last executing test programs: 2m41.606569076s ago: executing program 2 (id=267): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000080)={'syzkaller1\x00', @ifru_map={0xbb37, 0x3, 0x307, 0x0, 0xa, 0x9e}}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xffffffff, 0xfffffffd}}, 0x10) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x0, 0x3f, 0xc}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003800), 0x2, 0x0) writev(r6, &(0x7f0000001000)=[{}], 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x1000, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x71, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x4}, {0x0, 0x2, 0x8000000000}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'rmd160-generic\x00'}, 0x0, 0x180}}]}, 0x13c}}, 0x0) 2m38.751320983s ago: executing program 2 (id=274): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x2c, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00004dd000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m37.971358227s ago: executing program 2 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008090}, 0x20040080) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m37.673956238s ago: executing program 2 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r2], 0x378}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2m37.008493788s ago: executing program 2 (id=277): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") open(0x0, 0x185102, 0x2b) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x103041, 0x16) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2m35.824846213s ago: executing program 2 (id=281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setfsgid(0xee00) r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000100)='stack\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) 2m20.007355974s ago: executing program 32 (id=281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setfsgid(0xee00) r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000100)='stack\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m53.770903527s ago: executing program 5 (id=377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7], 0x3c}}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r5, @ANYRESHEX, @ANYRESOCT=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xfffffe3d, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="610000005000030425bd70000000000000000000", @ANYRES64=r5, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c00028003000000000000000800", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) 1m50.347275212s ago: executing program 0 (id=384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1m48.045857574s ago: executing program 0 (id=386): read$midi(0xffffffffffffffff, &(0x7f00000012c0)=""/232, 0xe8) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x103) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r1, 0x0, 0x0, 0x9000f3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x80010, r1, 0x5000) 1m47.216575256s ago: executing program 5 (id=387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1m46.814957766s ago: executing program 5 (id=388): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xffffffffc1902008, 0xfff8, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1m46.350962632s ago: executing program 5 (id=390): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 1m46.068945819s ago: executing program 0 (id=392): fspick(0xffffffffffffffff, 0x0, 0x710acacef034d5b6) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [{@euid_lt}], 0x6b}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de32", 0x51) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 1m45.751357901s ago: executing program 5 (id=395): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") open(0x0, 0x185102, 0x2b) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x16) pwritev2(r1, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) 1m43.046835228s ago: executing program 5 (id=401): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xffffffffc1902008, 0xfff8, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1m41.173393248s ago: executing program 3 (id=408): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x1, &(0x7f0000000300)={0x7fff, 0x6}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x3) r2 = userfaultfd(0x801) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000206010400000000000000000000000005000100070000000900020073797a19000000000500050002000000050004000800000015000300686173683a69702c706f7274"], 0x50}, 0x1, 0x0, 0x0, 0x44090}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, 0x0) 1m40.607642558s ago: executing program 0 (id=412): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="05000000810d00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0300006001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) 1m40.042620691s ago: executing program 0 (id=413): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") open(0x0, 0x185102, 0x2b) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x16) pwritev2(r1, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) 1m38.787075082s ago: executing program 0 (id=416): unshare(0x26020480) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f00000003c0)) 1m38.006917033s ago: executing program 3 (id=419): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) socket(0x10, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602", @ANYRES8=0x0, @ANYRES16], 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x3ae9, 0xc7, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m36.20905877s ago: executing program 3 (id=426): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 1m32.590023101s ago: executing program 3 (id=427): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) 1m32.250307999s ago: executing program 3 (id=428): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") open(0x0, 0x185102, 0x2b) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x16) pwritev2(r1, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) 1m31.776611392s ago: executing program 3 (id=429): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x203f) read$FUSE(r1, &(0x7f0000004640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000000280)={0x90, 0x0, r4, {0x3, 0x0, 0x9, 0xc0c4, 0x3, 0x9, {0x3, 0x81, 0x2, 0x100, 0x5, 0x100000001, 0x1, 0xff, 0x1, 0x0, 0x7, r2, r3, 0x2, 0x401}}}, 0x90) 1m31.094616576s ago: executing program 6 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32], 0x378}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1m30.737576299s ago: executing program 6 (id=435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m30.306948269s ago: executing program 6 (id=436): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4090, 0xffa}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f0000000340)=""/261, 0x105}, {&(0x7f0000001a40)=""/152, 0x98}, {&(0x7f0000000100)=""/147, 0x93}], 0x8}, 0x81}], 0x3, 0x2140, 0x0) 1m26.285536687s ago: executing program 33 (id=401): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xffffffffc1902008, 0xfff8, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1m24.858870778s ago: executing program 6 (id=440): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000800000300012800b00010067656e657665000020000280080005000000000014000700ff0000000000000500000000000000011400350067656e65766531"], 0x64}}, 0x0) 1m24.701856342s ago: executing program 6 (id=441): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") open(0x0, 0x185102, 0x2b) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x16) pwritev2(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) 1m22.526328104s ago: executing program 34 (id=416): unshare(0x26020480) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f00000003c0)) 1m22.501372219s ago: executing program 6 (id=446): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f00000012c0)=""/4117, 0x1015) 1m22.234905819s ago: executing program 4 (id=449): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0) sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[], 0x54, 0x20000040}, 0x4000880) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) 1m18.378340751s ago: executing program 4 (id=450): quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0xee00, 0x0) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@map_acorn}, {@cruft}, {@check_relaxed}, {@session={'session', 0x3d, 0x20}}]}, 0x1, 0xabe, &(0x7f0000002300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$midi(0xffffffffffffffff, &(0x7f00000023c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x20, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2085}, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f00000017c0)={0x7, 'vlan0\x00', {0x8}, 0x7ff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) mount$cgroup(0x0, 0x0, &(0x7f0000002dc0), 0x8000, 0x0) 1m15.959511609s ago: executing program 35 (id=429): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x203f) read$FUSE(r1, &(0x7f0000004640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000000280)={0x90, 0x0, r4, {0x3, 0x0, 0x9, 0xc0c4, 0x3, 0x9, {0x3, 0x81, 0x2, 0x100, 0x5, 0x100000001, 0x1, 0xff, 0x1, 0x0, 0x7, r2, r3, 0x2, 0x401}}}, 0x90) 1m15.930215953s ago: executing program 4 (id=454): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x17, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) 1m15.598977756s ago: executing program 4 (id=456): pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8, 0xc) 1m14.952874254s ago: executing program 4 (id=457): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") open(0x0, 0x185102, 0x2b) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x16) pwritev2(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) 1m14.158540705s ago: executing program 4 (id=460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) r3 = dup3(r2, r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r3, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 1m6.320628635s ago: executing program 36 (id=446): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f00000012c0)=""/4117, 0x1015) 57.872443824s ago: executing program 37 (id=460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) r3 = dup3(r2, r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r3, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 4.705764619s ago: executing program 1 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb783, 0x80, 0x0, 0x1b7}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0x0, 0xff}]}) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r6, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f4, 0x0, 0x0, 0x0, 0x0) 3.520351156s ago: executing program 1 (id=515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x5, 0xe, r0, 0x0}]) 2.734867933s ago: executing program 1 (id=516): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x12}, 0x10) 1.737331373s ago: executing program 1 (id=517): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus/file0\x00', 0x1d8) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000340)) capget(&(0x7f0000000240)={0x20080522, r0}, &(0x7f0000000300)={0x9, 0x8, 0xffff, 0xb, 0x5, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 466.083801ms ago: executing program 1 (id=518): unshare(0x400) r0 = socket$l2tp6(0xa, 0x2, 0x73) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xe3, 0x4}, 0x20) 0s ago: executing program 1 (id=519): syz_open_procfs$pagemap(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) r8 = syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x0, 0xbb7d145fe5634b8d, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x1, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "", "8e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x2, {0x7, 0x25, 0x1, 0x3, 0x0, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r8, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r8, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000001505000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r11}) write$binfmt_register(r9, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46]}, 0x44) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) kernel console output (not intermixed with test programs): shing journal and stopping allocators complete, journal seq 4 [ 150.523588][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.583207][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 150.651873][ T5861] bcachefs (loop0): marking filesystem clean [ 150.658110][ T5865] usb usb36-port1: attempt power cycle [ 150.792432][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.997696][ T5861] bcachefs (loop0): shutdown complete [ 151.296154][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.392264][ T5865] usb usb36-port1: unable to enumerate USB device [ 151.943878][ T917] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 152.200108][ T917] usb 6-1: Using ep0 maxpacket: 8 [ 152.217885][ T917] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.250452][ T917] usb 6-1: config 179 has no interface number 0 [ 152.271066][ T917] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 152.322278][ T917] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 152.367626][ T917] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 152.387950][ T6501] loop4: detected capacity change from 0 to 8 [ 152.395136][ T6501] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 152.585585][ T917] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.777039][ T6506] cramfs: Error -5 while decompressing! [ 152.782658][ T6506] cramfs: ffffffff99bf6668(26)->ffff88804aade000(4096) [ 152.789512][ T6506] cramfs: Error -3 while decompressing! [ 152.795340][ T6506] cramfs: ffffffff99bf6682(26)->ffff88804aadf000(4096) [ 152.802217][ T6506] cramfs: Error -3 while decompressing! [ 152.807745][ T6506] cramfs: ffffffff99bf669c(16)->ffff88804aae0000(4096) [ 152.814675][ T6506] cramfs: Error -5 while decompressing! [ 152.820200][ T6506] cramfs: ffffffff99bf6668(26)->ffff88804aade000(4096) [ 152.837029][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 152.837049][ T30] audit: type=1800 audit(1757947651.014:60): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.142" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 152.859867][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop4 [ 152.893128][ T917] usb 6-1: config 179 interface 65 has no altsetting 0 [ 152.902645][ T3546] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.920719][ T917] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 153.131439][ T917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.424884][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop4 [ 153.967389][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 154.312948][ T90] net_ratelimit: 13 callbacks suppressed [ 154.312973][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.796825][ T917] usb 6-1: USB disconnect, device number 3 [ 154.957872][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.969318][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.980285][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.023208][ T6530] capability: warning: `syz.5.151' uses deprecated v2 capabilities in a way that may be insecure [ 155.454394][ T6511] loop2: detected capacity change from 0 to 32768 [ 155.689616][ T6511] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 155.717116][ T6511] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.852217][ T6542] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 155.858866][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 155.873473][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 155.886902][ T6549] usbip_core: unknown command [ 155.974921][ T6549] vhci_hcd: unknown pdu 0 [ 155.979327][ T6549] usbip_core: unknown command [ 155.986614][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.996495][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.004859][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.013185][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.037614][ T3546] vhci_hcd: stop threads [ 156.041898][ T3546] vhci_hcd: release socket [ 156.088272][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.101324][ T3546] vhci_hcd: disconnect device [ 156.141873][ T6511] XFS (loop2): Ending clean mount [ 156.206717][ T6511] XFS (loop2): Quotacheck needed: Please wait. [ 156.267213][ T6511] XFS (loop2): Quotacheck: Done. [ 156.607667][ T5863] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.717877][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.765707][ T6554] loop5: detected capacity change from 0 to 128 [ 156.805069][ T6554] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.958054][ T6554] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.513479][ T6565] loop2: detected capacity change from 0 to 8 [ 158.520361][ T6565] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 158.771104][ T6566] cramfs: Error -5 while decompressing! [ 158.776755][ T6566] cramfs: ffffffff99bf2668(26)->ffff88804b096000(4096) [ 158.783838][ T6566] cramfs: Error -3 while decompressing! [ 158.789370][ T6566] cramfs: ffffffff99bf2682(26)->ffff88804b097000(4096) [ 158.796354][ T6566] cramfs: Error -3 while decompressing! [ 158.801876][ T6566] cramfs: ffffffff99bf269c(16)->ffff88804b0ac000(4096) [ 158.808837][ T6566] cramfs: Error -5 while decompressing! [ 158.815993][ T6566] cramfs: ffffffff99bf2668(26)->ffff88804b096000(4096) [ 158.824155][ T30] audit: type=1800 audit(1757947657.014:61): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.157" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 158.833784][ T5882] udevd[5882]: incorrect cramfs checksum on /dev/loop2 [ 159.024232][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop2 [ 159.764942][ T5956] net_ratelimit: 14 callbacks suppressed [ 159.764967][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.153385][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.192299][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.205073][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.522067][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.648737][ T6039] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.682562][ T6011] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.887589][ T6011] usb 1-1: Using ep0 maxpacket: 8 [ 161.073364][ T6011] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 161.102910][ T6011] usb 1-1: config 179 has no interface number 0 [ 161.125574][ T6011] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 161.192541][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.273867][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.353821][ T6589] loop1: detected capacity change from 0 to 32768 [ 161.457431][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.643041][ T6011] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 161.658467][ T6011] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 161.674455][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.682985][ T6011] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 161.684748][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.811479][ T6589] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 161.811513][ T6589] allowing incompatible features above 0.0: (unknown version) [ 161.811527][ T6589] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 161.856333][ T6589] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 161.864540][ T6589] bcachefs (loop1): initializing new filesystem [ 161.881092][ T6589] bcachefs (loop1): going read-write [ 161.893634][ T6011] usb 1-1: config 179 interface 65 has no altsetting 0 [ 161.901365][ T6011] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 161.910701][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.013738][ T6589] bcachefs (loop1): marking superblocks [ 162.028067][ T6589] bcachefs (loop1): initializing freespace [ 162.037753][ T6589] bcachefs (loop1): done initializing freespace [ 162.046601][ T6589] bcachefs (loop1): reading snapshots table [ 162.052615][ T6589] bcachefs (loop1): reading snapshots done [ 162.154538][ T6589] bcachefs (loop1): done starting filesystem [ 162.927137][ T5858] bcachefs (loop1): shutting down [ 162.958094][ T5858] bcachefs (loop1): going read-only [ 162.986706][ T5858] bcachefs (loop1): finished waiting for writes to stop [ 163.288468][ T5858] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 163.395368][ T6622] sg_write: data in/out 852092/81 bytes for SCSI command 0x1c-- guessing data in; [ 163.395368][ T6622] program syz.5.171 not setting count and/or reply_len properly [ 163.427953][ T6012] usb 1-1: USB disconnect, device number 5 [ 164.062913][ T6627] loop0: detected capacity change from 0 to 8 [ 164.069995][ T6627] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 164.258270][ T5882] udevd[5882]: incorrect cramfs checksum on /dev/loop0 [ 164.371082][ T5882] udevd[5882]: incorrect cramfs checksum on /dev/loop0 [ 164.381245][ T6627] cramfs: Error -5 while decompressing! [ 164.386817][ T6627] cramfs: ffffffff99bf6668(26)->ffff88804af40000(4096) [ 164.393716][ T6627] cramfs: Error -3 while decompressing! [ 164.399326][ T6627] cramfs: ffffffff99bf6682(26)->ffff88804af41000(4096) [ 164.406217][ T6627] cramfs: Error -3 while decompressing! [ 164.411746][ T6627] cramfs: ffffffff99bf669c(16)->ffff88804af42000(4096) [ 164.418694][ T6627] cramfs: Error -5 while decompressing! [ 164.424356][ T6627] cramfs: ffffffff99bf6668(26)->ffff88804af40000(4096) [ 164.441796][ T30] audit: type=1800 audit(1757947662.614:62): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.174" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 164.493384][ T6630] loop3: detected capacity change from 0 to 8 [ 164.500208][ T6630] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 164.510049][ T5858] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 164.716563][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop3 [ 164.722918][ T5858] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 164.733700][ T5858] bcachefs (loop1): marking filesystem clean [ 164.865319][ T6633] cramfs: Error -5 while decompressing! [ 164.870905][ T6633] cramfs: ffffffff99bf2668(26)->ffff888048d86000(4096) [ 164.880438][ T6633] cramfs: Error -3 while decompressing! [ 164.886057][ T6633] cramfs: ffffffff99bf2682(26)->ffff888048d87000(4096) [ 164.892959][ T6633] cramfs: Error -3 while decompressing! [ 164.898505][ T6633] cramfs: ffffffff99bf269c(16)->ffff888048d88000(4096) [ 164.905440][ T6633] cramfs: Error -5 while decompressing! [ 164.910980][ T6633] cramfs: ffffffff99bf2668(26)->ffff888048d86000(4096) [ 165.105862][ T30] audit: type=1800 audit(1757947663.104:63): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 165.192633][ T5865] net_ratelimit: 12 callbacks suppressed [ 165.192659][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.212904][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop3 [ 165.305434][ T5858] bcachefs (loop1): shutdown complete [ 165.433639][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.514255][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.515235][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.522854][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.538860][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.239389][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.440117][ T6648] loop2: detected capacity change from 0 to 1024 [ 166.563085][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.571737][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.313149][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.346377][ T6039] hfsplus: b-tree write err: -5, ino 4 [ 168.497153][ T6664] loop2: detected capacity change from 0 to 4096 [ 168.648965][ T6665] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.262265][ T5958] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 169.462717][ T5958] usb 6-1: Using ep0 maxpacket: 8 [ 169.491063][ T5958] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 169.531068][ T5958] usb 6-1: config 179 has no interface number 0 [ 169.752524][ T6671] loop3: detected capacity change from 0 to 32768 [ 169.760755][ T5958] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 169.782289][ T5958] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 169.800291][ T5958] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 169.811632][ T5958] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.861607][ T5958] usb 6-1: config 179 interface 65 has no altsetting 0 [ 169.897472][ T5958] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 169.927033][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.069262][ T6671] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 170.069291][ T6671] allowing incompatible features above 0.0: (unknown version) [ 170.069302][ T6671] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 170.116393][ T6671] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 170.124620][ T6671] bcachefs (loop3): initializing new filesystem [ 170.137739][ T6671] bcachefs (loop3): going read-write [ 170.196248][ T5958] usb 6-1: USB disconnect, device number 4 [ 170.474151][ T6011] net_ratelimit: 16 callbacks suppressed [ 170.474177][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.052898][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.061022][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.061100][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.112392][ T6671] bcachefs (loop3): marking superblocks [ 171.131166][ T6671] bcachefs (loop3): initializing freespace [ 171.142582][ T6671] bcachefs (loop3): done initializing freespace [ 171.151083][ T6671] bcachefs (loop3): reading snapshots table [ 171.157102][ T6671] bcachefs (loop3): reading snapshots done [ 171.264231][ T6671] bcachefs (loop3): done starting filesystem [ 171.275433][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.543018][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.587078][ T6694] loop5: detected capacity change from 0 to 8 [ 171.593991][ T6694] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 171.912727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.924223][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.139499][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.149818][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.491404][ T6698] cramfs: Error -5 while decompressing! [ 172.497068][ T6698] cramfs: ffffffff99bf6668(26)->ffff888076de3000(4096) [ 172.504021][ T6698] cramfs: Error -3 while decompressing! [ 172.509561][ T6698] cramfs: ffffffff99bf6682(26)->ffff888076de2000(4096) [ 172.516496][ T6698] cramfs: Error -3 while decompressing! [ 172.522039][ T6698] cramfs: ffffffff99bf669c(16)->ffff888076615000(4096) [ 172.529172][ T6698] cramfs: Error -5 while decompressing! [ 172.534949][ T6698] cramfs: ffffffff99bf6668(26)->ffff888076de3000(4096) [ 172.853642][ T30] audit: type=1800 audit(1757947670.734:64): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.190" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 172.870745][ T6063] udevd[6063]: incorrect cramfs checksum on /dev/loop5 [ 172.883129][ T5859] bcachefs (loop3): shutting down [ 172.925122][ T5859] bcachefs (loop3): going read-only [ 172.930399][ T5859] bcachefs (loop3): finished waiting for writes to stop [ 173.062991][ T5859] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 173.238506][ T5859] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 173.372174][ T5859] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 173.414428][ T5859] bcachefs (loop3): marking filesystem clean [ 173.834687][ T5859] bcachefs (loop3): shutdown complete [ 173.955627][ T6715] sg_write: data in/out 852092/81 bytes for SCSI command 0x1c-- guessing data in; [ 173.955627][ T6715] program syz.5.197 not setting count and/or reply_len properly [ 175.350274][ T6702] loop0: detected capacity change from 0 to 32768 [ 175.420650][ T6702] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 175.564948][ T6702] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 175.893842][ T6702] XFS (loop0): Ending clean mount [ 175.971126][ T6702] XFS (loop0): Quotacheck needed: Please wait. [ 176.009123][ T6012] net_ratelimit: 17 callbacks suppressed [ 176.009146][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.109358][ T6702] XFS (loop0): Quotacheck: Done. [ 176.267541][ T5861] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.393270][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.401524][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.038407][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.432565][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.440823][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.072856][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.192509][ T5956] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 178.383483][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 178.395981][ T5956] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 178.419948][ T5956] usb 2-1: config 179 has no interface number 0 [ 178.432186][ T5956] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 178.461069][ T5956] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 178.473214][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.481379][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.482695][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.522862][ T5958] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 178.540586][ T5956] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 178.561037][ T5956] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 178.613744][ T5956] usb 2-1: config 179 interface 65 has no altsetting 0 [ 178.628442][ T5956] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 178.647299][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.702566][ T5958] usb 6-1: Using ep0 maxpacket: 32 [ 178.709828][ T5958] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.720534][ T5958] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 178.755246][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.801512][ T5958] usb 6-1: config 0 descriptor?? [ 178.878839][ T6012] usb 2-1: USB disconnect, device number 3 [ 179.128847][ T6756] tipc: Started in network mode [ 179.161761][ T6756] tipc: Node identity 92cf33f9d42a, cluster identity 4711 [ 179.178894][ T6756] tipc: Enabled bearer , priority 0 [ 179.194595][ T6762] syzkaller0: entered promiscuous mode [ 179.202677][ T6763] loop4: detected capacity change from 0 to 8 [ 179.227338][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop4 [ 179.231003][ T6763] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 179.250771][ T6762] syzkaller0: entered allmulticast mode [ 180.256240][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop4 [ 180.492870][ T6758] cramfs: Error -5 while decompressing! [ 180.498454][ T6758] cramfs: ffffffff99bf2668(26)->ffff888071332000(4096) [ 180.505377][ T6758] cramfs: Error -3 while decompressing! [ 180.510916][ T6758] cramfs: ffffffff99bf2682(26)->ffff888071333000(4096) [ 180.517823][ T6758] cramfs: Error -3 while decompressing! [ 180.526576][ T6758] cramfs: ffffffff99bf269c(16)->ffff88806b49e000(4096) [ 180.533558][ T6758] cramfs: Error -5 while decompressing! [ 180.539129][ T6758] cramfs: ffffffff99bf2668(26)->ffff888071332000(4096) [ 180.840538][ T30] audit: type=1800 audit(1757947678.734:65): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.207" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 180.897830][ T5958] tipc: Node number set to 1189426169 [ 180.955198][ T6765] tipc: Resetting bearer [ 180.993243][ T6755] tipc: Resetting bearer [ 180.993765][ T6774] Zero length message leads to an empty skb [ 181.088572][ T6755] tipc: Disabling bearer [ 181.397004][ T5956] usb 6-1: USB disconnect, device number 5 [ 181.410782][ T6776] loop4: detected capacity change from 0 to 32768 [ 181.420664][ T5988] net_ratelimit: 8 callbacks suppressed [ 181.420680][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.436869][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.452996][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.526025][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.534424][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.542775][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.553126][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.680502][ T6776] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 181.680538][ T6776] allowing incompatible features above 0.0: (unknown version) [ 181.680553][ T6776] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 181.725240][ T6776] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 181.733574][ T6776] bcachefs (loop4): initializing new filesystem [ 181.748039][ T6776] bcachefs (loop4): going read-write [ 181.820304][ T6776] bcachefs (loop4): marking superblocks [ 181.839850][ T6776] bcachefs (loop4): initializing freespace [ 181.849519][ T6776] bcachefs (loop4): done initializing freespace [ 181.859299][ T6776] bcachefs (loop4): reading snapshots table [ 181.865364][ T6776] bcachefs (loop4): reading snapshots done [ 181.935892][ T6776] bcachefs (loop4): done starting filesystem [ 182.209849][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.242891][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.215'. [ 182.810134][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.819010][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.159158][ T5862] bcachefs (loop4): shutting down [ 183.255238][ T5862] bcachefs (loop4): going read-only [ 183.260484][ T5862] bcachefs (loop4): finished waiting for writes to stop [ 183.297925][ T6796] syz_tun: entered promiscuous mode [ 183.316354][ T6809] loop3: detected capacity change from 0 to 128 [ 183.344873][ T6809] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.357224][ T5862] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4 [ 183.502270][ T6809] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.650990][ T5862] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4 [ 183.859025][ T6796] macvtap1: entered promiscuous mode [ 183.864736][ T6796] macvtap1: entered allmulticast mode [ 183.870127][ T6796] syz_tun: entered allmulticast mode [ 183.884726][ T5862] bcachefs (loop4): clean shutdown complete, journal seq 5 [ 184.445269][ T5862] bcachefs (loop4): marking filesystem clean [ 184.513273][ T59] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.715823][ T5862] bcachefs (loop4): shutdown complete [ 184.947533][ T6819] loop3: detected capacity change from 0 to 512 [ 185.886435][ T6819] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 185.982374][ T6819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.128358][ T6819] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 186.247999][ T6819] EXT4-fs (loop3): 1 truncate cleaned up [ 186.265835][ T6819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.864826][ T6836] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 186.900727][ T6012] net_ratelimit: 12 callbacks suppressed [ 186.900746][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.922269][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.952418][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.593324][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.697740][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.912332][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.992719][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.016982][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.314027][ T6849] loop5: detected capacity change from 0 to 32768 [ 188.679680][ T6849] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 188.679713][ T6849] allowing incompatible features above 0.0: (unknown version) [ 188.679735][ T6849] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 188.725319][ T6849] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 188.733529][ T6849] bcachefs (loop5): initializing new filesystem [ 188.746349][ T6849] bcachefs (loop5): going read-write [ 188.832376][ T6849] bcachefs (loop5): marking superblocks [ 188.846440][ T6849] bcachefs (loop5): initializing freespace [ 188.856220][ T6849] bcachefs (loop5): done initializing freespace [ 188.865186][ T6849] bcachefs (loop5): reading snapshots table [ 188.871143][ T6849] bcachefs (loop5): reading snapshots done [ 188.902046][ T6849] bcachefs (loop5): done starting filesystem [ 188.954472][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.136700][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.859350][ T5860] bcachefs (loop5): shutting down [ 189.903762][ T5860] bcachefs (loop5): going read-only [ 189.909021][ T5860] bcachefs (loop5): finished waiting for writes to stop [ 190.053001][ T5860] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 190.522948][ T5860] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 190.576251][ T5860] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 190.635471][ T5860] bcachefs (loop5): marking filesystem clean [ 190.721011][ T5859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.012022][ T6879] netlink: 'syz.1.235': attribute type 4 has an invalid length. [ 191.026103][ T5860] bcachefs (loop5): shutdown complete [ 191.075850][ T6884] netlink: 'syz.1.235': attribute type 4 has an invalid length. [ 191.616812][ T6890] netlink: 36 bytes leftover after parsing attributes in process `syz.3.236'. [ 192.074703][ T5865] net_ratelimit: 13 callbacks suppressed [ 192.074729][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.552633][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.802735][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.814906][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.112948][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.473942][ T6883] loop2: detected capacity change from 0 to 32768 [ 193.490670][ T5965] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.564267][ T6883] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 193.629389][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.686641][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.703344][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.721404][ T6883] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.731024][ T5965] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.755665][ T5965] usb 1-1: config 0 has no interface number 0 [ 193.764739][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.773788][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.785890][ T5965] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 193.805309][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.832346][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.834220][ T5965] usb 1-1: Product: syz [ 193.893789][ T5965] usb 1-1: Manufacturer: syz [ 193.918728][ T5965] usb 1-1: SerialNumber: syz [ 193.943756][ T5965] usb 1-1: config 0 descriptor?? [ 194.060078][ T6883] XFS (loop2): Ending clean mount [ 194.085731][ T6883] XFS (loop2): Quotacheck needed: Please wait. [ 194.152457][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.181385][ T5965] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 194.217923][ T6883] XFS (loop2): Quotacheck: Done. [ 194.301802][ T5965] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.349573][ T5863] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 194.358755][ T5965] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 194.379443][ T5965] usb 1-1: media controller created [ 194.387709][ T6903] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 194.491066][ T5965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.582981][ T6913] loop1: detected capacity change from 0 to 1024 [ 194.651233][ T5965] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 194.869880][ T5965] usb 1-1: USB disconnect, device number 6 [ 194.879823][ T6916] netlink: 52 bytes leftover after parsing attributes in process `syz.3.243'. [ 195.330063][ T6923] loop4: detected capacity change from 0 to 128 [ 195.543691][ T6924] loop0: detected capacity change from 0 to 32768 [ 195.561113][ T6923] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.599449][ T1136] hfsplus: b-tree write err: -5, ino 4 [ 195.642802][ T6926] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 195.649452][ T6926] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.671225][ T6923] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.689121][ T6926] vhci_hcd vhci_hcd.0: Device attached [ 196.022997][ T6924] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 196.023032][ T6924] allowing incompatible features above 0.0: (unknown version) [ 196.023047][ T6924] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 196.067756][ T6924] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 196.076046][ T6924] bcachefs (loop0): initializing new filesystem [ 196.093065][ T6924] bcachefs (loop0): going read-write [ 196.152473][ T5865] usb 40-1: SetAddress Request (3) to port 0 [ 196.167178][ T5865] usb 40-1: new SuperSpeed USB device number 3 using vhci_hcd [ 196.196608][ T6924] bcachefs (loop0): marking superblocks [ 196.279616][ T6924] bcachefs (loop0): initializing freespace [ 196.327942][ T6924] bcachefs (loop0): done initializing freespace [ 196.356444][ T6924] bcachefs (loop0): reading snapshots table [ 196.362765][ T6924] bcachefs (loop0): reading snapshots done [ 196.869139][ T1161] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.895100][ T6924] bcachefs (loop0): done starting filesystem [ 197.128460][ T5988] net_ratelimit: 10 callbacks suppressed [ 197.128487][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.454163][ T6924] syz.0.246 (6924) used greatest stack depth: 15864 bytes left [ 197.699731][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.753379][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.824494][ T5861] bcachefs (loop0): shutting down [ 197.837402][ T5861] bcachefs (loop0): going read-only [ 197.845551][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 198.051435][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4 [ 198.162705][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.479492][ T6958] loop5: detected capacity change from 0 to 32768 [ 198.767399][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.940897][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.958441][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.495948][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.684653][ T6958] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 199.684682][ T6958] allowing incompatible features above 0.0: (unknown version) [ 199.684693][ T6958] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 199.729448][ T6958] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 199.737627][ T6958] bcachefs (loop5): initializing new filesystem [ 199.750148][ T6958] bcachefs (loop5): going read-write [ 199.818361][ T6958] bcachefs (loop5): marking superblocks [ 199.830049][ T6958] bcachefs (loop5): initializing freespace [ 199.832428][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.839624][ T6958] bcachefs (loop5): done initializing freespace [ 199.852522][ T6958] bcachefs (loop5): reading snapshots table [ 199.858436][ T6958] bcachefs (loop5): reading snapshots done [ 199.890027][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5 [ 199.912852][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.932432][ T6958] bcachefs (loop5): done starting filesystem [ 200.859117][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 6 [ 200.866763][ T5860] bcachefs (loop5): shutting down [ 200.871782][ T5860] bcachefs (loop5): going read-only [ 200.892450][ T5860] bcachefs (loop5): finished waiting for writes to stop [ 200.902667][ T5861] bcachefs (loop0): marking filesystem clean [ 200.997337][ T5860] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 201.147811][ T6983] fuse: Bad value for 'user_id' [ 201.152873][ T6983] fuse: Bad value for 'user_id' [ 201.278190][ T5861] bcachefs (loop0): shutdown complete [ 201.645592][ T5860] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 201.744789][ T5860] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 201.790785][ T5860] bcachefs (loop5): marking filesystem clean [ 202.234358][ T917] net_ratelimit: 11 callbacks suppressed [ 202.234379][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.277545][ T5860] bcachefs (loop5): shutdown complete [ 202.533274][ T6929] vhci_hcd: connection reset by peer [ 202.586078][ T49] vhci_hcd: stop threads [ 202.590366][ T49] vhci_hcd: release socket [ 202.613652][ T49] vhci_hcd: disconnect device [ 202.613722][ T5865] usb 40-1: device descriptor read/8, error -110 [ 202.812397][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.957618][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.966125][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.065832][ T5865] usb usb40-port1: attempt power cycle [ 203.118011][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.237389][ T30] audit: type=1326 audit(1757947701.424:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.4.256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72a58eba9 code=0x0 [ 203.485907][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.852360][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.903147][ T6996] netlink: 52 bytes leftover after parsing attributes in process `syz.2.258'. [ 204.020513][ T5865] usb usb40-port1: unable to enumerate USB device [ 204.152800][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.221663][ T7002] loop1: detected capacity change from 0 to 4096 [ 204.565319][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.575077][ T7008] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.780234][ T7010] program syz.2.262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.872538][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.978340][ T7020] loop4: detected capacity change from 0 to 32768 [ 206.139053][ T7020] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 206.139079][ T7020] allowing incompatible features above 0.0: (unknown version) [ 206.139091][ T7020] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 206.183609][ T7020] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 206.191774][ T7020] bcachefs (loop4): initializing new filesystem [ 206.204056][ T7020] bcachefs (loop4): going read-write [ 206.762814][ T7020] bcachefs (loop4): marking superblocks [ 206.775410][ T7020] bcachefs (loop4): initializing freespace [ 206.785808][ T7020] bcachefs (loop4): done initializing freespace [ 206.795018][ T7020] bcachefs (loop4): reading snapshots table [ 206.800946][ T7020] bcachefs (loop4): reading snapshots done [ 206.824963][ T7020] bcachefs (loop4): done starting filesystem [ 207.738824][ T5865] net_ratelimit: 9 callbacks suppressed [ 207.738847][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.802361][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.882338][ T5862] bcachefs (loop4): shutting down [ 207.887401][ T5862] bcachefs (loop4): going read-only [ 207.974953][ T5862] bcachefs (loop4): finished waiting for writes to stop [ 208.152633][ T5862] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 208.172239][ T7055] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 208.178852][ T7055] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 208.232825][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.241399][ T7055] vhci_hcd vhci_hcd.0: Device attached [ 208.298637][ T5862] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 208.364485][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.472335][ T5862] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 208.502826][ T5862] bcachefs (loop4): marking filesystem clean [ 208.553420][ T5865] usb 34-1: SetAddress Request (2) to port 0 [ 208.559499][ T5865] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 208.789896][ T5862] bcachefs (loop4): shutdown complete [ 208.795634][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.821985][ T7069] fuse: Unknown parameter '0x00000000000000060xffffffffffffffff0000000000000000000000000000000000000000' [ 208.874517][ T7069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.273'. [ 208.909985][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.053133][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.111271][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.274745][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.978984][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.996690][ T30] audit: type=1326 audit(1757947707.914:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.3.272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa78118eba9 code=0x0 [ 210.549200][ T7068] loop5: detected capacity change from 0 to 32768 [ 210.598891][ T7080] loop2: detected capacity change from 0 to 4096 [ 210.697957][ T7068] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 210.728673][ T7068] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 210.836579][ T7087] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.059818][ T7068] XFS (loop5): Ending clean mount [ 211.103351][ T7080] loop2: detected capacity change from 4096 to 64 [ 211.116638][ T7068] XFS (loop5): Quotacheck needed: Please wait. [ 211.358964][ T7056] vhci_hcd: connection reset by peer [ 211.393046][ T36] vhci_hcd: stop threads [ 211.397361][ T36] vhci_hcd: release socket [ 211.423488][ T7068] XFS (loop5): Quotacheck: Done. [ 211.486590][ T36] vhci_hcd: disconnect device [ 212.220838][ T5860] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.618290][ T5863] syz-executor: attempt to access beyond end of device [ 212.618290][ T5863] loop2: rw=395265, sector=4088, nr_sectors = 2 limit=64 [ 212.661087][ T5863] Buffer I/O error on dev loop2, logical block 2044, lost sync page write [ 212.674872][ T7103] netlink: 132 bytes leftover after parsing attributes in process `syz.3.283'. [ 212.691900][ T5863] NILFS (loop2): unable to write superblock: err=-5 [ 213.113268][ T6011] net_ratelimit: 14 callbacks suppressed [ 213.113291][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.623014][ T5865] usb 34-1: device descriptor read/8, error -110 [ 213.798460][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.810964][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.939581][ T1161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.943222][ T5956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.960434][ T7118] loop1: detected capacity change from 0 to 128 [ 214.024181][ T5956] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.030869][ T7118] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.052256][ T5865] usb usb34-port1: attempt power cycle [ 214.116991][ T7118] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.169356][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.169356][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.251812][ T1161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.580619][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.881460][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.896538][ T5865] usb usb34-port1: unable to enumerate USB device [ 215.114495][ T1161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.216652][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.242339][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.259203][ T972] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.272535][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.488499][ T1161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.513615][ T7111] loop0: detected capacity change from 0 to 32768 [ 215.660898][ T7132] jfs_mkdir: dtInsert returned -EIO [ 215.719514][ T7132] ERROR: (device loop0): jfs_mkdir: [ 215.719514][ T7132] [ 215.779376][ T7132] ERROR: (device loop0): remounting filesystem as read-only [ 216.113946][ T30] audit: type=1326 audit(1757947714.044:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa78118eba9 code=0x0 [ 216.240655][ T5179] Bluetooth: hci3: command 0x0406 tx timeout [ 216.257196][ T5179] Bluetooth: hci4: command 0x0406 tx timeout [ 216.257609][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 216.265827][ T5179] Bluetooth: hci2: command 0x0405 tx timeout [ 217.511905][ T1161] bridge_slave_1: left allmulticast mode [ 217.554705][ T1161] bridge_slave_1: left promiscuous mode [ 217.562786][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.612320][ T5865] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 217.735193][ T1161] bridge_slave_0: left allmulticast mode [ 217.770663][ T1161] bridge_slave_0: left promiscuous mode [ 217.793821][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.816355][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.860533][ T5865] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.914533][ T5865] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 217.955280][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.152912][ T6011] net_ratelimit: 9 callbacks suppressed [ 218.152938][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.857371][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.860650][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.865684][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.882424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.890851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.900759][ T5865] usb 2-1: Product: syz [ 218.905315][ T5865] usb 2-1: Manufacturer: syz [ 218.911784][ T5865] usb 2-1: SerialNumber: syz [ 218.920522][ T5865] usb 2-1: config 0 descriptor?? [ 219.193791][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.278535][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.286855][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.295446][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.758950][ T5956] usb 2-1: USB disconnect, device number 4 [ 221.340001][ T7174] netlink: 'syz.1.298': attribute type 2 has an invalid length. [ 223.433102][ T5956] net_ratelimit: 12 callbacks suppressed [ 223.433124][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.672827][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.680992][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.689435][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.697927][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.833969][ T5866] Bluetooth: hci2: command 0x0405 tx timeout [ 223.924373][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.966452][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.988416][ T1161] bond0 (unregistering): Released all slaves [ 224.534856][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.543069][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.554594][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.704003][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.738980][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.099190][ T1161] hsr_slave_0: left promiscuous mode [ 227.130953][ T1161] hsr_slave_1: left promiscuous mode [ 227.153073][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.160516][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.215913][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.247206][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.269881][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 227.374031][ T1161] veth1_macvtap: left promiscuous mode [ 227.376192][ T7203] loop1: detected capacity change from 0 to 32768 [ 227.380010][ T1161] veth0_macvtap: left promiscuous mode [ 227.445501][ T1161] veth1_vlan: left promiscuous mode [ 227.450950][ T1161] veth0_vlan: left promiscuous mode [ 227.559140][ T7203] jfs_mkdir: dtInsert returned -EIO [ 227.568867][ T7203] ERROR: (device loop1): jfs_mkdir: [ 227.568867][ T7203] [ 228.072347][ T7203] ERROR: (device loop1): remounting filesystem as read-only [ 229.004356][ T917] net_ratelimit: 18 callbacks suppressed [ 229.004383][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.005990][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.093452][ T7242] loop5: detected capacity change from 0 to 1764 [ 229.122557][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.130265][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.161553][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.172144][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.752361][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.031597][ T3546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.042552][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.061453][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.527544][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.536396][ T5866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.544122][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.562654][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.576587][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.714382][ T7260] loop0: detected capacity change from 0 to 1024 [ 231.360350][ T7264] syz.1.319 uses obsolete (PF_INET,SOCK_PACKET) [ 233.060210][ T5866] Bluetooth: hci5: command tx timeout [ 233.207158][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 233.505830][ T7282] loop4: detected capacity change from 0 to 8 [ 233.512952][ T7282] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 233.751378][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop4 [ 234.220889][ T7289] new mount options do not match the existing superblock, will be ignored [ 234.240026][ T7289] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 234.474579][ T6012] net_ratelimit: 20 callbacks suppressed [ 234.474606][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.634480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.663282][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.671781][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.700329][ T7290] cramfs: Error -5 while decompressing! [ 234.705933][ T7290] cramfs: ffffffff99bf6668(26)->ffff8880528d9000(4096) [ 234.713070][ T7290] cramfs: Error -3 while decompressing! [ 234.718623][ T7290] cramfs: ffffffff99bf6682(26)->ffff88807e9b6000(4096) [ 234.725509][ T7290] cramfs: Error -3 while decompressing! [ 234.731039][ T7290] cramfs: ffffffff99bf669c(16)->ffff88807f118000(4096) [ 234.738022][ T7290] cramfs: Error -5 while decompressing! [ 234.743609][ T7290] cramfs: ffffffff99bf6668(26)->ffff8880528d9000(4096) [ 234.752328][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.763362][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.772560][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.786753][ T30] audit: type=1800 audit(1757947732.934:69): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.329" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 234.800791][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop4 [ 234.813483][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.965623][ T13] hfsplus: b-tree write err: -5, ino 4 [ 235.068783][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 235.114086][ T5866] Bluetooth: hci5: command tx timeout [ 235.119689][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.236254][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 235.514194][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.968952][ T7303] tipc: Started in network mode [ 237.001984][ T7303] tipc: Node identity a2c70b7441df, cluster identity 4711 [ 237.051305][ T7303] tipc: Enabled bearer , priority 0 [ 237.177837][ T7305] syzkaller0: entered promiscuous mode [ 237.192284][ T5866] Bluetooth: hci5: command tx timeout [ 237.193934][ T7305] syzkaller0: entered allmulticast mode [ 237.298121][ T7299] tipc: Resetting bearer [ 237.345022][ T7299] tipc: Disabling bearer [ 237.689765][ T7319] binder: BINDER_SET_CONTEXT_MGR already set [ 237.745429][ T7319] binder: 7318:7319 ioctl 4018620d 200000004a80 returned -16 [ 239.413579][ T5866] Bluetooth: hci5: command tx timeout [ 239.483908][ T36] net_ratelimit: 25 callbacks suppressed [ 239.483934][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.498667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.752470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.762781][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.785585][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.853164][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.862134][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.878707][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.033439][ T7257] chnl_net:caif_netlink_parms(): no params data found [ 240.408685][ T7355] loop4: detected capacity change from 0 to 8 [ 240.415936][ T7355] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 240.615723][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.624024][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.694451][ T7359] loop0: detected capacity change from 0 to 1764 [ 240.737606][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop4 [ 240.898806][ T7364] cramfs: Error -5 while decompressing! [ 240.904465][ T7364] cramfs: ffffffff99bf2668(26)->ffff888076624000(4096) [ 240.911315][ T7364] cramfs: Error -3 while decompressing! [ 240.916880][ T7364] cramfs: ffffffff99bf2682(26)->ffff888076623000(4096) [ 240.923801][ T7364] cramfs: Error -3 while decompressing! [ 240.929334][ T7364] cramfs: ffffffff99bf269c(16)->ffff888076622000(4096) [ 240.936350][ T7364] cramfs: Error -5 while decompressing! [ 240.942466][ T7364] cramfs: ffffffff99bf2668(26)->ffff888076624000(4096) [ 240.982942][ T5871] udevd[5871]: incorrect cramfs checksum on /dev/loop4 [ 241.011901][ T30] audit: type=1800 audit(1757947739.134:70): pid=7364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.345" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 241.712843][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.722329][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.770021][ T5865] IPVS: starting estimator thread 0... [ 241.833419][ T7257] bridge_slave_0: entered allmulticast mode [ 241.912411][ T7375] IPVS: using max 29 ests per chain, 69600 per kthread [ 241.930919][ T7379] binder: BINDER_SET_CONTEXT_MGR already set [ 241.937353][ T7379] binder: 7378:7379 ioctl 4018620d 200000004a80 returned -16 [ 241.959435][ T7257] bridge_slave_0: entered promiscuous mode [ 241.992260][ T5865] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 242.074807][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.321127][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.329057][ T7257] bridge_slave_1: entered allmulticast mode [ 242.337086][ T7257] bridge_slave_1: entered promiscuous mode [ 242.592468][ T5865] usb 4-1: device descriptor read/64, error -71 [ 242.730895][ T7388] new mount options do not match the existing superblock, will be ignored [ 242.748820][ T7388] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 243.497760][ T7257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.533850][ T5865] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 243.665324][ T7257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.775087][ T5865] usb 4-1: device descriptor read/64, error -71 [ 243.902313][ T5865] usb usb4-port1: attempt power cycle [ 245.073008][ T5956] net_ratelimit: 14 callbacks suppressed [ 245.073042][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.122262][ T5865] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 245.134928][ T7257] team0: Port device team_slave_0 added [ 245.220591][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.235203][ T5865] usb 4-1: device descriptor read/8, error -71 [ 245.259733][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.378724][ T7257] team0: Port device team_slave_1 added [ 245.483328][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.491859][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.501390][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.562416][ T5865] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 245.568194][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.664213][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.673280][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.682485][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.140923][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.225307][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.384294][ T7257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.458539][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.538333][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.863499][ T7257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.025056][ T7422] loop1: detected capacity change from 0 to 1764 [ 247.429820][ T7257] hsr_slave_0: entered promiscuous mode [ 247.510856][ T7257] hsr_slave_1: entered promiscuous mode [ 247.988708][ T7257] debugfs: 'hsr0' already exists in 'hsr' [ 247.997445][ T7257] Cannot create hsr debugfs directory [ 248.906612][ T5865] usb 4-1: device descriptor read/8, error -71 [ 249.022512][ T5865] usb usb4-port1: unable to enumerate USB device [ 249.164935][ T7437] program syz.1.364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.591940][ T7257] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.766223][ T7257] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 250.109241][ T7453] new mount options do not match the existing superblock, will be ignored [ 250.127101][ T7453] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 250.587165][ T5956] net_ratelimit: 16 callbacks suppressed [ 250.587186][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.714881][ T7257] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 250.729806][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.738151][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.747498][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.819106][ T7257] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.884371][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.895919][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.905350][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.195556][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.378890][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.752884][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.290406][ T7257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.473725][ T7257] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.613542][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.620912][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.855808][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.863034][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.268574][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.377'. [ 254.292787][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.377'. [ 254.301602][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.377'. [ 255.087515][ T7513] loop3: detected capacity change from 0 to 512 [ 255.131254][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.138700][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.162402][ T7513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 255.375857][ T7257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.409261][ T7513] EXT4-fs (loop3): 1 truncate cleaned up [ 255.494379][ T7513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.602913][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 256.057224][ T5865] net_ratelimit: 14 callbacks suppressed [ 256.057249][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.165601][ T7530] program syz.0.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.192406][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.200524][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.209526][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.218848][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.231140][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.240393][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.242338][ T3546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.304943][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.315941][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.764347][ T5859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.051740][ T7518] netlink: 'syz.4.380': attribute type 2 has an invalid length. [ 257.664508][ T7542] new mount options do not match the existing superblock, will be ignored [ 257.683217][ T7542] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 259.473053][ T7257] veth0_vlan: entered promiscuous mode [ 259.699491][ T7257] veth1_vlan: entered promiscuous mode [ 259.973395][ T7257] veth0_macvtap: entered promiscuous mode [ 260.136821][ T7257] veth1_macvtap: entered promiscuous mode [ 260.312620][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.367507][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.564664][ T3546] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.643577][ T3546] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.706975][ T3546] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.807808][ T3546] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.099027][ T7565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 261.169801][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.200288][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.373455][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.392596][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.432923][ T5988] net_ratelimit: 18 callbacks suppressed [ 261.432946][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.440814][ T7569] netlink: 52 bytes leftover after parsing attributes in process `syz.1.393'. [ 261.447259][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.472325][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.516655][ T3546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.526073][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.543687][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.811381][ T7573] loop5: detected capacity change from 0 to 4096 [ 261.999005][ T7581] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.329358][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.338831][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.360812][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.481409][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.681893][ T7595] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.310'. [ 262.882677][ T7591] loop5: detected capacity change from 4096 to 64 [ 263.395662][ T7601] sg_write: data in/out 852092/81 bytes for SCSI command 0x1c-- guessing data in; [ 263.395662][ T7601] program syz.1.398 not setting count and/or reply_len properly [ 264.754589][ T5860] syz_tun (unregistering): left allmulticast mode [ 265.612808][ T5860] syz-executor: attempt to access beyond end of device [ 265.612808][ T5860] loop5: rw=395265, sector=4088, nr_sectors = 2 limit=64 [ 265.716030][ T5860] Buffer I/O error on dev loop5, logical block 2044, lost sync page write [ 265.818576][ T5860] NILFS (loop5): unable to write superblock: err=-5 [ 265.938256][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.544400][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.865539][ T7641] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 267.019686][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.043945][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.411'. [ 267.082320][ T7646] net_ratelimit: 18 callbacks suppressed [ 267.082342][ T7646] openvswitch: netlink: Flow actions attr not present in new flow. [ 267.124770][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.280631][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.290056][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.300694][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.311365][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.396726][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.470536][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.625363][ T7649] loop0: detected capacity change from 0 to 4096 [ 267.888825][ T7655] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.010385][ T7644] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.114501][ T7649] loop0: detected capacity change from 4096 to 64 [ 268.161144][ T7644] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 268.314926][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.472340][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.525867][ T7646] gretap1: entered promiscuous mode [ 268.580816][ T7646] bond1: (slave gretap1): making interface the new active one [ 268.679404][ T7646] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 268.857580][ T7650] macvlan0: entered promiscuous mode [ 268.876143][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.927455][ T7650] macvlan0: entered allmulticast mode [ 268.971560][ T7650] bond1: entered promiscuous mode [ 269.004090][ T7650] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 269.074088][ T7650] bond1: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 269.128243][ T7650] bond1: left promiscuous mode [ 269.511532][ T5861] syz-executor: attempt to access beyond end of device [ 269.511532][ T5861] loop0: rw=395265, sector=4088, nr_sectors = 2 limit=64 [ 269.550791][ T5861] Buffer I/O error on dev loop0, logical block 2044, lost sync page write [ 269.573783][ T5861] NILFS (loop0): unable to write superblock: err=-5 [ 269.646903][ T917] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 269.733876][ T13] bridge_slave_1: left allmulticast mode [ 269.739571][ T13] bridge_slave_1: left promiscuous mode [ 269.785749][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.832593][ T917] usb 4-1: Using ep0 maxpacket: 16 [ 269.853389][ T917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.874711][ T13] bridge_slave_0: left allmulticast mode [ 269.886938][ T13] bridge_slave_0: left promiscuous mode [ 269.903675][ T917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.920999][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.948323][ T917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.974886][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.017703][ T917] usb 4-1: Product: syz [ 270.040226][ T917] usb 4-1: Manufacturer: syz [ 270.094362][ T917] usb 4-1: SerialNumber: syz [ 270.195198][ T7680] netlink: 52 bytes leftover after parsing attributes in process `syz.1.423'. [ 270.345009][ T917] usb 4-1: 0:2 : does not exist [ 270.495434][ T917] usb 4-1: USB disconnect, device number 7 [ 270.782042][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.579355][ T917] net_ratelimit: 9 callbacks suppressed [ 272.579379][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.634525][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.639243][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.754686][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.764759][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.083052][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.431466][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.516386][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.525241][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.381402][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.187808][ T7702] loop3: detected capacity change from 0 to 4096 [ 275.285658][ T7703] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.327525][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.363200][ T7702] loop3: detected capacity change from 4096 to 64 [ 275.406624][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.449151][ T13] bond0 (unregistering): Released all slaves [ 275.882005][ T5859] syz-executor: attempt to access beyond end of device [ 275.882005][ T5859] loop3: rw=395265, sector=4088, nr_sectors = 2 limit=64 [ 275.927148][ T5859] Buffer I/O error on dev loop3, logical block 2044, lost sync page write [ 275.947649][ T5859] NILFS (loop3): unable to write superblock: err=-5 [ 276.626213][ T7719] tipc: Started in network mode [ 276.651243][ T7719] tipc: Node identity 6a2b35bf46b2, cluster identity 4711 [ 276.707614][ T7719] tipc: Enabled bearer , priority 0 [ 276.774634][ T7724] syzkaller0: entered promiscuous mode [ 276.832543][ T7724] syzkaller0: entered allmulticast mode [ 277.017948][ T13] hsr_slave_0: left promiscuous mode [ 277.057250][ T13] hsr_slave_1: left promiscuous mode [ 277.079730][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.119346][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.160930][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.209268][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.332430][ T13] veth1_macvtap: left promiscuous mode [ 277.359063][ T13] veth0_macvtap: left promiscuous mode [ 277.387748][ T13] veth1_vlan: left promiscuous mode [ 277.417912][ T13] veth0_vlan: left promiscuous mode [ 277.822913][ T90] tipc: Node number set to 748238271 [ 277.851245][ T917] net_ratelimit: 9 callbacks suppressed [ 277.851268][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.071797][ T13] pim6reg (unregistering): left allmulticast mode [ 278.155806][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.567017][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.807636][ T1136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.816760][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.851792][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.872572][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.515293][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.949463][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.961769][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.307380][ T13] team0 (unregistering): Port device team_slave_1 removed [ 280.519333][ T13] team0 (unregistering): Port device team_slave_0 removed [ 282.210928][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.224643][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.232519][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.240628][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.248521][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.310410][ T7719] tipc: Resetting bearer [ 282.348272][ T7718] tipc: Resetting bearer [ 282.450653][ T7718] tipc: Disabling bearer [ 282.861340][ T7756] loop6: detected capacity change from 0 to 4096 [ 282.980536][ T7760] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.032660][ T6012] net_ratelimit: 7 callbacks suppressed [ 283.032680][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.098280][ T7763] netlink: 52 bytes leftover after parsing attributes in process `syz.1.443'. [ 283.112515][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.225757][ T7766] loop6: detected capacity change from 4096 to 64 [ 284.080987][ T7257] syz-executor: attempt to access beyond end of device [ 284.080987][ T7257] loop6: rw=395265, sector=4088, nr_sectors = 2 limit=64 [ 284.122762][ T7257] Buffer I/O error on dev loop6, logical block 2044, lost sync page write [ 284.143425][ T7257] NILFS (loop6): unable to write superblock: err=-5 [ 284.155008][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.172067][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.233428][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.242480][ T7747] chnl_net:caif_netlink_parms(): no params data found [ 284.312409][ T5879] Bluetooth: hci1: command tx timeout [ 284.504917][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.553894][ T1136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.565065][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.573892][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.856348][ T7747] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.892917][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.939233][ T7747] bridge_slave_0: entered allmulticast mode [ 284.980032][ T7747] bridge_slave_0: entered promiscuous mode [ 285.261916][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.678341][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.843537][ T7747] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.850710][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.232469][ T7747] bridge_slave_1: entered allmulticast mode [ 286.239954][ T7747] bridge_slave_1: entered promiscuous mode [ 286.392410][ T5879] Bluetooth: hci1: command tx timeout [ 286.565035][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.712882][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.402694][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.423724][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.465809][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.474320][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.483494][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.491178][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.583163][ T7747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.847103][ T7747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.289328][ T7747] team0: Port device team_slave_0 added [ 288.382158][ T7747] team0: Port device team_slave_1 added [ 288.478636][ T5866] Bluetooth: hci1: command tx timeout [ 288.792392][ T5957] net_ratelimit: 1 callbacks suppressed [ 288.792418][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.210733][ T7806] loop4: detected capacity change from 0 to 1764 [ 289.223614][ T7747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.230560][ T7747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.592271][ T5866] Bluetooth: hci3: command tx timeout [ 289.891265][ T7747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.931915][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.178418][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.313278][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.322792][ T7747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.329732][ T7747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.363300][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.372546][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.396759][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.432626][ T7747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.485936][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.559012][ T5866] Bluetooth: hci1: command tx timeout [ 290.835494][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.104190][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.315322][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.433100][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.475117][ T7747] hsr_slave_0: entered promiscuous mode [ 291.498565][ T7747] hsr_slave_1: entered promiscuous mode [ 291.539561][ T7747] debugfs: 'hsr0' already exists in 'hsr' [ 291.653241][ T7747] Cannot create hsr debugfs directory [ 291.672243][ T5866] Bluetooth: hci3: command tx timeout [ 292.474311][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.510644][ T7834] loop4: detected capacity change from 0 to 4096 [ 292.670096][ T7835] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.733482][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.747840][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.758189][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.772006][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.783364][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.840377][ T7839] loop4: detected capacity change from 4096 to 64 [ 293.512808][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.752379][ T5866] Bluetooth: hci3: command tx timeout [ 293.856958][ T5862] syz-executor: attempt to access beyond end of device [ 293.856958][ T5862] loop4: rw=395265, sector=4088, nr_sectors = 2 limit=64 [ 293.949479][ T5862] Buffer I/O error on dev loop4, logical block 2044, lost sync page write [ 293.994678][ T5862] NILFS (loop4): unable to write superblock: err=-5 [ 294.045244][ T12] bridge_slave_1: left allmulticast mode [ 294.050943][ T12] bridge_slave_1: left promiscuous mode [ 294.127937][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.205676][ T12] bridge_slave_0: left allmulticast mode [ 294.247087][ T12] bridge_slave_0: left promiscuous mode [ 294.276509][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.331263][ T12] bridge_slave_1: left allmulticast mode [ 294.356923][ T12] bridge_slave_1: left promiscuous mode [ 294.395113][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.466890][ T12] bridge_slave_0: left allmulticast mode [ 294.518509][ T12] bridge_slave_0: left promiscuous mode [ 294.553713][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.554498][ T917] net_ratelimit: 1 callbacks suppressed [ 294.554515][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.872284][ T5866] Bluetooth: hci4: command tx timeout [ 295.015814][ T7866] loop1: detected capacity change from 0 to 1764 [ 295.674866][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.832231][ T5866] Bluetooth: hci3: command tx timeout [ 296.075334][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.084142][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.096167][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.562791][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.609220][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.649525][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.689520][ T12] bond0 (unregistering): Released all slaves [ 296.962343][ T5866] Bluetooth: hci4: command tx timeout [ 297.122804][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.812638][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.828733][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.865781][ T12] bond0 (unregistering): Released all slaves [ 298.159226][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.258262][ T7798] chnl_net:caif_netlink_parms(): no params data found [ 298.332687][ T12] tipc: Left network mode [ 298.403167][ T12] tipc: Left network mode [ 298.701891][ T7747] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 298.902258][ T90] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 298.961573][ T7747] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 299.019317][ T7747] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 299.033106][ T5866] Bluetooth: hci4: command tx timeout [ 299.094371][ T90] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 299.142475][ T90] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.192623][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.230772][ T7747] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 299.241848][ T90] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 299.297496][ T90] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.342505][ T90] usb 2-1: Product: syz [ 299.363960][ T90] usb 2-1: Manufacturer: syz [ 299.389463][ T90] usb 2-1: SerialNumber: syz [ 299.474048][ T90] usb 2-1: config 0 descriptor?? [ 299.521461][ T7876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.539277][ T90] usb 2-1: ucan: probing device on interface #0 [ 299.593504][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.606622][ T90] usb 2-1: ucan: invalid EP count (1) [ 299.612014][ T90] usb 2-1: ucan: probe failed; try to update the device firmware [ 299.912506][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.990810][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.025573][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.053885][ T7798] bridge_slave_0: entered allmulticast mode [ 300.061953][ T7798] bridge_slave_0: entered promiscuous mode [ 300.132328][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.142541][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.149797][ T7798] bridge_slave_1: entered allmulticast mode [ 300.220148][ T7798] bridge_slave_1: entered promiscuous mode [ 300.235134][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.931084][ T7798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.007246][ T7798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.123485][ T5866] Bluetooth: hci4: command tx timeout [ 301.272484][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.425983][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 301.541044][ T12] hsr_slave_0: left promiscuous mode [ 301.577082][ T12] hsr_slave_1: left promiscuous mode [ 301.608622][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.638588][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.683930][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.691351][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.732586][ T6020] usb 2-1: USB disconnect, device number 5 [ 301.836903][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.846262][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.856296][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.928188][ T12] hsr_slave_0: left promiscuous mode [ 301.977344][ T12] hsr_slave_1: left promiscuous mode [ 301.997663][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.036869][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.108475][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.151008][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.366874][ T12] veth1_macvtap: left promiscuous mode [ 302.408357][ T12] veth0_macvtap: left promiscuous mode [ 302.435989][ T12] veth1_vlan: left promiscuous mode [ 302.461857][ T12] veth0_vlan: left promiscuous mode [ 302.494212][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.507022][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.516275][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.525450][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.537968][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.568223][ T12] veth1_macvtap: left promiscuous mode [ 302.576003][ T12] veth0_macvtap: left promiscuous mode [ 302.585754][ T12] veth1_vlan: left promiscuous mode [ 302.592044][ T12] veth0_vlan: left promiscuous mode [ 302.632620][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.927298][ T7914] loop1: detected capacity change from 0 to 32768 [ 302.953840][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.081773][ T7914] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 303.081811][ T7914] allowing incompatible features above 0.0: (unknown version) [ 303.081826][ T7914] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 303.127751][ T7914] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 303.135999][ T7914] bcachefs (loop1): initializing new filesystem [ 303.151441][ T7914] bcachefs (loop1): going read-write [ 303.202358][ T7914] bcachefs (loop1): marking superblocks [ 303.219679][ T7914] bcachefs (loop1): initializing freespace [ 303.229399][ T7914] bcachefs (loop1): done initializing freespace [ 303.238500][ T7914] bcachefs (loop1): reading snapshots table [ 303.244503][ T7914] bcachefs (loop1): reading snapshots done [ 303.285251][ T7914] bcachefs (loop1): done starting filesystem [ 304.277005][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.299296][ T5858] bcachefs (loop1): shutting down [ 304.343180][ T5858] bcachefs (loop1): going read-only [ 304.348434][ T5858] bcachefs (loop1): finished waiting for writes to stop [ 304.415454][ T5858] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 304.491717][ T5858] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 304.569500][ T5858] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 304.603842][ T5858] bcachefs (loop1): marking filesystem clean [ 304.632847][ T5866] Bluetooth: hci2: command tx timeout [ 304.778556][ T5858] bcachefs (loop1): shutdown complete [ 305.353466][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.678390][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.950495][ T12] team0 (unregistering): Port device team_slave_1 removed [ 306.110297][ T12] team0 (unregistering): Port device team_slave_0 removed [ 306.392496][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.712290][ T5866] Bluetooth: hci2: command tx timeout [ 307.432777][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.592666][ T6042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.604001][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.631304][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.718741][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.726905][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.793601][ T5866] Bluetooth: hci2: command tx timeout [ 309.523765][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.080104][ T12] team0 (unregistering): Port device team_slave_1 removed [ 310.333419][ T12] team0 (unregistering): Port device team_slave_0 removed [ 310.765038][ T5879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.776955][ T5879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.791810][ T5879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.799559][ T5957] net_ratelimit: 1 callbacks suppressed [ 310.799577][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.822803][ T5879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.831969][ T5879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.872453][ T5866] Bluetooth: hci2: command tx timeout [ 311.759927][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.832613][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.376615][ T7798] team0: Port device team_slave_0 added [ 312.479092][ T7798] team0: Port device team_slave_1 added [ 312.872530][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.880740][ T5866] Bluetooth: hci5: command tx timeout [ 312.987322][ T7798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.043239][ T7798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.180513][ T7798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.326642][ T7798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.334196][ T7798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.366305][ T7798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.513337][ T7943] loop1: detected capacity change from 0 to 1764 [ 313.965028][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.792766][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.890598][ T7798] hsr_slave_0: entered promiscuous mode [ 314.946796][ T7798] hsr_slave_1: entered promiscuous mode [ 314.952478][ T5866] Bluetooth: hci5: command tx timeout [ 315.036144][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.443736][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.471475][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.515158][ T7836] bridge_slave_0: entered allmulticast mode [ 315.552729][ T7836] bridge_slave_0: entered promiscuous mode [ 315.564465][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.571601][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.631378][ T7836] bridge_slave_1: entered allmulticast mode [ 315.677698][ T7836] bridge_slave_1: entered promiscuous mode [ 316.072844][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.280731][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.305667][ T7968] loop1: detected capacity change from 0 to 8 [ 316.313065][ T7968] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 316.531578][ T7751] udevd[7751]: incorrect cramfs checksum on /dev/loop1 [ 316.537750][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.555389][ T7747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.557867][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.568530][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.664184][ T7970] cramfs: Error -5 while decompressing! [ 316.669834][ T7970] cramfs: ffffffff99bf6668(26)->ffff888071143000(4096) [ 316.676872][ T7970] cramfs: Error -3 while decompressing! [ 316.682515][ T7970] cramfs: ffffffff99bf6682(26)->ffff888071144000(4096) [ 316.689483][ T7970] cramfs: Error -3 while decompressing! [ 316.695152][ T7970] cramfs: ffffffff99bf669c(16)->ffff888071145000(4096) [ 316.702350][ T7970] cramfs: Error -5 while decompressing! [ 316.707956][ T7970] cramfs: ffffffff99bf6668(26)->ffff888071143000(4096) [ 317.282554][ T30] audit: type=1800 audit(1757947814.904:71): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.478" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 317.294297][ T5866] Bluetooth: hci5: command tx timeout [ 317.304175][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.360281][ T7751] udevd[7751]: incorrect cramfs checksum on /dev/loop1 [ 317.382207][ T7747] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.577785][ T12] IPVS: stop unused estimator thread 0... [ 317.589866][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.597130][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.845204][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.862073][ T7836] team0: Port device team_slave_0 added [ 318.054083][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.061304][ T7869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.106979][ T7836] team0: Port device team_slave_1 added [ 318.356132][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.528005][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.567760][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.593742][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.676188][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.739249][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.769322][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.795363][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.874993][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.113064][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.352332][ T5866] Bluetooth: hci5: command tx timeout [ 319.746899][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.855725][ T7836] hsr_slave_0: entered promiscuous mode [ 319.903425][ T7836] hsr_slave_1: entered promiscuous mode [ 319.931922][ T7836] debugfs: 'hsr0' already exists in 'hsr' [ 319.964308][ T7836] Cannot create hsr debugfs directory [ 320.206644][ T7933] chnl_net:caif_netlink_parms(): no params data found [ 320.400204][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.856203][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.292739][ T7911] chnl_net:caif_netlink_parms(): no params data found [ 321.480558][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.042829][ T8014] loop1: detected capacity change from 0 to 8 [ 322.049801][ T8014] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 322.288458][ T8014] cramfs: Error -5 while decompressing! [ 322.294070][ T8014] cramfs: ffffffff99bf2668(26)->ffff88806d39c000(4096) [ 322.300930][ T8014] cramfs: Error -3 while decompressing! [ 322.306561][ T8014] cramfs: ffffffff99bf2682(26)->ffff88806d39d000(4096) [ 322.314387][ T8014] cramfs: Error -3 while decompressing! [ 322.319923][ T8014] cramfs: ffffffff99bf269c(16)->ffff88806d39e000(4096) [ 322.326889][ T8014] cramfs: Error -5 while decompressing! [ 322.332446][ T8014] cramfs: ffffffff99bf2668(26)->ffff88806d39c000(4096) [ 322.626511][ T30] audit: type=1800 audit(1757947820.524:72): pid=8014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.486" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 322.664419][ T7751] udevd[7751]: incorrect cramfs checksum on /dev/loop1 [ 322.783922][ T7751] udevd[7751]: incorrect cramfs checksum on /dev/loop1 [ 323.056539][ T7798] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 323.598260][ T7798] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 324.054381][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.061540][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.105019][ T7933] bridge_slave_0: entered allmulticast mode [ 324.134463][ T7933] bridge_slave_0: entered promiscuous mode [ 324.155586][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.191500][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.223733][ T7933] bridge_slave_1: entered allmulticast mode [ 324.255057][ T7933] bridge_slave_1: entered promiscuous mode [ 324.386393][ T7798] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 324.505753][ T7798] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 324.669581][ T7911] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.697057][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.737058][ T7911] bridge_slave_0: entered allmulticast mode [ 324.774544][ T7911] bridge_slave_0: entered promiscuous mode [ 324.826670][ T7911] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.873098][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.880483][ T7911] bridge_slave_1: entered allmulticast mode [ 324.955744][ T7911] bridge_slave_1: entered promiscuous mode [ 325.640185][ T7911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.866345][ T7933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.104962][ T7911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.389129][ T7933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.719349][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.714416][ T7933] team0: Port device team_slave_0 added [ 327.909336][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.022763][ T7911] team0: Port device team_slave_0 added [ 328.173068][ T7933] team0: Port device team_slave_1 added [ 328.365009][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.549932][ T7911] team0: Port device team_slave_1 added [ 328.816616][ T7747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.165258][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.757668][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.827130][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.883999][ T7933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.008640][ T7911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.056060][ T7911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.225766][ T7911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.286654][ T7911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.315485][ T7911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.386648][ T7911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.431318][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.467591][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.575646][ T7933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.627615][ T7836] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 330.859358][ T7836] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 331.130450][ T7836] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 331.204342][ T7836] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 331.634060][ T7911] hsr_slave_0: entered promiscuous mode [ 331.805140][ T7911] hsr_slave_1: entered promiscuous mode [ 331.811687][ T7911] debugfs: 'hsr0' already exists in 'hsr' [ 331.950409][ T7911] Cannot create hsr debugfs directory [ 332.473467][ T7933] hsr_slave_0: entered promiscuous mode [ 332.480241][ T7933] hsr_slave_1: entered promiscuous mode [ 332.519307][ T7933] debugfs: 'hsr0' already exists in 'hsr' [ 332.558712][ T7933] Cannot create hsr debugfs directory [ 333.607461][ T12] bridge_slave_1: left allmulticast mode [ 333.629830][ T12] bridge_slave_1: left promiscuous mode [ 333.661788][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.737184][ T12] bridge_slave_0: left allmulticast mode [ 333.784331][ T12] bridge_slave_0: left promiscuous mode [ 333.790226][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.916263][ T12] bridge_slave_1: left allmulticast mode [ 333.968435][ T12] bridge_slave_1: left promiscuous mode [ 334.003519][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.090610][ T12] bridge_slave_0: left allmulticast mode [ 334.128125][ T12] bridge_slave_0: left promiscuous mode [ 334.168762][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.985635][ T8103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'. [ 336.046928][ T8103] openvswitch: netlink: Flow key attr not present in new flow. [ 336.331758][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.382838][ T8105] loop1: detected capacity change from 0 to 8 [ 336.389716][ T8105] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 336.610178][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.620339][ T8081] udevd[8081]: incorrect cramfs checksum on /dev/loop1 [ 336.730102][ T8107] cramfs: Error -5 while decompressing! [ 336.735880][ T8107] cramfs: ffffffff99bf6668(26)->ffff8880767ab000(4096) [ 336.743028][ T8107] cramfs: Error -3 while decompressing! [ 336.748632][ T8107] cramfs: ffffffff99bf6682(26)->ffff8880767ac000(4096) [ 336.755649][ T8107] cramfs: Error -3 while decompressing! [ 336.761256][ T8107] cramfs: ffffffff99bf669c(16)->ffff8880767ad000(4096) [ 336.768666][ T8107] cramfs: Error -5 while decompressing! [ 336.774326][ T8107] cramfs: ffffffff99bf6668(26)->ffff8880767ab000(4096) [ 337.357872][ T30] audit: type=1800 audit(1757947834.974:73): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.494" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 337.377561][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.425471][ T8081] udevd[8081]: incorrect cramfs checksum on /dev/loop1 [ 337.485490][ T12] bond0 (unregistering): Released all slaves [ 339.039070][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.117735][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.180552][ T12] bond0 (unregistering): Released all slaves [ 339.652169][ T12] tipc: Left network mode [ 339.676431][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.127069][ T7747] veth0_vlan: entered promiscuous mode [ 340.489933][ T7747] veth1_vlan: entered promiscuous mode [ 342.139039][ T7798] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.078426][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.085635][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.451712][ T8145] netlink: 76 bytes leftover after parsing attributes in process `syz.1.504'. [ 343.465451][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.472647][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.832470][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.841133][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.861366][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.882385][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.894654][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.103130][ T8151] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 344.109766][ T8151] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 344.125571][ T8151] vhci_hcd vhci_hcd.0: Device attached [ 344.186639][ T8152] usbip_core: unknown command [ 344.191373][ T8152] vhci_hcd: unknown pdu 0 [ 344.211229][ T8152] usbip_core: unknown command [ 344.239408][ T6043] vhci_hcd: stop threads [ 344.273115][ T6043] vhci_hcd: release socket [ 344.315517][ T6043] vhci_hcd: disconnect device [ 344.349059][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.486146][ T12] hsr_slave_0: left promiscuous mode [ 344.531743][ T12] hsr_slave_1: left promiscuous mode [ 344.570428][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.692971][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.743047][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.785515][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.944126][ T12] hsr_slave_0: left promiscuous mode [ 344.977093][ T12] hsr_slave_1: left promiscuous mode [ 345.007433][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.040715][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.116188][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.163909][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.373380][ T12] veth1_macvtap: left promiscuous mode [ 345.419846][ T12] veth0_macvtap: left promiscuous mode [ 345.610456][ T12] veth1_vlan: left promiscuous mode [ 345.621043][ T12] veth0_vlan: left promiscuous mode [ 345.656366][ T12] veth1_macvtap: left promiscuous mode [ 345.699318][ T12] veth0_macvtap: left promiscuous mode [ 345.741672][ T12] veth1_vlan: left promiscuous mode [ 345.773433][ T12] veth0_vlan: left promiscuous mode [ 345.914585][ T5879] Bluetooth: hci1: command tx timeout [ 346.752082][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 346.764076][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 346.784800][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 346.844919][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 346.875400][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 347.992729][ T5879] Bluetooth: hci1: command tx timeout [ 348.952428][ T5879] Bluetooth: hci6: command tx timeout [ 349.090375][ T12] team0 (unregistering): Port device team_slave_1 removed [ 349.310323][ T12] team0 (unregistering): Port device team_slave_0 removed [ 350.082913][ T5879] Bluetooth: hci1: command tx timeout [ 351.032325][ T5879] Bluetooth: hci6: command tx timeout [ 352.153660][ T5879] Bluetooth: hci1: command tx timeout [ 352.475561][ T12] team0 (unregistering): Port device team_slave_1 removed [ 352.676945][ T12] team0 (unregistering): Port device team_slave_0 removed [ 353.114247][ T5879] Bluetooth: hci6: command tx timeout [ 353.329683][ T5866] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.344522][ T5866] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.354149][ T5866] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 353.373699][ T5866] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 353.395767][ T5866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.192341][ T5879] Bluetooth: hci6: command tx timeout [ 355.294388][ T7911] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.408865][ T7911] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 355.443619][ T5879] Bluetooth: hci7: command tx timeout [ 355.701557][ T7911] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.067580][ T7911] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.515379][ T8182] loop1: detected capacity change from 0 to 128 [ 356.549418][ T8182] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 356.607137][ T8182] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 357.552278][ T5879] Bluetooth: hci7: command tx timeout [ 357.723454][ T1136] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 358.730568][ T8146] chnl_net:caif_netlink_parms(): no params data found [ 359.592331][ T5879] Bluetooth: hci7: command tx timeout [ 359.778338][ T8208] loop1: detected capacity change from 0 to 1764 [ 361.422949][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.457269][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.498231][ T8146] bridge_slave_0: entered allmulticast mode [ 361.553706][ T8146] bridge_slave_0: entered promiscuous mode [ 361.672477][ T5879] Bluetooth: hci7: command tx timeout [ 362.440350][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.450536][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.459396][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.468554][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.476881][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.668946][ T8163] chnl_net:caif_netlink_parms(): no params data found [ 362.736806][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.765678][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.812766][ T8146] bridge_slave_1: entered allmulticast mode [ 363.039823][ T8146] bridge_slave_1: entered promiscuous mode [ 363.099143][ T30] audit: type=1326 audit(1757947861.284:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdb6f8eba9 code=0x0 [ 363.581441][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.745800][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.792370][ T8156] chnl_net:caif_netlink_parms(): no params data found [ 364.500095][ T8146] team0: Port device team_slave_0 added [ 364.513417][ T7933] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.529504][ T7933] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.552284][ T5866] Bluetooth: hci3: command tx timeout [ 364.770064][ T8146] team0: Port device team_slave_1 added [ 364.813976][ T7933] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.063615][ T7933] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 365.294288][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.301519][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.309487][ T8163] bridge_slave_0: entered allmulticast mode [ 365.317817][ T8163] bridge_slave_0: entered promiscuous mode [ 365.327523][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.335121][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.343082][ T8163] bridge_slave_1: entered allmulticast mode [ 365.351220][ T8163] bridge_slave_1: entered promiscuous mode [ 365.487433][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.519713][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.635637][ T8245] loop1: detected capacity change from 0 to 128 [ 365.640543][ T8146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.652589][ T8245] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 365.660373][ T8245] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 365.810961][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.854279][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.861648][ T8156] bridge_slave_0: entered allmulticast mode [ 365.946889][ T8156] bridge_slave_0: entered promiscuous mode [ 365.994789][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.031455][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.092774][ T8156] bridge_slave_1: entered allmulticast mode [ 366.632671][ T5866] Bluetooth: hci3: command tx timeout [ 366.782974][ T8156] bridge_slave_1: entered promiscuous mode [ 366.809943][ T49] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 367.011336][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.039754][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.113345][ T8146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.399111][ T8163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.456856][ T8163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.079937][ T8156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.171414][ T8156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.182616][ T5865] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 368.862413][ T5866] Bluetooth: hci3: command tx timeout [ 369.020453][ T8163] team0: Port device team_slave_0 added [ 369.062223][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 369.112961][ T5865] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 369.202085][ T5865] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 369.230783][ T5865] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.261403][ T5865] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.292548][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.300847][ T5865] usb 2-1: Product: syz [ 369.334174][ T5865] usb 2-1: Manufacturer: syz [ 369.338803][ T5865] usb 2-1: SerialNumber: syz [ 369.517997][ T8163] team0: Port device team_slave_1 added [ 369.726361][ T8146] hsr_slave_0: entered promiscuous mode [ 369.755843][ T8146] hsr_slave_1: entered promiscuous mode [ 369.788686][ T8146] debugfs: 'hsr0' already exists in 'hsr' [ 369.818904][ T8146] Cannot create hsr debugfs directory [ 369.961500][ T8156] team0: Port device team_slave_0 added [ 370.399303][ T8264] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 370.435142][ T8156] team0: Port device team_slave_1 added [ 370.531290][ T8263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.882467][ T5866] Bluetooth: hci3: command tx timeout [ 371.150436][ T8163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.188896][ T8163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.317607][ T8163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.535843][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.571275][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.602699][ T31] INFO: task syz-executor:5863 blocked for more than 143 seconds. [ 371.623991][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 371.650250][ T31] Blocked by coredump. [ 371.688138][ T8156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.698942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.698958][ T31] task:syz-executor state:D stack:21240 pid:5863 tgid:5863 ppid:1 task_flags:0x40014c flags:0x00004002 [ 371.699030][ T31] Call Trace: [ 371.729193][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.749815][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.758714][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.768591][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.779459][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.838177][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.918575][ T31] [ 371.921589][ T31] __schedule+0x1798/0x4cc0 [ 371.926729][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.932810][ T31] ? do_raw_spin_lock+0x121/0x290 [ 371.937970][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.944443][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.949402][ T31] ? __pfx___schedule+0x10/0x10 [ 371.971248][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.025254][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.031016][ T31] ? schedule+0x91/0x360 [ 372.132905][ T31] schedule+0x165/0x360 [ 372.137157][ T31] wb_wait_for_completion+0x15f/0x260 [ 372.155149][ T8156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.193833][ T31] ? __pfx_wb_wait_for_completion+0x10/0x10 [ 372.199830][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 372.244575][ T8163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.273205][ T31] sync_inodes_sb+0x1bb/0xa10 [ 372.278000][ T31] ? __pfx_sync_inodes_sb+0x10/0x10 [ 372.300005][ T8163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.336784][ T31] ? __pfx_nilfs_sync_fs+0x10/0x10 [ 372.341985][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.351998][ T31] ? __dentry_kill+0x53d/0x660 [ 372.361431][ T31] ? get_nr_dirty_inodes+0x1c4/0x210 [ 372.381318][ T31] sync_filesystem+0x17a/0x230 [ 372.421119][ T8163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.434421][ T31] generic_shutdown_super+0x6f/0x2c0 [ 372.439801][ T31] kill_block_super+0x44/0x90 [ 372.474751][ T31] deactivate_locked_super+0xbc/0x130 [ 372.480229][ T31] cleanup_mnt+0x425/0x4c0 [ 372.520991][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.547858][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.578582][ T31] task_work_run+0x1d4/0x260 [ 372.601439][ T31] ? __pfx_task_work_run+0x10/0x10 [ 372.618092][ T31] ? kmem_cache_free+0x18f/0x400 [ 372.624858][ T31] do_exit+0x6b5/0x2300 [ 372.633123][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.639975][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.647643][ T31] ? __pfx_do_exit+0x10/0x10 [ 372.696051][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.701742][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.746892][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.771501][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.793392][ T31] do_group_exit+0x21c/0x2d0 [ 372.798098][ T31] __x64_sys_exit_group+0x3f/0x40 [ 372.834825][ T31] x64_sys_call+0x21f7/0x2200 [ 372.840123][ T31] do_syscall_64+0xfa/0x3b0 [ 372.858654][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.879121][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.907733][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 372.926660][ T31] ? exc_page_fault+0x9f/0xf0 [ 372.940001][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.968700][ T31] RIP: 0033:0x7fd61ed8eba9 [ 372.984530][ T31] RSP: 002b:00007ffd76dd7138 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 373.022465][ T31] RAX: ffffffffffffffda RBX: 00007fd61ee11c65 RCX: 00007fd61ed8eba9 [ 373.030625][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 373.099353][ T31] RBP: 000000000000000c R08: 00007ffd76dd4ed6 R09: 00007ffd76dd83f0 [ 373.142388][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd76dd83f0 [ 373.170938][ T31] R13: 00007fd61ee11c05 R14: 0000555566f3b4a8 R15: 00007ffd76dd94c0 [ 373.213385][ T31] [ 373.223493][ T31] [ 373.223493][ T31] Showing all locks held in the system: [ 373.299705][ T31] 7 locks held by kworker/u8:0/12: [ 373.320794][ T31] 1 lock held by khungtaskd/31: [ 373.346385][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 373.422584][ T31] 2 locks held by kworker/u8:2/36: [ 373.427734][ T31] #0: ffff88801fa93948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.502639][ T31] #1: ffffc90000ac7bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.547501][ T31] 2 locks held by kworker/u8:4/59: [ 373.569541][ T31] 2 locks held by kworker/u8:5/972: [ 373.591029][ T31] #0: ffff88801fa93948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.638096][ T31] #1: ffffc900037f7bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.674729][ T31] 3 locks held by kworker/u8:6/1136: [ 373.681133][ T31] #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.720843][ T31] #1: ffffc90003a5fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.802294][ T31] #2: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 373.811420][ T31] 2 locks held by kworker/u8:7/1161: [ 373.834749][ T5866] Bluetooth: hci2: command tx timeout [ 373.879768][ T31] #0: ffff88801fa93948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.912084][ T31] #1: ffffc90003d1fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.985595][ T31] 2 locks held by kworker/u8:8/3546: [ 374.033012][ T31] #0: ffff88801fa93948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.096017][ T31] #1: ffffc9000be67bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.173115][ T31] 2 locks held by dhcpcd/5523: [ 374.177947][ T31] #0: ffffffff8f51e408 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x790 [ 374.245367][ T31] #1: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650 [ 374.281888][ T31] 2 locks held by getty/5620: [ 374.305766][ T31] #0: ffff88803003b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 374.345467][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 374.390978][ T31] 2 locks held by syz-executor/5859: [ 374.418653][ T31] #0: ffff88807c58a0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 374.466597][ T31] #1: ffff888142f527d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10 [ 374.512799][ T31] 2 locks held by syz-executor/5860: [ 374.519871][ T31] #0: ffff88806cdb00e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 374.568118][ T31] #1: ffff888142f667d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10 [ 374.618760][ T31] 2 locks held by syz-executor/5861: [ 374.646983][ T31] #0: ffff88803398e0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 374.685930][ T31] #1: ffff888142f407d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10 [ 374.722560][ T31] 2 locks held by syz-executor/5862: [ 374.731044][ T31] #0: ffff88806bd460e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 374.788000][ T31] #1: ffff888142f607d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10 [ 374.837539][ T31] 2 locks held by syz-executor/5863: [ 374.862904][ T31] #0: ffff8880271b60e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 374.910672][ T31] #1: ffff888142f4c7d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10 [ 374.958990][ T31] 6 locks held by kworker/1:3/5865: [ 374.983764][ T31] #0: ffff8880216ba548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.036455][ T31] #1: ffffc90002fd7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.090663][ T31] #2: ffff888027c38198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 375.132743][ T31] #3: ffff888053f8b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 375.174749][ T31] #4: ffff88802ecfb160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 375.219230][ T31] #5: ffffffff8f48e8a8 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x390/0x1e10 [ 375.265887][ T31] 3 locks held by kworker/1:7/6012: [ 375.271138][ T31] #0: ffff88801a478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.339263][ T31] #1: ffffc90004ae7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.388469][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 375.439163][ T31] 2 locks held by kworker/u8:9/6039: [ 375.463878][ T31] #0: ffff88801fa93948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.517123][ T31] #1: ffffc90004c27bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.574362][ T31] 2 locks held by syz-executor/7257: [ 375.579735][ T31] #0: ffff888055c8e0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 375.644191][ T31] #1: ffff8880249cc7d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10 [ 375.692782][ T31] 1 lock held by segctord/7581: [ 375.697705][ T31] 1 lock held by segctord/7703: [ 375.738299][ T31] 1 lock held by segctord/7835: [ 375.763099][ T31] 2 locks held by syz-executor/8146: [ 375.768430][ T31] #0: ffffffff8ec831a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 375.830813][ T31] #1: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 375.841887][ T5865] usb 2-1: 0:2 : does not exist [ 375.881869][ T31] 3 locks held by syz-executor/8156: [ 375.909797][ T31] #0: ffff888054ed8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 375.920381][ T5866] Bluetooth: hci2: command tx timeout [ 375.972275][ T31] #1: ffff888054ed80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 375.982042][ T31] #2: ffffffff8f69ede8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 376.113094][ T31] 4 locks held by syz-executor/8163: [ 376.118411][ T31] #0: ffff88805f334dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 376.197943][ T31] #1: ffff88805f3340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 376.249207][ T31] #2: ffffffff8f69ede8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 376.288550][ T31] #3: ffff88807ae82338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 376.323619][ T31] 2 locks held by syz-executor/8224: [ 376.332168][ T31] #0: ffffffff8fa3deb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 376.341720][ T31] #1: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 376.363167][ T31] 1 lock held by syz.1.519/8265: [ 376.369551][ T31] #0: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 376.385463][ T31] 1 lock held by syz-executor/8268: [ 376.391251][ T31] #0: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 376.402678][ T31] [ 376.427280][ T31] ============================================= [ 376.427280][ T31] [ 376.511181][ T31] NMI backtrace for cpu 1 [ 376.511205][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 376.511231][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.511243][ T31] Call Trace: [ 376.511252][ T31] [ 376.511261][ T31] dump_stack_lvl+0x189/0x250 [ 376.511315][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.511344][ T31] ? __pfx__printk+0x10/0x10 [ 376.511391][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 376.511430][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 376.511462][ T31] ? __pfx__printk+0x10/0x10 [ 376.511493][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.511523][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 376.511562][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 376.511599][ T31] watchdog+0xf93/0xfe0 [ 376.511637][ T31] ? watchdog+0x1de/0xfe0 [ 376.511675][ T31] kthread+0x711/0x8a0 [ 376.511710][ T31] ? __pfx_watchdog+0x10/0x10 [ 376.511742][ T31] ? __pfx_kthread+0x10/0x10 [ 376.511768][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.511799][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.511831][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.511856][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.511876][ T31] ? __pfx_kthread+0x10/0x10 [ 376.511905][ T31] ret_from_fork+0x439/0x7d0 [ 376.511932][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 376.511961][ T31] ? __switch_to_asm+0x39/0x70 [ 376.511989][ T31] ? __switch_to_asm+0x33/0x70 [ 376.512016][ T31] ? __pfx_kthread+0x10/0x10 [ 376.512045][ T31] ret_from_fork_asm+0x1a/0x30 [ 376.512089][ T31] [ 376.669049][ T31] Sending NMI from CPU 1 to CPUs 0: [ 376.674564][ C0] NMI backtrace for cpu 0 [ 376.674583][ C0] CPU: 0 UID: 0 PID: 7655 Comm: segctord Not tainted syzkaller #0 PREEMPT(full) [ 376.674610][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.674625][ C0] RIP: 0010:set_next_entity+0x1f4/0x690 [ 376.674656][ C0] Code: 24 4d 85 ff 4c 8b 64 24 08 74 23 49 83 c7 38 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 52 90 8f 00 49 8b 07 49 39 c6 <4c> 0f 43 f0 f3 0f 1e fa 4c 8d bb 80 00 00 00 4c 89 f8 48 c1 e8 03 [ 376.674678][ C0] RSP: 0018:ffffc90003a6f738 EFLAGS: 00000086 [ 376.674698][ C0] RAX: 0000000000155cc0 RBX: ffff888140e89e80 RCX: 16e2ae7de6163200 [ 376.674716][ C0] RDX: 00000000000002ec RSI: ffff888140e89e80 RDI: ffff8880b863a088 [ 376.674734][ C0] RBP: dffffc0000000000 R08: ffff8880244dbca7 R09: ffff8880244dbc98 [ 376.674752][ C0] R10: dffffc0000000000 R11: ffffffff81946040 R12: 0000001301113a9e [ 376.674769][ C0] R13: ffff8880b863a040 R14: ffffffffffffffff R15: ffff88801a53bcb8 [ 376.674791][ C0] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 376.674811][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.674827][ C0] CR2: 000055edc6bd35c8 CR3: 000000000df36000 CR4: 0000000000350ef0 [ 376.674845][ C0] Call Trace: [ 376.674854][ C0] [ 376.674868][ C0] set_next_task_fair+0x62/0x1d0 [ 376.674901][ C0] __schedule+0x4376/0x4cc0 [ 376.674958][ C0] ? __pfx___schedule+0x10/0x10 [ 376.674993][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.675024][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.675058][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 376.675093][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 376.675130][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.675159][ C0] ? preempt_schedule+0xae/0xc0 [ 376.675182][ C0] preempt_schedule_common+0x83/0xd0 [ 376.675205][ C0] preempt_schedule+0xae/0xc0 [ 376.675227][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 376.675254][ C0] preempt_schedule_thunk+0x16/0x30 [ 376.675298][ C0] _raw_spin_unlock+0x3f/0x50 [ 376.675333][ C0] nilfs_segctor_construct+0x597/0x690 [ 376.675364][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.675396][ C0] nilfs_segctor_thread+0x6f7/0xe00 [ 376.675422][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.675449][ C0] ? __lock_acquire+0xab9/0xd20 [ 376.675504][ C0] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 376.675530][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 376.675572][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 376.675603][ C0] ? __kthread_parkme+0x7b/0x200 [ 376.675629][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.675656][ C0] ? __kthread_parkme+0x1a1/0x200 [ 376.675687][ C0] kthread+0x711/0x8a0 [ 376.675718][ C0] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 376.675746][ C0] ? __pfx_kthread+0x10/0x10 [ 376.675772][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.675803][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.675837][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.675865][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.675888][ C0] ? __pfx_kthread+0x10/0x10 [ 376.675918][ C0] ret_from_fork+0x439/0x7d0 [ 376.675945][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 376.675974][ C0] ? __switch_to_asm+0x39/0x70 [ 376.676004][ C0] ? __switch_to_asm+0x33/0x70 [ 376.676041][ C0] ? __pfx_kthread+0x10/0x10 [ 376.676072][ C0] ret_from_fork_asm+0x1a/0x30 [ 376.676116][ C0] [ 377.098646][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 377.105541][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 377.114657][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 377.124720][ T31] Call Trace: [ 377.128006][ T31] [ 377.130939][ T31] dump_stack_lvl+0x99/0x250 [ 377.135547][ T31] ? __asan_memcpy+0x40/0x70 [ 377.140251][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.145477][ T31] ? __pfx__printk+0x10/0x10 [ 377.150096][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.155744][ T31] vpanic+0x281/0x750 [ 377.159733][ T31] ? __pfx_vpanic+0x10/0x10 [ 377.164236][ T31] ? preempt_schedule+0xae/0xc0 [ 377.169110][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.174738][ T31] ? preempt_schedule_common+0x83/0xd0 [ 377.180218][ T31] panic+0xb9/0xc0 [ 377.183938][ T31] ? __pfx_panic+0x10/0x10 [ 377.188351][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.193976][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 377.199358][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.204991][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 377.211160][ T31] watchdog+0xfd2/0xfe0 [ 377.215321][ T31] ? watchdog+0x1de/0xfe0 [ 377.219657][ T31] kthread+0x711/0x8a0 [ 377.223732][ T31] ? __pfx_watchdog+0x10/0x10 [ 377.228419][ T31] ? __pfx_kthread+0x10/0x10 [ 377.233013][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.238648][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.243856][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 377.249483][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.254670][ T31] ? __pfx_kthread+0x10/0x10 [ 377.259261][ T31] ret_from_fork+0x439/0x7d0 [ 377.263851][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 377.268967][ T31] ? __switch_to_asm+0x39/0x70 [ 377.273729][ T31] ? __switch_to_asm+0x33/0x70 [ 377.278492][ T31] ? __pfx_kthread+0x10/0x10 [ 377.283085][ T31] ret_from_fork_asm+0x1a/0x30 [ 377.287865][ T31] [ 377.291112][ T31] Kernel Offset: disabled [ 377.295428][ T31] Rebooting in 86400 seconds..