][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 458.541500][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.617659][ T24] usb 4-1: config 0 descriptor?? [ 458.672280][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 458.685766][T11478] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.806828][T11738] loop8: detected capacity change from 0 to 64 [ 458.869417][T11478] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 459.208895][T11195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.351055][T11478] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 459.464222][T11478] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 459.544518][T11195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.609700][T11195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.624238][T11195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.644405][T11195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.653184][T11195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.961473][T11757] netlink: 'syz.8.1447': attribute type 1 has an invalid length. [ 460.095015][ T30] audit: type=1326 audit(1751033648.681:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11747 comm="syz.4.1458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f343078e929 code=0x0 [ 460.176663][T11757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.223148][ T5939] usb 4-1: USB disconnect, device number 6 [ 460.418127][T11760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.434076][T11760] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 460.456820][T11760] bond1: (slave vti0): Error -95 calling set_mac_address [ 460.579139][ T6016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.619681][ T6016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.743277][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.795775][T11478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.803570][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.914179][T11478] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.959816][T11773] loop2: detected capacity change from 0 to 2048 [ 461.000975][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.008170][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.052585][T11778] loop8: detected capacity change from 0 to 512 [ 461.069487][T11773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.133922][ T8972] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.141153][ T8972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.258501][T11778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.324590][T11778] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 461.560769][T11778] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.1454: corrupted inode contents [ 461.719859][T11778] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.1454: mark_inode_dirty error [ 462.314580][T11778] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.1454: corrupted inode contents [ 462.484383][T11778] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.1454: mark_inode_dirty error [ 463.120719][ T6596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.356312][ T10] libceph: connect (1)[c::]:6789 error -101 [ 463.387860][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 463.436001][T11848] ceph: No mds server is up or the cluster is laggy [ 463.656025][T11478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.819860][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1462'. [ 463.912289][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1462'. [ 464.037365][T11478] veth0_vlan: entered promiscuous mode [ 464.110414][T11478] veth1_vlan: entered promiscuous mode [ 464.172672][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 464.294263][T11870] 8021q: adding VLAN 0 to HW filter on device team1 [ 464.294975][ T5970] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 464.315971][T11478] veth0_macvtap: entered promiscuous mode [ 464.349277][T11478] veth1_macvtap: entered promiscuous mode [ 464.407851][T11478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.430987][T11478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.479767][T11478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.501662][T11478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.504695][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 464.512323][T11478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.524606][T11478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.542922][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.594395][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.642610][ T5970] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 464.662405][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.708362][ T5970] usb 3-1: config 0 descriptor?? [ 464.906013][ T6016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.913887][ T6016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.044523][T11880] netlink: 'syz.0.1466': attribute type 1 has an invalid length. [ 465.083425][T11877] netlink: 'syz.8.1479': attribute type 10 has an invalid length. [ 465.191026][ T5970] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 465.308785][T11877] syz_tun: entered promiscuous mode [ 465.347010][T11877] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 465.382800][T11819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.392540][ T5970] ft260 0003:0403:6030.0017: chip code: 6424 8183 [ 465.425353][T11819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.601482][ T5970] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 465.802788][ T5970] ft260 0003:0403:6030.0017: failed to retrieve status: -32, no wakeup [ 465.842745][T11867] loop3: detected capacity change from 0 to 32768 [ 465.911559][T11867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1463 (11867) [ 466.045516][ T5970] ft260 0003:0403:6030.0017: failed to reset I2C controller: -71 [ 466.061884][T11867] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 466.124438][T11867] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 466.171907][ T5970] usb 3-1: USB disconnect, device number 10 [ 466.181699][T11867] BTRFS info (device loop3): using free-space-tree [ 466.971700][T11921] loop8: detected capacity change from 0 to 8 [ 467.065789][T11921] SQUASHFS error: Failed to read block 0x62: -5 [ 467.107914][T11921] squashfs image failed sanity check [ 467.246170][ T9958] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 467.320236][T11819] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.588710][T11819] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.002458][T11938] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 468.057486][T11938] overlayfs: failed to set xattr on upper [ 468.087733][T11938] overlayfs: ...falling back to redirect_dir=nofollow. [ 468.134430][T11938] overlayfs: ...falling back to index=off. [ 468.178307][T11938] overlayfs: ...falling back to uuid=null. [ 468.184175][T11938] overlayfs: ...falling back to xino=off. [ 468.332705][T11938] overlayfs: conflicting lowerdir path [ 468.412368][T11946] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 468.418893][T11946] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 468.877440][T11819] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.008253][T11946] hsr_slave_0: left promiscuous mode [ 469.087967][T11946] hsr_slave_1: left promiscuous mode [ 469.409401][T11965] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.421616][T11965] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.430881][T11819] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.443678][T11965] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.464668][T11965] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.494969][T11965] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.564527][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 469.767116][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.859662][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 469.905737][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.970003][ T10] usb 3-1: Product: syz [ 469.974228][ T10] usb 3-1: Manufacturer: syz [ 470.005128][ T10] usb 3-1: SerialNumber: syz [ 470.553977][T11819] bridge_slave_1: left allmulticast mode [ 470.686390][T11819] bridge_slave_1: left promiscuous mode [ 470.730208][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.789931][T11819] bridge_slave_0: left allmulticast mode [ 470.811777][T11819] bridge_slave_0: left promiscuous mode [ 470.849483][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.175364][ T10] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 471.187990][ T10] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 471.221422][ T10] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 471.535057][ T5835] Bluetooth: hci5: command tx timeout [ 471.589743][ T10] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 471.975830][T12016] IPv4: Oversized IP packet from 172.20.20.24 [ 471.983394][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 471.990041][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 472.263170][T12020] loop3: detected capacity change from 0 to 8 [ 472.295867][T12020] SQUASHFS error: Failed to read block 0x62: -5 [ 472.324421][T12020] squashfs image failed sanity check [ 472.523043][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.539198][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.550097][T11819] bond0 (unregistering): Released all slaves [ 472.594453][ T24] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 472.623415][ T10] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 472.625671][T11964] chnl_net:caif_netlink_parms(): no params data found [ 472.703114][ T10] usb 3-1: USB disconnect, device number 11 [ 472.720658][ T10] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 472.766817][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.798358][ T24] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 472.852373][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 472.895347][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.925168][ T24] usb 9-1: Product: syz [ 472.929393][ T24] usb 9-1: Manufacturer: syz [ 472.964568][ T24] usb 9-1: SerialNumber: syz [ 473.226368][T12024] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 473.434523][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 473.614480][ T5835] Bluetooth: hci5: command tx timeout [ 473.636925][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 473.671166][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.765059][ T10] usb 3-1: config 0 descriptor?? [ 473.859766][T12024] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 473.875818][T12049] loop4: detected capacity change from 0 to 512 [ 473.954538][T11819] hsr_slave_0: left promiscuous mode [ 473.990373][T11819] hsr_slave_1: left promiscuous mode [ 474.009304][T12049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.053755][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.073109][T12049] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.101017][ T24] cdc_mbim 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 474.107760][ T24] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 474.115357][ T24] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 474.124485][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.144467][ T5919] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 474.184474][ T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 474.195483][T12049] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1505: corrupted inode contents [ 474.203409][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.252799][T12049] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1505: mark_inode_dirty error [ 474.279027][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 474.280570][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.294618][ T10] [drm] Initialized udl on minor 2 [ 474.327017][ T24] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 474.329047][T12049] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1505: corrupted inode contents [ 474.372683][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.402543][ T24] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 474.404273][T12049] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1505: mark_inode_dirty error [ 474.408932][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.435259][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 474.442751][ T5919] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 474.452563][ T24] wwan wwan0: port wwan0mbim0 attached [ 474.479515][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.481453][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 474.509374][ T5919] usb 1-1: config 0 descriptor?? [ 474.542237][T11819] veth1_macvtap: left promiscuous mode [ 474.580629][T11819] veth0_macvtap: left promiscuous mode [ 474.594667][T11819] veth1_vlan: left promiscuous mode [ 474.610482][T11819] veth0_vlan: left promiscuous mode [ 474.633320][ T5970] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 474.669327][ T5970] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 474.684923][ T10] usb 3-1: USB disconnect, device number 12 [ 474.711482][ T5970] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 474.722057][T10060] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.383718][ T5919] hid-led 0003:27B8:01ED.0018: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 475.408600][T12045] loop3: detected capacity change from 0 to 32768 [ 475.454725][T12045] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1506 (12045) [ 475.477463][ T5919] hid-led 0003:27B8:01ED.0018: ThingM blink(1) v1 initialized [ 475.538845][T12045] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 475.630530][T12045] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 475.653163][T12063] loop8: detected capacity change from 0 to 8192 [ 475.662224][T12045] BTRFS info (device loop3): using free-space-tree [ 475.686763][ T5919] usb 1-1: USB disconnect, device number 7 [ 475.694979][T11965] Bluetooth: hci5: command tx timeout [ 475.872422][T12067] fido_id[12067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 476.660609][T12103] netlink: 'syz.8.1512': attribute type 4 has an invalid length. [ 476.683655][T12100] loop0: detected capacity change from 0 to 2048 [ 476.740393][T12100] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 477.011734][ T9958] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 477.294970][T11965] Bluetooth: hci1: command 0x0406 tx timeout [ 477.734823][ T5970] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 477.784974][ T5835] Bluetooth: hci5: command tx timeout [ 477.928608][ T5970] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 477.984530][ T5970] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 478.010524][T12121] loop4: detected capacity change from 0 to 8 [ 478.023547][ T5970] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 478.033914][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.058795][T12121] SQUASHFS error: Failed to read block 0x62: -5 [ 478.082156][T12121] squashfs image failed sanity check [ 478.095462][T12112] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 478.135653][ T5970] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 478.380318][ T5970] usb 4-1: USB disconnect, device number 7 [ 478.387429][T11819] team0 (unregistering): Port device team_slave_1 removed [ 478.571683][T11819] team0 (unregistering): Port device team_slave_0 removed [ 479.454064][T11964] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.470960][T11964] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.479043][T11964] bridge_slave_0: entered allmulticast mode [ 479.525969][T11964] bridge_slave_0: entered promiscuous mode [ 479.571403][ C0] Unknown status report in ack skb [ 479.572130][ T24] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 42:42:42:42:42:42 [ 479.614076][T12139] input: syz0 as /devices/virtual/input/input27 [ 479.666652][T11964] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.666722][ T24] usb 9-1: USB disconnect, device number 21 [ 479.684059][ T24] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 479.699906][T11964] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.765071][T11964] bridge_slave_1: entered allmulticast mode [ 479.826059][T11964] bridge_slave_1: entered promiscuous mode [ 480.108322][ T24] wwan wwan0: port wwan0mbim0 disconnected [ 480.359291][T11964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.407643][T11964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.701876][T11964] team0: Port device team_slave_0 added [ 480.753226][T11964] team0: Port device team_slave_1 added [ 481.059726][T11964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.089236][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.204382][T11964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.249412][T12165] loop2: detected capacity change from 0 to 8192 [ 481.265014][T11964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.311313][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.448186][T11964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.898552][T12183] loop2: detected capacity change from 0 to 8 [ 481.969904][T12183] SQUASHFS error: Failed to read block 0x62: -5 [ 482.006272][T12183] squashfs image failed sanity check [ 482.034535][T12185] capability: warning: `syz.8.1533' uses 32-bit capabilities (legacy support in use) [ 482.045958][T11964] hsr_slave_0: entered promiscuous mode [ 482.124367][T11964] hsr_slave_1: entered promiscuous mode [ 482.130795][T11964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.235503][T11964] Cannot create hsr debugfs directory [ 482.769779][T12193] loop0: detected capacity change from 0 to 32768 [ 483.010239][T12193] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names [ 483.010293][T12193] allowing incompatible features above 0.0: (unknown version) [ 483.010316][T12193] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 483.010348][T12193] with devices loop0 [ 483.066549][T12193] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 483.078429][T12193] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem [ 483.096270][T12193] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write [ 483.162008][T12193] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks [ 483.180698][T12193] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace [ 483.195231][T12193] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace [ 483.207245][T12193] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table [ 483.216085][T12193] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done [ 483.315212][T12193] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem [ 483.749320][T11195] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down [ 483.776587][ T5970] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 483.785009][T11195] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only [ 483.822052][T11195] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop [ 483.848496][ T5970] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 483.938157][T11195] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3 [ 483.994490][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 484.216121][T11195] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3 [ 484.222857][ T10] usb 4-1: config 0 has no interfaces? [ 484.285108][T11195] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4 [ 484.323557][T11195] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean [ 484.352837][ T10] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 484.394606][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.402650][ T10] usb 4-1: Product: syz [ 484.457221][ T10] usb 4-1: Manufacturer: syz [ 484.476546][ T10] usb 4-1: SerialNumber: syz [ 484.496273][T11195] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 484.545998][ T10] usb 4-1: config 0 descriptor?? [ 484.954280][ T5939] usb 4-1: USB disconnect, device number 8 [ 485.107431][ T30] audit: type=1326 audit(1751033673.711:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.8.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cf8e929 code=0x7ffc0000 [ 485.193614][ T30] audit: type=1326 audit(1751033673.711:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.8.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d7cf8e929 code=0x7ffc0000 [ 485.254494][ T30] audit: type=1326 audit(1751033673.711:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.8.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cf8e929 code=0x7ffc0000 [ 485.322415][T11964] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 485.366549][T11964] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 485.373435][ T30] audit: type=1326 audit(1751033673.741:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.8.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2d7cf8e929 code=0x7ffc0000 [ 485.407074][ T30] audit: type=1326 audit(1751033673.741:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.8.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cf8e929 code=0x7ffc0000 [ 485.461731][T11964] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 485.477943][ T30] audit: type=1326 audit(1751033673.741:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.8.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f2d7cf8e929 code=0x7ffc0000 [ 485.525725][T11964] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 485.563899][ T30] audit: type=1326 audit(1751033673.741:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.8.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cf8e929 code=0x7ffc0000 [ 485.606572][ T24] IPVS: starting estimator thread 0... [ 485.609110][ T30] audit: type=1326 audit(1751033673.741:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.8.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cf8e929 code=0x7ffc0000 [ 485.624443][T12253] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 485.754383][T12260] IPVS: using max 21 ests per chain, 50400 per kthread [ 486.133632][T12272] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1553'. [ 486.247386][T11964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.359584][T11964] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.477438][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.484725][T11825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.536284][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.543492][T11825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.185266][ T24] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 487.322526][T12268] loop3: detected capacity change from 0 to 32768 [ 487.390397][ T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 487.433353][T12268] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 487.451233][ T24] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 487.465169][T12305] sg_read: process 219 (syz.4.1561) changed security contexts after opening file descriptor, this is not allowed. [ 487.487533][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 487.504428][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.517380][T12291] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 487.529626][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 487.721558][T11964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.830234][T12268] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 487.911976][ T5939] usb 9-1: USB disconnect, device number 22 [ 487.976565][T12268] XFS (loop3): Starting recovery (logdev: internal) [ 488.132377][T12268] XFS (loop3): Ending recovery (logdev: internal) [ 488.187341][T11964] veth0_vlan: entered promiscuous mode [ 488.299133][T11964] veth1_vlan: entered promiscuous mode [ 488.454689][T11964] veth0_macvtap: entered promiscuous mode [ 488.515841][T11964] veth1_macvtap: entered promiscuous mode [ 488.651417][T11964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.779440][T11964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.840531][ T9958] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 488.846627][T11964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.922565][T11964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.948062][T11964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.988416][T11964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.039527][T12319] ceph: No mds server is up or the cluster is laggy [ 489.525124][T11823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.532996][T11823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.847851][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.864965][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.974503][ T5970] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 490.524033][ T5970] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 490.591565][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.665823][ T5970] usb 5-1: config 0 descriptor?? [ 490.919910][ T5970] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 490.980393][ T5970] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 491.028557][ T5970] [drm] Initialized udl on minor 2 [ 491.165239][ T5970] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 491.205103][ T5970] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 491.467799][ T971] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 491.498940][ T971] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 491.512791][ T5970] usb 5-1: USB disconnect, device number 4 [ 491.940603][T11817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.342201][T11817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.750410][T11817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.076800][T11817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.234439][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 493.436769][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.484257][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 493.512847][T12390] loop8: detected capacity change from 0 to 1024 [ 493.522616][T12391] loop2: detected capacity change from 0 to 256 [ 493.543255][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.566823][T12391] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 493.595018][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.623676][T12391] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 493.643731][T12379] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.653329][T12390] EXT4-fs: Ignoring removed orlov option [ 493.712576][T12391] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 493.735166][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 493.744234][T12390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.809430][T11817] bridge_slave_1: left allmulticast mode [ 493.852232][T11817] bridge_slave_1: left promiscuous mode [ 493.888778][T11817] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.990341][T12391] exFAT-fs (loop2): abnormal access to deleted dentry [ 494.064565][ T24] usb 5-1: USB disconnect, device number 5 [ 494.129351][T11817] bridge_slave_0: left allmulticast mode [ 494.194398][T11817] bridge_slave_0: left promiscuous mode [ 494.200254][T11817] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.333379][ T6596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.575989][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 494.597221][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 494.607799][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 494.627972][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 494.660390][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 495.031846][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.044555][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.060101][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.077233][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.096036][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.324767][T12419] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input28 [ 495.407506][ T971] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 495.574982][ T971] usb 4-1: Using ep0 maxpacket: 8 [ 495.586694][ T971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 495.608399][ T971] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 495.640336][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.705734][ T971] usb 4-1: config 0 descriptor?? [ 496.176442][ T971] a4tech 0003:09DA:001A.001A: item fetching failed at offset 2/5 [ 496.202137][ T971] a4tech 0003:09DA:001A.001A: parse failed [ 496.255211][ T971] a4tech 0003:09DA:001A.001A: probe with driver a4tech failed with error -22 [ 496.279183][T11817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.305112][T11817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.332176][T11817] bond0 (unregistering): Released all slaves [ 496.397280][ T24] usb 4-1: USB disconnect, device number 9 [ 496.735158][T11965] Bluetooth: hci0: command tx timeout [ 497.019442][T11817] hsr_slave_0: left promiscuous mode [ 497.054809][T11817] hsr_slave_1: left promiscuous mode [ 497.072170][T11817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.080856][T11817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.095468][T11817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.103933][T11817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.135367][T11965] Bluetooth: hci5: command tx timeout [ 497.138459][T11817] veth1_macvtap: left promiscuous mode [ 497.146993][T11817] veth0_macvtap: left promiscuous mode [ 497.152730][T11817] veth1_vlan: left promiscuous mode [ 497.158886][T11817] veth0_vlan: left promiscuous mode [ 498.164075][T11817] team0 (unregistering): Port device team_slave_1 removed [ 498.253114][T11817] team0 (unregistering): Port device team_slave_0 removed [ 498.821647][T11965] Bluetooth: hci0: command tx timeout [ 499.216151][T11965] Bluetooth: hci5: command tx timeout [ 499.333999][T12412] chnl_net:caif_netlink_parms(): no params data found [ 499.468315][T12402] chnl_net:caif_netlink_parms(): no params data found [ 499.654865][T12412] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.663420][T12412] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.677503][T12412] bridge_slave_0: entered allmulticast mode [ 499.687405][T12412] bridge_slave_0: entered promiscuous mode [ 499.724132][T12412] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.733308][T12412] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.741333][T12412] bridge_slave_1: entered allmulticast mode [ 499.760078][T12412] bridge_slave_1: entered promiscuous mode [ 499.929851][T12412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.959776][T12412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.042440][T11817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.143168][T12402] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.151590][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.176231][T12402] bridge_slave_0: entered allmulticast mode [ 500.194583][T12402] bridge_slave_0: entered promiscuous mode [ 500.218689][T12412] team0: Port device team_slave_0 added [ 500.235614][T12412] team0: Port device team_slave_1 added [ 500.257574][T12402] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.276289][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.295849][T12402] bridge_slave_1: entered allmulticast mode [ 500.310891][T12402] bridge_slave_1: entered promiscuous mode [ 500.388219][T11817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.557332][T11817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.574189][T12412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.595187][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.638842][T12412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.652569][T12412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.661423][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.689335][T12412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.705104][T12402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.744069][T11817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.772526][T12402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.894633][T11965] Bluetooth: hci0: command tx timeout [ 500.931373][T12412] hsr_slave_0: entered promiscuous mode [ 500.951662][T12412] hsr_slave_1: entered promiscuous mode [ 500.959876][T12412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.969331][T12412] Cannot create hsr debugfs directory [ 500.991251][T12402] team0: Port device team_slave_0 added [ 501.035498][T12402] team0: Port device team_slave_1 added [ 501.228232][T12402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.252141][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.286251][T12402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.305097][T11965] Bluetooth: hci5: command tx timeout [ 501.398345][T12402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.420884][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.455718][T12402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.598228][T11817] bridge_slave_1: left allmulticast mode [ 501.603933][T11817] bridge_slave_1: left promiscuous mode [ 501.621537][T11817] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.644224][T11817] bridge_slave_0: left allmulticast mode [ 501.651670][T11817] bridge_slave_0: left promiscuous mode [ 501.663686][T11817] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.381996][T11817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.395077][T11817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.406845][T11817] bond0 (unregistering): Released all slaves [ 502.572770][T12402] hsr_slave_0: entered promiscuous mode [ 502.581505][T12402] hsr_slave_1: entered promiscuous mode [ 502.588717][T12402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.597143][T12402] Cannot create hsr debugfs directory [ 502.991327][T11965] Bluetooth: hci0: command tx timeout [ 503.025612][T11817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.033079][T11817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.049693][T11817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.057811][T11817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.087775][T11817] veth1_macvtap: left promiscuous mode [ 503.093366][T11817] veth0_macvtap: left promiscuous mode [ 503.099620][T11817] veth1_vlan: left promiscuous mode [ 503.105127][T11817] veth0_vlan: left promiscuous mode [ 503.381988][T11965] Bluetooth: hci5: command tx timeout [ 503.990387][T11817] team0 (unregistering): Port device team_slave_1 removed [ 504.091205][T11817] team0 (unregistering): Port device team_slave_0 removed [ 505.858447][T12412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 505.888661][T12412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 505.911775][T12412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 505.949538][T12412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 506.069262][T12402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 506.094180][T12402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 506.121718][T12402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.142731][T12402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.327136][T12412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.382239][T12412] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.436032][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.443228][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.474650][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.481855][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.617645][T12402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.695574][T12402] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.723107][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.730387][T11825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.783329][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.790566][T11825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.213019][T12412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.350275][T12412] veth0_vlan: entered promiscuous mode [ 507.413755][T12412] veth1_vlan: entered promiscuous mode [ 507.430847][T12402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.555459][T12412] veth0_macvtap: entered promiscuous mode [ 507.582480][T12402] veth0_vlan: entered promiscuous mode [ 507.602410][T12412] veth1_macvtap: entered promiscuous mode [ 507.638245][T12402] veth1_vlan: entered promiscuous mode [ 507.669629][T12412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.691908][T12412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.733376][T12412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.743993][T12412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.762451][T12412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.771616][T12412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.849521][T12402] veth0_macvtap: entered promiscuous mode [ 507.897831][T12402] veth1_macvtap: entered promiscuous mode [ 508.018653][T12402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.041586][T11811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.062708][T11811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.078054][T12402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.131791][T12402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.151320][T12402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.171509][T12402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.180835][T12402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.200188][T11811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.212973][T11811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.475222][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.483098][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.557482][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.578090][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.002159][T12650] loop8: detected capacity change from 0 to 256 [ 509.028083][T12648] loop4: detected capacity change from 0 to 128 [ 509.043676][T12648] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 509.130703][T12650] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 509.187532][T12648] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 509.201412][T12650] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 509.293748][T12650] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 509.374694][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 509.582216][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 509.627145][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.762063][ T10] usb 1-1: config 0 descriptor?? [ 510.145660][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 510.202209][T11811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.257614][T12657] loop3: detected capacity change from 0 to 65536 [ 510.271308][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 510.344462][ T10] [drm] Initialized udl on minor 2 [ 510.350435][T12657] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 510.394447][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 510.418967][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 510.428564][T12657] XFS (loop3): Ending clean mount [ 510.657273][ T7752] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 510.657684][ T5918] usb 1-1: USB disconnect, device number 8 [ 510.701869][ T7752] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 510.810405][T11811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.061695][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.320974][ T9958] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 511.321011][T11811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.354145][ T5918] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 511.594463][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 511.619850][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.683243][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.730157][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 511.774066][T12687] loop8: detected capacity change from 0 to 256 [ 511.801214][ T5918] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 511.833184][T11811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.869552][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.932533][ T5918] usb 3-1: config 0 descriptor?? [ 512.486099][ T5918] HID 045e:07da: Invalid code 65791 type 1 [ 512.542320][ T5918] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001B/input/input29 [ 512.608467][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.634100][ T5918] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 512.662385][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.694796][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.725084][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.762488][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.183416][ T5918] usb 3-1: USB disconnect, device number 13 [ 513.530241][T11811] bridge_slave_1: left allmulticast mode [ 513.543209][ T971] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 513.544349][T11811] bridge_slave_1: left promiscuous mode [ 513.591939][ T971] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 513.653566][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.678377][T12712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.872292][T11811] bridge_slave_0: left allmulticast mode [ 513.904987][T11811] bridge_slave_0: left promiscuous mode [ 513.954120][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.895513][T11965] Bluetooth: hci0: command tx timeout [ 516.290488][T11811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.323655][T11811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.362501][T11811] bond0 (unregistering): Released all slaves [ 516.472437][T12713] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 516.491864][T12713] syzkaller0: group set to 60929 [ 516.974453][T11965] Bluetooth: hci0: command tx timeout [ 517.011846][T12749] netlink: 548 bytes leftover after parsing attributes in process `syz.8.1613'. [ 517.031475][T12747] loop2: detected capacity change from 0 to 1024 [ 517.060021][T12751] loop3: detected capacity change from 0 to 256 [ 517.101612][T12751] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 517.124602][T12747] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 517.157084][T12751] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 517.222719][T12747] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.1614: Invalid block bitmap block 0 in block_group 0 [ 517.260087][T12751] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 517.291758][T12747] EXT4-fs (loop2): Remounting filesystem read-only [ 517.335413][T12747] Quota error (device loop2): write_blk: dquota write failed [ 517.413036][T12747] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 517.434612][T12742] netlink: 'syz.8.1613': attribute type 29 has an invalid length. [ 517.491736][T12746] netlink: 'syz.8.1613': attribute type 29 has an invalid length. [ 517.505030][T12747] EXT4-fs (loop2): 1 orphan inode deleted [ 517.539321][T12747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.136378][ T8965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.248204][T12779] loop0: detected capacity change from 0 to 1024 [ 518.257670][T12779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.311833][T12779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.415708][T12779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.528653][T12779] EXT4-fs (loop0): shut down requested (1) [ 518.619789][T11811] hsr_slave_0: left promiscuous mode [ 518.682506][T11811] hsr_slave_1: left promiscuous mode [ 518.729057][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.769420][T11811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.903192][T12412] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.930490][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.959722][T11811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.054656][T11965] Bluetooth: hci0: command tx timeout [ 519.170379][T11811] veth1_macvtap: left promiscuous mode [ 519.196388][T11811] veth0_macvtap: left promiscuous mode [ 519.346586][T11811] veth1_vlan: left promiscuous mode [ 519.362186][T11811] veth0_vlan: left promiscuous mode [ 520.293800][ T30] audit: type=1804 audit(1751033708.881:76): pid=12824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1637" name="/newroot/276/file0" dev="tmpfs" ino=1501 res=1 errno=0 [ 521.136500][T11965] Bluetooth: hci0: command tx timeout [ 521.380132][ T30] audit: type=1326 audit(1751033709.981:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12850 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6b8e929 code=0x7ffc0000 [ 521.524443][ T30] audit: type=1326 audit(1751033710.001:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12850 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6b8e929 code=0x7ffc0000 [ 521.674035][ T30] audit: type=1326 audit(1751033710.041:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12850 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7effb6b8e929 code=0x7ffc0000 [ 521.772032][ T30] audit: type=1326 audit(1751033710.041:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12850 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6b8e929 code=0x7ffc0000 [ 521.945728][ T30] audit: type=1326 audit(1751033710.041:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12850 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6b8e929 code=0x7ffc0000 [ 522.091501][ T30] audit: type=1326 audit(1751033710.041:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12850 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7effb6b8e929 code=0x7ffc0000 [ 522.175833][ T30] audit: type=1326 audit(1751033710.041:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12850 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6b8e929 code=0x7ffc0000 [ 522.397656][T12870] block nbd8: shutting down sockets [ 523.528835][T11811] team0 (unregistering): Port device team_slave_1 removed [ 523.668600][ T5918] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 523.695321][T11811] team0 (unregistering): Port device team_slave_0 removed [ 523.770497][T12893] loop2: detected capacity change from 0 to 256 [ 523.860704][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.882348][T12893] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 523.897853][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.944370][ T5918] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 523.947115][T12893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1660'. [ 523.976644][T12893] netlink: 'syz.2.1660': attribute type 6 has an invalid length. [ 523.989674][T12893] netlink: 'syz.2.1660': attribute type 5 has an invalid length. [ 523.993175][ T5918] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 523.999401][T12893] netlink: 'syz.2.1660': attribute type 4 has an invalid length. [ 524.034075][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.076373][ T5918] usb 9-1: config 0 descriptor?? [ 524.492891][ T5918] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 524.540936][ T5918] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 524.786496][ T971] usb 9-1: USB disconnect, device number 23 [ 525.157806][T12692] chnl_net:caif_netlink_parms(): no params data found [ 525.264441][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 525.336209][T12913] Illegal XDP return value 749943808 on prog (id 272) dev syz_tun, expect packet loss! [ 525.402530][T12692] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.411879][T12692] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.419248][T12692] bridge_slave_0: entered allmulticast mode [ 525.427901][T12692] bridge_slave_0: entered promiscuous mode [ 525.430051][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.484261][T12692] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.491569][T12692] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.491846][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.553269][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 525.560788][T12692] bridge_slave_1: entered allmulticast mode [ 525.565822][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.620819][T12692] bridge_slave_1: entered promiscuous mode [ 525.744182][T12692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.778662][T12692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.871155][ T10] usb 5-1: usb_control_msg returned -32 [ 525.889136][ T10] usbtmc 5-1:16.0: can't read capabilities [ 525.914388][ T5918] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 525.941297][T12692] team0: Port device team_slave_0 added [ 525.955494][T12692] team0: Port device team_slave_1 added [ 526.007030][T12692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.014978][T12692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.041453][T12692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.056102][T12692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.063392][T12692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.091516][T12692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.103668][ T5918] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 526.134088][ T5918] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 526.154127][ T5918] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 526.174140][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.202465][T12918] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 526.205859][T12692] hsr_slave_0: entered promiscuous mode [ 526.227865][ T5918] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 526.228852][T12692] hsr_slave_1: entered promiscuous mode [ 526.280005][T12692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.291513][T12692] Cannot create hsr debugfs directory [ 526.461559][ T24] usb 9-1: USB disconnect, device number 24 [ 526.613943][T12926] loop2: detected capacity change from 0 to 512 [ 526.641884][T12926] EXT4-fs: Ignoring removed mblk_io_submit option [ 526.662841][T12926] EXT4-fs: Ignoring removed mblk_io_submit option [ 526.684100][T12926] EXT4-fs: Ignoring removed mblk_io_submit option [ 526.709599][T12926] EXT4-fs (loop2): Test dummy encryption mode enabled [ 526.728529][T12926] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 526.794754][T12926] EXT4-fs (loop2): 1 truncate cleaned up [ 526.844138][T12926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.962511][T12926] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 527.361967][ T8965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.604149][T12933] bond0: entered promiscuous mode [ 527.625285][T12933] bond_slave_0: entered promiscuous mode [ 527.642929][T12933] bond_slave_1: entered promiscuous mode [ 527.654941][T12933] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 527.673103][T12933] bond0: left promiscuous mode [ 527.678657][T12933] bond_slave_0: left promiscuous mode [ 527.704755][T12933] bond_slave_1: left promiscuous mode [ 527.919685][T12692] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 527.966099][T12692] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 527.992875][T12692] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 528.049212][T12692] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 528.076636][ T24] usb 5-1: USB disconnect, device number 6 [ 528.278836][T12951] wg1: entered promiscuous mode [ 528.874440][ T7752] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 528.942138][T12692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.019910][T12692] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.044552][ T7752] usb 1-1: Using ep0 maxpacket: 16 [ 529.081965][T11835] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.087786][ T7752] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 529.090234][T11835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.121876][T11835] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.130721][T11835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.134490][ T7752] usb 1-1: config 0 has no interface number 0 [ 529.185760][T12965] loop3: detected capacity change from 0 to 4096 [ 529.214688][ T7752] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.244052][ T7752] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.283416][ T7752] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 529.334005][ T7752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.410418][ T7752] usb 1-1: config 0 descriptor?? [ 529.449130][T12965] ntfs3(loop3): ino=1a, mi_enum_attr [ 529.455625][T12965] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 530.063678][ T7752] uclogic 0003:28BD:0071.001E: pen parameters not found [ 530.131574][ T7752] uclogic 0003:28BD:0071.001E: interface is invalid, ignoring [ 530.183273][ T6596] bond0: (slave syz_tun): Releasing backup interface [ 530.364207][ T7752] usb 1-1: USB disconnect, device number 9 [ 530.401049][T12692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.561391][T11825] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.802211][T11825] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.843953][T12692] veth0_vlan: entered promiscuous mode [ 530.869355][T12692] veth1_vlan: entered promiscuous mode [ 530.932704][T11825] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.137210][T11825] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.264303][T12692] veth0_macvtap: entered promiscuous mode [ 531.294079][T12692] veth1_macvtap: entered promiscuous mode [ 531.359282][T12692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.412024][T12995] serio: Serial port ptm0 [ 531.434029][T12692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.549928][T12692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.583256][T12692] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.608402][T12692] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.636989][T12692] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.868188][T11825] bridge_slave_1: left allmulticast mode [ 531.873983][T11825] bridge_slave_1: left promiscuous mode [ 531.922921][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.005787][T11825] bridge_slave_0: left allmulticast mode [ 532.011499][T11825] bridge_slave_0: left promiscuous mode [ 532.064955][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.073411][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 532.083913][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 532.085065][T12991] loop0: detected capacity change from 0 to 32768 [ 532.099891][T12991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1696 (12991) [ 532.113294][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 532.116211][T12991] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 532.144604][T12991] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 532.162239][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 532.169926][T12991] BTRFS info (device loop0): using free-space-tree [ 532.181295][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.442295][T12412] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 532.934373][T13027] loop2: detected capacity change from 0 to 40427 [ 533.055160][T13027] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 533.256774][ T8965] syz-executor: attempt to access beyond end of device [ 533.256774][ T8965] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 533.303605][ T8965] CPU: 0 UID: 0 PID: 8965 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 533.303659][ T8965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.303683][ T8965] Call Trace: [ 533.303696][ T8965] [ 533.303709][ T8965] dump_stack_lvl+0x16c/0x1f0 [ 533.303776][ T8965] f2fs_handle_critical_error+0x621/0x9f0 [ 533.303825][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.303871][ T8965] ? f2fs_build_fault_attr+0x53/0x1f0 [ 533.303923][ T8965] f2fs_write_end_io+0x785/0xc20 [ 533.303978][ T8965] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 533.304041][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.304099][ T8965] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 533.304148][ T8965] bio_endio+0x70d/0x850 [ 533.304184][ T8965] submit_bio_noacct+0x56d/0x1eb0 [ 533.304231][ T8965] __submit_merged_bio+0x33c/0x770 [ 533.304281][ T8965] __submit_merged_write_cond+0x319/0x3f0 [ 533.304348][ T8965] f2fs_write_cache_pages+0x2067/0x2570 [ 533.304442][ T8965] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 533.304510][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.304553][ T8965] ? __kasan_check_byte+0x13/0x50 [ 533.304601][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.304650][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.304690][ T8965] ? rcu_is_watching+0x12/0xc0 [ 533.304726][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.304762][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.304813][ T8965] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 533.304913][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.304945][ T8965] ? add_lock_to_list+0x9d/0x130 [ 533.304994][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.305036][ T8965] f2fs_write_data_pages+0x4ad/0xd90 [ 533.305088][ T8965] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.305129][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.305185][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.305239][ T8965] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.305288][ T8965] do_writepages+0x27a/0x600 [ 533.305339][ T8965] ? __pfx_do_writepages+0x10/0x10 [ 533.305382][ T8965] ? do_raw_spin_unlock+0x172/0x230 [ 533.305413][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.305446][ T8965] ? _raw_spin_unlock+0x28/0x50 [ 533.305490][ T8965] filemap_fdatawrite_wbc+0x104/0x160 [ 533.305535][ T8965] ? __pfx_stack_trace_save+0x10/0x10 [ 533.305575][ T8965] __filemap_fdatawrite_range+0xb2/0xf0 [ 533.305610][ T8965] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 533.305643][ T8965] ? check_path.constprop.0+0x24/0x50 [ 533.305734][ T8965] ? find_held_lock+0x2b/0x80 [ 533.305770][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.305804][ T8965] ? do_raw_spin_unlock+0x172/0x230 [ 533.305835][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.305875][ T8965] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 533.305939][ T8965] block_operations+0x2a3/0xfd0 [ 533.305993][ T8965] ? __pfx___schedule+0x10/0x10 [ 533.306037][ T8965] ? __pfx_block_operations+0x10/0x10 [ 533.306134][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.306167][ T8965] ? down_write+0x14d/0x200 [ 533.306195][ T8965] ? __pfx_down_write+0x10/0x10 [ 533.306226][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.306259][ T8965] ? rcu_is_watching+0x12/0xc0 [ 533.306299][ T8965] f2fs_write_checkpoint+0x2b8/0x4c60 [ 533.306352][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.306385][ T8965] ? kfree+0x2b4/0x4d0 [ 533.306427][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.306464][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.306497][ T8965] ? rcu_is_watching+0x12/0xc0 [ 533.306531][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.306564][ T8965] ? kthread_stop+0x273/0x650 [ 533.306614][ T8965] kill_f2fs_super+0x3c2/0x470 [ 533.306660][ T8965] ? __pfx_kill_f2fs_super+0x10/0x10 [ 533.306704][ T8965] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.306765][ T8965] deactivate_locked_super+0xc1/0x1a0 [ 533.306797][ T8965] deactivate_super+0xde/0x100 [ 533.306827][ T8965] cleanup_mnt+0x225/0x450 [ 533.306862][ T8965] task_work_run+0x150/0x240 [ 533.306894][ T8965] ? __pfx_task_work_run+0x10/0x10 [ 533.306920][ T8965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.306957][ T8965] ? __pfx___x64_sys_umount+0x10/0x10 [ 533.307005][ T8965] exit_to_user_mode_loop+0xeb/0x110 [ 533.307038][ T8965] do_syscall_64+0x3f6/0x4c0 [ 533.307068][ T8965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.307096][ T8965] RIP: 0033:0x7fa5d158fc57 [ 533.307119][ T8965] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 533.307146][ T8965] RSP: 002b:00007fff9c301398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 533.307173][ T8965] RAX: 0000000000000000 RBX: 00007fa5d1610925 RCX: 00007fa5d158fc57 [ 533.307191][ T8965] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9c301450 [ 533.307208][ T8965] RBP: 00007fff9c301450 R08: 0000000000000000 R09: 0000000000000000 [ 533.307225][ T8965] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9c3024e0 [ 533.307243][ T8965] R13: 00007fa5d1610925 R14: 0000000000082296 R15: 00007fff9c302520 [ 533.307285][ T8965] [ 533.832851][ T8965] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 533.910589][T11825] team0: Port device geneve0 removed [ 534.217712][T11825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.237463][T11825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.256170][T11825] bond0 (unregistering): Released all slaves [ 534.265229][T11965] Bluetooth: hci2: command tx timeout [ 534.321065][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 534.450463][T11825] bond1 (unregistering): Released all slaves [ 534.708258][T13043] team0: Port device team_slave_0 removed [ 535.032726][T11819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.054234][T11819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.206850][ T6016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.236397][ T6016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.300561][T13062] input: syz0 as /devices/virtual/input/input31 [ 535.799206][T13003] chnl_net:caif_netlink_parms(): no params data found [ 536.334395][T11965] Bluetooth: hci2: command tx timeout [ 536.697065][T13003] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.715975][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.723324][T13003] bridge_slave_0: entered allmulticast mode [ 536.745225][T13003] bridge_slave_0: entered promiscuous mode [ 536.802219][T13003] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.810282][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.818320][T13003] bridge_slave_1: entered allmulticast mode [ 536.826882][T13003] bridge_slave_1: entered promiscuous mode [ 537.003475][T13003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.105451][T11825] hsr_slave_0: left promiscuous mode [ 537.125573][T11825] hsr_slave_1: left promiscuous mode [ 537.133735][T11825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.145599][T11825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.170561][T11825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.205173][T11825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.262397][T11825] veth1_macvtap: left promiscuous mode [ 537.274380][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 537.291940][T11825] veth0_macvtap: left promiscuous mode [ 537.325291][T11825] veth1_vlan: left promiscuous mode [ 537.339812][T11825] veth0_vlan: left promiscuous mode [ 537.393062][T13093] loop0: detected capacity change from 0 to 256 [ 537.434607][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 537.456220][ T24] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 537.465866][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.487573][ T24] usb 5-1: config 0 descriptor?? [ 537.631637][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 537.645346][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 537.671637][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 537.694483][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 537.705349][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 538.190359][T13106] loop0: detected capacity change from 0 to 1764 [ 538.205032][T13106] iso9660: Unknown parameter 'overriderockper½N&Àដ‚m' [ 538.383929][T11825] team0 (unregistering): Port device team_slave_1 removed [ 538.415281][T11965] Bluetooth: hci2: command tx timeout [ 538.435410][T11825] team0 (unregistering): Port device team_slave_0 removed [ 538.741294][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 538.751476][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 538.784802][ T24] asix 5-1:0.0: probe with driver asix failed with error -71 [ 538.810187][ T24] usb 5-1: USB disconnect, device number 7 [ 538.998885][T13003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.011834][T13100] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 539.260490][T13003] team0: Port device team_slave_0 added [ 539.306934][T13003] team0: Port device team_slave_1 added [ 539.489182][T13003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.515909][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.570248][T13003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.603044][T13003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.614210][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.656042][T13003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.775003][T11965] Bluetooth: hci0: command tx timeout [ 540.013448][T13003] hsr_slave_0: entered promiscuous mode [ 540.029344][T13132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.036623][T13132] IPv6: NLM_F_CREATE should be set when creating new route [ 540.065650][T13003] hsr_slave_1: entered promiscuous mode [ 540.072094][T13003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.089170][T13003] Cannot create hsr debugfs directory [ 540.253518][T13136] loop0: detected capacity change from 0 to 1024 [ 540.293247][T13136] hfsplus: bad catalog entry used to create inode [ 540.319188][T13136] hfsplus: failed to load root directory [ 540.500798][T11965] Bluetooth: hci2: command tx timeout [ 540.809761][T11825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.088174][T13155] loop4: detected capacity change from 0 to 64 [ 541.152460][T11825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.221571][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 541.221595][ T30] audit: type=1800 audit(1751033985.821:97): pid=13155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1744" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 541.481525][T13162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 541.516635][T13162] netlink: 'syz.0.1746': attribute type 7 has an invalid length. [ 541.531856][T13162] netlink: 'syz.0.1746': attribute type 8 has an invalid length. [ 541.544608][T13166] loop3: detected capacity change from 0 to 512 [ 541.552870][T11825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.563566][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 541.586644][T13166] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 541.601986][T13166] EXT4-fs (loop3): 1 truncate cleaned up [ 541.623115][T13166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.701333][T13166] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1747'. [ 541.873356][T11965] Bluetooth: hci0: command tx timeout [ 541.895590][T11825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.913454][ T9958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.041765][T13173] loop0: detected capacity change from 0 to 8192 [ 542.228116][ T30] audit: type=1326 audit(1751033986.831:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13177 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343078e929 code=0x7ffc0000 [ 542.288954][ T30] audit: type=1326 audit(1751033986.831:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13177 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343078e929 code=0x7ffc0000 [ 542.314808][ T30] audit: type=1326 audit(1751033986.831:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13177 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f343078e929 code=0x7ffc0000 [ 542.404631][ T30] audit: type=1326 audit(1751033986.831:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13177 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343078e929 code=0x7ffc0000 [ 542.488326][ T30] audit: type=1326 audit(1751033986.841:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13177 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343078e929 code=0x7ffc0000 [ 542.737016][T13103] chnl_net:caif_netlink_parms(): no params data found [ 542.785035][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 542.803887][T11825] bridge_slave_1: left allmulticast mode [ 542.809898][T11825] bridge_slave_1: left promiscuous mode [ 542.816576][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.878176][T11825] bridge_slave_0: left allmulticast mode [ 542.891381][T11825] bridge_slave_0: left promiscuous mode [ 542.900727][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.984408][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 542.991998][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 543.010727][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 543.027638][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 543.062528][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 543.093412][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.123587][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 543.144360][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.392614][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 543.398309][ T10] usbtmc 3-1:16.0: can't read capabilities [ 543.599290][ T10] usb 3-1: USB disconnect, device number 14 [ 543.646830][T13196] loop4: detected capacity change from 0 to 32768 [ 543.729302][T13196] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 543.741844][T11825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.766543][T11825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.779616][T11825] bond0 (unregistering): Released all slaves [ 543.889704][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 543.934461][T11965] Bluetooth: hci0: command tx timeout [ 544.003339][T10060] ocfs2: Unmounting device (7,4) on (node local) [ 544.756593][T13103] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.768844][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.786031][T13103] bridge_slave_0: entered allmulticast mode [ 544.808654][T13103] bridge_slave_0: entered promiscuous mode [ 544.831225][T13003] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 544.901521][T13103] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.923169][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.948235][T13103] bridge_slave_1: entered allmulticast mode [ 544.957838][T13219] loop0: detected capacity change from 0 to 64 [ 544.986665][T13103] bridge_slave_1: entered promiscuous mode [ 544.993730][T13003] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 545.040335][T11825] hsr_slave_0: left promiscuous mode [ 545.054877][T11825] hsr_slave_1: left promiscuous mode [ 545.067936][T11825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.114833][T11825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.135845][T11825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.163682][T11825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.255609][T11825] veth1_macvtap: left promiscuous mode [ 545.271415][T11825] veth0_macvtap: left promiscuous mode [ 545.284608][T11825] veth1_vlan: left promiscuous mode [ 545.290200][T11825] veth0_vlan: left promiscuous mode [ 546.024848][T11965] Bluetooth: hci0: command tx timeout [ 546.433411][T13244] loop4: detected capacity change from 0 to 4096 [ 546.547302][T13249] loop2: detected capacity change from 0 to 2048 [ 546.598729][T13249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.807211][T11825] team0 (unregistering): Port device team_slave_1 removed [ 546.819679][ T8965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.951887][T11825] team0 (unregistering): Port device team_slave_0 removed [ 547.025548][T13257] loop4: detected capacity change from 0 to 4096 [ 547.049856][T13257] NILFS (loop4): invalid segment: Checksum error in segment payload [ 547.063401][T13257] NILFS (loop4): trying rollback from an earlier position [ 547.120189][T13257] NILFS (loop4): recovery complete [ 547.145819][T13260] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 547.201167][T13257] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 547.212722][T13257] overlayfs: failed to get uuid (/file2, err=-95); falling back to uuid=null. [ 547.740185][T13003] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 547.759802][T13003] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 547.921139][T13103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.980719][T13103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.157315][T13103] team0: Port device team_slave_0 added [ 548.180529][T13103] team0: Port device team_slave_1 added [ 548.361528][T13103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.379003][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.465959][T13103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.497211][T13103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.513253][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.560692][T13103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.805461][T13103] hsr_slave_0: entered promiscuous mode [ 548.812256][T13103] hsr_slave_1: entered promiscuous mode [ 548.837736][T13103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.840713][T13273] loop2: detected capacity change from 0 to 32768 [ 548.854471][T13103] Cannot create hsr debugfs directory [ 548.859183][T13271] loop0: detected capacity change from 0 to 32768 [ 548.872333][T13271] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1780 (13271) [ 548.935755][T13271] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 548.974766][T13271] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 548.984399][T13271] BTRFS info (device loop0): using free-space-tree [ 549.098936][T13273] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 549.098976][T13273] allowing incompatible features above 0.0: (unknown version) [ 549.099000][T13273] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 549.186859][T13273] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 549.211451][T13273] bcachefs (loop2): initializing new filesystem [ 549.243042][T13273] bcachefs (loop2): going read-write [ 549.293761][T13273] bcachefs (loop2): marking superblocks [ 549.320452][T12412] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 549.415462][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 549.430626][T13003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.549726][T13273] bcachefs (loop2): initializing freespace [ 549.556417][T13003] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.607647][T13273] bcachefs (loop2): done initializing freespace [ 549.618889][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.647851][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 549.658515][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.668657][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.683519][T13273] bcachefs (loop2): reading snapshots table [ 549.685296][T13307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 549.702328][T11819] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.708700][T13273] bcachefs (loop2): reading snapshots done [ 549.709662][T11819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.771754][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.827440][T13273] bcachefs (loop2): loop2: Superblock write was silently dropped! (seq 0 expected 42) [ 549.852428][T13273] bcachefs (loop2): done starting filesystem [ 549.909629][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.916920][T11811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.936177][ T30] audit: type=1800 audit(1751033994.531:103): pid=13273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1781" name="file1" dev="loop2" ino=4098 res=0 errno=0 [ 550.062220][ T10] usb 4-1: USB disconnect, device number 10 [ 550.154242][ T8965] bcachefs (loop2): shutting down [ 550.214451][ T8965] bcachefs (loop2): going read-only [ 550.219858][ T8965] bcachefs (loop2): finished waiting for writes to stop [ 550.243696][T13003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 550.270217][T13003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.289054][ T8965] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 550.363701][ T8965] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 550.419319][ T8965] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 550.444828][ T8965] bcachefs (loop2): marking filesystem clean [ 550.522579][ T8965] bcachefs (loop2): shutdown complete [ 550.644972][ T6005] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 550.721087][T13103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 550.737895][T13103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 550.761818][T13103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 550.778841][T13103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 550.831177][ T6005] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 550.882030][ T6005] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.917015][ T6005] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.923706][ T6005] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 550.975290][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.009537][ T6005] usb 5-1: config 0 descriptor?? [ 551.197694][T13003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.241264][ T6005] usbhid 5-1:0.0: can't add hid device: -71 [ 551.250809][ T6005] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 551.264183][T13103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.281345][ T6005] usb 5-1: USB disconnect, device number 8 [ 551.347328][T13103] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.409407][T11835] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.416710][T11835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.508479][T11835] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.515778][T11835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.146708][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 552.193263][T13359] IPVS: Error joining to the multicast group [ 552.275765][T13003] veth0_vlan: entered promiscuous mode [ 552.335968][T13003] veth1_vlan: entered promiscuous mode [ 552.447060][T13003] veth0_macvtap: entered promiscuous mode [ 552.492449][T13003] veth1_macvtap: entered promiscuous mode [ 552.581282][T13103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.592505][T13003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.685442][T13003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.694384][ T6005] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 552.743989][T13003] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.763182][T13003] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.784770][T13003] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.793565][T13003] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.855089][ T6005] usb 5-1: Using ep0 maxpacket: 32 [ 552.863847][ T6005] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.895069][ T6005] usb 5-1: config 0 interface 0 has no altsetting 0 [ 552.922194][ T6005] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 552.959863][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.022915][T13103] veth0_vlan: entered promiscuous mode [ 553.035914][ T6005] usb 5-1: config 0 descriptor?? [ 553.167936][T13103] veth1_vlan: entered promiscuous mode [ 553.333060][T11825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.371596][T11825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.472895][ T6005] uclogic 0003:5543:0781.001F: ignoring exceeding usage max [ 553.516716][ T6005] uclogic 0003:5543:0781.001F: unbalanced collection at end of report description [ 553.535401][ T6005] uclogic 0003:5543:0781.001F: parse failed [ 553.549166][ T6005] uclogic 0003:5543:0781.001F: probe with driver uclogic failed with error -22 [ 553.600402][T11819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.647074][T11819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.658962][T13381] loop2: detected capacity change from 0 to 16 [ 553.699397][T13103] veth0_macvtap: entered promiscuous mode [ 553.729364][T13381] erofs (device loop2): mounted with root inode @ nid 36. [ 553.734521][T13103] veth1_macvtap: entered promiscuous mode [ 553.803069][ T24] usb 5-1: USB disconnect, device number 9 [ 553.836214][T13381] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 553.836724][T13103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.893606][T13103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.921606][T13103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.961265][T13103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.995705][T13103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.034568][T13103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.214398][ T30] audit: type=1800 audit(1751033998.811:104): pid=13389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1809" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 554.511243][T11813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.563106][T11813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.720746][T11835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.770035][T11835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.954021][T13403] loop9: detected capacity change from 0 to 16 [ 555.294438][T13403] erofs (device loop9): bogus i_mode (0) @ nid 58320 [ 555.609324][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052237000: rx timeout, send abort [ 555.620368][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805372c800: rx timeout, send abort [ 555.628967][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888052237000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 555.644441][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805372c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 555.822865][T11811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.206699][T11811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.339954][T11811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.443900][T11811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.615660][T11811] bridge_slave_1: left allmulticast mode [ 556.621448][T11811] bridge_slave_1: left promiscuous mode [ 556.630701][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.640928][T11811] bridge_slave_0: left allmulticast mode [ 556.647170][T11811] bridge_slave_0: left promiscuous mode [ 556.652968][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.963445][T13432] loop4: detected capacity change from 0 to 128 [ 557.065905][T13432] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 557.194169][T11823] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 557.255496][ T6005] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 557.361878][T13434] "syz.2.1826" (13434) uses obsolete ecb(arc4) skcipher [ 557.385035][T13440] loop9: detected capacity change from 0 to 2048 [ 557.465984][ T6005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.481582][ T6005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.505227][ T6005] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 557.521446][T13440] EXT4-fs (loop9): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.531411][ T6005] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.543592][ T6005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.578493][ T6005] usb 4-1: config 0 descriptor?? [ 557.854547][ T971] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 557.881182][T11965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 557.891299][T11965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 557.905533][T11965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 557.912319][T13457] ref_ctr_offset mismatch. inode: 0x135 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 557.939621][T11965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 557.957623][T11965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 558.035125][ T971] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 558.046336][ T971] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.056823][ T6005] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 558.076550][ T971] usb 10-1: config 0 descriptor?? [ 558.095117][ T971] cp210x 10-1:0.0: cp210x converter detected [ 558.223766][T11811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.253471][T11811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.281763][T11811] bond0 (unregistering): Released all slaves [ 558.308266][ T5919] usb 4-1: USB disconnect, device number 11 [ 558.370060][T13469] loop0: detected capacity change from 0 to 512 [ 558.399428][T13469] EXT4-fs (loop0): 1 truncate cleaned up [ 558.407865][T13469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.480578][T12412] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.503104][ T971] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 558.542254][ T971] usb 10-1: cp210x converter now attached to ttyUSB0 [ 558.658109][T13449] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 558.729125][ T971] usb 10-1: USB disconnect, device number 8 [ 558.740101][ T971] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 559.328896][ T971] cp210x 10-1:0.0: device disconnected [ 559.509042][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1838'. [ 559.532491][T13003] EXT4-fs (loop9): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 559.673481][T13486] loop2: detected capacity change from 0 to 1764 [ 559.713669][T13486] iso9660: Bad value for 'block' [ 559.879079][T11811] hsr_slave_0: left promiscuous mode [ 559.893529][T13492] loop0: detected capacity change from 0 to 512 [ 559.907132][T11811] hsr_slave_1: left promiscuous mode [ 559.941401][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.950322][T13492] EXT4-fs: Ignoring removed oldalloc option [ 559.957255][T11811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.980671][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.988280][T13492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 560.000323][T11811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.014609][T11965] Bluetooth: hci0: command tx timeout [ 560.028226][T13492] EXT4-fs (loop0): 1 truncate cleaned up [ 560.045703][T13492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.046358][T11965] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 560.105572][T11811] veth1_macvtap: left promiscuous mode [ 560.121440][T11811] veth0_macvtap: left promiscuous mode [ 560.136177][T11811] veth1_vlan: left promiscuous mode [ 560.149803][T11811] veth0_vlan: left promiscuous mode [ 560.158182][T12412] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.434599][ T5919] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 560.636800][ T5919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.680059][ T5919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.702972][ T5919] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 560.736222][ T5919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.749658][ T5919] usb 10-1: config 0 descriptor?? [ 561.120780][T11811] team0 (unregistering): Port device team_slave_1 removed [ 561.170847][T11811] team0 (unregistering): Port device team_slave_0 removed [ 561.193163][ T5919] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 561.202265][ T5919] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 561.219756][ T5919] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 561.229207][ T5919] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 561.236463][ T5919] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 561.261236][ T5919] lenovo 0003:17EF:6047.0021: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.9-1/input0 [ 562.094597][T11965] Bluetooth: hci0: command tx timeout [ 562.174710][T13516] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1850'. [ 562.220541][ T5919] usb 10-1: USB disconnect, device number 9 [ 562.449702][T13458] chnl_net:caif_netlink_parms(): no params data found [ 562.724911][ T5919] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 562.828504][T13458] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.857093][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.867249][T13539] [ 562.869611][T13539] ===================================================== [ 562.876569][T13539] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 562.876937][T13458] bridge_slave_0: entered allmulticast mode [ 562.884020][T13539] 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 Not tainted [ 562.884045][T13539] ----------------------------------------------------- [ 562.884059][T13539] syz.9.1857/13539 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 562.901912][T13458] bridge_slave_0: entered promiscuous mode [ 562.903973][T13539] ffff88803009d360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 562.926399][T13539] [ 562.926399][T13539] and this task is already holding: [ 562.933806][T13539] ffff8880500f8028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 562.944025][T13539] which would create a new lock dependency: [ 562.949931][T13539] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 562.958100][T13539] [ 562.958100][T13539] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 562.967564][T13539] (&dev->event_lock#2){..-.}-{3:3} [ 562.967627][T13539] [ 562.967627][T13539] ... which became SOFTIRQ-irq-safe at: [ 562.980665][T13539] lock_acquire+0x179/0x350 [ 562.985302][T13539] _raw_spin_lock_irqsave+0x3a/0x60 [ 562.990632][T13539] input_event+0x70/0xb0 [ 562.995006][T13539] hidinput_report_event+0xb2/0x100 [ 563.000330][T13539] hid_report_raw_event+0x268/0x1290 [ 563.005748][T13539] __hid_input_report.constprop.0+0x33f/0x450 [ 563.011984][T13539] hid_irq_in+0x35e/0x870 [ 563.016423][T13539] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 563.021917][T13539] usb_hcd_giveback_urb+0x39b/0x450 [ 563.027235][T13539] dummy_timer+0x180e/0x3a20 [ 563.031933][T13539] __hrtimer_run_queues+0x202/0xad0 [ 563.037245][T13539] hrtimer_run_softirq+0x17d/0x350 [ 563.042468][T13539] handle_softirqs+0x219/0x8e0 [ 563.047343][T13539] __irq_exit_rcu+0x109/0x170 [ 563.052129][T13539] irq_exit_rcu+0x9/0x30 [ 563.056482][T13539] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 563.062240][T13539] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.068339][T13539] current_check_refer_path+0x2/0xf40 [ 563.073823][T13539] security_path_rename+0x160/0x3c0 [ 563.079131][T13539] do_renameat2+0x735/0xc90 [ 563.083748][T13539] __x64_sys_rename+0x7d/0xa0 [ 563.088982][T13539] do_syscall_64+0xcd/0x4c0 [ 563.093606][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.099608][T13539] [ 563.099608][T13539] to a SOFTIRQ-irq-unsafe lock: [ 563.106634][T13539] (tasklist_lock){.+.+}-{3:3} [ 563.106684][T13539] [ 563.106684][T13539] ... which became SOFTIRQ-irq-unsafe at: [ 563.119361][T13539] ... [ 563.119374][T13539] lock_acquire+0x179/0x350 [ 563.126587][T13539] _raw_read_lock+0x5f/0x70 [ 563.131215][T13539] __do_wait+0x105/0x890 [ 563.135579][T13539] do_wait+0x21e/0x5a0 [ 563.139774][T13539] kernel_wait+0x9f/0x160 [ 563.144224][T13539] call_usermodehelper_exec_work+0xf1/0x170 [ 563.150236][T13539] process_one_work+0x9cf/0x1b70 [ 563.155374][T13539] worker_thread+0x6c8/0xf10 [ 563.160072][T13539] kthread+0x3c5/0x780 [ 563.164244][T13539] ret_from_fork+0x5d7/0x6f0 [ 563.168971][T13539] ret_from_fork_asm+0x1a/0x30 [ 563.173845][T13539] [ 563.173845][T13539] other info that might help us debug this: [ 563.173845][T13539] [ 563.184251][T13539] Chain exists of: [ 563.184251][T13539] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 563.184251][T13539] [ 563.197906][T13539] Possible interrupt unsafe locking scenario: [ 563.197906][T13539] [ 563.206406][T13539] CPU0 CPU1 [ 563.211781][T13539] ---- ---- [ 563.217149][T13539] lock(tasklist_lock); [ 563.221412][T13539] local_irq_disable(); [ 563.228172][T13539] lock(&dev->event_lock#2); [ 563.235404][T13539] lock(&client->buffer_lock); [ 563.242800][T13539] [ 563.246469][T13539] lock(&dev->event_lock#2); [ 563.251461][T13539] [ 563.251461][T13539] *** DEADLOCK *** [ 563.251461][T13539] [ 563.259626][T13539] 7 locks held by syz.9.1857/13539: [ 563.264927][T13539] #0: ffff88802a927118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 563.274151][T13539] #1: ffff88802a70f230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 563.284349][T13539] #2: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x390 [ 563.294092][T13539] #3: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x890 [ 563.303749][T13539] #4: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 563.312968][T13539] #5: ffff8880500f8028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 563.323313][T13539] #6: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 563.332442][T13539] [ 563.332442][T13539] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 563.342853][T13539] -> (&dev->event_lock#2){..-.}-{3:3} { [ 563.348556][T13539] IN-SOFTIRQ-W at: [ 563.352642][T13539] lock_acquire+0x179/0x350 [ 563.359026][T13539] _raw_spin_lock_irqsave+0x3a/0x60 [ 563.366092][T13539] input_event+0x70/0xb0 [ 563.372365][T13539] hidinput_report_event+0xb2/0x100 [ 563.379427][T13539] hid_report_raw_event+0x268/0x1290 [ 563.386564][T13539] __hid_input_report.constprop.0+0x33f/0x450 [ 563.394500][T13539] hid_irq_in+0x35e/0x870 [ 563.400668][T13539] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 563.407900][T13539] usb_hcd_giveback_urb+0x39b/0x450 [ 563.414960][T13539] dummy_timer+0x180e/0x3a20 [ 563.421387][T13539] __hrtimer_run_queues+0x202/0xad0 [ 563.428492][T13539] hrtimer_run_softirq+0x17d/0x350 [ 563.435469][T13539] handle_softirqs+0x219/0x8e0 [ 563.442113][T13539] __irq_exit_rcu+0x109/0x170 [ 563.448654][T13539] irq_exit_rcu+0x9/0x30 [ 563.454759][T13539] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 563.462323][T13539] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.470266][T13539] current_check_refer_path+0x2/0xf40 [ 563.477575][T13539] security_path_rename+0x160/0x3c0 [ 563.484626][T13539] do_renameat2+0x735/0xc90 [ 563.491069][T13539] __x64_sys_rename+0x7d/0xa0 [ 563.497608][T13539] do_syscall_64+0xcd/0x4c0 [ 563.503948][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.511683][T13539] INITIAL USE at: [ 563.515720][T13539] lock_acquire+0x179/0x350 [ 563.522020][T13539] _raw_spin_lock_irqsave+0x3a/0x60 [ 563.528990][T13539] input_inject_event+0x9f/0x390 [ 563.535695][T13539] led_set_brightness+0x217/0x290 [ 563.542473][T13539] kbd_led_trigger_activate+0xcb/0x110 [ 563.549701][T13539] led_trigger_set+0x59a/0xc50 [ 563.556232][T13539] led_trigger_set_default+0x1e0/0x2e0 [ 563.563481][T13539] led_classdev_register_ext+0x7b8/0xa10 [ 563.570968][T13539] input_leds_connect+0x552/0x8e0 [ 563.578019][T13539] input_attach_handler.isra.0+0x184/0x260 [ 563.585681][T13539] input_register_device+0xa84/0x1130 [ 563.592818][T13539] atkbd_connect+0x5da/0xa20 [ 563.599180][T13539] serio_driver_probe+0x77/0xb0 [ 563.605797][T13539] really_probe+0x241/0xa90 [ 563.612069][T13539] __driver_probe_device+0x1de/0x440 [ 563.619127][T13539] driver_probe_device+0x4c/0x1b0 [ 563.625927][T13539] __driver_attach+0x283/0x580 [ 563.632648][T13539] bus_for_each_dev+0x13e/0x1d0 [ 563.639294][T13539] serio_handle_event+0x247/0xa50 [ 563.646174][T13539] process_one_work+0x9cf/0x1b70 [ 563.652957][T13539] worker_thread+0x6c8/0xf10 [ 563.659502][T13539] kthread+0x3c5/0x780 [ 563.665392][T13539] ret_from_fork+0x5d7/0x6f0 [ 563.671777][T13539] ret_from_fork_asm+0x1a/0x30 [ 563.678323][T13539] } [ 563.681040][T13539] ... key at: [] __key.7+0x0/0x40 [ 563.688309][T13539] -> (&client->buffer_lock){....}-{3:3} { [ 563.694127][T13539] INITIAL USE at: [ 563.698042][T13539] lock_acquire+0x179/0x350 [ 563.704157][T13539] _raw_spin_lock+0x2e/0x40 [ 563.710265][T13539] evdev_pass_values+0x10e/0x9b0 [ 563.716888][T13539] evdev_events+0x1bb/0x390 [ 563.722992][T13539] input_pass_values+0x6c7/0x890 [ 563.731333][T13539] input_handle_event+0xf00/0x14d0 [ 563.739408][T13539] input_inject_event+0x1cd/0x390 [ 563.747659][T13539] evdev_write+0x457/0x750 [ 563.754739][T13539] vfs_write+0x2a0/0x1150 [ 563.761640][T13539] ksys_write+0x1f8/0x250 [ 563.768110][T13539] do_syscall_64+0xcd/0x4c0 [ 563.774428][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.781947][T13539] } [ 563.784635][T13539] ... key at: [] __key.1+0x0/0x40 [ 563.791794][T13539] ... acquired at: [ 563.795606][T13539] _raw_spin_lock+0x2e/0x40 [ 563.800326][T13539] evdev_pass_values+0x10e/0x9b0 [ 563.805469][T13539] evdev_events+0x1bb/0x390 [ 563.810185][T13539] input_pass_values+0x6c7/0x890 [ 563.815340][T13539] input_handle_event+0xf00/0x14d0 [ 563.820664][T13539] input_inject_event+0x1cd/0x390 [ 563.825930][T13539] evdev_write+0x457/0x750 [ 563.830552][T13539] vfs_write+0x2a0/0x1150 [ 563.835075][T13539] ksys_write+0x1f8/0x250 [ 563.839598][T13539] do_syscall_64+0xcd/0x4c0 [ 563.844289][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.850380][T13539] [ 563.852704][T13539] [ 563.852704][T13539] the dependencies between the lock to be acquired [ 563.852720][T13539] and SOFTIRQ-irq-unsafe lock: [ 563.866244][T13539] -> (tasklist_lock){.+.+}-{3:3} { [ 563.871585][T13539] HARDIRQ-ON-R at: [ 563.875756][T13539] lock_acquire+0x179/0x350 [ 563.882352][T13539] _raw_read_lock+0x5f/0x70 [ 563.888898][T13539] __do_wait+0x105/0x890 [ 563.895197][T13539] do_wait+0x21e/0x5a0 [ 563.901299][T13539] kernel_wait+0x9f/0x160 [ 563.907667][T13539] call_usermodehelper_exec_work+0xf1/0x170 [ 563.915676][T13539] process_one_work+0x9cf/0x1b70 [ 563.922817][T13539] worker_thread+0x6c8/0xf10 [ 563.929456][T13539] kthread+0x3c5/0x780 [ 563.935700][T13539] ret_from_fork+0x5d7/0x6f0 [ 563.942642][T13539] ret_from_fork_asm+0x1a/0x30 [ 563.949811][T13539] SOFTIRQ-ON-R at: [ 563.954095][T13539] lock_acquire+0x179/0x350 [ 563.960819][T13539] _raw_read_lock+0x5f/0x70 [ 563.967626][T13539] __do_wait+0x105/0x890 [ 563.974040][T13539] do_wait+0x21e/0x5a0 [ 563.980236][T13539] kernel_wait+0x9f/0x160 [ 563.987231][T13539] call_usermodehelper_exec_work+0xf1/0x170 [ 563.995243][T13539] process_one_work+0x9cf/0x1b70 [ 564.002304][T13539] worker_thread+0x6c8/0xf10 [ 564.008912][T13539] kthread+0x3c5/0x780 [ 564.015020][T13539] ret_from_fork+0x5d7/0x6f0 [ 564.021737][T13539] ret_from_fork_asm+0x1a/0x30 [ 564.028619][T13539] INITIAL USE at: [ 564.032701][T13539] lock_acquire+0x179/0x350 [ 564.039230][T13539] _raw_write_lock_irq+0x36/0x50 [ 564.046236][T13539] copy_process+0x4caf/0x76a0 [ 564.052946][T13539] kernel_clone+0xfc/0x960 [ 564.059299][T13539] user_mode_thread+0xc7/0x110 [ 564.066000][T13539] rest_init+0x23/0x2b0 [ 564.072089][T13539] start_kernel+0x3ee/0x4d0 [ 564.078530][T13539] x86_64_start_reservations+0x18/0x30 [ 564.085928][T13539] x86_64_start_kernel+0x130/0x190 [ 564.092977][T13539] common_startup_64+0x13e/0x148 [ 564.099847][T13539] INITIAL READ USE at: [ 564.104360][T13539] lock_acquire+0x179/0x350 [ 564.111247][T13539] _raw_read_lock+0x5f/0x70 [ 564.118130][T13539] __do_wait+0x105/0x890 [ 564.124759][T13539] do_wait+0x21e/0x5a0 [ 564.131216][T13539] kernel_wait+0x9f/0x160 [ 564.138017][T13539] call_usermodehelper_exec_work+0xf1/0x170 [ 564.146546][T13539] process_one_work+0x9cf/0x1b70 [ 564.154286][T13539] worker_thread+0x6c8/0xf10 [ 564.161348][T13539] kthread+0x3c5/0x780 [ 564.168237][T13539] ret_from_fork+0x5d7/0x6f0 [ 564.175214][T13539] ret_from_fork_asm+0x1a/0x30 [ 564.182362][T13539] } [ 564.185037][T13539] ... key at: [] tasklist_lock+0x18/0x40 [ 564.193152][T13539] ... acquired at: [ 564.197156][T13539] _raw_read_lock+0x5f/0x70 [ 564.201956][T13539] send_sigurg+0xed/0xc80 [ 564.206654][T13539] sk_send_sigurg+0x76/0x360 [ 564.211508][T13539] unix_stream_sendmsg+0xeb3/0x11d0 [ 564.217016][T13539] ____sys_sendmsg+0xa98/0xc70 [ 564.222074][T13539] ___sys_sendmsg+0x134/0x1d0 [ 564.227011][T13539] __sys_sendmmsg+0x200/0x420 [ 564.232021][T13539] __x64_sys_sendmmsg+0x9c/0x100 [ 564.237172][T13539] do_syscall_64+0xcd/0x4c0 [ 564.241869][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.247980][T13539] [ 564.250391][T13539] -> (&f_owner->lock){....}-{3:3} { [ 564.255733][T13539] INITIAL USE at: [ 564.259729][T13539] lock_acquire+0x179/0x350 [ 564.266015][T13539] _raw_write_lock_irq+0x36/0x50 [ 564.272729][T13539] __f_setown+0x61/0x3c0 [ 564.278921][T13539] generic_setlease+0xef2/0x1300 [ 564.285617][T13539] kernel_setlease+0x106/0x140 [ 564.292134][T13539] vfs_setlease+0x258/0x2d0 [ 564.298480][T13539] fcntl_setlease+0x3ed/0x5a0 [ 564.304916][T13539] do_fcntl+0x751/0x15a0 [ 564.310957][T13539] __x64_sys_fcntl+0x163/0x200 [ 564.317609][T13539] do_syscall_64+0xcd/0x4c0 [ 564.324367][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.332031][T13539] INITIAL READ USE at: [ 564.336525][T13539] lock_acquire+0x179/0x350 [ 564.343524][T13539] _raw_read_lock_irqsave+0x74/0x90 [ 564.351120][T13539] send_sigio+0x31/0x3e0 [ 564.357592][T13539] kill_fasync+0x214/0x510 [ 564.364221][T13539] lease_break_callback+0x23/0x30 [ 564.371834][T13539] __break_lease+0x674/0x1810 [ 564.378701][T13539] vfs_truncate+0x4d3/0x6e0 [ 564.385402][T13539] __x64_sys_truncate+0x172/0x1e0 [ 564.392724][T13539] do_syscall_64+0xcd/0x4c0 [ 564.399427][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.407515][T13539] } [ 564.410109][T13539] ... key at: [] __key.1+0x0/0x40 [ 564.417439][T13539] ... acquired at: [ 564.421331][T13539] _raw_read_lock_irqsave+0x74/0x90 [ 564.426747][T13539] send_sigio+0x31/0x3e0 [ 564.431288][T13539] kill_fasync+0x214/0x510 [ 564.435909][T13539] lease_break_callback+0x23/0x30 [ 564.441147][T13539] __break_lease+0x674/0x1810 [ 564.446204][T13539] vfs_truncate+0x4d3/0x6e0 [ 564.451351][T13539] __x64_sys_truncate+0x172/0x1e0 [ 564.456843][T13539] do_syscall_64+0xcd/0x4c0 [ 564.461713][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.467804][T13539] [ 564.470138][T13539] -> (&new->fa_lock){....}-{3:3} { [ 564.475404][T13539] INITIAL USE at: [ 564.479662][T13539] lock_acquire+0x179/0x350 [ 564.486060][T13539] _raw_write_lock_irq+0x36/0x50 [ 564.492685][T13539] fasync_remove_entry+0xb2/0x1e0 [ 564.499595][T13539] fasync_helper+0xaf/0xd0 [ 564.505621][T13539] fsnotify_fasync+0x48/0x70 [ 564.511889][T13539] __fput+0x96b/0xb70 [ 564.517492][T13539] task_work_run+0x150/0x240 [ 564.523663][T13539] exit_to_user_mode_loop+0xeb/0x110 [ 564.530575][T13539] do_syscall_64+0x3f6/0x4c0 [ 564.536866][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.544354][T13539] INITIAL READ USE at: [ 564.548694][T13539] lock_acquire+0x179/0x350 [ 564.555344][T13539] _raw_read_lock_irqsave+0x74/0x90 [ 564.562603][T13539] kill_fasync+0x138/0x510 [ 564.569098][T13539] lease_break_callback+0x23/0x30 [ 564.576208][T13539] __break_lease+0x674/0x1810 [ 564.582911][T13539] vfs_truncate+0x4d3/0x6e0 [ 564.589534][T13539] __x64_sys_truncate+0x172/0x1e0 [ 564.596680][T13539] do_syscall_64+0xcd/0x4c0 [ 564.603399][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.611315][T13539] } [ 564.613817][T13539] ... key at: [] __key.0+0x0/0x40 [ 564.621130][T13539] ... acquired at: [ 564.624934][T13539] lock_acquire+0x179/0x350 [ 564.629843][T13539] _raw_read_lock_irqsave+0x74/0x90 [ 564.635247][T13539] kill_fasync+0x138/0x510 [ 564.639883][T13539] evdev_pass_values+0x619/0x9b0 [ 564.645026][T13539] evdev_events+0x1bb/0x390 [ 564.649758][T13539] input_pass_values+0x6c7/0x890 [ 564.654919][T13539] input_handle_event+0xf00/0x14d0 [ 564.660371][T13539] input_inject_event+0x1cd/0x390 [ 564.665625][T13539] evdev_write+0x457/0x750 [ 564.670876][T13539] vfs_write+0x2a0/0x1150 [ 564.675403][T13539] ksys_write+0x1f8/0x250 [ 564.680015][T13539] do_syscall_64+0xcd/0x4c0 [ 564.684713][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.690907][T13539] [ 564.693237][T13539] [ 564.693237][T13539] stack backtrace: [ 564.699132][T13539] CPU: 1 UID: 0 PID: 13539 Comm: syz.9.1857 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 564.699178][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.699199][T13539] Call Trace: [ 564.699209][T13539] [ 564.699222][T13539] dump_stack_lvl+0x116/0x1f0 [ 564.699281][T13539] check_irq_usage+0x7dc/0x920 [ 564.699332][T13539] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 564.699383][T13539] ? check_path.constprop.0+0x24/0x50 [ 564.699443][T13539] ? __lock_acquire+0x1285/0x1c90 [ 564.699495][T13539] __lock_acquire+0x1285/0x1c90 [ 564.699558][T13539] lock_acquire+0x179/0x350 [ 564.699612][T13539] ? kill_fasync+0x138/0x510 [ 564.699664][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.699707][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.699757][T13539] _raw_read_lock_irqsave+0x74/0x90 [ 564.699807][T13539] ? kill_fasync+0x138/0x510 [ 564.699857][T13539] kill_fasync+0x138/0x510 [ 564.699910][T13539] evdev_pass_values+0x619/0x9b0 [ 564.699964][T13539] evdev_events+0x1bb/0x390 [ 564.700011][T13539] input_pass_values+0x6c7/0x890 [ 564.700058][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.700103][T13539] input_handle_event+0xf00/0x14d0 [ 564.700150][T13539] ? _copy_from_user+0x59/0xd0 [ 564.700203][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.700249][T13539] input_inject_event+0x1cd/0x390 [ 564.700302][T13539] evdev_write+0x457/0x750 [ 564.700353][T13539] ? __pfx_evdev_write+0x10/0x10 [ 564.700402][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.700443][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.700485][T13539] ? security_file_permission+0x71/0x210 [ 564.700530][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.700571][T13539] ? rw_verify_area+0xcf/0x680 [ 564.700628][T13539] ? __pfx_evdev_write+0x10/0x10 [ 564.700675][T13539] vfs_write+0x2a0/0x1150 [ 564.700713][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.700766][T13539] ? __pfx_vfs_write+0x10/0x10 [ 564.700800][T13539] ? find_held_lock+0x2b/0x80 [ 564.700842][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.700889][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.700930][T13539] ? __fget_files+0x20e/0x3c0 [ 564.700978][T13539] ksys_write+0x1f8/0x250 [ 564.701013][T13539] ? __pfx_ksys_write+0x10/0x10 [ 564.701050][T13539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.701097][T13539] do_syscall_64+0xcd/0x4c0 [ 564.701130][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.701165][T13539] RIP: 0033:0x7f20ae58e929 [ 564.701191][T13539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.701226][T13539] RSP: 002b:00007f20af4e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.701256][T13539] RAX: ffffffffffffffda RBX: 00007f20ae7b5fa0 RCX: 00007f20ae58e929 [ 564.701280][T13539] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 564.701302][T13539] RBP: 00007f20ae610b39 R08: 0000000000000000 R09: 0000000000000000 [ 564.701323][T13539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.701344][T13539] R13: 0000000000000000 R14: 00007f20ae7b5fa0 R15: 00007fff1adffe88 [ 564.701380][T13539] [ 565.025246][T13458] bridge0: port 2(bridge_slave_1) entered blocking state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 565.032503][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.040054][T13458] bridge_slave_1: entered allmulticast mode [ 565.046893][T13458] bridge_slave_1: entered promiscuous mode [ 565.061137][T11965] Bluetooth: hci0: command tx timeout [ 565.097543][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.108643][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.118487][ T5919] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 565.128133][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.137954][ T5919] usb 4-1: config 0 descriptor?? [ 565.951081][T11819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.256216][T11819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.327354][T11819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.451169][T11819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.508142][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 566.514193][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 566.564532][T11819] bridge_slave_1: left allmulticast mode [ 566.570260][T11819] bridge_slave_1: left promiscuous mode [ 566.576555][ T5919] usb 4-1: USB disconnect, device number 12 [ 566.584188][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.597252][T11819] bridge_slave_0: left allmulticast mode [ 566.603021][T11819] bridge_slave_0: left promiscuous mode [ 566.608820][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.759515][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.770847][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.781575][T11819] bond0 (unregistering): Released all slaves [ 567.013278][T11819] hsr_slave_0: left promiscuous mode [ 567.019229][T11819] hsr_slave_1: left promiscuous mode [ 567.025240][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.032853][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.041816][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.050824][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.061966][T11819] veth1_macvtap: left promiscuous mode [ 567.067617][T11819] veth0_macvtap: left promiscuous mode [ 567.073206][T11819] veth1_vlan: left promiscuous mode [ 567.079014][T11819] veth0_vlan: left promiscuous mode [ 567.273270][T11819] team0 (unregistering): Port device team_slave_1 removed [ 567.306655][T11819] team0 (unregistering): Port device team_slave_0 removed [ 567.718583][T11819] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.729430][T11819] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.800086][T11819] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.810554][T11819] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.861565][T11819] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.872375][T11819] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.920895][T11819] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.931793][T11819] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.991615][T11819] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.029761][T11819] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.079766][T11819] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.130205][T11819] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.196082][T11819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.290502][T11819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.330261][T11819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.389710][T11819] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.459733][T11819] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.509887][T11819] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.559896][T11819] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.609177][T11819] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.690151][T11819] bridge_slave_1: left allmulticast mode [ 568.696326][T11819] bridge_slave_1: left promiscuous mode [ 568.702133][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.711278][T11819] bridge_slave_0: left allmulticast mode [ 568.717259][T11819] bridge_slave_0: left promiscuous mode [ 568.722932][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.732614][T11819] bridge_slave_1: left allmulticast mode [ 568.738415][T11819] bridge_slave_1: left promiscuous mode [ 568.744070][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.753742][T11819] bridge_slave_0: left allmulticast mode [ 568.760131][T11819] bridge_slave_0: left promiscuous mode [ 568.766228][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.775624][T11819] bridge_slave_1: left allmulticast mode [ 568.782182][T11819] bridge_slave_1: left promiscuous mode [ 568.788023][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.796534][T11819] bridge_slave_0: left allmulticast mode [ 568.802187][T11819] bridge_slave_0: left promiscuous mode [ 568.808710][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.821114][T11819] bridge_slave_1: left allmulticast mode [ 568.826928][T11819] bridge_slave_1: left promiscuous mode [ 568.832589][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.841028][T11819] bridge_slave_0: left allmulticast mode [ 568.846982][T11819] bridge_slave_0: left promiscuous mode [ 568.852636][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.862575][T11819] bridge_slave_1: left allmulticast mode [ 568.869184][T11819] bridge_slave_1: left promiscuous mode [ 568.875836][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.887209][T11819] bridge_slave_0: left allmulticast mode [ 568.892869][T11819] bridge_slave_0: left promiscuous mode [ 568.898567][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.086956][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.101322][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.111251][T11819] bond0 (unregistering): Released all slaves [ 569.178754][T11819] bond0 (unregistering): Released all slaves [ 569.260933][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.272463][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.282140][T11819] bond0 (unregistering): Released all slaves [ 569.314602][T11819] bond1 (unregistering): (slave gretap1): Releasing active interface [ 569.450736][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.461089][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.470820][T11819] bond0 (unregistering): Released all slaves [ 569.483257][T11819] bond1 (unregistering): Released all slaves [ 569.581515][T11819] bond2 (unregistering): Released all slaves [ 569.671671][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.681889][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.691597][T11819] bond0 (unregistering): Released all slaves [ 569.783608][T11819] bond1 (unregistering): Released all slaves [ 570.355297][T11819] hsr_slave_0: left promiscuous mode [ 570.362172][T11819] hsr_slave_1: left promiscuous mode [ 570.368636][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.377532][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.386840][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.396532][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.408458][T11819] hsr_slave_0: left promiscuous mode [ 570.414617][T11819] hsr_slave_1: left promiscuous mode [ 570.420683][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.428370][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.437218][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.445775][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.458513][T11819] hsr_slave_0: left promiscuous mode [ 570.465759][T11819] hsr_slave_1: left promiscuous mode [ 570.471596][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.479306][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.488742][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.496769][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.508408][T11819] hsr_slave_0: left promiscuous mode [ 570.514579][T11819] hsr_slave_1: left promiscuous mode [ 570.520808][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.528735][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.537808][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.545338][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.566836][T11819] veth1_macvtap: left promiscuous mode [ 570.572610][T11819] veth0_macvtap: left promiscuous mode [ 570.578739][T11819] veth1_vlan: left promiscuous mode [ 570.584172][T11819] veth0_vlan: left promiscuous mode [ 570.591212][T11819] veth1_macvtap: left promiscuous mode [ 570.597279][T11819] veth0_macvtap: left promiscuous mode [ 570.603033][T11819] veth1_vlan: left promiscuous mode [ 570.610830][T11819] veth0_vlan: left promiscuous mode [ 570.617363][T11819] veth1_macvtap: left promiscuous mode [ 570.622876][T11819] veth0_macvtap: left promiscuous mode [ 570.628509][T11819] veth1_vlan: left promiscuous mode [ 570.634109][T11819] veth0_vlan: left promiscuous mode [ 570.640631][T11819] veth1_macvtap: left promiscuous mode [ 570.646382][T11819] veth0_macvtap: left promiscuous mode [ 570.652235][T11819] veth1_vlan: left promiscuous mode [ 570.658093][T11819] veth0_vlan: left promiscuous mode [ 570.998293][T11819] team0 (unregistering): Port device team_slave_1 removed [ 571.023456][T11819] team0 (unregistering): Port device team_slave_0 removed [ 571.349124][T11819] team0 (unregistering): Port device team_slave_1 removed [ 571.380834][T11819] team0 (unregistering): Port device team_slave_0 removed [ 571.621829][T11819] team0 (unregistering): Port device team_slave_1 removed [ 571.873070][T11819] team0 (unregistering): Port device team_slave_1 removed [ 571.897855][T11819] team0 (unregistering): Port device team_slave_0 removed [ 572.505805][ T1294] ieee802154 phy0 wpan0: encryption failed: -22