last executing test programs: 8.434018125s ago: executing program 5 (id=1214): ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)=@null) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) 7.276046151s ago: executing program 5 (id=1216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 6.986448097s ago: executing program 4 (id=1218): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) 6.700219955s ago: executing program 5 (id=1220): ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x0, 0x2, 0x0, 0x3}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 6.441140614s ago: executing program 0 (id=1223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007de0b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cd67b5b18065752a3ad500000000000000cb450063bc36005400000000000000ff7f00000001000000000000000000cb04fcbb0b5ba9918d37b056b9bbd11b6b9f260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb4845124ef2e487204000000aaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aadffcc75fe369258673b5d053bdec75dca377232a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db9af1b5d356d0f062137d866d11be4b1260b06cca9098a3f0151fdbbd4e97d62ecc6405003a60f1c6edc76683073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bdaeecc952a3fd2c46f3c1cde71a19d1a2982492abaa96765372831210e00d2bfea3b8df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f22542c133aadafdc96fdb49cc992dbdd5ac01ba51508951c7a7c5f5093bd6ca0916c3a12912715649c2b1c7193a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f000000000000000050572061dfb5248d3d4a1c37dcb92d9ef99e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19524cf30f810da3204f4c93f4f5d7321acfefc4d1c9139ca4b65b9990995000000000000000000000000000000c8a3988cca41217c950554bb043cf364d709c2bf3ec46b75f1bce43e726210b53d362072bc120c076b4647afc595d97c288f5017088ac2b02ed97fc883a102ae6000044542e3aa7ada6d13ff93ec634a0fa0b5f41ed317b48b8b8c03b243d6e14b7087e2c5d41f8a51408e27283b54d04212cbb0f5af76b70b1bdcec7c0abe6407e7fa204b9919490af8bffca6fbbd2174a84328af4acc9c7ec655729125fc15da558cb6edfcdd0c3fca7130863d13369f79f1d13ac166249e4bffa4a272a0116b591a63bfca11205d216b34000000000000000045b5ade570aeb7cf89e900004dc6c89355082bdcb0b08b810cf63fd19a17f4d440f1546e8e5f8addedb88c7f7990947505d2fcd8cb14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xa6, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e45"}, 0x50) 5.875020381s ago: executing program 5 (id=1226): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.867861923s ago: executing program 0 (id=1227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00', r1}, 0x10) 5.591744699s ago: executing program 0 (id=1231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000480)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) 5.553675222s ago: executing program 5 (id=1232): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x86, 0x0, 0x0) 5.220072647s ago: executing program 0 (id=1235): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x808400, &(0x7f0000000240)=ANY=[], 0x1, 0x5528, &(0x7f0000011800)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x7c00, 0x0, 0x3) fallocate(r0, 0x3, 0x1b02, 0x7000) 4.858105973s ago: executing program 4 (id=1238): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x2, 0x0, 0x3}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.630333569s ago: executing program 5 (id=1240): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) lseek(0xffffffffffffffff, 0x300000002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100f}) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x10000000000001dd) openat$rfkill(0xffffffffffffff9c, 0x0, 0x402100, 0x0) epoll_create1(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) 3.659873107s ago: executing program 4 (id=1243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00', r1}, 0x10) 3.582264241s ago: executing program 1 (id=1245): syz_emit_ethernet(0x25e, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x228, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0x1, "b8a3e10000a3"}]}}}}}}, 0x0) 3.342599695s ago: executing program 4 (id=1246): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_mreq(0xffffffffffffffff, 0x10d, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0104000000000000000001000000000000000c410000001400"], 0x30}}, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xd1, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3.240606178s ago: executing program 1 (id=1249): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0xfffffffffffffffd, &(0x7f0000000040)) 2.980236607s ago: executing program 4 (id=1250): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000040000000"], &(0x7f0000000440)='GPL\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='9p_client_req\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000040)=r3, 0x3b) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 2.900150065s ago: executing program 1 (id=1252): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x86, 0x0, 0x0) 2.546784279s ago: executing program 2 (id=1254): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf2, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2.498174532s ago: executing program 3 (id=1255): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) 2.175992857s ago: executing program 2 (id=1256): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x2, 0x0, 0x3}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.175811973s ago: executing program 3 (id=1257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xa6, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e45"}, 0x50) 1.049286186s ago: executing program 4 (id=1258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xa, "798f35a1"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x2, 0x0, 0xc, "d5b1"}, @global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) 1.014134885s ago: executing program 2 (id=1259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00', r1}, 0x10) 962.477246ms ago: executing program 3 (id=1260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000280)={0xf}, 0x1) 700.066976ms ago: executing program 2 (id=1261): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) 699.810327ms ago: executing program 3 (id=1262): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c09e8fe55a10a0015800a00142603600e1208001e0000000406040016c0080004030400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 660.286497ms ago: executing program 1 (id=1263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_IKEY={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x4000001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea725000000010000000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000180ffffffffffff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000100000000000000001"], 0x48}}], 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000540)) 460.15464ms ago: executing program 2 (id=1264): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 364.794071ms ago: executing program 0 (id=1265): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="85000000970000003500000000000000850000002a0000009500000000000000f4670880271efa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa397fabd5f9810e81ae0b737126ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8320e13fecd45c0f8612c10b100000000b0d3712c7e93363af3c075ff1e23166a32d95433008000000000000051e1cc4c45d576090c4867a7b62a7e73a0c14e97dc30fd4b393e366c6386d5ec7209d031f40f3012e9576e51a7f578602f07785b92e544fc46c744ae6af3e4195cc037102124d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f9ab800f4104dbaba46aa43a815a1e5c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab7894de93d928cf95846be6277c04b48556c870814ec532b66a696a623cd8a4f8dc8dcba00b1b2d2747c45b0c52087b5efabf8496b9a951667d510ba0e3c4c00356ffebfb19a34268335648e1f844ce328c10752a42dca52fb98c1452b6518a6ef7297f7b3d0cd46dafc6ac5500f53e5309ec91d83cf4fbd775d9c07d8d591a4d8c60ff000000b78863e629b3b200000000000000000000000000008b00000000449c810d3174c87e080000003126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa80564e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac921a4fc6e625247510bc24e20ad88d3442a5d143c3047dd08e56a1b9764270c6ab800451b95e22f30a85f5681ca300000000af89a79b92a2c6743e478bd799415b6000f51168b71714bada12041752e2fcf95c1ced98fdc4f4bf2157b261380307d943b34c489734d55c4e15bbda5f5e31371c5330d920b71fbaaabd57ae73201b47f2c7e5e69a798f3c14f969fab1005e8ccedd9c46c3e39f949dd4c87ae724ef73e2abdb4485027139e9445f77e8dd3af90248ede241b408a320e069f6becd0b8405d24f0000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 363.953938ms ago: executing program 3 (id=1266): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev_snmp6\x00') fchdir(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 280.102355ms ago: executing program 1 (id=1267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 207.317562ms ago: executing program 0 (id=1268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init1(0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a840008864185d683f86"], 0x0) 157.545641ms ago: executing program 2 (id=1269): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, 0x0, 0x0) 52.239277ms ago: executing program 3 (id=1270): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000040000000"], &(0x7f0000000440)='GPL\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='9p_client_req\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000040)=r3, 0x3b) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=1271): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x2, 0x0, 0x3}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) kernel console output (not intermixed with test programs): [ 476.157368][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.164873][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.178559][ T63] hsr_slave_0: left promiscuous mode [ 476.184597][ T63] hsr_slave_1: left promiscuous mode [ 476.195292][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.202702][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.214227][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.221861][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.278756][ T63] veth1_macvtap: left promiscuous mode [ 476.284383][ T63] veth0_macvtap: left promiscuous mode [ 476.290813][ T63] veth1_vlan: left promiscuous mode [ 476.296447][ T63] veth0_vlan: left promiscuous mode [ 476.303059][ T63] veth1_macvtap: left promiscuous mode [ 476.309097][ T63] veth0_macvtap: left promiscuous mode [ 476.314716][ T63] veth1_vlan: left promiscuous mode [ 476.320228][ T63] veth0_vlan: left promiscuous mode [ 476.336908][ T63] veth1_macvtap: left promiscuous mode [ 476.342454][ T63] veth0_macvtap: left promiscuous mode [ 476.350876][ T63] veth1_vlan: left promiscuous mode [ 476.356603][ T63] veth0_vlan: left promiscuous mode [ 476.535308][ T9132] bio_check_eod: 67 callbacks suppressed [ 476.535332][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 476.535332][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 476.627498][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 476.627498][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 476.715576][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 476.715576][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 476.797125][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 476.797125][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 476.882801][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 476.882801][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 476.961090][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 476.961090][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 477.035391][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 477.035391][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 477.105224][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 477.105224][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 477.179513][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 477.179513][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 477.254316][ T63] team0 (unregistering): Port device team_slave_1 removed [ 477.261966][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 477.261966][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 477.316000][ T63] team0 (unregistering): Port device team_slave_0 removed [ 478.217841][ T63] team0 (unregistering): Port device team_slave_1 removed [ 478.270119][ T63] team0 (unregistering): Port device team_slave_0 removed [ 479.192520][ T63] team0 (unregistering): Port device team_slave_1 removed [ 479.241188][ T63] team0 (unregistering): Port device team_slave_0 removed [ 479.789985][ T9380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.819817][ T9432] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 479.831556][ T9432] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 479.916038][ T9432] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 479.937610][ T9432] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 480.022201][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.082157][ T9336] veth0_vlan: entered promiscuous mode [ 480.194102][ T9336] veth1_vlan: entered promiscuous mode [ 480.404459][ T9380] veth0_vlan: entered promiscuous mode [ 480.424994][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.437535][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.509214][ T9436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.554134][ T9380] veth1_vlan: entered promiscuous mode [ 480.587866][ T9336] veth0_macvtap: entered promiscuous mode [ 480.610110][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.629165][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.662707][ T9436] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.675419][ T9336] veth1_macvtap: entered promiscuous mode [ 480.845974][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.853168][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.913139][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.920369][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.028098][ T9576] loop1: detected capacity change from 0 to 512 [ 481.062009][ T9576] EXT4-fs (loop1): Test dummy encryption mode enabled [ 481.072483][ T9380] veth0_macvtap: entered promiscuous mode [ 481.123471][ T9356] veth0_vlan: entered promiscuous mode [ 481.130931][ T9576] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.983: iget: bogus i_mode (0) [ 481.145630][ T9576] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.983: couldn't read orphan inode 17 (err -117) [ 481.152233][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.163201][ T9576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.169591][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.191501][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.199770][ T9576] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.983: bg 0: block 7: invalid block bitmap [ 481.202134][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.229573][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.239324][ T9380] veth1_macvtap: entered promiscuous mode [ 481.246477][ T9576] EXT4-fs (loop1): shut down requested (2) [ 481.262986][ T9576] EXT4-fs warning (device loop1): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 481.274786][ T9432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.313201][ T9307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.348479][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.364610][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.376584][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.389010][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.422474][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.502750][ T9432] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.524243][ T9336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.541591][ T9336] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.553368][ T9336] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.567290][ T9132] bio_check_eod: 68 callbacks suppressed [ 481.567308][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 481.567308][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 481.574371][ T9336] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.632153][ T9356] veth1_vlan: entered promiscuous mode [ 481.648171][ T9582] input: syz0 as /devices/virtual/input/input11 [ 481.668344][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 481.668344][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 481.702316][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.728893][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.749463][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.765270][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.785581][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 481.785581][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 481.805303][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.826808][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.851191][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.885674][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 481.885674][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 481.909354][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.916566][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.974281][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.995592][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 481.995592][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 482.017494][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.038633][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.067406][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.095723][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 482.095723][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 482.115235][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.152896][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.187207][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.208311][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 482.208311][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 482.254649][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.262062][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.351819][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 482.351819][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 482.427136][ T9380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.453885][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 482.453885][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 482.455699][ T9380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.477113][ T9380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.488270][ T9380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.550122][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 482.550122][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 482.694985][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.712244][ T9356] veth0_macvtap: entered promiscuous mode [ 482.727220][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.749915][ T9436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.831204][ T9356] veth1_macvtap: entered promiscuous mode [ 482.914597][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.923545][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.968498][ T7249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.986808][ T7249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.039533][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.071712][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.118347][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.143433][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.161671][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.173559][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.192745][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.206210][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.220938][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.254227][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.986'. [ 483.265407][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.986'. [ 483.333172][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.378350][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.411077][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.435172][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.454335][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.472230][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.483911][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.506273][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.520054][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.539117][ T29] audit: type=1326 audit(1723747365.801:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.5.1001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f417c1799b9 code=0x0 [ 483.544292][ T9356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.580282][ T9356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.594311][ T9356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.616448][ T9356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.709594][ T9599] loop1: detected capacity change from 0 to 128 [ 483.743790][ T9599] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 483.765827][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.780121][ T9599] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 483.782353][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.859123][ T9436] veth0_vlan: entered promiscuous mode [ 483.882803][ T9307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 483.895226][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.903046][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.931076][ T9432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.051803][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.065522][ T9436] veth1_vlan: entered promiscuous mode [ 484.066485][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.322110][ T9432] veth0_vlan: entered promiscuous mode [ 484.383525][ T9436] veth0_macvtap: entered promiscuous mode [ 484.458892][ T9436] veth1_macvtap: entered promiscuous mode [ 484.489873][ T9432] veth1_vlan: entered promiscuous mode [ 484.594221][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.648118][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.676972][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.690384][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.701654][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.717346][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.728040][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.758097][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.769049][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.790383][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.813420][ T9436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.845169][ T5295] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 484.888461][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.941879][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.964665][ T9617] loop4: detected capacity change from 0 to 128 [ 484.985186][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.017415][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.046390][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.065386][ T5295] usb 3-1: Using ep0 maxpacket: 8 [ 485.077471][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.092794][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.104038][ T5295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.114519][ T5295] usb 3-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 485.124804][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.145243][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.154848][ T9436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.177807][ T9436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.180968][ T5295] usb 3-1: config 0 descriptor?? [ 485.198124][ T9605] loop1: detected capacity change from 0 to 32768 [ 485.210394][ T9436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.363384][ T9436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.387904][ T9605] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 485.399273][ T9436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.409316][ T9436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.421733][ T9436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.464601][ T9432] veth0_macvtap: entered promiscuous mode [ 485.477268][ T9611] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 485.511817][ T5295] usb 3-1: USB disconnect, device number 9 [ 485.582679][ T9432] veth1_macvtap: entered promiscuous mode [ 485.689705][ T9605] XFS (loop1): Ending clean mount [ 485.731774][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.773832][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.804190][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.833200][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.867354][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.895127][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.927619][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.978575][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.990035][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.005639][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.045112][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.065257][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.093252][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.148276][ T9605] loop1: detected capacity change from 32768 to 0 [ 486.178638][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.215513][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.268987][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.300367][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.311051][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.355145][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.392657][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.420254][ T25] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 5 [ 486.444781][ T26] XFS (loop1): log I/O error -5 [ 486.449157][ T936] XFS (loop1): xfs_difree: xfs_ialloc_read_agi() returned error -5. [ 486.455162][ T25] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 486.473587][ T25] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 486.487136][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.497243][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.510185][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.520062][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.530688][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.543446][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.624346][ T9432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.645700][ T9132] bio_check_eod: 67 callbacks suppressed [ 486.645721][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 486.645721][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 486.683798][ T9432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.704711][ T9432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.734685][ T9432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.755169][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 486.755169][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 486.981497][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 486.981497][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 487.046120][ T9630] loop4: detected capacity change from 0 to 32768 [ 487.115608][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 487.115608][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 487.196687][ T9630] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 487.263173][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 487.263173][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 487.349483][ T7249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.429453][ T7249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.466303][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 487.466303][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 487.613706][ T9630] XFS (loop4): Ending clean mount [ 487.625238][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 487.625238][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 487.708863][ T9630] XFS (loop4): Quotacheck needed: Please wait. [ 487.736457][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 487.736457][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 487.827581][ T7249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.861880][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 487.861880][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 487.881389][ T9307] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 487.882890][ T7249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.924241][ T9630] XFS (loop4): Quotacheck: Done. [ 487.982380][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 487.982380][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 488.196212][ T9636] loop5: detected capacity change from 0 to 40427 [ 488.203425][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.214878][ T9630] loop4: detected capacity change from 32768 to 0 [ 488.240487][ T9636] F2FS-fs (loop5): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 488.293652][ T9636] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 488.349656][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.372574][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.381852][ T29] audit: type=1800 audit(1723747370.631:89): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1009" name="file2" dev="loop4" ino=9287 res=0 errno=0 [ 488.453745][ T9636] F2FS-fs (loop5): Found nat_bits in checkpoint [ 488.586864][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.622820][ T98] XFS (loop4): log I/O error -5 [ 488.628842][ T98] XFS (loop4): Filesystem has been shut down due to log error (0x2). [ 488.638706][ T98] XFS (loop4): Please unmount the filesystem and rectify the problem(s). [ 488.650821][ T9356] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 488.664791][ T9636] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 488.700564][ T9636] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 488.816240][ T29] audit: type=1800 audit(1723747371.071:90): pid=9636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1012" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 488.945776][ T9336] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 488.973462][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.092379][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.136517][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.201670][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.315625][ T6427] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 489.535928][ T6427] usb 3-1: Using ep0 maxpacket: 16 [ 489.545107][ T6427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.608597][ T6427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.633610][ T6427] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.668553][ T6427] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 489.703892][ T9673] overlayfs: failed to resolve './file1': -2 [ 489.718497][ T6427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.794897][ T6427] usb 3-1: config 0 descriptor?? [ 489.998266][ T12] bridge_slave_1: left allmulticast mode [ 490.029999][ T12] bridge_slave_1: left promiscuous mode [ 490.074515][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.226517][ T12] bridge_slave_0: left allmulticast mode [ 490.255006][ T12] bridge_slave_0: left promiscuous mode [ 490.260860][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.323052][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.343528][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.352557][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 490.362873][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 490.371270][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 490.381179][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.489546][ T6427] usbhid 3-1:0.0: can't add hid device: -71 [ 490.497695][ T6427] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 490.511321][ T6427] usb 3-1: USB disconnect, device number 10 [ 492.834118][ T9132] bio_check_eod: 50 callbacks suppressed [ 492.834145][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 492.834145][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 493.770498][ T5233] Bluetooth: hci0: command tx timeout [ 493.905292][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 493.905292][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 494.018102][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 494.018102][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 494.145240][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 494.145240][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 494.287557][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 494.287557][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 494.455287][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 494.455287][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 494.585548][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 494.585548][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 494.706721][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 494.706721][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 494.815286][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 494.815286][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 494.889285][ T9728] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1035'. [ 494.941793][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 494.941793][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 494.998001][ T9728] loop0: detected capacity change from 0 to 128 [ 495.005720][ T5290] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 495.046001][ T9728] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 495.210436][ T5290] usb 6-1: config 0 interface 0 has no altsetting 0 [ 495.221882][ T5290] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 495.247668][ T5290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.293921][ T29] audit: type=1800 audit(1723747377.551:91): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1035" name="file3" dev="loop0" ino=95 res=0 errno=0 [ 495.319899][ T5290] usb 6-1: config 0 descriptor?? [ 495.876522][ T5233] Bluetooth: hci0: command tx timeout [ 496.161132][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.217842][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.277044][ T12] bond0 (unregistering): Released all slaves [ 496.508473][ T5290] video4linux radio32: keene_cmd_set failed (-71) [ 496.555486][ T5290] radio-keene 6-1:0.0: V4L2 device registered as radio32 [ 496.603641][ T5290] usb 6-1: USB disconnect, device number 12 [ 496.684862][ T9734] loop4: detected capacity change from 0 to 1024 [ 496.752064][ T9734] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 496.781386][ T9734] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 496.800679][ T9734] JBD2: no valid journal superblock found [ 496.807834][ T9734] EXT4-fs (loop4): Could not load journal inode [ 497.985167][ T5233] Bluetooth: hci0: command tx timeout [ 498.015230][ T9132] bio_check_eod: 32 callbacks suppressed [ 498.015257][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 498.015257][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 498.209907][ T9744] syz.2.1037: attempt to access beyond end of device [ 498.209907][ T9744] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 498.285223][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 498.285223][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 498.395894][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 498.395894][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 498.524605][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 498.524605][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 498.665642][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 498.665642][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 498.735257][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 498.735257][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 498.796411][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 498.796411][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 498.807754][ T12] hsr_slave_0: left promiscuous mode [ 498.809015][ T12] hsr_slave_1: left promiscuous mode [ 498.810770][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.810830][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.811778][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.811815][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.855488][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 498.865356][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 498.865356][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 498.879136][ T12] veth1_macvtap: left promiscuous mode [ 498.879291][ T12] veth0_macvtap: left promiscuous mode [ 498.879512][ T12] veth1_vlan: left promiscuous mode [ 498.879664][ T12] veth0_vlan: left promiscuous mode [ 498.930264][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 498.930264][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 499.045405][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 499.061883][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.061925][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.061955][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.062007][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 499.062037][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.064867][ T25] usb 5-1: config 0 descriptor?? [ 499.143967][ T9767] loop2: detected capacity change from 0 to 256 [ 499.468956][ T9754] tty tty30: ldisc open failed (-12), clearing slot 29 [ 499.682301][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 499.700249][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 499.742070][ T25] usb 5-1: USB disconnect, device number 11 [ 499.965172][ T5332] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 499.996226][ T5233] Bluetooth: hci0: command tx timeout [ 500.105306][ T9132] XFS: Failing async write: 371 callbacks suppressed [ 500.105332][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 500.165318][ T5332] usb 6-1: Using ep0 maxpacket: 8 [ 500.176863][ T5332] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 500.189759][ T5332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.209398][ T5332] usb 6-1: Product: syz [ 500.218155][ T5332] usb 6-1: Manufacturer: syz [ 500.227625][ T5332] usb 6-1: SerialNumber: syz [ 500.233232][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 500.249198][ T5332] usb 6-1: config 0 descriptor?? [ 500.330085][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 500.419495][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 500.501120][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 500.517314][ T5332] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 500.588447][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 500.666782][ T5290] XFS (loop3): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x0 len 1 error 5 [ 500.717790][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 500.796278][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 500.915331][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 501.039798][ T12] team0 (unregistering): Port device team_slave_1 removed [ 501.122465][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.133354][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.398972][ T12] team0 (unregistering): Port device team_slave_0 removed [ 501.594215][ T5332] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 502.677462][ T9784] loop4: detected capacity change from 0 to 40427 [ 502.699453][ T9784] F2FS-fs (loop4): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 502.735797][ T9784] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 502.779776][ T9] usb 6-1: USB disconnect, device number 13 [ 502.816309][ T9784] F2FS-fs (loop4): Found nat_bits in checkpoint [ 503.025411][ T9132] bio_check_eod: 60 callbacks suppressed [ 503.025438][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 503.025438][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 503.044443][ T9784] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 503.044483][ T9784] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 503.093745][ T29] audit: type=1800 audit(1723747385.351:92): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1050" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 503.195339][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 503.195339][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 503.430795][ T9356] syz-executor: attempt to access beyond end of device [ 503.430795][ T9356] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 505.101201][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 505.101201][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 505.134017][ T9356] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 505.231092][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 505.231092][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 505.335225][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 505.335225][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 505.466383][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 505.466383][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 505.575306][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 505.575306][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 505.665260][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 505.665260][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 505.743715][ T5294] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 505.855176][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 505.855176][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 506.023260][ T5294] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.075668][ T5294] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 506.164230][ T5294] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 506.268556][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.386337][ T5294] usb 4-1: config 0 descriptor?? [ 506.574265][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 506.609602][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 506.628864][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 506.665467][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 506.682818][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 506.695342][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 506.929523][ T9832] loop2: detected capacity change from 0 to 512 [ 506.993230][ T9835] loop5: detected capacity change from 0 to 512 [ 507.005980][ T9832] EXT4-fs (loop2): Test dummy encryption mode enabled [ 507.061874][ T9832] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.1066: iget: bogus i_mode (0) [ 507.088005][ T9832] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1066: couldn't read orphan inode 17 (err -117) [ 507.102173][ T9835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.131655][ T9835] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.176582][ T9832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.223515][ T5294] usb 4-1: string descriptor 0 read error: -71 [ 507.246586][ T5294] usb 4-1: USB disconnect, device number 13 [ 507.299482][ T9832] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1066: bg 0: block 7: invalid block bitmap [ 507.340311][ T9832] EXT4-fs warning (device loop2): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 507.512597][ T9380] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.635195][ T5290] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 507.858152][ T5290] usb 5-1: Using ep0 maxpacket: 8 [ 507.949713][ T9680] chnl_net:caif_netlink_parms(): no params data found [ 508.055487][ T9132] bio_check_eod: 33 callbacks suppressed [ 508.055512][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 508.055512][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 508.217418][ T5290] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 508.231398][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 508.231398][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 508.235095][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.417532][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 508.417532][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 508.605297][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 508.605297][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 508.765212][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 508.765212][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 508.798139][ T5236] Bluetooth: hci6: command tx timeout [ 508.844131][ T5290] usb 5-1: Product: syz [ 508.858218][ T5290] usb 5-1: Manufacturer: syz [ 508.862948][ T5290] usb 5-1: SerialNumber: syz [ 508.908061][ T5290] usb 5-1: config 0 descriptor?? [ 508.923365][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 508.923365][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 509.063788][ T9876] syz.2.1071: attempt to access beyond end of device [ 509.063788][ T9876] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 509.107952][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 509.107952][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 509.142224][ T9680] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.155435][ T9680] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.162735][ T9680] bridge_slave_0: entered allmulticast mode [ 509.222522][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 509.222522][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 509.240830][ T9680] bridge_slave_0: entered promiscuous mode [ 509.251189][ T5290] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 509.341616][ T9680] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.345503][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 509.345503][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 509.382929][ T9680] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.400617][ T9680] bridge_slave_1: entered allmulticast mode [ 509.440579][ T9680] bridge_slave_1: entered promiscuous mode [ 509.688299][ T9680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.733169][ T9824] chnl_net:caif_netlink_parms(): no params data found [ 509.812414][ T9680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.231256][ T9680] team0: Port device team_slave_0 added [ 510.272753][ T5290] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 510.409706][ T9680] team0: Port device team_slave_1 added [ 510.895296][ T5236] Bluetooth: hci6: command tx timeout [ 511.402165][ T25] usb 5-1: USB disconnect, device number 12 [ 511.456799][ T9894] 9pnet_fd: Insufficient options for proto=fd [ 511.620254][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.635706][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.705244][ T9680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.743028][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.780697][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.909455][ T9680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.968321][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.014232][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.036359][ T9824] bridge_slave_0: entered allmulticast mode [ 512.067939][ T9336] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.097340][ T9824] bridge_slave_0: entered promiscuous mode [ 512.194895][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.221802][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.246849][ T9824] bridge_slave_1: entered allmulticast mode [ 512.273426][ T9824] bridge_slave_1: entered promiscuous mode [ 512.774017][ T9680] hsr_slave_0: entered promiscuous mode [ 512.805166][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 512.815839][ T9680] hsr_slave_1: entered promiscuous mode [ 512.837359][ T9680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.855070][ T9680] Cannot create hsr debugfs directory [ 512.864479][ T9824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.920318][ T9824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.956104][ T5236] Bluetooth: hci6: command tx timeout [ 513.021367][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 513.038025][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.047014][ T9917] loop5: detected capacity change from 0 to 732 [ 513.059387][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.079879][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.088680][ T9132] bio_check_eod: 54 callbacks suppressed [ 513.088699][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 513.088699][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 513.110472][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 513.245346][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 513.245346][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 513.397055][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.415301][ T25] usb 5-1: config 0 descriptor?? [ 513.475166][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 513.475166][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 513.640448][ T9926] syz.2.1082: attempt to access beyond end of device [ 513.640448][ T9926] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 513.685150][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 513.685150][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 513.787281][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 513.787281][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 513.856504][ T9824] team0: Port device team_slave_0 added [ 513.905268][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 513.905268][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 513.930330][ T9824] team0: Port device team_slave_1 added [ 514.075911][ T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 514.077169][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 514.077169][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 514.105219][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 514.111252][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 514.166381][ T25] usb 5-1: USB disconnect, device number 13 [ 514.224852][ T9936] 9pnet_fd: Insufficient options for proto=fd [ 514.234188][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 514.234188][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 514.339200][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 514.339200][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 514.339257][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.364157][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.395924][ T9824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.405347][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 514.417814][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.424794][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.454336][ T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 514.475477][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.483512][ T8] usb 6-1: Product: syz [ 514.498262][ T8] usb 6-1: Manufacturer: syz [ 514.514089][ T8] usb 6-1: SerialNumber: syz [ 514.516505][ T9824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.551216][ T8] usb 6-1: config 0 descriptor?? [ 514.812774][ T8] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 514.973464][ T9824] hsr_slave_0: entered promiscuous mode [ 514.994281][ T9824] hsr_slave_1: entered promiscuous mode [ 515.023840][ T9824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.036131][ T5236] Bluetooth: hci6: command tx timeout [ 515.074642][ T9824] Cannot create hsr debugfs directory [ 515.899857][ T8] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 516.293316][ T9938] loop2: detected capacity change from 0 to 40427 [ 516.307180][ T9938] F2FS-fs (loop2): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 516.398209][ T9938] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 516.459821][ T9938] F2FS-fs (loop2): Found nat_bits in checkpoint [ 516.706842][ T9938] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 516.725579][ T9938] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 516.831532][ T29] audit: type=1800 audit(1723747399.081:93): pid=9938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1086" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 516.899761][ T29] audit: type=1800 audit(1723747399.081:94): pid=9938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1086" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 516.999509][ T9380] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 517.084397][ T6427] usb 6-1: USB disconnect, device number 14 [ 517.519839][ T9957] delete_channel: no stack [ 517.583497][ T9824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.216245][ T9824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.235385][ T9132] bio_check_eod: 54 callbacks suppressed [ 518.235406][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 518.235406][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 518.370827][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 518.370827][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 518.497417][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 518.497417][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 518.637148][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 518.637148][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 518.764308][ T9824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.785188][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 518.785188][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 518.897443][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 518.897443][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 519.028582][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 519.028582][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 519.159571][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 519.159571][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 519.175379][ T9824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.415215][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 519.415215][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 519.585641][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 519.585641][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 519.729130][ T9995] loop2: detected capacity change from 0 to 4096 [ 520.014343][ T9824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 520.056324][ T9824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 520.089376][ T9824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 520.121624][ T9824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 520.298734][ T29] audit: type=1326 audit(1723747402.561:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff633f799b9 code=0x0 [ 520.452395][ T9680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 520.514515][ T9680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 520.579022][ T9680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 520.647986][ T9680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 521.060789][ T9824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.221988][ T9824] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.294492][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.301797][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.357336][ T9999] loop4: detected capacity change from 0 to 40427 [ 521.369530][ T9999] F2FS-fs (loop4): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 521.400432][ T9999] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 521.463066][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.470381][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.508772][ T9999] F2FS-fs (loop4): Found nat_bits in checkpoint [ 521.840147][ T9999] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 521.858316][ T9999] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 521.912398][ T29] audit: type=1800 audit(1723747404.171:96): pid=9999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1102" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 521.941133][ T9680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.973951][T10033] loop2: detected capacity change from 0 to 512 [ 522.042212][ T29] audit: type=1800 audit(1723747404.201:97): pid=9999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1102" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 522.070346][ T9356] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 522.092071][ T9680] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.128827][T10035] loop5: detected capacity change from 0 to 256 [ 522.140246][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.147616][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.196982][T10033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.249152][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.256371][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.275394][T10033] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.169833][ T9824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.285355][ T9132] bio_check_eod: 54 callbacks suppressed [ 523.285379][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 523.285379][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 523.475234][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 523.475234][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 523.686725][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 523.686725][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 523.777536][ T9680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.870890][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 523.870890][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 523.910808][ T9824] veth0_vlan: entered promiscuous mode [ 524.066207][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 524.066207][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 524.083857][ T9824] veth1_vlan: entered promiscuous mode [ 524.206057][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 524.206057][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 524.327381][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 524.327381][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 524.379368][ T9680] veth0_vlan: entered promiscuous mode [ 524.443465][ T9824] veth0_macvtap: entered promiscuous mode [ 524.457552][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 524.457552][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 524.510125][ T9824] veth1_macvtap: entered promiscuous mode [ 524.537290][ T9680] veth1_vlan: entered promiscuous mode [ 524.575140][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 524.575140][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 524.666544][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.688104][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 524.688104][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 524.710348][T10073] loop5: detected capacity change from 0 to 4096 [ 524.725347][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.773259][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.821883][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.848298][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.907613][ T29] audit: type=1326 audit(1723747407.161:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.4.1117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6f35799b9 code=0x0 [ 524.908420][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.964319][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.994996][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.066191][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.107798][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.138537][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.182297][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.217236][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.348633][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.379971][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.425584][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.484220][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.516773][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.540411][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.560830][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.599071][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.620580][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.677601][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.715248][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.777984][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.823090][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.888133][ T9824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.943154][ T9824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.975376][ T9824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.014436][ T9824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.093491][ T9680] veth0_macvtap: entered promiscuous mode [ 526.241611][ T9680] veth1_macvtap: entered promiscuous mode [ 526.583606][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.641368][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.674834][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.695730][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.749387][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.768643][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.785182][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.804267][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.814465][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.835065][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.854423][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.874425][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.886296][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.896934][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.917758][ T9380] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.918853][ T9680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.048021][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.121718][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.175565][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.198691][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.395157][ T9132] bio_check_eod: 42 callbacks suppressed [ 528.395185][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 528.395185][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 528.461495][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.527746][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.538398][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.549088][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.561302][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.574313][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.575353][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 528.575353][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 528.584325][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.608309][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.618519][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.636764][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.649602][ T9680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.740654][ T9680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.815371][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 528.815371][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 528.841624][ T9680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.920226][ T9680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.978364][ T9680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.988367][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 528.988367][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 529.125529][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 529.125529][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 529.184871][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.228211][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 529.228211][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 529.243974][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.335476][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 529.335476][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 529.425684][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 529.436481][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 529.436481][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 529.470051][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.503253][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.543240][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.573618][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 529.573618][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 529.580530][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.635162][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 529.657232][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.675550][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 529.675550][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 529.705598][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.747600][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.772768][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.804185][ T8] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 529.804342][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.859645][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.904935][ T8] usb 4-1: config 0 descriptor?? [ 530.158304][T10151] loop1: detected capacity change from 0 to 128 [ 530.164768][ T9132] XFS: Failing async write: 335 callbacks suppressed [ 530.164785][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 530.201817][T10135] loop4: detected capacity change from 0 to 32768 [ 530.327021][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 530.370324][T10135] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 530.536639][T10135] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 530.590147][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 530.740400][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 531.518415][ T8] sunplus 0003:04FC:05D8.0008: item fetching failed at offset 5/7 [ 531.534884][ T8] sunplus 0003:04FC:05D8.0008: probe with driver sunplus failed with error -22 [ 531.551892][ T5294] XFS (loop3): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x0 len 1 error 5 [ 531.615184][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 531.682109][ T29] audit: type=1326 audit(1723747413.941:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f417c1799b9 code=0x0 [ 531.725570][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 531.777262][T10135] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 531.829616][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 531.873186][ T59] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 531.907461][ T59] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 531.968258][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 532.075165][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 532.186388][ T59] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 278ms [ 532.231089][ T59] gfs2: fsid=syz:syz.0: jid=0: Done [ 532.267490][T10135] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 533.128630][ T59] usb 4-1: USB disconnect, device number 14 [ 533.485414][ T9132] bio_check_eod: 36 callbacks suppressed [ 533.485467][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 533.485467][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 533.907855][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 533.907855][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 534.217019][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 534.217019][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 534.296761][T10205] loop4: detected capacity change from 0 to 512 [ 534.298576][T10207] loop2: detected capacity change from 0 to 64 [ 534.349542][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 534.349542][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 534.489825][T10205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.505164][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 534.505164][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 534.565398][T10205] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.595337][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 534.595337][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 535.177222][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 535.177222][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 535.495510][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 535.495510][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 535.665378][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 535.665378][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 535.815227][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 535.815227][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 536.419119][T10235] input: syz0 as /devices/virtual/input/input12 [ 536.425734][T10235] input: failed to attach handler leds to device input12, error: -6 [ 536.995395][ T6427] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 537.432507][ T29] audit: type=1326 audit(1723747419.681:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.3.1147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff633f799b9 code=0x0 [ 537.704483][ T9356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.784859][ T6427] usb 6-1: Using ep0 maxpacket: 16 [ 537.816335][ T6427] usb 6-1: config 0 has no interfaces? [ 537.825986][ T6427] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 537.844977][ T6427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.875463][ T6427] usb 6-1: Product: syz [ 537.879901][ T6427] usb 6-1: Manufacturer: syz [ 537.894755][ T6427] usb 6-1: SerialNumber: syz [ 537.946315][ T6427] usb 6-1: config 0 descriptor?? [ 537.965304][ T5294] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 538.164603][ T6427] usb 6-1: USB disconnect, device number 15 [ 538.172284][ T5294] usb 3-1: Using ep0 maxpacket: 16 [ 538.206102][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.241949][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.275079][ T5294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.339865][ T5294] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 538.365088][ T5294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.404865][ T5294] usb 3-1: config 0 descriptor?? [ 538.507961][ T9132] bio_check_eod: 21 callbacks suppressed [ 538.507983][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 538.507983][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 538.624308][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 538.624308][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 538.786113][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 538.786113][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 538.960410][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 538.960410][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 539.147213][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 539.147213][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 539.161320][ T5294] usbhid 3-1:0.0: can't add hid device: -71 [ 539.198609][ T5294] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 539.295906][ T5294] usb 3-1: USB disconnect, device number 11 [ 539.302742][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 539.302742][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 539.416298][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 539.416298][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 539.551964][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 539.551964][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 539.665439][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 539.665439][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 539.735333][T10281] loop4: detected capacity change from 0 to 1024 [ 539.798337][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 539.798337][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 540.133581][T10288] loop2: detected capacity change from 0 to 128 [ 540.518160][ T56] hfsplus: b-tree write err: -5, ino 4 [ 540.662246][T10302] input: syz0 as /devices/virtual/input/input13 [ 540.668953][T10302] input: failed to attach handler leds to device input13, error: -6 [ 541.610931][T10304] openvswitch: netlink: Key 6 has unexpected len 196 expected 2 [ 541.840530][ T29] audit: type=1326 audit(1723747424.091:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.2.1164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d0e9799b9 code=0x0 [ 542.047675][ T5332] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 542.498635][ T6427] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 542.775181][ T5332] usb 5-1: Using ep0 maxpacket: 16 [ 542.810131][ T5332] usb 5-1: config 0 has no interfaces? [ 542.852634][ T5332] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 542.893927][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.940252][ T5332] usb 5-1: Product: syz [ 542.963155][ T5332] usb 5-1: Manufacturer: syz [ 542.983985][ T5332] usb 5-1: SerialNumber: syz [ 543.107035][ T5332] usb 5-1: config 0 descriptor?? [ 543.392829][ T5332] usb 5-1: USB disconnect, device number 14 [ 543.485110][ T6427] usb 6-1: Using ep0 maxpacket: 8 [ 543.525156][ T6427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.535193][ T9132] bio_check_eod: 36 callbacks suppressed [ 543.535212][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 543.535212][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 543.548780][ T6427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.584942][ T6427] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.625120][ T6427] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 543.644519][ T6427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.666196][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 543.666196][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 543.682311][ T6427] usb 6-1: config 0 descriptor?? [ 543.775198][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 543.775198][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 543.876188][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 543.876188][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 543.962980][T10336] loop1: detected capacity change from 0 to 128 [ 544.000629][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 544.000629][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 544.131102][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 544.131102][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 544.265695][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 544.265695][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 544.442225][T10345] input: syz0 as /devices/virtual/input/input14 [ 544.448813][T10345] input: failed to attach handler leds to device input14, error: -6 [ 545.056632][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 545.056632][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 546.936175][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 546.936175][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 547.048605][ T6427] sunplus 0003:04FC:05D8.0009: item fetching failed at offset 5/7 [ 547.062255][ T6427] sunplus 0003:04FC:05D8.0009: probe with driver sunplus failed with error -22 [ 547.079216][ T6427] usb 6-1: USB disconnect, device number 16 [ 547.159687][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 547.159687][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 547.650362][T10361] loop1: detected capacity change from 0 to 4096 [ 547.657905][T10361] ntfs3: Unknown parameter '' [ 548.526517][ T29] audit: type=1326 audit(1723747430.791:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.1.1181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f942b9799b9 code=0x0 [ 548.575678][ T9132] bio_check_eod: 8 callbacks suppressed [ 548.575701][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 548.575701][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 548.710563][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 548.710563][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 548.727031][T10384] loop4: detected capacity change from 0 to 1024 [ 548.825223][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 548.825223][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 548.892995][T10387] loop2: detected capacity change from 0 to 128 [ 548.932069][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 548.932069][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 549.200874][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 549.200874][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 549.995724][ T59] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 550.015269][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 550.015269][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 550.165535][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 550.165535][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 550.246095][ T59] usb 4-1: Using ep0 maxpacket: 16 [ 550.254813][ T59] usb 4-1: config 0 has no interfaces? [ 550.278946][ T1278] hfsplus: b-tree write err: -5, ino 4 [ 550.299117][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 550.299117][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 550.324672][ T59] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 550.351522][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.389945][ T59] usb 4-1: Product: syz [ 550.394186][ T59] usb 4-1: Manufacturer: syz [ 550.405422][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 550.405422][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 550.485921][ T59] usb 4-1: SerialNumber: syz [ 550.498036][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 550.498036][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 550.562794][ T59] usb 4-1: config 0 descriptor?? [ 550.821798][ T59] usb 4-1: USB disconnect, device number 15 [ 550.851436][T10415] syz.2.1197[10415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.851639][T10415] syz.2.1197[10415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.751815][T10429] loop4: detected capacity change from 0 to 128 [ 551.831565][ T29] audit: type=1326 audit(1723747434.091:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.3.1204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff633f799b9 code=0x0 [ 553.387165][T10447] loop2: detected capacity change from 0 to 16 [ 553.398474][T10445] pim6reg1: entered promiscuous mode [ 553.403827][T10445] pim6reg1: entered allmulticast mode [ 553.419487][T10447] erofs: (device loop2): erofs_read_superblock: invalid sb_extslots 4208 (more than a fs block) [ 553.591255][ T9132] bio_check_eod: 36 callbacks suppressed [ 553.591283][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 553.591283][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 553.845819][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 553.845819][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 554.605207][ T29] audit: type=1804 audit(1723747436.841:104): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1211" name="/newroot/49/file0/bus" dev="hugetlbfs" ino=39692 res=1 errno=0 [ 554.670797][ T29] audit: type=1804 audit(1723747436.851:105): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1211" name="/newroot/49/file0/bus" dev="hugetlbfs" ino=39692 res=1 errno=0 [ 554.700290][T10460] syz.3.1215[10460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.700501][T10460] syz.3.1215[10460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.845224][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 554.845224][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 555.011289][ T29] audit: type=1804 audit(1723747436.901:106): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1211" name="/newroot/49/file0/bus" dev="hugetlbfs" ino=39692 res=1 errno=0 [ 555.279153][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 555.279153][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 555.385383][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 555.385383][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 555.505117][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 555.505117][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 555.625325][ T5294] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 555.635857][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 555.635857][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 555.845768][ T5294] usb 5-1: Using ep0 maxpacket: 16 [ 555.866812][ T5294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.918689][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 555.918689][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 555.962575][ T5294] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 556.037241][ T5294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.102950][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 556.102950][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 556.127313][ T5294] usb 5-1: Product: syz [ 556.166262][ T5294] usb 5-1: Manufacturer: syz [ 556.200956][ T5294] usb 5-1: SerialNumber: syz [ 556.266418][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 556.266418][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 556.306748][ T5294] usb 5-1: config 0 descriptor?? [ 556.558278][T10490] loop2: detected capacity change from 0 to 16 [ 556.602483][T10490] erofs: (device loop2): erofs_read_superblock: invalid sb_extslots 4208 (more than a fs block) [ 556.657999][ T5332] usb 5-1: USB disconnect, device number 15 [ 557.132096][T10502] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1234'. [ 557.134126][ T29] audit: type=1804 audit(1723747439.341:107): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1229" name="/newroot/53/file0/bus" dev="hugetlbfs" ino=39752 res=1 errno=0 [ 557.214728][ T29] audit: type=1804 audit(1723747439.351:108): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1229" name="/newroot/53/file0/bus" dev="hugetlbfs" ino=39752 res=1 errno=0 [ 557.320732][ T29] audit: type=1804 audit(1723747439.381:109): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1229" name="/newroot/53/file0/bus" dev="hugetlbfs" ino=39752 res=1 errno=0 [ 557.479645][T10512] Cannot find set identified by id 0 to match [ 558.625158][ T9132] bio_check_eod: 26 callbacks suppressed [ 558.625183][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 558.625183][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 558.779512][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 558.779512][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 558.915280][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 558.915280][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 559.059518][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 559.059518][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 559.175186][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 559.175186][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 559.301365][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 559.301365][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 559.437035][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 559.437035][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 559.489221][T10547] ªªªªªª: renamed from vlan0 (while UP) [ 559.578082][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 559.578082][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 559.707398][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 559.707398][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 559.808760][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 559.808760][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 560.216120][ T9132] XFS: Failing async write: 218 callbacks suppressed [ 560.216147][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 561.152962][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 561.277420][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 561.375102][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 561.465461][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 561.585107][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 561.585285][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 561.603043][T10567] netlink: 'syz.3.1262': attribute type 21 has an invalid length. [ 561.638007][T10567] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1262'. [ 561.677632][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 561.789432][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 561.836069][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 561.850541][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.895890][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 561.902377][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.955095][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.975492][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 562.015233][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 562.053862][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.117899][ T9] usb 5-1: config 0 descriptor?? [ 572.385699][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 572.429844][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 572.475976][ T9132] bio_check_eod: 20 callbacks suppressed [ 572.476017][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 572.476017][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 572.500097][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.515843][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.537969][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 572.537969][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 572.641480][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 572.641480][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 572.924190][ T9] usb 5-1: USB disconnect, device number 16 [ 572.965343][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 572.965343][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 573.165221][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 573.165221][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 573.325591][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 573.325591][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 573.455136][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 573.455136][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 573.607323][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 573.607323][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 573.758253][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 573.758253][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 573.934916][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 573.934916][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 574.946237][ T5233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 574.979243][ T5233] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 574.990698][ T5233] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 575.018685][ T5233] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 575.032534][ T5233] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 575.042789][ T5237] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 575.065899][ T5237] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 575.080435][ T5237] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 575.103391][ T5237] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 575.139677][T10608] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 575.175664][T10608] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 575.185449][T10608] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 575.227417][ T5233] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 575.241059][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 575.255683][ T5233] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 575.269506][ T5233] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 575.275240][T10611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 575.295434][ T5233] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 575.299465][T10611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 575.315593][ T5233] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 575.324626][ T5233] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 575.327190][T10611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 575.342313][T10611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 575.350205][T10611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 575.476124][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 575.497301][ T5247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 575.508382][T10608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 575.509111][ T5247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 575.521678][T10608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 575.523672][ T5247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 575.555994][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 575.566878][T10608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 575.592471][T10608] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 575.600343][T10608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.608446][ T5247] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 575.617715][ T5247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 576.068074][T10362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.208448][T10362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.368845][T10362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.519014][T10362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.159827][T10613] chnl_net:caif_netlink_parms(): no params data found [ 577.341091][T10604] chnl_net:caif_netlink_parms(): no params data found [ 577.365546][T10608] Bluetooth: hci8: command tx timeout [ 577.372704][T10362] bridge_slave_1: left allmulticast mode [ 577.381335][T10362] bridge_slave_1: left promiscuous mode [ 577.388011][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.399627][T10362] bridge_slave_0: left allmulticast mode [ 577.408838][T10362] bridge_slave_0: left promiscuous mode [ 577.417472][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.435598][T10608] Bluetooth: hci0: command tx timeout [ 577.517890][ T9132] bio_check_eod: 52 callbacks suppressed [ 577.517915][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 577.517915][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 577.525330][T10608] Bluetooth: hci9: command tx timeout [ 577.540762][T10611] Bluetooth: hci10: command tx timeout [ 577.607761][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 577.607761][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 577.682952][T10611] Bluetooth: hci6: command tx timeout [ 577.683748][T10608] Bluetooth: hci1: command tx timeout [ 577.695793][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 577.695793][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 577.765248][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 577.765248][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 577.846654][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 577.846654][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 577.950928][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 577.950928][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 578.073093][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 578.073093][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 578.135867][T10362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.159832][T10362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.175162][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 578.175162][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 578.192461][T10362] bond0 (unregistering): Released all slaves [ 578.261127][T10616] chnl_net:caif_netlink_parms(): no params data found [ 578.268147][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 578.268147][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 578.395259][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 578.395259][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 578.624894][T10603] chnl_net:caif_netlink_parms(): no params data found [ 578.689267][T10601] chnl_net:caif_netlink_parms(): no params data found [ 579.011310][T10609] chnl_net:caif_netlink_parms(): no params data found [ 579.172862][T10613] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.181941][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.189871][T10613] bridge_slave_0: entered allmulticast mode [ 579.198414][T10613] bridge_slave_0: entered promiscuous mode [ 579.223663][T10616] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.244671][T10616] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.253767][T10616] bridge_slave_0: entered allmulticast mode [ 579.264828][T10616] bridge_slave_0: entered promiscuous mode [ 579.277896][T10616] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.285189][T10616] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.292460][T10616] bridge_slave_1: entered allmulticast mode [ 579.308284][T10616] bridge_slave_1: entered promiscuous mode [ 579.375367][T10604] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.382580][T10604] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.405344][T10604] bridge_slave_0: entered allmulticast mode [ 579.414959][T10604] bridge_slave_0: entered promiscuous mode [ 579.435401][T10608] Bluetooth: hci8: command tx timeout [ 579.440845][T10604] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.465256][T10604] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.472740][T10604] bridge_slave_1: entered allmulticast mode [ 579.481249][T10604] bridge_slave_1: entered promiscuous mode [ 579.514349][T10613] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.525338][T10608] Bluetooth: hci0: command tx timeout [ 579.525899][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.541848][T10613] bridge_slave_1: entered allmulticast mode [ 579.550139][T10613] bridge_slave_1: entered promiscuous mode [ 579.595277][T10608] Bluetooth: hci10: command tx timeout [ 579.600822][T10608] Bluetooth: hci9: command tx timeout [ 579.721496][T10603] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.728977][T10603] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.737149][T10603] bridge_slave_0: entered allmulticast mode [ 579.744646][T10603] bridge_slave_0: entered promiscuous mode [ 579.758791][T10608] Bluetooth: hci6: command tx timeout [ 579.758843][T10611] Bluetooth: hci1: command tx timeout [ 579.807148][T10613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.902844][T10362] hsr_slave_0: left promiscuous mode [ 579.909440][T10362] hsr_slave_1: left promiscuous mode [ 579.922719][T10362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.930508][T10362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.939028][T10362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.946497][T10362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.979539][T10362] veth1_macvtap: left promiscuous mode [ 579.985163][T10362] veth0_macvtap: left promiscuous mode [ 579.990786][T10362] veth1_vlan: left promiscuous mode [ 579.996443][T10362] veth0_vlan: left promiscuous mode [ 580.645595][T10362] team0 (unregistering): Port device team_slave_1 removed [ 580.717468][T10362] team0 (unregistering): Port device team_slave_0 removed [ 581.252825][T10603] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.269660][T10603] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.281468][T10603] bridge_slave_1: entered allmulticast mode [ 581.290667][T10603] bridge_slave_1: entered promiscuous mode [ 581.330155][T10613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.371606][T10616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.385948][T10616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.421674][T10604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.477162][T10603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.515550][T10611] Bluetooth: hci8: command tx timeout [ 581.551949][T10601] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.559427][T10601] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.568011][T10601] bridge_slave_0: entered allmulticast mode [ 581.575757][T10601] bridge_slave_0: entered promiscuous mode [ 581.586995][T10604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.595742][T10611] Bluetooth: hci0: command tx timeout [ 581.644738][T10603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.675476][T10611] Bluetooth: hci9: command tx timeout [ 581.680613][T10613] team0: Port device team_slave_0 added [ 581.680889][T10611] Bluetooth: hci10: command tx timeout [ 581.723663][T10616] team0: Port device team_slave_0 added [ 581.730393][T10601] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.738651][T10601] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.746379][T10601] bridge_slave_1: entered allmulticast mode [ 581.754945][T10601] bridge_slave_1: entered promiscuous mode [ 581.787971][T10604] team0: Port device team_slave_0 added [ 581.844614][T10603] team0: Port device team_slave_0 added [ 581.850001][T10608] Bluetooth: hci6: command tx timeout [ 581.852698][T10611] Bluetooth: hci1: command tx timeout [ 581.880538][T10613] team0: Port device team_slave_1 added [ 581.927176][T10609] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.934357][T10609] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.942512][T10609] bridge_slave_0: entered allmulticast mode [ 581.953544][T10609] bridge_slave_0: entered promiscuous mode [ 581.963775][T10616] team0: Port device team_slave_1 added [ 582.039891][T10601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.052188][T10604] team0: Port device team_slave_1 added [ 582.060763][T10603] team0: Port device team_slave_1 added [ 582.099865][T10609] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.114618][T10609] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.127079][T10609] bridge_slave_1: entered allmulticast mode [ 582.134910][T10609] bridge_slave_1: entered promiscuous mode [ 582.178172][T10616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.185541][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.211833][T10616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.234298][T10601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.292658][T10603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.305577][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.337696][T10603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.350910][T10613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.358369][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.384888][T10613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.402673][T10613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.410130][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.438321][T10613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.458450][T10609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.469601][T10616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.478047][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.504832][T10616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.528288][ T9132] bio_check_eod: 65 callbacks suppressed [ 582.528307][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 582.528307][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 582.569412][T10604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.576874][T10604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.603108][T10604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.613748][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 582.613748][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 582.630194][T10604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.644706][T10604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.670712][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 582.670712][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 582.684704][T10604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.699019][T10603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.706312][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.745308][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 582.745308][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 582.774243][T10603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.798864][T10609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.841613][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 582.841613][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 582.901403][T10601] team0: Port device team_slave_0 added [ 582.918662][T10601] team0: Port device team_slave_1 added [ 582.925622][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 582.925622][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 583.001481][T10601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.009670][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.037819][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 583.037819][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 583.038381][T10601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.125246][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 583.125246][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 583.195932][T10601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.202920][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.230571][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 583.230571][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 583.264280][T10601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.314891][T10616] hsr_slave_0: entered promiscuous mode [ 583.325279][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 583.325279][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 583.354359][T10616] hsr_slave_1: entered promiscuous mode [ 583.362028][T10616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.370194][T10616] Cannot create hsr debugfs directory [ 583.506873][T10609] team0: Port device team_slave_0 added [ 583.528200][T10609] team0: Port device team_slave_1 added [ 583.541316][T10604] hsr_slave_0: entered promiscuous mode [ 583.560261][T10604] hsr_slave_1: entered promiscuous mode [ 583.577668][T10604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.595163][T10608] Bluetooth: hci8: command tx timeout [ 583.595391][T10604] Cannot create hsr debugfs directory [ 583.676768][T10608] Bluetooth: hci0: command tx timeout [ 583.693918][T10603] hsr_slave_0: entered promiscuous mode [ 583.717431][T10603] hsr_slave_1: entered promiscuous mode [ 583.724133][T10603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.745202][T10603] Cannot create hsr debugfs directory [ 583.755623][T10608] Bluetooth: hci10: command tx timeout [ 583.762893][T10608] Bluetooth: hci9: command tx timeout [ 583.807297][T10601] hsr_slave_0: entered promiscuous mode [ 583.816152][T10601] hsr_slave_1: entered promiscuous mode [ 583.823176][T10601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.831688][T10601] Cannot create hsr debugfs directory [ 583.902225][T10613] hsr_slave_0: entered promiscuous mode [ 583.909474][T10613] hsr_slave_1: entered promiscuous mode [ 583.916070][ T5247] Bluetooth: hci6: command tx timeout [ 583.922157][T10608] Bluetooth: hci1: command tx timeout [ 583.922196][T10613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.935382][T10613] Cannot create hsr debugfs directory [ 584.044075][T10609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.051161][T10609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.087882][T10609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.103519][T10609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.110839][T10609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.137603][T10609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.483660][T10362] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.617318][T10609] hsr_slave_0: entered promiscuous mode [ 584.624212][T10609] hsr_slave_1: entered promiscuous mode [ 584.631928][T10609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.639865][T10609] Cannot create hsr debugfs directory [ 584.679599][T10362] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.892295][T10362] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.127357][T10611] Bluetooth: hci2: command 0x0406 tx timeout [ 585.154219][T10362] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.424826][T10604] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.596835][T10604] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.751054][T10604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.868988][T10362] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.916154][T10604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.984876][T10362] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.069114][T10362] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.148750][T10601] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.202095][T10362] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.269764][T10601] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.382011][T10601] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.556630][T10601] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.662118][T10362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.810520][T10362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.891911][T10362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.000492][T10362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.267398][T10362] bridge_slave_1: left allmulticast mode [ 587.273097][T10362] bridge_slave_1: left promiscuous mode [ 587.295594][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.315241][T10362] bridge_slave_0: left allmulticast mode [ 587.320912][T10362] bridge_slave_0: left promiscuous mode [ 587.327356][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.339942][T10362] bridge_slave_1: left allmulticast mode [ 587.349633][T10362] bridge_slave_1: left promiscuous mode [ 587.356868][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.389179][T10362] bridge_slave_0: left allmulticast mode [ 587.394855][T10362] bridge_slave_0: left promiscuous mode [ 587.401168][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.417839][T10362] bridge_slave_1: left allmulticast mode [ 587.423505][T10362] bridge_slave_1: left promiscuous mode [ 587.430627][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.441129][T10362] bridge_slave_0: left allmulticast mode [ 587.449391][T10362] bridge_slave_0: left promiscuous mode [ 587.455864][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.471333][T10362] bridge_slave_1: left allmulticast mode [ 587.478088][T10362] bridge_slave_1: left promiscuous mode [ 587.483871][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.515970][T10362] bridge_slave_0: left allmulticast mode [ 587.521845][T10362] bridge_slave_0: left promiscuous mode [ 587.544237][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.561033][T10362] bridge_slave_1: left allmulticast mode [ 587.567407][T10362] bridge_slave_1: left promiscuous mode [ 587.573160][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.585378][ T9132] bio_check_eod: 68 callbacks suppressed [ 587.585397][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 587.585397][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 587.610145][T10362] bridge_slave_0: left allmulticast mode [ 587.615976][T10362] bridge_slave_0: left promiscuous mode [ 587.621830][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.686852][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 587.686852][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 587.786741][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 587.786741][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 587.865346][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 587.865346][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 587.945993][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 587.945993][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 588.035450][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 588.035450][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 588.125282][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 588.125282][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 588.205733][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 588.205733][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 588.280909][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 588.280909][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 588.365637][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 588.365637][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 589.625558][T10362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.640927][T10362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.653482][T10362] bond0 (unregistering): Released all slaves [ 589.794439][T10362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.819706][T10362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.833124][T10362] bond0 (unregistering): Released all slaves [ 589.993334][T10362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.015733][T10362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.028126][T10362] bond0 (unregistering): Released all slaves [ 590.180125][T10362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.192692][T10362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.210818][T10362] bond0 (unregistering): Released all slaves [ 590.235558][ T9132] XFS: Failing async write: 264 callbacks suppressed [ 590.235580][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 590.319666][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 590.385425][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 590.423265][T10362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.436250][T10362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.451268][T10362] bond0 (unregistering): Released all slaves [ 590.476169][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 590.556223][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 590.665203][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 590.735132][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 590.795589][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 590.921226][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 590.995535][ T9132] XFS (loop3): Failing async write on buffer block 0x0. Retrying async write. [ 592.540225][T10362] hsr_slave_0: left promiscuous mode [ 592.550006][T10362] hsr_slave_1: left promiscuous mode [ 592.558014][T10362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.573518][T10362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.586362][T10362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.593799][T10362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.621011][T10362] hsr_slave_0: left promiscuous mode [ 592.635766][ T30] INFO: task syz.3.916:9147 blocked for more than 145 seconds. [ 592.643376][ T30] Not tainted 6.11.0-rc3-syzkaller-00066-g1fb918967b56 #0 [ 592.652760][ T9132] bio_check_eod: 64 callbacks suppressed [ 592.652780][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 592.652780][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 592.685040][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.716222][ T30] task:syz.3.916 state:D stack:24888 pid:9147 tgid:9088 ppid:6954 flags:0x00004004 [ 592.745042][ T30] Call Trace: [ 592.748536][ T30] [ 592.751590][ T30] __schedule+0x1800/0x4a60 [ 592.785141][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 592.785141][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 592.845149][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 592.850888][ T30] ? __pfx___schedule+0x10/0x10 [ 592.865197][ T30] ? __pfx_lock_release+0x10/0x10 [ 592.870305][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 592.891797][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 592.898022][ T30] ? schedule+0x90/0x320 [ 592.902320][ T30] schedule+0x14b/0x320 [ 592.907032][ T30] xfs_ail_push_all_sync+0x236/0x310 [ 592.912371][ T30] ? __pfx_xfs_ail_push_all_sync+0x10/0x10 [ 592.918858][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 592.925201][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 592.925201][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 592.939235][ T30] ? __pfx_xfs_sync_sb+0x10/0x10 [ 592.944228][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 592.950692][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 592.956770][ T30] xfs_log_quiesce+0x30e/0x5b0 [ 592.961631][ T30] ? xfs_reserve_blocks+0x297/0x2d0 [ 592.967342][ T30] xfs_fs_freeze+0x8d/0x1a0 [ 592.971878][ T30] freeze_super+0x81d/0xee0 [ 592.978109][ T30] ? __pfx_freeze_super+0x10/0x10 [ 592.983267][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 592.989008][ T30] ? __pfx_up_write+0x10/0x10 [ 592.993882][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 592.999943][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.005666][ T30] ? _raw_spin_unlock+0x28/0x50 [ 593.010561][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.016511][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 593.016511][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 593.024777][ T30] ? bdev_super_lock+0x2a6/0x360 [ 593.035715][ T30] fs_bdev_freeze+0x1ac/0x320 [ 593.040432][ T30] bdev_freeze+0xd8/0x220 [ 593.044785][ T30] xfs_fs_goingdown+0xa9/0x160 [ 593.049692][ T30] xfs_file_ioctl+0x12d7/0x19e0 [ 593.054575][ T30] ? __pfx_xfs_file_ioctl+0x10/0x10 [ 593.059847][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.065596][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.071260][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 593.077708][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 593.083488][ T30] ? __pfx_lock_release+0x10/0x10 [ 593.085506][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 593.085506][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 593.088639][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.107522][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.113205][ T30] ? kfree+0x149/0x360 [ 593.118028][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.123693][ T30] ? tomoyo_path_number_perm+0x71a/0x880 [ 593.130115][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 593.136145][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 593.142194][ T30] ? __fget_files+0x29/0x470 [ 593.147420][ T30] ? __fget_files+0x3f6/0x470 [ 593.152228][ T30] ? __fget_files+0x29/0x470 [ 593.155423][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 593.155423][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 593.157715][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.176212][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.182018][ T30] ? security_file_ioctl+0x87/0xb0 [ 593.187579][ T30] ? __pfx_xfs_file_ioctl+0x10/0x10 [ 593.192797][ T30] __se_sys_ioctl+0xfe/0x170 [ 593.197904][ T30] do_syscall_64+0xf3/0x230 [ 593.202524][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.208966][ T30] RIP: 0033:0x7f78a3d799b9 [ 593.213396][ T30] RSP: 002b:00007f78a3bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.222316][ T30] RAX: ffffffffffffffda RBX: 00007f78a3f16058 RCX: 00007f78a3d799b9 [ 593.230440][ T30] RDX: 0000000020000080 RSI: 000000008004587d RDI: 0000000000000006 [ 593.235504][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 593.235504][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 593.239179][ T30] RBP: 00007f78a3de78d8 R08: 0000000000000000 R09: 0000000000000000 [ 593.260306][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.268813][ T30] R13: 0000000000000000 R14: 00007f78a3f16058 R15: 00007ffcb4422848 [ 593.278642][ T30] [ 593.281892][T10362] hsr_slave_1: left promiscuous mode [ 593.285449][ T30] [ 593.285449][ T30] Showing all locks held in the system: [ 593.295306][ T30] 1 lock held by khungtaskd/30: [ 593.300172][ T30] #0: ffffffff8e9382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 593.315608][ T30] 3 locks held by kworker/u8:6/1278: [ 593.320920][ T30] #0: ffff888015881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 593.333243][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 593.333243][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 593.334974][ T30] #1: ffffc900047c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 593.358722][ T30] #2: ffffffff8fc82788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 593.367826][ T30] 3 locks held by kworker/u8:8/2939: [ 593.373178][ T30] 1 lock held by dhcpcd/4890: [ 593.378366][ T30] #0: ffffffff8fc82788 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 593.387844][ T30] 2 locks held by getty/4979: [ 593.392558][ T30] #0: ffff88802fd290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 593.402672][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 593.405443][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 593.405443][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 593.412936][ T30] 3 locks held by kworker/1:6/5292: [ 593.431578][ T30] #0: ffff888015879948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 593.453005][ T30] #1: ffffc90004377d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 593.464309][ T30] #2: ffffffff8fc82788 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 593.474417][ T30] 5 locks held by syz.3.916/9147: [ 593.479646][ T30] #0: ffff88801dc98d30 (&bdev->bd_fsfreeze_mutex){+.+.}-{3:3}, at: bdev_freeze+0x2a/0x220 [ 593.489927][ T30] #1: ffff88807c7c4420 (sb_writers#30){++++}-{0:0}, at: freeze_super+0x4e9/0xee0 [ 593.495451][ T9132] xfsaild/loop3: attempt to access beyond end of device [ 593.495451][ T9132] loop3: rw=4097, sector=0, nr_sectors = 1 limit=0 [ 593.499637][ T30] #2: ffff88807c7c40e0 (&type->s_umount_key#83){++++}-{3:3}, at: freeze_super+0x4f1/0xee0 [ 593.524269][ T30] #3: ffff88807c7c4518 (sb_pagefaults#4){++++}-{0:0}, at: freeze_super+0x519/0xee0 [ 593.534461][ T30] #4: ffff88807c7c4610 (sb_internal#4){++++}-{0:0}, at: freeze_super+0x7cc/0xee0 [ 593.544237][ T30] 1 lock held by syz.0.1035/9728: [ 593.549797][ T30] #0: ffff88807c7c40e0 (&type->s_umount_key#83){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 593.560237][ T30] 5 locks held by kworker/u8:15/10362: [ 593.566183][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 593.578213][ T30] #1: ffffc90009797d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 593.589330][ T30] #2: ffffffff8fc75c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 593.600186][ T30] #3: ffffffff8fc82788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 593.610670][ T30] #4: ffffffff8e93d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 593.621729][ T30] 4 locks held by syz-executor/10601: [ 593.627247][ T30] #0: ffff8880303f8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 593.636478][ T30] #1: ffff88802e472488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 593.646513][ T30] #2: ffff8880230abf08 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 593.656897][ T30] #3: ffffffff8f51f288 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 593.667487][ T30] 4 locks held by syz-executor/10603: [ 593.673071][ T30] #0: ffff8880303f8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 593.682091][ T30] #1: ffff88801fc6bc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 593.692183][ T30] #2: ffff8880230abf08 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 593.703079][ T30] #3: ffffffff8f51f288 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 593.713648][ T30] 4 locks held by syz-executor/10604: [ 593.719381][ T30] #0: ffff8880303f8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 593.728508][ T30] #1: ffff8880307e8888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 593.738431][ T30] #2: ffff8880230abf08 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 593.748695][ T30] #3: ffffffff8f51f288 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 593.759653][ T30] 7 locks held by syz-executor/10609: [ 593.765210][ T30] #0: ffff8880303f8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 593.774196][ T30] #1: ffff8880307e8088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 593.784513][ T30] #2: ffff8880230a8008 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 593.794788][ T30] #3: ffffffff8f51f288 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 593.806033][ T30] #4: ffff88802a4c10e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 593.816916][ T30] #5: ffff88802a4c0250 (&devlink->lock_key#31){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 593.827318][ T30] #6: ffffffff8fc82788 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 593.836535][ T30] 4 locks held by syz-executor/10613: [ 593.841927][ T30] #0: ffff8880303f8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 593.851061][ T30] #1: ffff88802cb24888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 593.861732][ T30] #2: ffff8880230abf08 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 593.872048][ T30] #3: ffffffff8f51f288 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 593.882548][ T30] 4 locks held by syz-executor/10616: [ 593.888083][ T30] #0: ffff8880303f8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 593.897452][ T30] #1: ffff888027554088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 593.908190][ T30] #2: ffff8880230abf08 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 593.918772][ T30] #3: ffffffff8f51f288 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 593.929519][ T30] [ 593.931896][ T30] ============================================= [ 593.931896][ T30] [ 593.940500][ T30] NMI backtrace for cpu 0 [ 593.940702][T10362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.944905][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00066-g1fb918967b56 #0 [ 593.962772][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 593.963191][T10362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.972821][ T30] Call Trace: [ 593.972838][ T30] [ 593.972850][ T30] dump_stack_lvl+0x241/0x360 [ 593.972904][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.996242][ T30] ? __pfx__printk+0x10/0x10 [ 594.000865][ T30] ? vprintk_emit+0x631/0x770 [ 594.005563][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 594.010617][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 594.015582][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 594.021042][ T30] ? _printk+0xd5/0x120 [ 594.025289][ T30] ? __pfx__printk+0x10/0x10 [ 594.029971][ T30] ? __wake_up_klogd+0xcc/0x110 [ 594.034844][ T30] ? __pfx__printk+0x10/0x10 [ 594.039548][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.045220][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 594.050313][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 594.056333][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 594.062352][ T30] watchdog+0xfee/0x1030 [ 594.066622][ T30] ? watchdog+0x1ea/0x1030 [ 594.071097][ T30] ? __pfx_watchdog+0x10/0x10 [ 594.075823][ T30] kthread+0x2f2/0x390 [ 594.079917][ T30] ? __pfx_watchdog+0x10/0x10 [ 594.084608][ T30] ? __pfx_kthread+0x10/0x10 [ 594.089222][ T30] ret_from_fork+0x4d/0x80 [ 594.093650][ T30] ? __pfx_kthread+0x10/0x10 [ 594.098260][ T30] ret_from_fork_asm+0x1a/0x30 [ 594.103059][ T30] [ 594.107419][ T30] Sending NMI from CPU 0 to CPUs 1: [ 594.112645][ C1] NMI backtrace for cpu 1 [ 594.112659][ C1] CPU: 1 UID: 0 PID: 2939 Comm: kworker/u8:8 Not tainted 6.11.0-rc3-syzkaller-00066-g1fb918967b56 #0 [ 594.112684][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 594.112699][ C1] Workqueue: bat_events batadv_nc_worker [ 594.112733][ C1] RIP: 0010:kasan_check_range+0xc/0x290 [ 594.112772][ C1] Code: 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 54 53 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f 82 56 02 [ 594.112791][ C1] RSP: 0018:ffffc900098e78c0 EFLAGS: 00000046 [ 594.112810][ C1] RAX: 0000000000000000 RBX: 0000000000000021 RCX: ffffffff816fd99f [ 594.112826][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9372f840 [ 594.112841][ C1] RBP: 0000000000000002 R08: ffffffff9372f847 R09: 1ffffffff26e5f08 [ 594.112857][ C1] R10: dffffc0000000000 R11: fffffbfff26e5f09 R12: ffff88802b7b0000 [ 594.112879][ C1] R13: 0000000000000021 R14: 1ffff110056f616a R15: ffff88802b7b0b50 [ 594.112898][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 594.112917][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.112932][ C1] CR2: 00005562f416c131 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 594.112950][ C1] Call Trace: [ 594.112959][ C1] [ 594.112968][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 594.112995][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 594.113030][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 594.113068][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 594.113098][ C1] ? nmi_handle+0x151/0x5a0 [ 594.113120][ C1] ? nmi_handle+0x2a/0x5a0 [ 594.113143][ C1] ? kasan_check_range+0xc/0x290 [ 594.113177][ C1] ? default_do_nmi+0x63/0x160 [ 594.113205][ C1] ? exc_nmi+0x123/0x1f0 [ 594.113231][ C1] ? end_repeat_nmi+0xf/0x53 [ 594.113264][ C1] ? __lock_acquire+0x5df/0x2040 [ 594.113296][ C1] ? kasan_check_range+0xc/0x290 [ 594.113336][ C1] ? kasan_check_range+0xc/0x290 [ 594.113373][ C1] ? kasan_check_range+0xc/0x290 [ 594.113408][ C1] [ 594.113416][ C1] [ 594.113425][ C1] __lock_acquire+0x5df/0x2040 [ 594.113469][ C1] lock_acquire+0x1ed/0x550 [ 594.113499][ C1] ? batadv_nc_worker+0xcb/0x610 [ 594.113534][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 594.113566][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.113596][ C1] ? batadv_nc_worker+0xcb/0x610 [ 594.113626][ C1] ? __pfx_lock_release+0x10/0x10 [ 594.113661][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 594.113698][ C1] batadv_nc_worker+0xec/0x610 [ 594.113728][ C1] ? batadv_nc_worker+0xcb/0x610 [ 594.113757][ C1] ? batadv_nc_worker+0xcb/0x610 [ 594.113789][ C1] ? process_scheduled_works+0x945/0x1830 [ 594.113820][ C1] process_scheduled_works+0xa2e/0x1830 [ 594.113869][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 594.113906][ C1] ? assign_work+0x364/0x3d0 [ 594.113939][ C1] worker_thread+0x86d/0xd40 [ 594.113980][ C1] ? __kthread_parkme+0x169/0x1d0 [ 594.114014][ C1] ? __pfx_worker_thread+0x10/0x10 [ 594.114046][ C1] kthread+0x2f2/0x390 [ 594.114081][ C1] ? __pfx_worker_thread+0x10/0x10 [ 594.114111][ C1] ? __pfx_kthread+0x10/0x10 [ 594.114147][ C1] ret_from_fork+0x4d/0x80 [ 594.114180][ C1] ? __pfx_kthread+0x10/0x10 [ 594.114215][ C1] ret_from_fork_asm+0x1a/0x30 [ 594.114258][ C1] [ 594.129449][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 594.129466][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00066-g1fb918967b56 #0 [ 594.129495][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 594.129511][ T30] Call Trace: [ 594.129523][ T30] [ 594.129533][ T30] dump_stack_lvl+0x241/0x360 [ 594.129588][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.129631][ T30] ? __pfx__printk+0x10/0x10 [ 594.129668][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 594.129715][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.129750][ T30] ? vscnprintf+0x5d/0x90 [ 594.129783][ T30] panic+0x349/0x860 [ 594.129821][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.129857][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 594.129892][ T30] ? __pfx_panic+0x10/0x10 [ 594.129928][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 594.129959][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.129992][ T30] ? __irq_work_queue_local+0x137/0x410 [ 594.130030][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.130064][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 594.130094][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 594.130125][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 594.130160][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.571696][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 594.577875][ T30] watchdog+0x102d/0x1030 [ 594.582220][ T30] ? watchdog+0x1ea/0x1030 [ 594.586742][ T30] ? __pfx_watchdog+0x10/0x10 [ 594.591431][ T30] kthread+0x2f2/0x390 [ 594.595518][ T30] ? __pfx_watchdog+0x10/0x10 [ 594.600206][ T30] ? __pfx_kthread+0x10/0x10 [ 594.604808][ T30] ret_from_fork+0x4d/0x80 [ 594.609237][ T30] ? __pfx_kthread+0x10/0x10 [ 594.613842][ T30] ret_from_fork_asm+0x1a/0x30 [ 594.618634][ T30] [ 594.621853][ T30] Kernel Offset: disabled [ 594.626198][ T30] Rebooting in 86400 seconds..