last executing test programs: 46.438192922s ago: executing program 3 (id=241): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) 45.33125775s ago: executing program 3 (id=245): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x1, 0xffffffc, 0x8000000, 0xffffffff, 0x9, "26000000000000000000000000000019", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'team_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x3000810, &(0x7f0000001140), 0x1, 0x5110, &(0x7f0000018c40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x32c2, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 42.163425352s ago: executing program 3 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e"], 0x15) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000019e1000008000000"]) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1]) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) sendmsg$key(r5, 0x0, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x0) 41.05542635s ago: executing program 3 (id=253): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000180)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000", @ANYBLOB], 0x50) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda", 0x3}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88eeffffff1b0012800b00010067656e65766500000c00028008000100040000000a0001"], 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) r3 = syz_open_dev$media(&(0x7f0000000240), 0x1, 0x200) mmap(&(0x7f000021c000/0x3000)=nil, 0x3000, 0x3000007, 0x10010, r3, 0xb32dc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x226, &(0x7f0000000a00)="$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") r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dax_inode}, {@data_err_ignore}, {@dioread_nolock}, {@nojournal_checksum}, {@data_err_ignore}, {@oldalloc}, {@bsdgroups}]}, 0xfc, 0x579, &(0x7f00000007c0)="$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") 39.814978588s ago: executing program 3 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0xfffffffe, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 31.032457528s ago: executing program 0 (id=276): io_uring_setup(0x1de0, &(0x7f0000000440)) socket(0x1d, 0x2, 0x6) syz_open_pts(0xffffffffffffffff, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f00000016c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x40) 27.753609031s ago: executing program 3 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 26.377815097s ago: executing program 32 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 26.352876538s ago: executing program 0 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="000002"]) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 25.837284147s ago: executing program 0 (id=287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x20}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000280)={[{@acl}, {@cache_strategy_readaround}, {@dax}, {@cache_strategy_disabled}, {@dax_always}, {@acl}]}, 0x3, 0x1b1, &(0x7f00000000c0)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) 24.453325754s ago: executing program 0 (id=288): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000180)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000", @ANYBLOB], 0x50) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda", 0x3}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88eeffffff1b0012800b00010067656e65766500000c00028008000100040000000a0001"], 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) r4 = syz_open_dev$media(&(0x7f0000000240), 0x1, 0x200) mmap(&(0x7f000021c000/0x3000)=nil, 0x3000, 0x3000007, 0x10010, r4, 0xb32dc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x226, &(0x7f0000000a00)="$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") r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dax_inode}, {@data_err_ignore}, {@dioread_nolock}, {@nojournal_checksum}, {@data_err_ignore}, {@oldalloc}, {@bsdgroups}]}, 0xfc, 0x579, &(0x7f00000007c0)="$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") 22.91345715s ago: executing program 0 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x3b) unshare(0x10000) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='gid_map\x00') write$P9_RSTATu(r4, 0x0, 0x70) geteuid() openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17.400374768s ago: executing program 1 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x20}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000280)={[{@acl}, {@cache_strategy_readaround}, {@dax}, {@cache_strategy_disabled}, {@dax_always}, {@acl}]}, 0x3, 0x1b1, &(0x7f00000000c0)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) 16.840266577s ago: executing program 1 (id=300): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000180)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000", @ANYBLOB], 0x50) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda", 0x3}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88eeffffff1b0012800b00010067656e65766500000c00028008000100040000000a0001"], 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) r4 = syz_open_dev$media(&(0x7f0000000240), 0x1, 0x200) mmap(&(0x7f000021c000/0x3000)=nil, 0x3000, 0x3000007, 0x10010, r4, 0xb32dc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x226, &(0x7f0000000a00)="$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") r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dax_inode}, {@data_err_ignore}, {@dioread_nolock}, {@nojournal_checksum}, {@data_err_ignore}, {@oldalloc}, {@bsdgroups}]}, 0xfc, 0x579, &(0x7f00000007c0)="$eJzs3d9rW1UcAPDvTdP9nutgDPVBCntwMpeurT8m+DAfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRB18qN73psuZHszZbs+XzgVvOuecm55577vfk3NykCWBojad/chGvRcR3ScSRprJ8ZIXj69utProxky5JrK19/ncSSbYuIkmT9XzqYJZ5NSJ+/ybiVK613uryynyxXC4tZvmJ2sLVieryyunLC8W50lzpytT09Nl3p6c+eP+9vrX1rQv//vjZvY/Pfnti9YdfHxy9k8S5OJSVrbdjx242Z8ZjPDsmo3Fu04aTfahskCS7vQNsy0gW56ORjgFHYiSLeuDl93VErAFDKhH/MKQa84DGtX2froNfGA8/Wr8Aam1/fv29kdhXvzY6sJo8cWWUXu+O9aH+tI7f/rp7J12if+9DAGzp5q2IOJPPt45/STb+bd+ZHrbZXIfxD56fe+n85+1285/cxvwn2sx/DraJ3e3YOv5zD/pQTUfp/O/DtvPfjZtWYyNZ7nB9zjeaXLpcLqVj2ysRcTJG96b5bvdzzq7eX+tU1jz/S5e0/sZcMNuPB/m9Tz5mtlgr7qTNzR7eini97fx3ffxvVL25/9PjcaEpP9KljuOlu290Ktu6/c/W2i8Rb7bt/8d3tJLu9ycn6ufDROOsaPXP7eN/dKp/t9uf9v+Bbu0/HGNJ8/3a6tPX8fO+/0qdyrZ7/u9Jvqin92TrrhdrtcXJiD3Jp63rpx4/tpFvbJ+2/+SJ7uNf0nz+Z8PC/oj4ssf23z52u+Omg9D/s93P/039//SJ+5989VOn+nvr/3fqqZPZml7Gv153cCfHDgAAAAAAAAZNLiIORZIrbKRzuUJh/fMdx+JArlyp1k5dqixdmY36d2XHYjTXuNN9pOnzEJPZ52Eb+alN+emIOBoR34/sr+cLM5Xy7G43HgAAAAAAAAAAAAAAAAAAAAbEwYh97b7/n/qz2z/1B14OfvIbhlfn+M9K+vFLT8BA8voPw0v8w/AS/zC8xD8ML/EPw2sj/kd3dz+A58/rPwwv8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAB9deH8+XRZW310YybNz15bXpqvXDs9W6rOFxaWZgozlcWrhblKZa5cKsxUFrZ6vnKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYskvDAAAAAAAAAAAAAAAAAAAAECr6vLKfLFcLi32OZGLiGfzzC9MIj28SUT0+qh81iUDsfO9J/Lzxf0DsBsSfU7s7rgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM3+DwAA//9EGC+/") 13.72602508s ago: executing program 1 (id=302): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r6) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) 13.390586299s ago: executing program 0 (id=305): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000440)={0x80, 0x20000000}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = shmat(0xffffffffffffffff, &(0x7f000000c000/0x2000)=nil, 0x6000) shmdt(r1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002cc0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}]}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x83, &(0x7f00000005c0)={[{@norecovery}, {@sysvgroups}, {@sysvgroups}]}, 0x23, 0x625, &(0x7f0000000600)="$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") 12.110706996s ago: executing program 33 (id=305): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000440)={0x80, 0x20000000}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = shmat(0xffffffffffffffff, &(0x7f000000c000/0x2000)=nil, 0x6000) shmdt(r1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002cc0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}]}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x83, &(0x7f00000005c0)={[{@norecovery}, {@sysvgroups}, {@sysvgroups}]}, 0x23, 0x625, &(0x7f0000000600)="$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") 12.084357996s ago: executing program 4 (id=307): io_uring_setup(0x1de0, &(0x7f0000000440)) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f00000016c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x40) 10.873252304s ago: executing program 4 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r3, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') ptrace(0x10, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") 9.867268811s ago: executing program 2 (id=310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x20}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000280)={[{@acl}, {@cache_strategy_readaround}, {@dax}, {@cache_strategy_disabled}, {@dax_always}, {@acl}]}, 0x3, 0x1b1, &(0x7f00000000c0)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) 9.552679601s ago: executing program 1 (id=311): mq_open(0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 9.260650861s ago: executing program 2 (id=312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="000002"]) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.158400798s ago: executing program 2 (id=313): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2074, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000010000304002000003c0e77897399f655", @ANYRES32=0x0, @ANYBLOB="15020000000000003c0012800b00010067726574617000002c00028006000f000700000006000f0000800000060011004e220000080007007f000001050013000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x6c}, 0x1, 0xba01}, 0x0) 6.952246865s ago: executing program 2 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x3b) unshare(0x10000) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='gid_map\x00') write$P9_RSTATu(r4, 0x0, 0x70) geteuid() openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.421533942s ago: executing program 2 (id=315): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000180)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000", @ANYBLOB], 0x50) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda", 0x3}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88eeffffff1b0012800b00010067656e65766500000c00028008000100040000000a0001"], 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) r4 = syz_open_dev$media(&(0x7f0000000240), 0x1, 0x200) mmap(&(0x7f000021c000/0x3000)=nil, 0x3000, 0x3000007, 0x10010, r4, 0xb32dc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x226, &(0x7f0000000a00)="$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") r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dax_inode}, {@data_err_ignore}, {@dioread_nolock}, {@nojournal_checksum}, {@data_err_ignore}, {@oldalloc}, {@bsdgroups}]}, 0xfc, 0x579, &(0x7f00000007c0)="$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") 4.43554215s ago: executing program 1 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd2a, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r4, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) 4.37951597s ago: executing program 4 (id=317): io_uring_setup(0x1de0, &(0x7f0000000440)) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f00000016c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x40) 2.544227456s ago: executing program 1 (id=318): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.543807726s ago: executing program 4 (id=319): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r6) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) 2.474855535s ago: executing program 2 (id=320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2004000, &(0x7f0000000400)=ANY=[], 0xfe, 0x164, &(0x7f0000000780)="$eJzs0E+LUlEYx/Hvuff4J1IsMpCgFNpYEviH2kV4I0nILhRtWoSgtxIUI6HcpUS7FkJbiahtBL0CTRcxw7iZeROzcTcwS4d7zzhufAfzfHbn95znd+A8ur/IKjYedjvv3n+P9Lxm5plbqzw/nEzKfh6G/t/13Ov1vKa5Py3DWzRTDcsh+PE8Dq9bbc9qdNv+eVmGCOBcDPIQkFi/5yQ1Qw0FzH72Jrwy9yz0JptdNZ0lQsHeNQ1OwmR5YNW6YPoum8zvOwJsUCp8+th1my/VXPqKgv449+f37tO9neqd2w+8r8XK6FYsZec+wU8cFf0/f3NgmyX/d564NXdhFYv3SvmCxd39oHAwQj+OfYCXCrTfZxH0hUnd0C/gs4JvStEfL/+pODD7cex2Imd/PfhoZ0Clx426FfpVT16ysLPan6zYIpgQ3TYSQgghhBBCCCGEEEIIIYQQQghx3p0EAAD//wcsTxE=") fspick(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x1ff, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x1}) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@decrefs], 0x0, 0x0, 0x0}) 555.659061ms ago: executing program 4 (id=321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x20}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000280)={[{@acl}, {@cache_strategy_readaround}, {@dax}, {@cache_strategy_disabled}, {@dax_always}, {@acl}]}, 0x3, 0x1b1, &(0x7f00000000c0)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) 0s ago: executing program 4 (id=322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="000002"]) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): mes ready [ 73.017990][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.026630][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.035297][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.066512][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.091481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.102127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.111385][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.118506][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.128341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.137574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.146241][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.153303][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.175646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.183727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.193469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.203396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.213294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.224216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.233741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.242667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.258285][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.281051][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.289898][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.301183][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.310470][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.320114][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.329200][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.337586][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.351963][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.372564][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.393157][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.418128][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.436098][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.445278][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.454151][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.463756][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.470928][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.500630][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.509263][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.521594][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.530921][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.538106][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.550532][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.558757][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.589842][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.604684][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.616487][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.628212][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.640000][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.680620][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.690534][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.704978][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 73.711930][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.729307][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.747948][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.765474][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.775465][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 73.775746][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 73.781485][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 73.787554][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 73.805215][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.819191][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.826352][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.839411][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.848380][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.857615][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.864785][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.873238][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.883201][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.898476][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.936944][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.945500][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.952969][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.965210][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.972720][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.980752][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.989978][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.000826][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.019722][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.039737][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.053238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.063073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.072801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.082194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.111129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.138282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.169821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.214361][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.223259][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.239039][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.248894][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.263493][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.274327][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.283516][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.294893][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.333777][ T4269] device veth0_vlan entered promiscuous mode [ 74.353124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.367656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.396152][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.403296][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.428419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.440930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.452893][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.460084][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.475789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.485329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.494347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.503659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.512409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.520776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.542597][ T4269] device veth1_vlan entered promiscuous mode [ 74.574589][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.582758][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.616397][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.630339][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.639584][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.649286][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.658996][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.677566][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.718886][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.733962][ T4253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.752287][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.780087][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.788188][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.797902][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.812246][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.827915][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.836895][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.846241][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.897367][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.912890][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.943197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.966124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.988098][ T4269] device veth0_macvtap entered promiscuous mode [ 75.027708][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.037276][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.059105][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.068368][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.078498][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.093848][ T4269] device veth1_macvtap entered promiscuous mode [ 75.115408][ T4260] device veth0_vlan entered promiscuous mode [ 75.122907][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.132113][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.140234][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.149105][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.158604][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.190952][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.208567][ T4254] device veth0_vlan entered promiscuous mode [ 75.222715][ T4254] device veth1_vlan entered promiscuous mode [ 75.239940][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.253635][ T4260] device veth1_vlan entered promiscuous mode [ 75.271921][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.281257][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.291445][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.302560][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.311526][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.320534][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.328608][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.348582][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.365864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.374081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.384325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.398875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.407423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.421981][ T4254] device veth0_macvtap entered promiscuous mode [ 75.451790][ T4269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.461918][ T4269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.471221][ T4269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.481296][ T4269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.496137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.508098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.516983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.526623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.536332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.562091][ T4265] device veth0_vlan entered promiscuous mode [ 75.577115][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.588498][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.599471][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.609221][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.622133][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.631222][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.639911][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.650841][ T4260] device veth0_macvtap entered promiscuous mode [ 75.669444][ T4260] device veth1_macvtap entered promiscuous mode [ 75.680191][ T4254] device veth1_macvtap entered promiscuous mode [ 75.716722][ T4265] device veth1_vlan entered promiscuous mode [ 75.746066][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.757330][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.769241][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.784805][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 75.790841][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.803713][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.814230][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.826892][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.839651][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.856352][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 75.856398][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 75.862373][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 75.868638][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 75.882568][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.890987][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.899571][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.908257][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.916525][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.924758][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.933442][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.943367][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.952511][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.962457][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.971478][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.982510][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.993269][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.007179][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.048440][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.057646][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.070123][ T4260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.080516][ T4260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.089876][ T4260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.099363][ T4260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.119140][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.130392][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.140772][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.151462][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.162860][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.173375][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.192363][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.200641][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.205522][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.217103][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.226068][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.235226][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.243208][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.252166][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.262710][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.271915][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.284767][ T4254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.293486][ T4254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.302608][ T4254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.311525][ T4254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.343833][ T4265] device veth0_macvtap entered promiscuous mode [ 76.353469][ T4253] device veth0_vlan entered promiscuous mode [ 76.401606][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.410824][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.440191][ T4265] device veth1_macvtap entered promiscuous mode [ 76.469162][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.479013][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.487921][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.523451][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.535266][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.546025][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.557767][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.567990][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.579199][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.591262][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.602381][ T4253] device veth1_vlan entered promiscuous mode [ 76.631332][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.640437][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.656341][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.671837][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.682591][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.695468][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.705589][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.716420][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.727656][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.766131][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.779341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.795367][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.802494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.835705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.850872][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.861377][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.876204][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.885685][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.904268][ T4253] device veth0_macvtap entered promiscuous mode [ 76.920412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.945829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.956554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.002657][ T4253] device veth1_macvtap entered promiscuous mode [ 77.032598][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.059589][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.080247][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.099943][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.144947][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.157043][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.167334][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.178673][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.189720][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.200211][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.210531][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.256875][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.317754][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.335736][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.352760][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.363328][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.383493][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.393947][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.413388][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.423856][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.445695][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.459427][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.483587][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.492426][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.493709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.511990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.524563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.538133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.549915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.856465][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 77.935195][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 77.941971][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 77.949966][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 77.958547][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 78.198152][ T4253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.207154][ T4253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.208064][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.216398][ T4253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.232877][ T4253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.238852][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.406362][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.478581][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.528362][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.561424][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.607555][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.624953][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.673819][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.721295][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.741448][ T4351] loop4: detected capacity change from 0 to 4096 [ 78.758021][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.771795][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.785257][ T4351] ======================================================= [ 78.785257][ T4351] WARNING: The mand mount option has been deprecated and [ 78.785257][ T4351] and is ignored by this kernel. Remove the mand [ 78.785257][ T4351] option from the mount to silence this warning. [ 78.785257][ T4351] ======================================================= [ 78.824071][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.840015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.893078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.321999][ T4358] loop0: detected capacity change from 0 to 4096 [ 79.772034][ T4354] loop1: detected capacity change from 0 to 32768 [ 79.892940][ T4354] XFS (loop1): Mounting V5 Filesystem [ 80.007095][ T4378] autofs4:pid:4378:autofs_fill_super: called with bogus options [ 80.018649][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.257314][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 80.334937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.384433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 80.392654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 80.400866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 80.409189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 80.417405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 80.425643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 80.433830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 80.442042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 80.450328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 80.606785][ T4354] XFS (loop1): Ending clean mount [ 80.619756][ T7] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 80.688846][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.742297][ T7] usb 3-1: Product: syz [ 80.746924][ T7] usb 3-1: Manufacturer: syz [ 80.762574][ T7] usb 3-1: SerialNumber: syz [ 80.805254][ T7] usb 3-1: config 0 descriptor?? [ 80.951482][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 80.990288][ T4383] netlink: 11 bytes leftover after parsing attributes in process `syz.4.13'. [ 81.363489][ T4383] Zero length message leads to an empty skb [ 81.944367][ T7] gspca_sonixj: reg_w1 err -110 [ 81.949420][ T7] sonixj: probe of 3-1:0.0 failed with error -110 [ 82.021088][ T4392] loop0: detected capacity change from 0 to 4096 [ 82.050882][ T4392] NILFS (loop0): unrecognized mount option "discardrecovery" [ 82.060492][ T4254] XFS (loop1): Unmounting Filesystem [ 82.229501][ T4393] loop4: detected capacity change from 0 to 16 [ 82.248833][ T4393] erofs: (device loop4): mounted with root inode @ nid 36. [ 82.296880][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.267031][ T4396] loop0: detected capacity change from 0 to 32768 [ 83.274785][ T4396] jfs: Unrecognized mount option "syz"" or missing value [ 83.366132][ T7] usb 4-1: device descriptor read/64, error -71 [ 83.561032][ T126] usb 3-1: USB disconnect, device number 2 [ 83.654562][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.894497][ T7] usb 4-1: device descriptor read/64, error -71 [ 84.007774][ T4401] loop2: detected capacity change from 0 to 32768 [ 84.019834][ T7] usb usb4-port1: attempt power cycle [ 84.213409][ T4401] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 84.259043][ T4405] loop0: detected capacity change from 0 to 1024 [ 84.281846][ T4401] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 84.297396][ T4401] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 84.307291][ T4401] OCFS2: File system is now read-only. [ 84.312783][ T4401] (syz.2.17,4401,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 84.321408][ T4401] (syz.2.17,4401,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 84.329122][ T4401] (syz.2.17,4401,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 84.338396][ T4401] (syz.2.17,4401,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 84.346780][ T4401] (syz.2.17,4401,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 84.354868][ T4401] (syz.2.17,4401,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 84.362971][ T4401] (syz.2.17,4401,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 84.371598][ T4401] (syz.2.17,4401,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 84.380216][ T4401] (syz.2.17,4401,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 84.389219][ T4401] (syz.2.17,4401,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 84.398300][ T4401] (syz.2.17,4401,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 84.407059][ T4401] (syz.2.17,4401,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 84.416065][ T4401] (syz.2.17,4401,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 84.425136][ T4401] (syz.2.17,4401,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 84.434787][ T4401] (syz.2.17,4401,1):ocfs2_symlink:1911 ERROR: status = -30 [ 84.443406][ T4401] (syz.2.17,4401,1):ocfs2_symlink:2065 ERROR: status = -30 [ 84.574698][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.836282][ T7] usb 4-1: device descriptor read/8, error -71 [ 84.888167][ T4405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.289578][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.348874][ T7] usb 4-1: device descriptor read/8, error -71 [ 85.590456][ T7] usb usb4-port1: unable to enumerate USB device [ 85.785522][ T4265] (syz-executor,4265,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 86.719522][ T128] cfg80211: failed to load regulatory.db [ 86.750781][ T4265] ocfs2: Unmounting device (7,2) on (node local) [ 86.864380][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 87.224281][ T4433] loop4: detected capacity change from 0 to 16 [ 87.235566][ T4433] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 87.243603][ T4433] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 87.276380][ T4433] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 87.287049][ T4433] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 87.300089][ T4433] erofs: DAX unsupported by block device. Turning off DAX. [ 88.039853][ T4436] loop2: detected capacity change from 0 to 512 [ 88.234691][ T4436] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.086282][ T4443] loop0: detected capacity change from 0 to 256 [ 89.188449][ T4443] FAT-fs (loop0): Directory bread(block 64) failed [ 89.204287][ T4436] EXT4-fs (loop2): 1 orphan inode deleted [ 89.210212][ T4436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.216756][ T4443] FAT-fs (loop0): Directory bread(block 65) failed [ 89.239455][ T4443] FAT-fs (loop0): Directory bread(block 66) failed [ 89.248756][ T4380] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 89.262408][ T4436] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.277599][ T4380] EXT4-fs error (device loop2): ext4_release_dquot:6817: comm kworker/u4:9: Failed to release dquot type 1 [ 89.304530][ T4443] FAT-fs (loop0): Directory bread(block 67) failed [ 89.344553][ T4443] FAT-fs (loop0): Directory bread(block 68) failed [ 89.351887][ T4443] FAT-fs (loop0): Directory bread(block 69) failed [ 89.388922][ T4443] FAT-fs (loop0): Directory bread(block 70) failed [ 89.411410][ T4443] FAT-fs (loop0): Directory bread(block 71) failed [ 89.432389][ T4443] FAT-fs (loop0): Directory bread(block 72) failed [ 89.444912][ T4443] FAT-fs (loop0): Directory bread(block 73) failed [ 89.510710][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.736921][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 89.847858][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 89.990798][ T7] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 90.127008][ T7] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 90.188757][ T7] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x4 has invalid maxpacket 1533, setting to 1024 [ 90.230595][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.511330][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.684975][ T32] usb 3-1: device descriptor read/64, error -71 [ 90.844639][ T7] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 90.860040][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.868648][ T7] usb 5-1: Product: syz [ 90.872917][ T7] usb 5-1: Manufacturer: syz [ 90.892588][ T7] usb 5-1: SerialNumber: syz [ 90.901100][ T7] usb 5-1: config 0 descriptor?? [ 90.908340][ T4449] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 90.954721][ T32] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.114556][ T32] usb 3-1: device descriptor read/64, error -71 [ 91.127517][ T4449] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 91.244730][ T32] usb usb3-port1: attempt power cycle [ 91.418277][ T7] usb 5-1: USB disconnect, device number 2 [ 93.416915][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.656121][ T4480] loop2: detected capacity change from 0 to 512 [ 93.709503][ T32] usb 3-1: device not accepting address 5, error -71 [ 94.523646][ T4486] syz.3.39 uses obsolete (PF_INET,SOCK_PACKET) [ 95.429019][ T4497] loop4: detected capacity change from 0 to 2048 [ 95.441463][ T4496] loop1: detected capacity change from 0 to 256 [ 95.507769][ T4496] FAT-fs (loop1): Directory bread(block 64) failed [ 95.521864][ T4499] netlink: 72 bytes leftover after parsing attributes in process `syz.3.44'. [ 95.542378][ T4496] FAT-fs (loop1): Directory bread(block 65) failed [ 95.559993][ T4500] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.562171][ T4496] FAT-fs (loop1): Directory bread(block 66) failed [ 95.664526][ T4496] FAT-fs (loop1): Directory bread(block 67) failed [ 95.671188][ T4496] FAT-fs (loop1): Directory bread(block 68) failed [ 95.723848][ T4496] FAT-fs (loop1): Directory bread(block 69) failed [ 95.756462][ T4496] FAT-fs (loop1): Directory bread(block 70) failed [ 95.763080][ T4496] FAT-fs (loop1): Directory bread(block 71) failed [ 95.792233][ T4496] FAT-fs (loop1): Directory bread(block 72) failed [ 95.805169][ T4502] loop3: detected capacity change from 0 to 64 [ 95.814772][ T4496] FAT-fs (loop1): Directory bread(block 73) failed [ 96.528237][ T4493] loop2: detected capacity change from 0 to 32768 [ 96.570106][ T4493] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.41 (4493) [ 96.634024][ T4493] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.678277][ T4493] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 96.741268][ T4493] BTRFS info (device loop2): using free space tree [ 97.092363][ T4514] binder: 4507:4514 ioctl 89f2 200001c0 returned -22 [ 97.101486][ T4514] binder: 4507:4514 ioctl c0306201 0 returned -14 [ 97.919759][ T4516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 98.100118][ T4493] BTRFS info (device loop2): enabling ssd optimizations [ 99.249562][ T4265] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.268476][ T4540] loop0: detected capacity change from 0 to 2048 [ 100.394904][ T4540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.485931][ T4547] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.575006][ T4548] device syzkaller0 entered promiscuous mode [ 101.034174][ T4560] Bluetooth: MGMT ver 1.22 [ 101.413723][ T4258] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.564353][ T4570] binder: 4569:4570 ioctl 89f2 200001c0 returned -22 [ 101.584558][ T4570] binder: 4569:4570 ioctl c0306201 0 returned -14 [ 102.424547][ T4258] usb 4-1: Using ep0 maxpacket: 32 [ 102.432543][ T4258] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.482960][ T4258] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.564216][ T4258] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 102.587926][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.738726][ T4258] hub 4-1:4.0: USB hub found [ 102.749056][ T4577] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 102.930724][ T4258] hub 4-1:4.0: 2 ports detected [ 102.939553][ T4258] usb 4-1: selecting invalid altsetting 1 [ 102.970102][ T4258] hub 4-1:4.0: Using single TT (err -22) [ 103.054621][ T4266] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 103.061639][ T4266] Bluetooth: hci0: command 0x0401 tx timeout [ 103.363411][ T4258] usb 4-1: USB disconnect, device number 6 [ 103.397809][ T4497] syz.4.42 (4497) used greatest stack depth: 18232 bytes left [ 103.464686][ T4554] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.659645][ T4554] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 103.659706][ T4554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.659730][ T4554] usb 2-1: Product: syz [ 103.659747][ T4554] usb 2-1: Manufacturer: syz [ 103.659764][ T4554] usb 2-1: SerialNumber: syz [ 103.661922][ T4554] usb 2-1: config 0 descriptor?? [ 103.876409][ T4350] usb 2-1: USB disconnect, device number 2 [ 104.101632][ T4590] device syzkaller0 entered promiscuous mode [ 105.134677][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.247263][ T4597] loop1: detected capacity change from 0 to 512 [ 105.362786][ T4597] EXT4-fs (loop1): 1 orphan inode deleted [ 105.394596][ T4597] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.404622][ T4379] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 105.424904][ T4379] EXT4-fs error (device loop1): ext4_release_dquot:6817: comm kworker/u4:8: Failed to release dquot type 1 [ 105.441187][ T4597] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.618537][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 105.910981][ T4591] loop3: detected capacity change from 0 to 32768 [ 106.001086][ T4591] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.65 (4591) [ 106.031174][ T4591] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 106.069575][ T4591] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 106.084675][ T4591] BTRFS info (device loop3): using free space tree [ 106.614275][ T4599] loop0: detected capacity change from 0 to 32768 [ 106.635557][ T4599] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.69 (4599) [ 106.697790][ T4599] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.790536][ T4599] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 106.799496][ T4591] BTRFS info (device loop3): enabling ssd optimizations [ 106.860672][ T4599] BTRFS info (device loop0): using free space tree [ 106.909577][ T4634] loop2: detected capacity change from 0 to 2048 [ 107.040701][ T4636] loop4: detected capacity change from 0 to 4096 [ 107.048039][ T4643] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.085536][ T4269] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 107.537365][ T4655] capability: warning: `syz.4.73' uses 32-bit capabilities (legacy support in use) [ 107.835580][ T4652] loop1: detected capacity change from 0 to 128 [ 107.837171][ T4652] ufs: Invalid option: "µ÷" or missing value [ 107.837259][ T4652] ufs: wrong mount options [ 108.696986][ T4672] binder: 4670:4672 ioctl c0306201 20000080 returned -14 [ 108.760127][ T4599] BTRFS error (device loop0): open_ctree failed [ 109.052229][ T4672] device team_slave_0 entered promiscuous mode [ 109.476746][ T4260] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 109.608116][ T4260] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 110.778425][ T4697] loop3: detected capacity change from 0 to 512 [ 110.801370][ T4700] 9pnet_fd: Insufficient options for proto=fd [ 110.883773][ T4258] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.949908][ T4702] loop1: detected capacity change from 0 to 256 [ 112.403954][ T4697] EXT4-fs (loop3): 1 orphan inode deleted [ 112.415688][ T4491] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 112.430664][ T4258] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 112.433948][ T4702] FAT-fs (loop1): Directory bread(block 64) failed [ 112.448154][ T4697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.485029][ T4491] EXT4-fs error (device loop3): ext4_release_dquot:6817: comm kworker/u4:14: Failed to release dquot type 1 [ 112.501314][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.504845][ T4702] FAT-fs (loop1): Directory bread(block 65) failed [ 112.516314][ T4697] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.532406][ T4702] FAT-fs (loop1): Directory bread(block 66) failed [ 112.539140][ T4258] usb 5-1: Product: syz [ 112.567714][ T4258] usb 5-1: Manufacturer: syz [ 112.573987][ T4702] FAT-fs (loop1): Directory bread(block 67) failed [ 112.610744][ T4702] FAT-fs (loop1): Directory bread(block 68) failed [ 112.624512][ T4258] usb 5-1: SerialNumber: syz [ 112.635216][ T4702] FAT-fs (loop1): Directory bread(block 69) failed [ 112.643331][ T4702] FAT-fs (loop1): Directory bread(block 70) failed [ 112.645451][ T4258] usb 5-1: config 0 descriptor?? [ 112.664546][ T4702] FAT-fs (loop1): Directory bread(block 71) failed [ 112.682486][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 112.688727][ T4702] FAT-fs (loop1): Directory bread(block 72) failed [ 112.720819][ T4702] FAT-fs (loop1): Directory bread(block 73) failed [ 112.916662][ T4258] usb 5-1: USB disconnect, device number 3 [ 112.929598][ T4714] loop2: detected capacity change from 0 to 256 [ 113.059280][ T4714] FAT-fs (loop2): Directory bread(block 64) failed [ 113.073011][ T4714] FAT-fs (loop2): Directory bread(block 65) failed [ 113.083379][ T4714] FAT-fs (loop2): Directory bread(block 66) failed [ 113.134225][ T4714] FAT-fs (loop2): Directory bread(block 67) failed [ 113.154022][ T4714] FAT-fs (loop2): Directory bread(block 68) failed [ 113.167334][ T4714] FAT-fs (loop2): Directory bread(block 69) failed [ 113.439917][ T4714] FAT-fs (loop2): Directory bread(block 70) failed [ 113.464729][ T4714] FAT-fs (loop2): Directory bread(block 71) failed [ 113.489332][ T4714] FAT-fs (loop2): Directory bread(block 72) failed [ 113.496945][ T4714] FAT-fs (loop2): Directory bread(block 73) failed [ 113.836033][ T4714] syz.2.86: attempt to access beyond end of device [ 113.836033][ T4714] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 113.955661][ T4714] syz.2.86: attempt to access beyond end of device [ 113.955661][ T4714] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 114.038687][ T26] audit: type=1800 audit(1737597844.486:2): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.86" name="cgroup.events" dev="loop2" ino=1048598 res=0 errno=0 [ 115.709586][ T4736] loop2: detected capacity change from 0 to 128 [ 115.812561][ T4737] loop0: detected capacity change from 0 to 2048 [ 115.913331][ T4738] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.998872][ T4725] loop4: detected capacity change from 0 to 32768 [ 116.044541][ T4725] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.88 (4725) [ 116.128496][ T4740] loop2: detected capacity change from 0 to 4096 [ 116.144062][ T4740] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 116.176815][ T4740] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 116.179245][ T4725] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.311909][ T4725] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 116.435038][ T4725] BTRFS error (device loop4): unrecognized metadata_ratio value 0x00000000ffffffff [ 116.457552][ T4725] BTRFS error (device loop4): open_ctree failed [ 116.474321][ T4727] loop1: detected capacity change from 0 to 40427 [ 117.336349][ T4727] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 118.080069][ T4753] loop2: detected capacity change from 0 to 512 [ 118.141906][ T4753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.164505][ T4758] loop3: detected capacity change from 0 to 256 [ 118.190583][ T4753] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.205008][ T4758] FAT-fs (loop3): Directory bread(block 64) failed [ 118.211732][ T4758] FAT-fs (loop3): Directory bread(block 65) failed [ 118.218962][ T4758] FAT-fs (loop3): Directory bread(block 66) failed [ 118.226925][ T4758] FAT-fs (loop3): Directory bread(block 67) failed [ 118.233650][ T4758] FAT-fs (loop3): Directory bread(block 68) failed [ 118.240722][ T4758] FAT-fs (loop3): Directory bread(block 69) failed [ 118.247721][ T4758] FAT-fs (loop3): Directory bread(block 70) failed [ 118.255121][ T4758] FAT-fs (loop3): Directory bread(block 71) failed [ 118.261871][ T4758] FAT-fs (loop3): Directory bread(block 72) failed [ 118.269739][ T4758] FAT-fs (loop3): Directory bread(block 73) failed [ 118.798818][ T4763] loop1: detected capacity change from 0 to 16 [ 118.805884][ T4763] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 118.813763][ T4763] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 118.849393][ T4763] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 118.860040][ T4763] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 118.870736][ T4763] erofs: DAX unsupported by block device. Turning off DAX. [ 119.447118][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 120.833811][ T4797] loop0: detected capacity change from 0 to 512 [ 121.792661][ T4797] EXT4-fs (loop0): 1 orphan inode deleted [ 121.821212][ T4617] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 121.851824][ T4617] EXT4-fs error (device loop0): ext4_release_dquot:6817: comm kworker/u4:16: Failed to release dquot type 1 [ 121.860808][ T4797] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.903617][ T4797] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.939645][ T4807] can0: slcan on ttyS3. [ 122.001296][ T4803] device syzkaller0 entered promiscuous mode [ 122.035288][ T4807] can0 (unregistered): slcan off ttyS3. [ 122.124546][ T128] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.138530][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 122.191249][ T4808] loop4: detected capacity change from 0 to 4096 [ 122.294557][ T128] usb 4-1: device descriptor read/64, error -71 [ 122.529740][ T4818] loop1: detected capacity change from 0 to 256 [ 122.572099][ T4818] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x61a18cac, utbl_chksum : 0xe619d30d) [ 122.594498][ T128] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.787821][ T128] usb 4-1: device descriptor read/64, error -71 [ 122.904632][ T128] usb usb4-port1: attempt power cycle [ 123.234065][ T4831] binder: 4827:4831 ioctl 89f2 200001c0 returned -22 [ 123.243160][ T4831] binder: 4827:4831 ioctl c0306201 0 returned -14 [ 124.034478][ T128] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.075792][ T128] usb 4-1: device descriptor read/8, error -71 [ 124.248468][ T4838] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 124.344591][ T128] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 124.435566][ T128] usb 4-1: device descriptor read/8, error -71 [ 124.554731][ T128] usb usb4-port1: unable to enumerate USB device [ 124.611498][ T4846] loop1: detected capacity change from 0 to 16 [ 124.618600][ T4846] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 124.626586][ T4846] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 124.657305][ T4846] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 124.668000][ T4846] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 124.679893][ T4846] erofs: DAX unsupported by block device. Turning off DAX. [ 127.628775][ T4301] libceph: connect (1)[c::]:6789 error -101 [ 127.646442][ T4301] libceph: mon0 (1)[c::]:6789 connect error [ 127.683515][ T4853] ceph: No mds server is up or the cluster is laggy [ 127.847163][ T4870] device syzkaller0 entered promiscuous mode [ 127.906387][ T4332] libceph: connect (1)[c::]:6789 error -101 [ 127.912462][ T4332] libceph: mon0 (1)[c::]:6789 connect error [ 128.132076][ T4875] loop3: detected capacity change from 0 to 2048 [ 128.146181][ T4875] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 128.284693][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 128.305057][ T4875] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2618, location=2618 [ 128.333891][ T4880] loop0: detected capacity change from 0 to 256 [ 128.343648][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 128.381299][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 128.423978][ T4875] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 128.434122][ T4875] UDF-fs: Scanning with blocksize 512 failed [ 128.457499][ T4880] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x61a18cac, utbl_chksum : 0xe619d30d) [ 128.492985][ T4875] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 128.540401][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 128.572924][ T4875] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2618, location=2618 [ 128.633394][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 128.745436][ T4886] netlink: 232 bytes leftover after parsing attributes in process `syz.2.128'. [ 128.772511][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 128.846416][ T4889] binder: 4881:4889 ioctl 89f2 200001c0 returned -22 [ 128.855468][ T4889] binder: 4881:4889 ioctl c0306201 0 returned -14 [ 128.945414][ T4875] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 129.042862][ T4875] UDF-fs: Scanning with blocksize 1024 failed [ 129.428067][ T4875] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 129.504900][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 129.540524][ T4865] loop1: detected capacity change from 0 to 32768 [ 129.571377][ T4875] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2618, location=2618 [ 129.581675][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 129.593674][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 129.604320][ T4875] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 129.612054][ T4875] UDF-fs: Scanning with blocksize 2048 failed [ 129.619977][ T4875] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 129.647278][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 129.684889][ T4875] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2618, location=2618 [ 129.749922][ T4865] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 129.782540][ T4900] loop2: detected capacity change from 0 to 4096 [ 129.790190][ T4900] ntfs3: Unknown parameter 'hide_dot_files' [ 129.809050][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 129.820180][ T4875] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 129.831226][ T4875] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 129.839527][ T4875] UDF-fs: Scanning with blocksize 4096 failed [ 129.846147][ T4875] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 130.028259][ T4864] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 130.066543][ T4864] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 130.091663][ T4864] OCFS2: File system is now read-only. [ 130.148399][ T4864] (syz.1.123,4864,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 130.202336][ T4864] (syz.1.123,4864,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 130.270233][ T4864] (syz.1.123,4864,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 130.351805][ T4864] (syz.1.123,4864,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 130.412722][ T4864] (syz.1.123,4864,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 130.421094][ T4864] (syz.1.123,4864,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 130.429320][ T4864] (syz.1.123,4864,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 130.438012][ T4864] (syz.1.123,4864,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 130.446739][ T4864] (syz.1.123,4864,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 130.455758][ T4864] (syz.1.123,4864,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 130.464715][ T4864] (syz.1.123,4864,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 130.473522][ T4864] (syz.1.123,4864,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 130.531600][ T4864] (syz.1.123,4864,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 130.598414][ T4864] (syz.1.123,4864,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 130.618480][ T4864] (syz.1.123,4864,1):ocfs2_symlink:1911 ERROR: status = -30 [ 130.683569][ T4864] (syz.1.123,4864,1):ocfs2_symlink:2065 ERROR: status = -30 [ 130.791862][ T4254] (syz-executor,4254,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 130.816394][ T128] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.859505][ T4254] ocfs2: Unmounting device (7,1) on (node local) [ 131.094698][ T128] usb 5-1: Using ep0 maxpacket: 8 [ 131.102744][ T128] usb 5-1: no configurations [ 131.115409][ T128] usb 5-1: can't read configurations, error -22 [ 131.284690][ T128] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.475927][ T128] usb 5-1: Using ep0 maxpacket: 8 [ 131.488097][ T128] usb 5-1: no configurations [ 131.503415][ T128] usb 5-1: can't read configurations, error -22 [ 131.506142][ T4911] loop3: detected capacity change from 0 to 32768 [ 131.528940][ T128] usb usb5-port1: attempt power cycle [ 131.580999][ T4922] device syzkaller0 entered promiscuous mode [ 131.688445][ T4911] JBD2: Ignoring recovery information on journal [ 131.795264][ T4911] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 131.913712][ T4909] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 131.935382][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.952558][ T4930] loop1: detected capacity change from 0 to 256 [ 131.985143][ T4909] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 131.995218][ T128] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.002857][ T4909] OCFS2: Returning error to the calling process. [ 132.014504][ T4909] (syz.3.133,4909,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 132.024619][ T4909] (syz.3.133,4909,0):__ocfs2_claim_clusters:2355 ERROR: status = -5 [ 132.034772][ T4909] (syz.3.133,4909,0):__ocfs2_claim_clusters:2363 ERROR: status = -5 [ 132.044847][ T4909] (syz.3.133,4909,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5 [ 132.056344][ T4909] (syz.3.133,4909,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5 [ 132.065550][ T4909] (syz.3.133,4909,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5 [ 132.069758][ T4930] FAT-fs (loop1): Directory bread(block 64) failed [ 132.075113][ T128] usb 5-1: Using ep0 maxpacket: 8 [ 132.086528][ T4909] (syz.3.133,4909,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 132.104892][ T4909] (syz.3.133,4909,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 132.114131][ T128] usb 5-1: no configurations [ 132.120251][ T4930] FAT-fs (loop1): Directory bread(block 65) failed [ 132.123307][ T128] usb 5-1: can't read configurations, error -22 [ 132.137743][ T4909] (syz.3.133,4909,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 132.148687][ T4909] (syz.3.133,4909,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 132.155740][ T4930] FAT-fs (loop1): Directory bread(block 66) failed [ 132.167885][ T4909] (syz.3.133,4909,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 132.180553][ T4909] (syz.3.133,4909,0):ocfs2_lock_allocators:2672 ERROR: status = -5 [ 132.181337][ T4930] FAT-fs (loop1): Directory bread(block 67) failed [ 132.197793][ T4909] (syz.3.133,4909,0):ocfs2_write_begin_nolock:1744 ERROR: status = -5 [ 132.208394][ T4909] (syz.3.133,4909,0):ocfs2_write_begin:1907 ERROR: status = -5 [ 132.247074][ T4930] FAT-fs (loop1): Directory bread(block 68) failed [ 132.274268][ T4930] FAT-fs (loop1): Directory bread(block 69) failed [ 132.294563][ T128] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.310659][ T4930] FAT-fs (loop1): Directory bread(block 70) failed [ 132.322955][ T4269] ocfs2: Unmounting device (7,3) on (node local) [ 132.334761][ T4930] FAT-fs (loop1): Directory bread(block 71) failed [ 132.342283][ T4930] FAT-fs (loop1): Directory bread(block 72) failed [ 132.348918][ T4930] FAT-fs (loop1): Directory bread(block 73) failed [ 132.355571][ T128] usb 5-1: Using ep0 maxpacket: 8 [ 132.361939][ T128] usb 5-1: no configurations [ 132.372042][ T128] usb 5-1: can't read configurations, error -22 [ 132.403418][ T128] usb usb5-port1: unable to enumerate USB device [ 132.740205][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.786556][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.914743][ T4934] device syz_tun entered promiscuous mode [ 132.945248][ T4934] device batadv_slave_0 entered promiscuous mode [ 132.956130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 135.144779][ T4961] tipc: Enabling of bearer rejected, failed to enable media [ 135.488548][ T4968] loop1: detected capacity change from 0 to 16 [ 135.495592][ T4968] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 135.503790][ T4968] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 135.518286][ T4968] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 135.529175][ T4968] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 135.540731][ T4968] erofs: DAX unsupported by block device. Turning off DAX. [ 135.829451][ T4953] loop3: detected capacity change from 0 to 32768 [ 135.961190][ T4953] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 136.094708][ T4953] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 136.164674][ T4953] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 136.205582][ T4953] OCFS2: File system is now read-only. [ 136.219161][ T4953] (syz.3.148,4953,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 136.258005][ T4953] (syz.3.148,4953,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 136.286163][ T4953] (syz.3.148,4953,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 136.299856][ T4976] loop4: detected capacity change from 0 to 4096 [ 136.324525][ T4953] (syz.3.148,4953,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 136.332980][ T4953] (syz.3.148,4953,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 136.361116][ T4953] (syz.3.148,4953,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 136.383591][ T4953] (syz.3.148,4953,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 136.423593][ T4953] (syz.3.148,4953,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 136.473590][ T4953] (syz.3.148,4953,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 136.498732][ T26] audit: type=1800 audit(1737597866.946:3): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.154" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 136.523623][ T4953] (syz.3.148,4953,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 136.543762][ T4953] (syz.3.148,4953,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 136.561586][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.563584][ T4953] (syz.3.148,4953,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 136.597610][ T4981] ntfs3: loop4: failed to convert "0080" to macinuit [ 136.624948][ T4981] ntfs3: loop4: failed to convert name for inode 1e. [ 136.632117][ T4953] (syz.3.148,4953,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 136.674659][ T4953] (syz.3.148,4953,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 136.684349][ T4953] (syz.3.148,4953,0):ocfs2_symlink:1911 ERROR: status = -30 [ 136.691948][ T4953] (syz.3.148,4953,0):ocfs2_symlink:2065 ERROR: status = -30 [ 136.764498][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 136.770421][ T126] usb 1-1: no configurations [ 136.786922][ T126] usb 1-1: can't read configurations, error -22 [ 136.805639][ T4269] (syz-executor,4269,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 136.848701][ T4269] ocfs2: Unmounting device (7,3) on (node local) [ 136.983066][ T4984] loop2: detected capacity change from 0 to 256 [ 137.275295][ T4984] FAT-fs (loop2): Directory bread(block 64) failed [ 137.281894][ T4984] FAT-fs (loop2): Directory bread(block 65) failed [ 137.351019][ T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.391566][ T4984] FAT-fs (loop2): Directory bread(block 66) failed [ 137.421014][ T4984] FAT-fs (loop2): Directory bread(block 67) failed [ 137.435597][ T4984] FAT-fs (loop2): Directory bread(block 68) failed [ 137.462544][ T4984] FAT-fs (loop2): Directory bread(block 69) failed [ 137.472762][ T4984] FAT-fs (loop2): Directory bread(block 70) failed [ 137.480219][ T4984] FAT-fs (loop2): Directory bread(block 71) failed [ 137.487134][ T4984] FAT-fs (loop2): Directory bread(block 72) failed [ 137.497192][ T4984] FAT-fs (loop2): Directory bread(block 73) failed [ 137.522721][ T4991] loop3: detected capacity change from 0 to 16 [ 137.532660][ T4991] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 137.544671][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 137.551117][ T126] usb 1-1: no configurations [ 137.563238][ T126] usb 1-1: can't read configurations, error -22 [ 137.594060][ T126] usb usb1-port1: attempt power cycle [ 137.612464][ T4304] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.092423][ T4304] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 138.155490][ T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.207356][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 138.216172][ T126] usb 1-1: no configurations [ 138.220234][ T4304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.221210][ T126] usb 1-1: can't read configurations, error -22 [ 138.310056][ T4304] usb 5-1: config 0 descriptor?? [ 138.345666][ T4304] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 138.404747][ T126] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.457562][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 138.469205][ T126] usb 1-1: no configurations [ 138.473993][ T126] usb 1-1: can't read configurations, error -22 [ 138.511569][ T126] usb usb1-port1: unable to enumerate USB device [ 139.996918][ T5009] loop3: detected capacity change from 0 to 2048 [ 140.112620][ T5013] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.753730][ T126] usb 5-1: USB disconnect, device number 8 [ 140.949684][ T5011] loop0: detected capacity change from 0 to 32768 [ 140.975436][ T5011] xfs: Unknown parameter 'pcr' [ 141.280687][ T126] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.392785][ T5013] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 141.423436][ T5013] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 141.517488][ T5013] Remounting filesystem read-only [ 141.647245][ T126] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.659241][ T126] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.674114][ T126] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.574441][ T5022] tipc: Enabling of bearer rejected, failed to enable media [ 142.593118][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.665423][ T5011] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.693726][ T5022] device syzkaller0 entered promiscuous mode [ 142.941323][ T5029] loop4: detected capacity change from 0 to 16 [ 142.948461][ T5029] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 142.956388][ T5029] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 143.187088][ T5029] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 143.197873][ T5029] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 143.208554][ T5029] erofs: DAX unsupported by block device. Turning off DAX. [ 143.240220][ T128] usb 1-1: USB disconnect, device number 6 [ 143.462900][ T5015] loop2: detected capacity change from 0 to 32768 [ 143.645390][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.672081][ T5015] XFS (loop2): Mounting V5 Filesystem [ 143.708872][ T5031] netlink: 11 bytes leftover after parsing attributes in process `syz.0.170'. [ 143.817291][ T5046] loop1: detected capacity change from 0 to 256 [ 143.827338][ T4269] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 143.832253][ T5044] loop4: detected capacity change from 0 to 16 [ 143.834521][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.834577][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.834596][ T4269] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 143.834613][ T4269] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 143.835003][ T4269] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 143.883879][ T4269] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 143.891206][ T4269] NILFS (loop3): discard dirty block: blocknr=22, size=1024 [ 143.899982][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.910030][ T5044] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 143.917226][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.927068][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.943400][ T4269] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 144.202419][ T5015] XFS (loop2): Ending clean mount [ 144.241481][ T5046] FAT-fs (loop1): Directory bread(block 64) failed [ 144.258323][ T5046] FAT-fs (loop1): Directory bread(block 65) failed [ 144.265779][ T4269] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 144.310632][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.362710][ T5039] loop0: detected capacity change from 0 to 16 [ 144.400231][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.576311][ T5046] FAT-fs (loop1): Directory bread(block 66) failed [ 144.582900][ T5046] FAT-fs (loop1): Directory bread(block 67) failed [ 144.614233][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.628268][ T5046] FAT-fs (loop1): Directory bread(block 68) failed [ 144.634922][ T5039] erofs: (device loop0): mounted with root inode @ nid 36. [ 144.725091][ T4269] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 144.731834][ T4269] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 144.754585][ T5046] FAT-fs (loop1): Directory bread(block 69) failed [ 144.761291][ T5046] FAT-fs (loop1): Directory bread(block 70) failed [ 144.794751][ T4265] XFS (loop2): Unmounting Filesystem [ 144.815567][ T5046] FAT-fs (loop1): Directory bread(block 71) failed [ 144.822286][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.852892][ T5046] FAT-fs (loop1): Directory bread(block 72) failed [ 144.888020][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.903133][ T5046] FAT-fs (loop1): Directory bread(block 73) failed [ 144.924531][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.000847][ T4269] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 145.112573][ T4269] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 145.172985][ T4269] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 145.292949][ T4269] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 145.318728][ T4269] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 146.014620][ T32] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 146.204640][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 146.209877][ T4301] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.227693][ T32] usb 4-1: no configurations [ 146.250668][ T32] usb 4-1: can't read configurations, error -22 [ 146.424560][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 146.429844][ T32] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 146.448867][ T4301] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 146.479386][ T4301] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 146.539063][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.570181][ T4301] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 146.609912][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.631849][ T4301] usb 3-1: Product: syz [ 146.640240][ T4301] usb 3-1: Manufacturer: syz [ 146.645220][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 146.663194][ T32] usb 4-1: no configurations [ 146.678226][ T32] usb 4-1: can't read configurations, error -22 [ 146.686961][ T4301] usb 3-1: SerialNumber: syz [ 146.706163][ T32] usb usb4-port1: attempt power cycle [ 146.714000][ T4301] usb 3-1: config 0 descriptor?? [ 147.942175][ T4554] usb 3-1: USB disconnect, device number 7 [ 147.975257][ T32] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 148.025288][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 148.031141][ T32] usb 4-1: no configurations [ 148.035964][ T32] usb 4-1: can't read configurations, error -22 [ 148.146770][ T5077] loop4: detected capacity change from 0 to 1024 [ 148.204799][ T32] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 148.213501][ T5077] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.257387][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 148.270870][ T32] usb 4-1: no configurations [ 148.281215][ T32] usb 4-1: can't read configurations, error -22 [ 148.289241][ T32] usb usb4-port1: unable to enumerate USB device [ 148.289654][ T5077] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 148.410955][ T5077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.672782][ T4554] libceph: connect (1)[c::]:6789 error -101 [ 148.692956][ T4554] libceph: mon0 (1)[c::]:6789 connect error [ 148.819067][ T4554] libceph: connect (1)[c::]:6789 error -101 [ 148.841541][ T4554] libceph: mon0 (1)[c::]:6789 connect error [ 148.948132][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 148.984177][ T5078] ceph: No mds server is up or the cluster is laggy [ 149.053733][ T4684] hid-generic 0005:7FFF:0008.0001: item fetching failed at offset 0/4 [ 149.063582][ T4684] hid-generic: probe of 0005:7FFF:0008.0001 failed with error -22 [ 149.179867][ T4554] libceph: connect (1)[c::]:6789 error -101 [ 149.186000][ T4554] libceph: mon0 (1)[c::]:6789 connect error [ 149.231548][ T5089] loop3: detected capacity change from 0 to 2048 [ 149.399234][ T5096] loop2: detected capacity change from 0 to 16 [ 149.406368][ T5096] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 149.414271][ T5096] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 149.424901][ T5096] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 149.435476][ T5096] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 149.446182][ T5096] erofs: DAX unsupported by block device. Turning off DAX. [ 149.639368][ T5098] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.800303][ T5099] loop4: detected capacity change from 0 to 16 [ 149.947018][ T5099] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 150.525516][ T5108] loop4: detected capacity change from 0 to 256 [ 150.553769][ T5108] FAT-fs (loop4): Directory bread(block 64) failed [ 150.560728][ T5108] FAT-fs (loop4): Directory bread(block 65) failed [ 150.568044][ T5108] FAT-fs (loop4): Directory bread(block 66) failed [ 150.575210][ T5108] FAT-fs (loop4): Directory bread(block 67) failed [ 150.582034][ T5108] FAT-fs (loop4): Directory bread(block 68) failed [ 150.590168][ T5108] FAT-fs (loop4): Directory bread(block 69) failed [ 150.597196][ T5108] FAT-fs (loop4): Directory bread(block 70) failed [ 150.604110][ T5108] FAT-fs (loop4): Directory bread(block 71) failed [ 150.611984][ T5108] FAT-fs (loop4): Directory bread(block 72) failed [ 150.619119][ T5108] FAT-fs (loop4): Directory bread(block 73) failed [ 152.485740][ T5113] loop0: detected capacity change from 0 to 4096 [ 152.798691][ T5127] loop2: detected capacity change from 0 to 256 [ 152.851122][ T4258] hid-generic 0005:7FFF:0008.0002: item fetching failed at offset 0/4 [ 152.860074][ T4258] hid-generic: probe of 0005:7FFF:0008.0002 failed with error -22 [ 152.906512][ T5127] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x61a18cac, utbl_chksum : 0xe619d30d) [ 152.945771][ T4554] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.005910][ T5133] loop3: detected capacity change from 0 to 16 [ 153.164569][ T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.684631][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 153.718039][ T32] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 153.787946][ T32] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 153.799393][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.809226][ T32] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 153.819175][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.827175][ T5133] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 153.881801][ T4554] usb 5-1: Using ep0 maxpacket: 8 [ 153.958291][ T32] usb 2-1: Product: syz [ 153.983547][ T4554] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.998299][ T32] usb 2-1: Manufacturer: syz [ 153.998386][ T32] usb 2-1: SerialNumber: syz [ 154.034318][ T32] usb 2-1: config 0 descriptor?? [ 154.131043][ T4554] usb 5-1: config 0 has no interfaces? [ 154.198007][ T4253] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 154.205430][ T4253] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 154.363666][ T4554] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 154.489520][ T4554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.646079][ T4554] usb 5-1: Product: syz [ 154.650304][ T4554] usb 5-1: Manufacturer: syz [ 154.699009][ T4554] usb 5-1: SerialNumber: syz [ 154.716730][ T4554] usb 5-1: config 0 descriptor?? [ 154.738291][ T4304] usb 2-1: USB disconnect, device number 3 [ 155.150670][ T5149] loop3: detected capacity change from 0 to 256 [ 155.212059][ T5149] FAT-fs (loop3): Directory bread(block 64) failed [ 155.223100][ T5149] FAT-fs (loop3): Directory bread(block 65) failed [ 155.230628][ T5149] FAT-fs (loop3): Directory bread(block 66) failed [ 155.245132][ T5149] FAT-fs (loop3): Directory bread(block 67) failed [ 155.263605][ T5149] FAT-fs (loop3): Directory bread(block 68) failed [ 155.281977][ T5149] FAT-fs (loop3): Directory bread(block 69) failed [ 155.308289][ T5149] FAT-fs (loop3): Directory bread(block 70) failed [ 155.330295][ T5149] FAT-fs (loop3): Directory bread(block 71) failed [ 155.351084][ T5149] FAT-fs (loop3): Directory bread(block 72) failed [ 155.372065][ T5149] FAT-fs (loop3): Directory bread(block 73) failed [ 156.371680][ T32] usb 5-1: USB disconnect, device number 9 [ 156.634210][ T4332] hid-generic 0005:7FFF:0008.0003: item fetching failed at offset 0/4 [ 156.647074][ T4332] hid-generic: probe of 0005:7FFF:0008.0003 failed with error -22 [ 156.864529][ T5161] loop1: detected capacity change from 0 to 2048 [ 157.060269][ T5169] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.128605][ T5170] loop2: detected capacity change from 0 to 164 [ 157.172655][ T5172] loop4: detected capacity change from 0 to 256 [ 157.227149][ T5172] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x61a18cac, utbl_chksum : 0xe619d30d) [ 157.552327][ T5176] loop2: detected capacity change from 0 to 512 [ 157.575798][ T5177] loop3: detected capacity change from 0 to 16 [ 157.625143][ T5177] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 157.661430][ T5176] EXT4-fs (loop2): 1 orphan inode deleted [ 157.675065][ T4505] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 157.735033][ T5176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.838865][ T5176] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.839856][ T4505] EXT4-fs error (device loop2): ext4_release_dquot:6817: comm kworker/u4:15: Failed to release dquot type 1 [ 158.133482][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 159.434520][ T128] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 159.745796][ T128] usb 4-1: Using ep0 maxpacket: 16 [ 159.990669][ T128] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 160.014521][ T128] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 160.024632][ T128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.045946][ T128] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 160.128785][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.158160][ T128] usb 4-1: Product: syz [ 160.236718][ T128] usb 4-1: Manufacturer: syz [ 160.244457][ T32] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.252306][ T128] usb 4-1: SerialNumber: syz [ 160.282738][ T128] usb 4-1: config 0 descriptor?? [ 160.434965][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 160.451587][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.695051][ T32] usb 3-1: config 0 has no interfaces? [ 160.734246][ T32] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.784019][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.827364][ T32] usb 3-1: Product: syz [ 160.831593][ T32] usb 3-1: Manufacturer: syz [ 160.840803][ T32] usb 3-1: SerialNumber: syz [ 160.863263][ T32] usb 3-1: config 0 descriptor?? [ 160.903750][ T128] usb 4-1: USB disconnect, device number 15 [ 160.914309][ T5213] loop1: detected capacity change from 0 to 256 [ 160.933397][ T5212] loop4: detected capacity change from 0 to 256 [ 160.950257][ T5213] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x61a18cac, utbl_chksum : 0xe619d30d) [ 161.024802][ T5212] FAT-fs (loop4): Directory bread(block 64) failed [ 161.051090][ T5212] FAT-fs (loop4): Directory bread(block 65) failed [ 161.072630][ T5212] FAT-fs (loop4): Directory bread(block 66) failed [ 161.090970][ T5212] FAT-fs (loop4): Directory bread(block 67) failed [ 161.109888][ T5212] FAT-fs (loop4): Directory bread(block 68) failed [ 161.116809][ T5212] FAT-fs (loop4): Directory bread(block 69) failed [ 161.129291][ T5212] FAT-fs (loop4): Directory bread(block 70) failed [ 161.137238][ T5212] FAT-fs (loop4): Directory bread(block 71) failed [ 161.153972][ T5212] FAT-fs (loop4): Directory bread(block 72) failed [ 161.187962][ T5212] FAT-fs (loop4): Directory bread(block 73) failed [ 161.703268][ T5215] loop1: detected capacity change from 0 to 16 [ 161.735362][ T5215] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 162.626386][ T126] usb 3-1: USB disconnect, device number 8 [ 162.676843][ T5225] loop1: detected capacity change from 0 to 512 [ 162.942084][ T5225] EXT4-fs (loop1): 1 orphan inode deleted [ 162.956373][ T4995] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 163.787778][ T5225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.958173][ T4995] EXT4-fs error (device loop1): ext4_release_dquot:6817: comm kworker/u4:18: Failed to release dquot type 1 [ 163.974216][ T5225] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.173750][ T5240] loop4: detected capacity change from 0 to 32768 [ 164.182967][ T5240] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.226 (5240) [ 164.208151][ T5240] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.218491][ T5240] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 164.227306][ T5240] BTRFS info (device loop4): using free space tree [ 164.385751][ T4331] BTRFS warning (device loop4): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0 [ 164.478394][ T5240] BTRFS error (device loop4): failed to read chunk root [ 164.738125][ T5240] BTRFS error (device loop4): open_ctree failed [ 164.851683][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 165.524517][ T32] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 165.716723][ T32] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 165.754557][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.850882][ T32] usb 4-1: config 0 descriptor?? [ 165.879506][ T32] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 166.097337][ T5274] loop0: detected capacity change from 0 to 2048 [ 166.236295][ T5278] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.441518][ T5277] loop4: detected capacity change from 0 to 4096 [ 167.626002][ T4260] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 167.641217][ T4260] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 167.812543][ T32] usb 4-1: USB disconnect, device number 16 [ 167.962730][ T5282] loop4: detected capacity change from 0 to 16 [ 167.995131][ T5282] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 168.837057][ T5287] loop3: detected capacity change from 0 to 256 [ 168.904234][ T5287] FAT-fs (loop3): Directory bread(block 64) failed [ 168.927179][ T5287] FAT-fs (loop3): Directory bread(block 65) failed [ 168.938619][ T5287] FAT-fs (loop3): Directory bread(block 66) failed [ 168.949506][ T5287] FAT-fs (loop3): Directory bread(block 67) failed [ 168.956768][ T5287] FAT-fs (loop3): Directory bread(block 68) failed [ 168.957450][ T5278] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 168.963501][ T5287] FAT-fs (loop3): Directory bread(block 69) failed [ 169.039759][ T5287] FAT-fs (loop3): Directory bread(block 70) failed [ 169.057517][ T5287] FAT-fs (loop3): Directory bread(block 71) failed [ 169.167132][ T5278] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 169.174751][ T5287] FAT-fs (loop3): Directory bread(block 72) failed [ 169.182953][ T5287] FAT-fs (loop3): Directory bread(block 73) failed [ 169.282365][ T5278] Remounting filesystem read-only [ 171.424862][ T5261] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 171.532254][ T4253] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 171.549339][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.559782][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.589907][ T4253] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 171.624519][ T4253] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 171.653084][ T4253] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 171.714340][ T4253] NILFS (loop0): discard dirty page: offset=0, ino=15 [ 171.721662][ T4253] NILFS (loop0): discard dirty block: blocknr=22, size=1024 [ 171.729082][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.738160][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.747579][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.757268][ T4253] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 171.763999][ T4253] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 171.771402][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.788354][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.804475][ T5261] usb 5-1: Using ep0 maxpacket: 8 [ 171.811458][ T5261] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.829277][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.838573][ T5261] usb 5-1: config 0 has no interfaces? [ 171.847670][ T4253] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 171.855054][ T5261] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 171.864152][ T4253] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 171.879570][ T5261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.897393][ T5309] loop1: detected capacity change from 0 to 512 [ 171.903690][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.916299][ T5261] usb 5-1: Product: syz [ 171.920497][ T5261] usb 5-1: Manufacturer: syz [ 171.931691][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.129250][ T5314] loop3: detected capacity change from 0 to 32768 [ 172.137451][ T5314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.245 (5314) [ 172.161312][ T5261] usb 5-1: SerialNumber: syz [ 172.171721][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.184714][ T4253] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 172.187172][ T5261] usb 5-1: config 0 descriptor?? [ 172.192753][ T4253] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 172.206498][ T5314] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.216935][ T5314] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 172.225813][ T5314] BTRFS info (device loop3): using free space tree [ 172.236929][ T4253] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 172.244238][ T4253] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 172.261268][ T4253] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.274941][ T5309] EXT4-fs (loop1): 1 orphan inode deleted [ 172.280871][ T5309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.298408][ T5295] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 172.309377][ T5295] EXT4-fs error (device loop1): ext4_release_dquot:6817: comm kworker/u4:20: Failed to release dquot type 1 [ 172.309517][ T5309] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.545445][ T4491] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0 [ 172.663577][ T5314] BTRFS error (device loop3): failed to read chunk root [ 172.696469][ T5314] BTRFS error (device loop3): open_ctree failed [ 172.975955][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 173.002301][ T5338] loop2: detected capacity change from 0 to 4096 [ 173.520573][ T4307] usb 5-1: USB disconnect, device number 10 [ 174.374118][ T4265] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 174.386082][ T4265] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 174.404627][ T4301] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 174.472777][ T5349] loop4: detected capacity change from 0 to 16 [ 174.560620][ T5349] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 174.608812][ T4301] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 174.650482][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.845218][ T4301] usb 2-1: config 0 descriptor?? [ 174.889814][ T4301] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 175.207730][ T5357] program syz.3.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.218779][ T5357] program syz.3.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.228564][ T5357] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 175.905218][ T5359] syz.2.252 sent an empty control message without MSG_MORE. [ 176.172575][ T5361] netlink: 11 bytes leftover after parsing attributes in process `syz.3.253'. [ 176.312581][ T5363] loop3: detected capacity change from 0 to 16 [ 176.816913][ T5363] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.196215][ T4301] usb 2-1: USB disconnect, device number 4 [ 177.335791][ T32] hid-generic 0005:7FFF:0008.0004: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 177.369243][ T5354] loop4: detected capacity change from 0 to 32768 [ 177.539021][ T5354] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 177.629664][ T5354] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 177.693758][ T5354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 177.746959][ T5354] OCFS2: File system is now read-only. [ 177.752481][ T5354] (syz.4.250,5354,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 177.827455][ T5354] (syz.4.250,5354,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 177.864619][ T5354] (syz.4.250,5354,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 177.873162][ T5354] (syz.4.250,5354,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 177.912353][ T5354] (syz.4.250,5354,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 177.935820][ T5354] (syz.4.250,5354,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 177.961100][ T5354] (syz.4.250,5354,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 177.984484][ T5354] (syz.4.250,5354,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 178.023728][ T5354] (syz.4.250,5354,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 178.044053][ T5354] (syz.4.250,5354,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 178.084495][ T5354] (syz.4.250,5354,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 178.093260][ T5354] (syz.4.250,5354,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 178.144477][ T5354] (syz.4.250,5354,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 178.153596][ T5354] (syz.4.250,5354,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 178.200982][ T5354] (syz.4.250,5354,0):ocfs2_symlink:1911 ERROR: status = -30 [ 178.375515][ T5354] (syz.4.250,5354,1):ocfs2_symlink:2065 ERROR: status = -30 [ 178.497310][ T4306] libceph: connect (1)[c::]:6789 error -101 [ 178.503370][ T4306] libceph: mon0 (1)[c::]:6789 connect error [ 178.564763][ T4260] (syz-executor,4260,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 178.621291][ T4260] ocfs2: Unmounting device (7,4) on (node local) [ 178.803025][ T4307] libceph: connect (1)[c::]:6789 error -101 [ 178.944766][ T4307] libceph: mon0 (1)[c::]:6789 connect error [ 179.027606][ T5384] ceph: No mds server is up or the cluster is laggy [ 179.097533][ T5379] loop0: detected capacity change from 0 to 32768 [ 179.165472][ T5379] JBD2: Ignoring recovery information on journal [ 179.321616][ T5379] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 179.395792][ T5379] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 179.456892][ T5379] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 179.498882][ T5379] OCFS2: Returning error to the calling process. [ 179.579020][ T5379] (syz.0.258,5379,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 179.694821][ T5379] (syz.0.258,5379,1):__ocfs2_claim_clusters:2355 ERROR: status = -5 [ 179.702895][ T5379] (syz.0.258,5379,1):__ocfs2_claim_clusters:2363 ERROR: status = -5 [ 179.705130][ T5394] loop4: detected capacity change from 0 to 256 [ 179.716741][ T5379] (syz.0.258,5379,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -5 [ 179.728139][ T5379] (syz.0.258,5379,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -5 [ 179.774805][ T5379] (syz.0.258,5379,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5 [ 179.783606][ T5379] (syz.0.258,5379,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 180.153092][ T5397] overlayfs: failed to resolve './file2': -2 [ 180.204545][ T5379] (syz.0.258,5379,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 180.291441][ T5394] FAT-fs (loop4): Directory bread(block 64) failed [ 180.348318][ T5379] (syz.0.258,5379,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 180.484297][ T5394] FAT-fs (loop4): Directory bread(block 65) failed [ 180.523171][ T5379] (syz.0.258,5379,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 180.543057][ T5394] FAT-fs (loop4): Directory bread(block 66) failed [ 180.567462][ T5379] (syz.0.258,5379,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 180.586994][ T5394] FAT-fs (loop4): Directory bread(block 67) failed [ 180.673471][ T5394] FAT-fs (loop4): Directory bread(block 68) failed [ 180.680180][ T5379] (syz.0.258,5379,1):ocfs2_lock_allocators:2672 ERROR: status = -5 [ 180.732660][ T5402] loop2: detected capacity change from 0 to 256 [ 180.739470][ T5394] FAT-fs (loop4): Directory bread(block 69) failed [ 180.746325][ T5379] (syz.0.258,5379,0):ocfs2_write_begin_nolock:1744 ERROR: status = -5 [ 180.756296][ T5394] FAT-fs (loop4): Directory bread(block 70) failed [ 180.762871][ T5394] FAT-fs (loop4): Directory bread(block 71) failed [ 180.785938][ T5379] (syz.0.258,5379,0):ocfs2_write_begin:1907 ERROR: status = -5 [ 180.805421][ T5402] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x61a18cac, utbl_chksum : 0xe619d30d) [ 180.828391][ T5394] FAT-fs (loop4): Directory bread(block 72) failed [ 180.873087][ T5394] FAT-fs (loop4): Directory bread(block 73) failed [ 181.001655][ T5402] exFAT-fs (loop2): hint_cluster is invalid (17) [ 181.174124][ T4253] ocfs2: Unmounting device (7,0) on (node local) [ 181.496315][ T5405] tipc: Enabling of bearer rejected, failed to enable media [ 181.542157][ T5405] device syzkaller0 entered promiscuous mode [ 181.964527][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.013962][ T5417] loop4: detected capacity change from 0 to 128 [ 183.044460][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 183.062922][ T32] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 183.076539][ T32] usb 1-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 183.087706][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 183.162156][ T5417] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 183.192229][ T32] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 183.197040][ T5417] syz.4.269: attempt to access beyond end of device [ 183.197040][ T5417] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 183.201471][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.217498][ T5417] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 183.231806][ T32] usb 1-1: Product: syz [ 183.231832][ T32] usb 1-1: Manufacturer: syz [ 183.231913][ T32] usb 1-1: SerialNumber: syz [ 183.288375][ T32] usb 1-1: config 0 descriptor?? [ 183.294069][ T5410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.594271][ T5423] loop2: detected capacity change from 0 to 16 [ 183.604650][ T5423] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 183.612837][ T5423] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 184.630316][ T5423] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 184.637533][ T5410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 184.641156][ T5423] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 184.659079][ T5423] erofs: DAX unsupported by block device. Turning off DAX. [ 184.898263][ T4552] usb 1-1: USB disconnect, device number 7 [ 185.256746][ T4260] sysv_free_block: flc_count > flc_size [ 185.309715][ T5429] loop2: detected capacity change from 0 to 128 [ 185.317820][ T4260] sysv_free_block: flc_count > flc_size [ 185.347938][ T4260] sysv_free_block: flc_count > flc_size [ 185.380810][ T4260] sysv_free_block: flc_count > flc_size [ 185.406011][ T4260] sysv_free_block: flc_count > flc_size [ 185.411734][ T4260] sysv_free_block: flc_count > flc_size [ 185.423965][ T4260] sysv_free_block: flc_count > flc_size [ 185.437295][ T4260] sysv_free_block: flc_count > flc_size [ 185.449384][ T4260] sysv_free_block: flc_count > flc_size [ 185.464789][ T4260] sysv_free_block: flc_count > flc_size [ 185.479370][ T4260] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 185.521196][ T5429] EXT4-fs (loop2): Test dummy encryption mode enabled [ 185.686012][ T5429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.705837][ T5429] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.146139][ T5429] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 186.274547][ T4552] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 186.487337][ T5452] loop4: detected capacity change from 0 to 512 [ 186.763488][ T5452] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.273: casefold flag without casefold feature [ 186.777454][ T5452] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.273: couldn't read orphan inode 15 (err -117) [ 186.784599][ T4552] usb 3-1: Using ep0 maxpacket: 8 [ 186.795019][ T5452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 186.828968][ T4552] usb 3-1: config 0 has an invalid interface number: 190 but max is 0 [ 186.881569][ T4552] usb 3-1: config 0 has no interface number 0 [ 186.916939][ T4552] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 186.935243][ T4552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.944037][ T4552] usb 3-1: Product: syz [ 186.949560][ T4552] usb 3-1: Manufacturer: syz [ 186.954769][ T4552] usb 3-1: SerialNumber: syz [ 187.125474][ T4552] usb 3-1: config 0 descriptor?? [ 187.132438][ T4552] ums-alauda 3-1:0.190: USB Mass Storage device detected [ 188.253202][ T5429] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 188.337495][ T5367] device syz_tun left promiscuous mode [ 188.353594][ T4306] usb 3-1: USB disconnect, device number 9 [ 189.098371][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 189.590472][ T5295] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.635873][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 190.071474][ T5295] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.603768][ T5295] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.717437][ T5295] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.792416][ T5480] tipc: Enabling of bearer rejected, failed to enable media [ 190.802155][ T5480] device syzkaller0 entered promiscuous mode [ 190.876429][ T4306] hid-generic 0005:7FFF:0008.0005: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 191.234500][ T4301] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 191.555003][ T4301] usb 2-1: Using ep0 maxpacket: 8 [ 191.571849][ T4301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.584081][ T4301] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.678055][ T5498] loop0: detected capacity change from 0 to 16 [ 191.687426][ T5498] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 191.695493][ T5498] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 191.755696][ T4301] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 191.792760][ T5498] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 191.803526][ T5498] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 191.814600][ T5498] erofs: DAX unsupported by block device. Turning off DAX. [ 192.071850][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.317428][ T4301] usb 2-1: Product: syz [ 192.321658][ T4301] usb 2-1: Manufacturer: syz [ 192.329237][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.340415][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.348573][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.356562][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.366390][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 192.369705][ T4301] usb 2-1: SerialNumber: syz [ 192.378276][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.429841][ T4301] usb 2-1: config 0 descriptor?? [ 192.707895][ T5506] netlink: 11 bytes leftover after parsing attributes in process `syz.0.288'. [ 193.183459][ T5508] loop0: detected capacity change from 0 to 16 [ 193.477112][ T5508] erofs: (device loop0): mounted with root inode @ nid 36. [ 193.887913][ T5500] chnl_net:caif_netlink_parms(): no params data found [ 194.230578][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.237075][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.437051][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 194.829700][ T4307] usb 2-1: USB disconnect, device number 5 [ 195.274912][ T5532] loop4: detected capacity change from 0 to 512 [ 196.420976][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 196.421492][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 196.427055][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 196.495083][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 196.507029][ T5532] EXT4-fs (loop4): 1 orphan inode deleted [ 196.525390][ T5532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.535541][ T4765] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 196.578826][ T4765] EXT4-fs error (device loop4): ext4_release_dquot:6817: comm kworker/u4:17: Failed to release dquot type 1 [ 196.686574][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.693755][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.753094][ T5500] device bridge_slave_0 entered promiscuous mode [ 196.777780][ T5545] loop1: detected capacity change from 0 to 512 [ 196.789575][ T5532] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.640823][ T5545] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.291: casefold flag without casefold feature [ 197.655262][ T5545] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.291: couldn't read orphan inode 15 (err -117) [ 197.667426][ T5545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.803341][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.861793][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.875979][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 197.880659][ T5500] device bridge_slave_1 entered promiscuous mode [ 198.045269][ T5552] loop4: detected capacity change from 0 to 16 [ 198.097331][ T5552] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 198.282996][ T5500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.325179][ T5500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.364660][ T5295] device batadv_slave_0 left promiscuous mode [ 198.421959][ T5295] device hsr_slave_0 left promiscuous mode [ 198.453465][ T5295] device hsr_slave_1 left promiscuous mode [ 198.472817][ T5295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.495623][ T5295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.556049][ T5295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.584137][ T5295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.591871][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 198.628665][ T5295] device bridge_slave_1 left promiscuous mode [ 198.697259][ T5295] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.784702][ T5295] device bridge_slave_0 left promiscuous mode [ 198.794617][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.928914][ T5295] device veth1_macvtap left promiscuous mode [ 198.965963][ T5295] device veth0_macvtap left promiscuous mode [ 198.972283][ T5295] device veth1_vlan left promiscuous mode [ 198.994902][ T5295] device veth0_vlan left promiscuous mode [ 199.611393][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 199.971555][ T5585] loop1: detected capacity change from 0 to 16 [ 199.978749][ T5585] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 199.986840][ T5585] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 199.995486][ T5585] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 200.006450][ T5585] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 200.017670][ T5585] erofs: DAX unsupported by block device. Turning off DAX. [ 200.056894][ T4275] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.655463][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 200.988923][ T5590] loop1: detected capacity change from 0 to 16 [ 201.118299][ T5590] erofs: (device loop1): mounted with root inode @ nid 36. [ 202.536456][ T5295] team0 (unregistering): Port device team_slave_1 removed [ 202.578569][ T5295] team0 (unregistering): Port device team_slave_0 removed [ 202.622125][ T5295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.662986][ T5295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.089726][ T5295] bond0 (unregistering): Released all slaves [ 203.177390][ T5561] tipc: Enabling of bearer rejected, failed to enable media [ 203.211390][ T5588] netlink: 11 bytes leftover after parsing attributes in process `syz.1.300'. [ 203.379186][ T5500] team0: Port device team_slave_0 added [ 203.398604][ T5500] team0: Port device team_slave_1 added [ 203.607740][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.618470][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.731250][ T5500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.754676][ T22] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.779428][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.804526][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.917727][ T5500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.144979][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 204.157243][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.361739][ T22] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.572310][ T22] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 204.704020][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.747959][ T22] usb 3-1: Product: syz [ 204.752186][ T22] usb 3-1: Manufacturer: syz [ 204.800115][ T22] usb 3-1: SerialNumber: syz [ 204.844102][ T22] usb 3-1: config 0 descriptor?? [ 206.177900][ T5500] device hsr_slave_0 entered promiscuous mode [ 206.204801][ T5500] device hsr_slave_1 entered promiscuous mode [ 206.234534][ T5500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.242171][ T5500] Cannot create hsr debugfs directory [ 206.624988][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.628763][ T4301] usb 3-1: USB disconnect, device number 10 [ 206.642138][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.650916][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.660791][ T4264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.679694][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.694677][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.837305][ T5638] loop2: detected capacity change from 0 to 16 [ 206.843912][ T5638] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 207.235888][ T5500] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.405012][ T5500] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.508811][ T5642] loop2: detected capacity change from 0 to 16 [ 207.515789][ T5642] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 207.524543][ T5642] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 207.538413][ T5642] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 207.549089][ T5642] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 207.559862][ T5642] erofs: DAX unsupported by block device. Turning off DAX. [ 207.580990][ T5500] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.628557][ T5632] chnl_net:caif_netlink_parms(): no params data found [ 207.651015][ T4275] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.797167][ T5500] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.841654][ T5652] loop4: detected capacity change from 0 to 512 [ 207.932095][ T5652] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.308: casefold flag without casefold feature [ 207.948627][ T5652] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.308: couldn't read orphan inode 15 (err -117) [ 207.983402][ T5652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.175312][ T5295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.281177][ T5660] tipc: Enabling of bearer rejected, failed to enable media [ 208.340074][ T5295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.399762][ T5664] device syzkaller0 entered promiscuous mode [ 208.474496][ T5295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.646595][ T5295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.734727][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 208.753431][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.774549][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.786296][ T5632] device bridge_slave_0 entered promiscuous mode [ 208.819140][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.828013][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.838316][ T5632] device bridge_slave_1 entered promiscuous mode [ 208.967052][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.177209][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.272068][ T5500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.008669][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.100365][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.120352][ T5500] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.135383][ T5632] team0: Port device team_slave_0 added [ 210.156350][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.168616][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.177940][ T4995] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.185115][ T4995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.203373][ T5632] team0: Port device team_slave_1 added [ 210.227413][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.265790][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.278453][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.289008][ T4995] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.296229][ T4995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.392046][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.409018][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.423174][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.452136][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.845821][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 211.274124][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.284124][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.308180][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.337748][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.352227][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.494226][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.577034][ T5500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.595601][ T5500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.613737][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.689434][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.720144][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.757057][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.792385][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.060176][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.074505][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.205538][ T5696] loop2: detected capacity change from 0 to 16 [ 212.414988][ T5696] erofs: (device loop2): mounted with root inode @ nid 36. [ 212.514418][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.668584][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 212.768851][ T5693] netlink: 11 bytes leftover after parsing attributes in process `syz.2.315'. [ 212.904458][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 214.678168][ T5632] device hsr_slave_0 entered promiscuous mode [ 214.707884][ T5632] device hsr_slave_1 entered promiscuous mode [ 214.723780][ T5632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.733840][ T5632] Cannot create hsr debugfs directory [ 214.746677][ T5500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.753867][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.762284][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.864585][ T4306] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 214.974472][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 215.054596][ T4306] usb 2-1: Using ep0 maxpacket: 8 [ 215.061642][ T4306] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.098519][ T4306] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.136294][ T4306] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 215.159419][ T4306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.184295][ T4306] usb 2-1: Product: syz [ 215.202723][ T4306] usb 2-1: Manufacturer: syz [ 215.217889][ T4306] usb 2-1: SerialNumber: syz [ 215.234526][ T4306] usb 2-1: config 0 descriptor?? [ 215.715359][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.729065][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.954144][ T5632] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 216.011595][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.042536][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.069447][ T5632] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 216.107662][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.122425][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.160988][ T5295] device hsr_slave_0 left promiscuous mode [ 216.175018][ T5295] device hsr_slave_1 left promiscuous mode [ 216.204666][ T5295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.212181][ T5295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.245414][ T5295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.252963][ T5295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.277078][ T5295] device bridge_slave_1 left promiscuous mode [ 216.283352][ T5295] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.321568][ T5295] device bridge_slave_0 left promiscuous mode [ 216.333578][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.415962][ T5295] device veth1_macvtap left promiscuous mode [ 216.424739][ T5295] device veth0_macvtap left promiscuous mode [ 216.431071][ T5295] device veth1_vlan left promiscuous mode [ 216.452433][ T5295] device veth0_vlan left promiscuous mode [ 216.792473][ T5743] loop4: detected capacity change from 0 to 16 [ 216.799924][ T5743] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 216.807874][ T5743] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 216.824968][ T5743] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 216.836895][ T5743] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 216.848323][ T5743] erofs: DAX unsupported by block device. Turning off DAX. [ 216.896863][ T4275] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.513160][ T5484] ================================================================== [ 217.521264][ T5484] BUG: KASAN: use-after-free in __mutex_lock+0x6d2/0xd80 [ 217.528329][ T5484] Read of size 8 at addr ffff888076d80060 by task khidpd_7fff0008/5484 [ 217.536569][ T5484] [ 217.538899][ T5484] CPU: 1 PID: 5484 Comm: khidpd_7fff0008 Not tainted 6.1.126-syzkaller #0 [ 217.547404][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 217.557544][ T5484] Call Trace: [ 217.560818][ T5484] [ 217.563773][ T5484] dump_stack_lvl+0x1e3/0x2cb [ 217.568474][ T5484] ? nf_tcp_handle_invalid+0x642/0x642 [ 217.573951][ T5484] ? panic+0x764/0x764 [ 217.578024][ T5484] ? _printk+0xd1/0x111 [ 217.582223][ T5484] ? __virt_addr_valid+0x17f/0x530 [ 217.587357][ T5484] ? __virt_addr_valid+0x17f/0x530 [ 217.592485][ T5484] print_report+0x15f/0x4f0 [ 217.596998][ T5484] ? __virt_addr_valid+0x17f/0x530 [ 217.602126][ T5484] ? __virt_addr_valid+0x17f/0x530 [ 217.607244][ T5484] ? __virt_addr_valid+0x45b/0x530 [ 217.612369][ T5484] ? __phys_addr+0xb6/0x170 [ 217.616883][ T5484] ? __mutex_lock+0x6d2/0xd80 [ 217.621567][ T5484] kasan_report+0x136/0x160 [ 217.626074][ T5484] ? __mutex_lock+0x6d2/0xd80 [ 217.630759][ T5484] __mutex_lock+0x6d2/0xd80 [ 217.635267][ T5484] ? __mutex_lock+0x53c/0xd80 [ 217.639946][ T5484] ? l2cap_unregister_user+0x63/0x1b0 [ 217.645334][ T5484] ? mutex_lock_nested+0x10/0x10 [ 217.650268][ T5484] ? __wake_up_bit+0x2b0/0x2b0 [ 217.655035][ T5484] ? try_to_del_timer_sync+0x2f0/0x2f0 [ 217.660500][ T5484] ? _raw_spin_unlock+0x40/0x40 [ 217.665353][ T5484] l2cap_unregister_user+0x63/0x1b0 [ 217.670563][ T5484] hidp_session_thread+0x44b/0x490 [ 217.675672][ T5484] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 217.681582][ T5484] ? hidp_session_get+0x80/0x80 [ 217.686437][ T5484] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 217.692602][ T5484] ? hidp_session_thread+0x490/0x490 [ 217.697893][ T5484] ? release_firmware_map_entry+0x186/0x186 [ 217.703795][ T5484] ? hidp_session_thread+0x490/0x490 [ 217.709097][ T5484] ? __kthread_parkme+0x168/0x1c0 [ 217.714143][ T5484] kthread+0x28d/0x320 [ 217.718213][ T5484] ? hidp_session_get+0x80/0x80 [ 217.723062][ T5484] ? kthread_blkcg+0xd0/0xd0 [ 217.727657][ T5484] ret_from_fork+0x1f/0x30 [ 217.732089][ T5484] [ 217.735110][ T5484] [ 217.737428][ T5484] Allocated by task 4265: [ 217.741748][ T5484] kasan_set_track+0x4b/0x70 [ 217.746338][ T5484] __kasan_kmalloc+0x97/0xb0 [ 217.750923][ T5484] __kmalloc+0xb2/0x230 [ 217.755081][ T5484] hci_alloc_dev_priv+0x23/0x1d60 [ 217.760204][ T5484] vhci_create_device+0x12a/0x700 [ 217.765243][ T5484] vhci_write+0x38b/0x440 [ 217.769599][ T5484] vfs_write+0x857/0xbc0 [ 217.773893][ T5484] ksys_write+0x19c/0x2c0 [ 217.778231][ T5484] do_syscall_64+0x3b/0xb0 [ 217.782662][ T5484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.788585][ T5484] [ 217.790907][ T5484] Freed by task 5700: [ 217.794883][ T5484] kasan_set_track+0x4b/0x70 [ 217.799471][ T5484] kasan_save_free_info+0x27/0x40 [ 217.804493][ T5484] ____kasan_slab_free+0xd6/0x120 [ 217.809514][ T5484] __kmem_cache_free+0x25c/0x3c0 [ 217.814456][ T5484] hci_release_dev+0x14ea/0x1670 [ 217.819396][ T5484] bt_host_release+0x7f/0x90 [ 217.824040][ T5484] device_release+0x91/0x1c0 [ 217.828633][ T5484] kobject_put+0x224/0x460 [ 217.833055][ T5484] vhci_release+0x87/0xd0 [ 217.837396][ T5484] __fput+0x3f6/0x8d0 [ 217.841399][ T5484] task_work_run+0x246/0x300 [ 217.845994][ T5484] do_exit+0xa6e/0x26a0 [ 217.850157][ T5484] do_group_exit+0x202/0x2b0 [ 217.854756][ T5484] get_signal+0x16f7/0x17d0 [ 217.859270][ T5484] arch_do_signal_or_restart+0xb0/0x1a10 [ 217.864910][ T5484] exit_to_user_mode_loop+0x6a/0x100 [ 217.870195][ T5484] exit_to_user_mode_prepare+0xb1/0x140 [ 217.875740][ T5484] syscall_exit_to_user_mode+0x60/0x270 [ 217.881288][ T5484] do_syscall_64+0x47/0xb0 [ 217.885712][ T5484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.891632][ T5484] [ 217.893972][ T5484] Last potentially related work creation: [ 217.899682][ T5484] kasan_save_stack+0x3b/0x60 [ 217.904364][ T5484] __kasan_record_aux_stack+0xb0/0xc0 [ 217.909759][ T5484] insert_work+0x54/0x3d0 [ 217.914098][ T5484] __queue_work+0xb4b/0xf90 [ 217.918607][ T5484] queue_work_on+0x14b/0x250 [ 217.923223][ T5484] process_one_work+0x8a9/0x11d0 [ 217.928206][ T5484] worker_thread+0xa47/0x1200 [ 217.932897][ T5484] kthread+0x28d/0x320 [ 217.936979][ T5484] ret_from_fork+0x1f/0x30 [ 217.941404][ T5484] [ 217.943751][ T5484] Second to last potentially related work creation: [ 217.950330][ T5484] kasan_save_stack+0x3b/0x60 [ 217.955045][ T5484] __kasan_record_aux_stack+0xb0/0xc0 [ 217.960425][ T5484] insert_work+0x54/0x3d0 [ 217.964759][ T5484] __queue_work+0xb4b/0xf90 [ 217.969284][ T5484] call_timer_fn+0x1ad/0x6b0 [ 217.973963][ T5484] __run_timers+0x6a8/0x890 [ 217.978475][ T5484] run_timer_softirq+0x63/0xf0 [ 217.983240][ T5484] handle_softirqs+0x2ee/0xa40 [ 217.988020][ T5484] __irq_exit_rcu+0x157/0x240 [ 217.992732][ T5484] irq_exit_rcu+0x5/0x20 [ 217.997008][ T5484] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 218.002642][ T5484] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 218.008652][ T5484] [ 218.010973][ T5484] The buggy address belongs to the object at ffff888076d80000 [ 218.010973][ T5484] which belongs to the cache kmalloc-8k of size 8192 [ 218.025023][ T5484] The buggy address is located 96 bytes inside of [ 218.025023][ T5484] 8192-byte region [ffff888076d80000, ffff888076d82000) [ 218.038291][ T5484] [ 218.040612][ T5484] The buggy address belongs to the physical page: [ 218.047030][ T5484] page:ffffea0001db6000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76d80 [ 218.057184][ T5484] head:ffffea0001db6000 order:3 compound_mapcount:0 compound_pincount:0 [ 218.065505][ T5484] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 218.073498][ T5484] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c42280 [ 218.082084][ T5484] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 218.090659][ T5484] page dumped because: kasan: bad access detected [ 218.097329][ T5484] page_owner tracks the page as allocated [ 218.103033][ T5484] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3961, tgid 3961 (dhcpcd-run-hook), ts 45849686736, free_ts 45812614177 [ 218.123978][ T5484] post_alloc_hook+0x18d/0x1b0 [ 218.128744][ T5484] get_page_from_freelist+0x3731/0x38d0 [ 218.134289][ T5484] __alloc_pages+0x28d/0x770 [ 218.138875][ T5484] alloc_slab_page+0x6a/0x150 [ 218.143564][ T5484] new_slab+0x84/0x2d0 [ 218.147637][ T5484] ___slab_alloc+0xc20/0x1270 [ 218.152318][ T5484] __kmem_cache_alloc_node+0x19f/0x260 [ 218.157779][ T5484] kmalloc_trace+0x26/0xe0 [ 218.162205][ T5484] tomoyo_init_log+0x1189/0x2040 [ 218.167146][ T5484] tomoyo_supervisor+0x396/0x12d0 [ 218.172174][ T5484] tomoyo_env_perm+0x174/0x210 [ 218.177043][ T5484] tomoyo_find_next_domain+0x1469/0x1d10 [ 218.182683][ T5484] tomoyo_bprm_check_security+0xfe/0x150 [ 218.188316][ T5484] security_bprm_check+0x5f/0xa0 [ 218.193259][ T5484] bprm_execve+0x8bb/0x18a0 [ 218.197789][ T5484] do_execveat_common+0x580/0x720 [ 218.202818][ T5484] page last free stack trace: [ 218.207491][ T5484] free_unref_page_prepare+0x12a6/0x15b0 [ 218.213120][ T5484] free_unref_page+0x33/0x3e0 [ 218.217791][ T5484] __unfreeze_partials+0x1b7/0x210 [ 218.222912][ T5484] put_cpu_partial+0x17b/0x250 [ 218.227680][ T5484] qlist_free_all+0x76/0xe0 [ 218.232186][ T5484] kasan_quarantine_reduce+0x156/0x170 [ 218.237646][ T5484] __kasan_slab_alloc+0x1f/0x70 [ 218.242492][ T5484] slab_post_alloc_hook+0x52/0x3a0 [ 218.247608][ T5484] kmem_cache_alloc+0x10c/0x2d0 [ 218.252460][ T5484] getname_flags+0xb8/0x4f0 [ 218.257137][ T5484] __x64_sys_newfstatat+0x130/0x1e0 [ 218.262340][ T5484] do_syscall_64+0x3b/0xb0 [ 218.266762][ T5484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.272670][ T5484] [ 218.275004][ T5484] Memory state around the buggy address: [ 218.280651][ T5484] ffff888076d7ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 218.288708][ T5484] ffff888076d7ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 218.296767][ T5484] >ffff888076d80000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.304841][ T5484] ^ [ 218.312027][ T5484] ffff888076d80080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.320083][ T5484] ffff888076d80100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.328138][ T5484] ================================================================== [ 218.337510][ T5484] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 218.344741][ T5484] CPU: 1 PID: 5484 Comm: khidpd_7fff0008 Not tainted 6.1.126-syzkaller #0 [ 218.353350][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 218.363518][ T5484] Call Trace: [ 218.366821][ T5484] [ 218.369775][ T5484] dump_stack_lvl+0x1e3/0x2cb [ 218.374501][ T5484] ? nf_tcp_handle_invalid+0x642/0x642 [ 218.380008][ T5484] ? panic+0x764/0x764 [ 218.384126][ T5484] ? vscnprintf+0x59/0x80 [ 218.388494][ T5484] panic+0x318/0x764 [ 218.392422][ T5484] ? check_panic_on_warn+0x1d/0xa0 [ 218.397572][ T5484] ? memcpy_page_flushcache+0xfc/0xfc [ 218.402983][ T5484] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 218.408906][ T5484] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 218.414835][ T5484] ? _raw_spin_unlock+0x40/0x40 [ 218.419721][ T5484] ? print_report+0x4a3/0x4f0 [ 218.424427][ T5484] check_panic_on_warn+0x7e/0xa0 [ 218.429479][ T5484] ? __mutex_lock+0x6d2/0xd80 [ 218.434187][ T5484] end_report+0x66/0x110 [ 218.438458][ T5484] kasan_report+0x143/0x160 [ 218.443007][ T5484] ? __mutex_lock+0x6d2/0xd80 [ 218.447810][ T5484] __mutex_lock+0x6d2/0xd80 [ 218.452347][ T5484] ? __mutex_lock+0x53c/0xd80 [ 218.457053][ T5484] ? l2cap_unregister_user+0x63/0x1b0 [ 218.462462][ T5484] ? mutex_lock_nested+0x10/0x10 [ 218.467427][ T5484] ? __wake_up_bit+0x2b0/0x2b0 [ 218.472311][ T5484] ? try_to_del_timer_sync+0x2f0/0x2f0 [ 218.477797][ T5484] ? _raw_spin_unlock+0x40/0x40 [ 218.482688][ T5484] l2cap_unregister_user+0x63/0x1b0 [ 218.487916][ T5484] hidp_session_thread+0x44b/0x490 [ 218.493051][ T5484] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 218.498981][ T5484] ? hidp_session_get+0x80/0x80 [ 218.503858][ T5484] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 218.509778][ T5484] ? hidp_session_thread+0x490/0x490 [ 218.515099][ T5484] ? release_firmware_map_entry+0x186/0x186 [ 218.521025][ T5484] ? hidp_session_thread+0x490/0x490 [ 218.526348][ T5484] ? __kthread_parkme+0x168/0x1c0 [ 218.531421][ T5484] kthread+0x28d/0x320 [ 218.535017][ T4550] usb 2-1: USB disconnect, device number 6 [ 218.541320][ T5484] ? hidp_session_get+0x80/0x80 [ 218.546194][ T5484] ? kthread_blkcg+0xd0/0xd0 [ 218.550820][ T5484] ret_from_fork+0x1f/0x30 [ 218.555329][ T5484] [ 218.558661][ T5484] Kernel Offset: disabled [ 218.562991][ T5484] Rebooting in 86400 seconds..