last executing test programs: 46.11337563s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newsa={0xf0, 0x15, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private}, @in6=@local}}, 0xf0}, 0x1, 0xb}, 0x0) 44.828685896s ago: executing program 3: syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES64], 0x2, 0x5e4b, &(0x7f000000a2c0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 43.563691929s ago: executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x7933, 0x4) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/41, 0x29}}], 0x1, 0x0, 0x0) 42.559029423s ago: executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 34.171561163s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) unshare(0x400) utimensat(r2, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 33.86251882s ago: executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x800803fe) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xfb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 33.628030656s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000030a03000000000000000000020000000c0002050c000000000000010900010073797a3000000000090003"], 0x60}}, 0x0) 33.574973584s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x0, 0xffffffff}) 33.204061181s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) unshare(0x400) utimensat(r2, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 33.044146836s ago: executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f000053b000/0x2000)=nil}) r4 = dup(r3) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000100)="ebb20639123fa20bb54bd839febb49f9b1b8768d110d169571a56f30a6c4185dbca4266903fbe389dc33005b6cb3c947df31", 0x32}], 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 32.844513926s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@noauto_da_alloc}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1095803, 0x0, 0x0, 0x0, &(0x7f0000000000)) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x3c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x42, &(0x7f0000000140)=ANY=[], 0x3, 0x1c0, &(0x7f0000000200)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000500)='.log\x00', 0x181041, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0x4008550d, 0x0) syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1032001, &(0x7f0000000440)={[], [{@permit_directio}]}, 0xfb, 0x1120, &(0x7f0000002080)="$eJzs2b9qFFEUB+Df3R1NrEbmAabRwkJCwvoAplDY1lYbkYBgqiwIiq/hG/gWvoKmsg/ptQhYCiOT2XFVFv+QjVh8H+zeM4d75txb3jsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXpV8LEk1SZoxN0lSkrY9np8macf89XfTSUoeHMwX945m9xdJpufTy8Ok9FV9WZq9G9vNrJk1e82du/s33y9evHz2+PDw4Gj5mpI2J2cb3UUZ/6bf58qvSrp6oysAAACA/1h3YXVeP/+TTlcvqT8AAADwO5u+TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4W129ipsxmCQpSdsez0+TtGvqrvyj9QEAAAAXVzLJo3pdfrgGWLmdD3X5lu/Hz6WPd/NmTT0AAACw8vTtD4/d1jI4/77eJbmWfOkG/bn7VqrhXL6daphZZWdniJZDPu0n0yS7P/U6OXv1ZPyVbppsXerWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICv7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAABgrwAAAP//EaLjGQ==") r9 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x40309410, &(0x7f0000000080)={0x8, 0x101, 0x2, 0x5, 0x0, [0x800, 0x14000, 0x9, 0x8000]}) 32.81688929s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 32.775123836s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) r0 = syz_io_uring_setup(0x44cd, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x5d2f, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000ffc000)) 32.741745562s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 32.091580731s ago: executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) 31.83444648s ago: executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x281}) 31.174916691s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 31.138299636s ago: executing program 3: syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x8c8, &(0x7f0000000040)=ANY=[], 0x1, 0xa0f, &(0x7f0000000d40)="$eJzs3U2MW0cdAPCxd71pPkqcktAlDWlCoS0f3W02S/iIoKnIhaipuFXiFqVpiUgDIpWgVQ9JTtxoVYUrH+LUS4UQEr2gqCculUgkLj0VDhyIglSJQykki+Kdcez/2nr2Jhuv17+fNDsez/jNPO/z8/N7b2YSMLHqrb+Li7O1lC698+bRfz76j823nnmqXaLZ+jvdkWqklGo5PR2W98HUcnzjw9dO9opraaH1t6TTs9fbr92aUjqf9qXLqZl2X7r6xnsLzxy/cOzi/itvHb62NmsPAACT5buXDy/u+ttfHtrx8dt7j6RN7efL8Xkzp7fl4/4j+cC/HP/XU3e61hE6zYRy0znUQ7mpHuU662mEctN96p8Jy230Kbepov6pjud6rTeMs7IdN1OtPteVrtfn5pZ/k6fW7/qZ2tzZ02deODeihgJ33b8fTintEwRhEsPS9lHvgQCWxeuFK5yPZxbuTHtp04PVf/3peu/Xw11wr7d/9Y9X/b+9YI/D3bNRt6ayXuVztC2n43WEeP/SsJ//srx4PaIxYDv7XUcYl+sL/do5dY/bsVr92h+3i43qmzku78O3Qn7n5yf+T8flfwz09pHz/4IwsWFp1DsgYN2K980tZSU/3tcX8zdV5N9Xkb+5In9LRf7WinyYZL9/+efp9drt3/nxN/2w58PKebb7c/yJIdsTz0cOW3+873dYd1p/vJ8Y1rM/nnju1Nee/97V5fv/a+3t/2be3vfldDN/ti7nAuV8YTyv3r73v9ldT71PuQdCe+7vUb71eGd3udrO28tJHfuZFe2Y7X7d9n7l9nSXa4Zym3O4L7Q3Hp9sCa8rxx9lv1rer+mwvo2wHjOhHWW/siPHsR2wGmV77Hf/f9k+Z1Oj9sLpM6eezOmynf55qrHp1vMHVi5681q3Hbgzg/b/mU3d/X+2tZfQqHfuF7a3yy/vLw60l9f9/EKf5w/mdPme+/7U5tbzcyd/eOb5u7vqMPHOvfLqD06cOXPqxx544IEH7Qej3jMBa23+5Zd+NH/ulVefOP3SiRdPvXjq7MFDhw4uLBz6+sHF+dZx/Xzn0T2wkdz+0h91SwAAAAAAAAAAAIBB/eTY0at/ffer7y/3/7/d/6/0/y93/pb+/z8L/f9jP/nSD770A9zRI79VJgywOhPKNXL4ZGjvzlDPrvC6T+W4PY9f7v9fqovjupb2PBiej+P3lnJhOIEV46XMhDFI4nyBn83xxRz/JsEI1Xp304/bbb/xrcu2XsanMC7FeCr/t7I1lHFMSv/vfuM6lf3/jnvQRu6+e9GdcNTrCPT2L+N/C8LEhqUls3gA68Oo5/8s5z1LfPZP37nvVijFrj/dvb+M45fCnVjv80+qf2PN/9me/27g/V+YMa+5unr/88tr73dUm3YPWn9c/zIO9M7h6v8411/W5rE0WP1Lvw71xwtCA/pvqH/LgPWvWP89q6v/f7n+8rY9/sig9S+3uFbvbkc8b1yu/8XzxsWNsP5lbM+h13+VEzXezPXDJBuXeWYH133lfr3P/9tPvA/jKzlddoTlPoc438mw7S/3V5TvgV1h+bWK7zfz/463b+S46vNQ5v8t22OzR7rekW70eG833r4GxtsHrv8JwsSGpaWltT2hVWGklTPy93/UvxNGXf+o3/8qcf7feAwf5/+N+XH+35gf5/+N+XF+vZgf5/+N72ec/zfmPxiWG+cHnq3I/3RF/u6K/Icq8vdU5H+mIn9/Rf7eivyHK/IfqMh/pCL/cxX5n6/If7Qi//GK/C9U5G90pT/KpK4/TLLYP8/nHyZHuf7T7/O/syIfGF+/ePtAOQWy90iaaZ8PKdfxjuR0I/92/mlOx+veqSN9K+/dnP57yF/v5ztgksTxM+L3+2MV+cD4Kvd5+XzDBKr1HrFn0HGr+h3nM16+mOMv5fjLOX4ix3M5ns/xgRwv3KP2sTa+/bs/HH69dvv3/vaQP+j95J39ga58tHKcqIMDtieeHxj2fvY4jt+w7rT+VXYHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJl66+/i4mwtpUvvvHn0ueOn528981S7RLP1d7oj1Wi/LqUnczyV41/lBzc+fO1kZ3wzx7W0kGqp1n4+PXu9XdPWlNL5tC9dTs20+9LVN95beOb4hWMX91956/C1tXsHAAAAYOP7fwAAAP//gUgL6Q==") openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003b80), 0x4240, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b23, &(0x7f0000000040)) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, 0x20) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x4c00, 0x3) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000480)={0x7, 0x0, [{0x4000000b, 0xde, 0x2, 0x3, 0xffffff01, 0x40, 0x80}, {0x80000007, 0x4, 0x3, 0x4cf, 0x1, 0x8, 0x8001}, {0x80000008, 0x4, 0x2, 0x3, 0x3ff, 0x6, 0x81}, {0xc0000001, 0x1, 0x0, 0x9, 0x6, 0x8, 0xfffffffb}, {0x40000001, 0xfff, 0x0, 0x6, 0x1, 0x6, 0x6}, {0x80000019, 0x5, 0x2, 0x1, 0x8, 0x1, 0x80000001}, {0x4, 0x0, 0x7, 0x0, 0x5, 0x7, 0x6}]}) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x43, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xd5, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b196e7eae64e5277a4c8fee8899020ae"}]}}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0xa1e, 0x4) sendmsg$key(r6, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r6, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x3a, "4181ca9d628217283441b910f56aa525828577c449eed36a17a509c0fa1b2b5b946a8bddacd974b8c33624299071d67545dc3197720420e8fd40"}, &(0x7f0000000040)=0x42) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r8 = dup2(r1, r0) readv(r8, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1) 31.090591793s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 31.028495983s ago: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f00000001c0)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x41, 0x9755, &(0x7f0000012ec0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80405880, &(0x7f0000000000)) 30.52391985s ago: executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f000053b000/0x2000)=nil}) r4 = dup(r3) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000100)="ebb20639123fa20bb54bd839febb49f9b1b8768d110d169571a56f30a6c4185dbca4266903fbe389dc33005b6cb3c947df31", 0x32}], 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 30.428476395s ago: executing program 4: unshare(0x8040480) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x2, 'drbg_pr_sha512\x00'}, 0x58) 30.13256114s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 30.074268448s ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000200000000000000000000008500000036000000850000002a0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[], 0x0) 30.004229329s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x400454de, &(0x7f0000000440)) 2.730538933s ago: executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) 1.824535952s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@debug}, {@lazytime}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.132018658s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 47.353003ms ago: executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 0s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000000c0)=0xc4030a4) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) write$ppp(r3, &(0x7f0000000000)="002143150f3c5bd965a1fcf02a8032fbb3e0106c37d4", 0x16) sched_setscheduler(0x0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x707, @empty, 0xfffff9e1}, @in6={0xa, 0x4e22, 0x200, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffff}], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0xff03}], 0x1, 0x8000) kernel console output (not intermixed with test programs): access beyond end of device [ 83.237685][ T3531] loop0: rw=2049, want=45120, limit=40427 [ 83.272373][ T3951] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.610557][ T1065] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 83.615280][ T3965] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 83.644558][ T1065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.675069][ T1065] usb 5-1: Product: syz [ 83.692115][ T1065] usb 5-1: Manufacturer: syz [ 83.696764][ T1065] usb 5-1: SerialNumber: syz [ 83.752294][ T1065] usb 5-1: config 0 descriptor?? [ 83.906442][ T3571] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.015262][ T1289] usb 5-1: USB disconnect, device number 5 [ 84.310476][ T3571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.348056][ T3571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.359475][ T3571] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.380742][ T3571] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.387073][ T3968] loop3: detected capacity change from 0 to 65536 [ 84.396738][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.417078][ T3571] usb 3-1: config 0 descriptor?? [ 84.451146][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.508511][ T3968] XFS (loop3): Mounting V5 Filesystem [ 84.563121][ T3968] XFS (loop3): Ending clean mount [ 84.608392][ T3968] XFS (loop3): Quotacheck needed: Please wait. [ 84.685736][ T3968] XFS (loop3): Quotacheck: Done. [ 84.898835][ T3530] XFS (loop3): Unmounting Filesystem [ 84.946691][ T3993] loop1: detected capacity change from 0 to 32768 [ 84.974060][ T3571] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 84.993895][ T3571] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 85.033873][ T3571] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.100662][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.118583][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 85.135688][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.172622][ T3993] XFS (loop1): Mounting V5 Filesystem [ 85.183036][ T21] usb 1-1: config 0 descriptor?? [ 85.257161][ T3568] usb 3-1: USB disconnect, device number 2 [ 85.319547][ T3993] XFS (loop1): Ending clean mount [ 85.442328][ T3526] XFS (loop1): Unmounting Filesystem [ 85.492338][ T4005] loop4: detected capacity change from 0 to 16 [ 85.554246][ T4007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.583623][ T4005] erofs: (device loop4): mounted with root inode @ nid 36. [ 85.643149][ T21] appletouch 1-1:0.0: Geyser mode initialized. [ 85.656665][ T21] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 85.656755][ T4009] loop3: detected capacity change from 0 to 256 [ 85.720875][ T4005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 85.872169][ T3568] usb 1-1: USB disconnect, device number 3 [ 85.903235][ T3568] appletouch 1-1:0.0: input: appletouch disconnected [ 86.821425][ T4009] 9pnet_virtio: no channels available for device @ [ 87.185813][ T4039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.373281][ T4043] loop1: detected capacity change from 0 to 1764 [ 87.389013][ T4041] loop4: detected capacity change from 0 to 8192 [ 87.402297][ T3571] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.474614][ T4041] REISERFS warning (device loop4): super-6509 reiserfs_parse_options: nolargeio option is no longer supported [ 87.618382][ T4022] loop2: detected capacity change from 0 to 32768 [ 87.690303][ T3571] usb 4-1: Using ep0 maxpacket: 32 [ 87.881461][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 87.911200][ T3571] usb 4-1: config 0 has no interfaces? [ 87.917528][ T3571] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.165857][ T3571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.371209][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.505592][ T3571] usb 4-1: config 0 descriptor?? [ 88.636796][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.649103][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.663061][ T21] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.690083][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.724577][ T21] usb 5-1: config 0 descriptor?? [ 88.815300][ T4060] loop1: detected capacity change from 0 to 512 [ 88.884673][ T4060] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.943628][ T4066] loop2: detected capacity change from 0 to 512 [ 88.944480][ T3578] usb 4-1: USB disconnect, device number 2 [ 88.972183][ T4060] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 88.979346][ T4060] EXT4-fs (loop1): mount failed [ 89.030430][ T1065] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.030872][ T4066] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nobarrier,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 89.058028][ T4066] ext4 filesystem being mounted at /root/syzkaller-testdir262616439/syzkaller.I1QzWv/30/bus supports timestamps until 2038 (0x7fffffff) [ 89.089438][ T26] audit: type=1326 audit(1718881691.562:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4065 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x0 [ 89.142115][ T4060] loop1: detected capacity change from 0 to 256 [ 89.189060][ T4060] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.213025][ T21] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 89.235899][ T21] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 89.269572][ T21] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 89.376441][ T4075] netlink: set zone limit has 8 unknown bytes [ 89.470320][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.481671][ T1065] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 89.517522][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.541433][ T1065] usb 1-1: config 0 descriptor?? [ 89.552183][ T21] usb 5-1: USB disconnect, device number 6 [ 89.586570][ T4077] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 90.150850][ T1065] appletouch 1-1:0.0: Geyser mode initialized. [ 90.268007][ T1065] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 90.433242][ T4077] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 90.463065][ T1065] usb 1-1: USB disconnect, device number 4 [ 90.639119][ T3655] udevd[3655]: Error opening device "/dev/input/event4": No such file or directory [ 90.659985][ T1065] appletouch 1-1:0.0: input: appletouch disconnected [ 90.729542][ T3655] udevd[3655]: Unable to EVIOCGABS device "/dev/input/event4" [ 90.836379][ T3655] udevd[3655]: Unable to EVIOCGABS device "/dev/input/event4" [ 90.900914][ T4095] loop2: detected capacity change from 0 to 32768 [ 90.910919][ T3655] udevd[3655]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 90.942805][ T4093] loop1: detected capacity change from 0 to 4096 [ 90.992215][ T4104] netlink: set zone limit has 8 unknown bytes [ 91.009171][ T4093] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 91.026417][ T2963] udevd[2963]: worker [3655] terminated by signal 6 (Aborted) [ 91.049795][ T2963] udevd[2963]: worker [3655] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8/event4' [ 91.082255][ T4095] XFS (loop2): Mounting V5 Filesystem [ 91.279697][ T4095] XFS (loop2): Ending clean mount [ 91.364242][ T4119] syz-executor.3 sent an empty control message without MSG_MORE. [ 91.982048][ T4093] kAFS: No cell specified [ 92.032391][ T4093] Zero length message leads to an empty skb [ 92.070417][ T1065] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.079322][ T3534] XFS (loop2): Unmounting Filesystem [ 92.474355][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.505932][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.536549][ T1065] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.557798][ T4122] loop3: detected capacity change from 0 to 8192 [ 92.600200][ T1065] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.631571][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.676494][ T1065] usb 1-1: config 0 descriptor?? [ 92.729436][ T4108] loop4: detected capacity change from 0 to 32768 [ 92.733054][ T4122] REISERFS warning (device loop3): super-6509 reiserfs_parse_options: nolargeio option is no longer supported [ 93.335439][ T4108] XFS (loop4): Mounting V5 Filesystem [ 93.587202][ T1065] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 93.682076][ T1065] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 93.713081][ T1065] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 93.833333][ T4108] XFS (loop4): Ending clean mount [ 93.842870][ T1065] usb 1-1: USB disconnect, device number 5 [ 93.879429][ T4149] loop2: detected capacity change from 0 to 1024 [ 93.961159][ T3532] XFS (loop4): Unmounting Filesystem [ 94.960404][ T4149] hfsplus: xattr searching failed [ 95.006510][ T4166] loop1: detected capacity change from 0 to 512 [ 95.052150][ T4167] hfsplus: xattr searching failed [ 95.075330][ T4149] hfsplus: xattr searching failed [ 95.157887][ T4166] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 95.170898][ T4166] EXT4-fs (loop1): mount failed [ 95.191173][ T4167] hfsplus: xattr searching failed [ 95.318647][ T4166] loop1: detected capacity change from 0 to 256 [ 95.363513][ T9] hfsplus: b-tree write err: -5, ino 4 [ 95.424477][ T4166] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.577871][ T4180] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 95.866793][ T4183] loop3: detected capacity change from 0 to 256 [ 95.930423][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.300467][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.320290][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 96.365811][ T4192] loop2: detected capacity change from 0 to 8192 [ 96.380248][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.445681][ T13] usb 5-1: config 0 descriptor?? [ 96.562404][ T4192] REISERFS warning (device loop2): super-6509 reiserfs_parse_options: nolargeio option is no longer supported [ 96.728037][ T4174] loop0: detected capacity change from 0 to 32768 [ 96.951522][ T13] appletouch 5-1:0.0: Geyser mode initialized. [ 96.981670][ T13] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 97.091103][ T26] audit: type=1326 audit(1718881699.512:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ff00000 [ 97.800580][ T26] audit: type=1326 audit(1718881699.512:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ff00000 [ 97.828860][ T26] audit: type=1326 audit(1718881699.512:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ff00000 [ 97.856821][ T26] audit: type=1326 audit(1718881699.512:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ff00000 [ 97.963765][ T13] usb 5-1: USB disconnect, device number 7 [ 97.970264][ C1] appletouch 5-1:0.0: atp_complete: usb_submit_urb failed with result -19 [ 98.113992][ T13] appletouch 5-1:0.0: input: appletouch disconnected [ 98.120037][ T26] audit: type=1326 audit(1718881699.512:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ff00000 [ 98.281953][ T26] audit: type=1326 audit(1718881699.512:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ff00000 [ 98.347695][ T26] audit: type=1326 audit(1718881699.512:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ff00000 [ 98.380226][ T26] audit: type=1326 audit(1718881699.512:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ff00000 [ 98.417812][ T26] audit: type=1326 audit(1718881699.512:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ff00000 [ 98.448366][ T26] audit: type=1326 audit(1718881699.512:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ff00000 [ 98.907149][ T4207] loop2: detected capacity change from 0 to 32768 [ 99.086798][ T4207] XFS (loop2): Mounting V5 Filesystem [ 99.357288][ T4207] XFS (loop2): Ending clean mount [ 99.398967][ T4221] loop4: detected capacity change from 0 to 4096 [ 99.497429][ T4221] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 99.530587][ T3578] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.581208][ T3534] XFS (loop2): Unmounting Filesystem [ 99.673443][ T4221] kAFS: No cell specified [ 99.930479][ T3578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.996403][ T3578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.013374][ T4228] loop3: detected capacity change from 0 to 2048 [ 100.028456][ T3578] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.048779][ T3578] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.059847][ T3578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.085681][ T3578] usb 2-1: config 0 descriptor?? [ 100.108321][ T4233] loop2: detected capacity change from 0 to 128 [ 100.120718][ T4230] loop0: detected capacity change from 0 to 2048 [ 100.148893][ T4228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.251544][ T4230] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.323602][ T4230] ext4 filesystem being mounted at /root/syzkaller-testdir53834864/syzkaller.NAvtx9/34/bus supports timestamps until 2038 (0x7fffffff) [ 100.509868][ T4249] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 100.572215][ T3578] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 100.593158][ T3578] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 100.631901][ T3578] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 100.745656][ T4257] loop0: detected capacity change from 0 to 512 [ 100.777174][ T4254] loop2: detected capacity change from 0 to 4096 [ 100.835456][ T4257] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 100.850667][ T4254] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 100.867512][ T4257] EXT4-fs (loop0): mount failed [ 100.888816][ T3578] usb 2-1: USB disconnect, device number 3 [ 100.893200][ T1065] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.994660][ T4254] kAFS: No cell specified [ 101.211330][ T4264] loop0: detected capacity change from 0 to 128 [ 101.272795][ T4264] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 101.300465][ T1065] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.330848][ T1065] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.347622][ T4264] sysv_free_block: trying to free block not in datazone [ 101.376246][ T1065] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.420661][ T4264] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 101.451624][ T4267] loop2: detected capacity change from 0 to 1024 [ 101.600526][ T1065] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 101.634045][ T1065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.670645][ T1065] usb 4-1: Product: syz [ 101.684693][ T1065] usb 4-1: Manufacturer: syz [ 101.699837][ T1065] usb 4-1: SerialNumber: syz [ 101.975799][ T4251] udc-core: couldn't find an available UDC or it's busy [ 101.988496][ T1065] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 102.006332][ T4251] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.079479][ T4251] udc-core: couldn't find an available UDC or it's busy [ 102.100809][ T26] kauditd_printk_skb: 213 callbacks suppressed [ 102.100825][ T26] audit: type=1326 audit(1718881704.582:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6bd33f29 code=0x7ffc0000 [ 102.134161][ T4251] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.161542][ T1065] usb 4-1: USB disconnect, device number 3 [ 102.187871][ T1065] usblp0: removed [ 102.215827][ T26] audit: type=1326 audit(1718881704.612:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb6bd316a7 code=0x7ffc0000 [ 102.330261][ T26] audit: type=1326 audit(1718881704.612:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb6bcf7379 code=0x7ffc0000 [ 102.416062][ T26] audit: type=1326 audit(1718881704.612:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6bd33f29 code=0x7ffc0000 [ 102.417542][ T4288] loop0: detected capacity change from 0 to 512 [ 102.479689][ T26] audit: type=1326 audit(1718881704.612:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb6bd316a7 code=0x7ffc0000 [ 102.496880][ T4274] loop4: detected capacity change from 0 to 32768 [ 102.511451][ T26] audit: type=1326 audit(1718881704.612:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb6bcf7379 code=0x7ffc0000 [ 102.538223][ T26] audit: type=1326 audit(1718881704.612:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6bd33f29 code=0x7ffc0000 [ 102.568004][ T26] audit: type=1326 audit(1718881704.612:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb6bd316a7 code=0x7ffc0000 [ 102.594778][ T26] audit: type=1326 audit(1718881704.612:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb6bcf7379 code=0x7ffc0000 [ 102.625533][ T26] audit: type=1326 audit(1718881704.612:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6bd33f29 code=0x7ffc0000 [ 102.628125][ T4288] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 102.663849][ T4274] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4274) [ 102.726009][ T4288] EXT4-fs (loop0): mount failed [ 102.767453][ T4274] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 102.784687][ T4274] BTRFS info (device loop4): allowing degraded mounts [ 102.804074][ T4274] BTRFS info (device loop4): enabling disk space caching [ 102.820340][ T4274] BTRFS info (device loop4): force clearing of disk cache [ 102.827598][ T4274] BTRFS info (device loop4): turning on sync discard [ 102.835930][ T4051] hfsplus: b-tree write err: -5, ino 3 [ 102.837076][ T4274] BTRFS info (device loop4): turning off barriers [ 102.847952][ T4274] BTRFS info (device loop4): turning off discard [ 102.868954][ T4274] BTRFS info (device loop4): doing ref verification [ 102.889382][ T4274] BTRFS info (device loop4): disk space caching is enabled [ 102.899341][ T4274] BTRFS info (device loop4): has skinny extents [ 102.917104][ T4288] loop0: detected capacity change from 0 to 256 [ 103.012298][ T4288] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.778826][ T4274] BTRFS info (device loop4): enabling ssd optimizations [ 103.894800][ T4274] BTRFS info (device loop4): clearing free space tree [ 103.904775][ T4274] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.916643][ T4274] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.972907][ T4324] loop1: detected capacity change from 0 to 128 [ 104.000724][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.058336][ T4324] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 104.087631][ T4324] sysv_count_free_blocks: cannot read free-list block [ 104.163046][ T4338] loop3: detected capacity change from 0 to 128 [ 104.195557][ T4324] sysv_count_free_inodes: unable to read inode table [ 104.224731][ T4340] loop0: detected capacity change from 0 to 1024 [ 104.332176][ T4338] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.350583][ T4338] ext4 filesystem being mounted at /root/syzkaller-testdir2164173194/syzkaller.o105qh/34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 104.387316][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.416716][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.437305][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.448217][ T3526] sysv_free_block: trying to free block not in datazone [ 104.467502][ T3526] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 104.516111][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.554120][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.608101][ T13] usb 3-1: config 0 descriptor?? [ 104.708124][ T4358] loop4: detected capacity change from 0 to 512 [ 104.736795][ T4360] loop1: detected capacity change from 0 to 128 [ 104.806263][ T4360] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 104.826840][ T4358] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 104.840271][ T4358] EXT4-fs (loop4): mount failed [ 104.843078][ T4360] sysv_free_block: trying to free block not in datazone [ 104.898073][ T4360] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 104.969000][ T4358] loop4: detected capacity change from 0 to 256 [ 105.039062][ T4358] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.092258][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.116582][ T13] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 105.157056][ T13] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 105.405181][ T1289] usb 3-1: USB disconnect, device number 3 [ 105.412323][ T4052] hfsplus: b-tree write err: -5, ino 3 [ 106.460016][ T4392] loop2: detected capacity change from 0 to 256 [ 106.541763][ T4392] FAT-fs (loop2): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 106.541763][ T4392] 18446744073709551615" or missing value [ 106.579881][ T4396] loop3: detected capacity change from 0 to 128 [ 106.666080][ T4396] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.680785][ T4396] ext4 filesystem being mounted at /root/syzkaller-testdir2164173194/syzkaller.o105qh/39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 106.863017][ T4384] loop0: detected capacity change from 0 to 32768 [ 106.884469][ T4406] loop4: detected capacity change from 0 to 1024 [ 106.926473][ T4384] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4384) [ 107.015795][ T4384] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 107.044537][ T4384] BTRFS info (device loop0): allowing degraded mounts [ 107.059785][ T4384] BTRFS info (device loop0): enabling disk space caching [ 107.087994][ T4384] BTRFS info (device loop0): force clearing of disk cache [ 107.126414][ T4384] BTRFS info (device loop0): turning on sync discard [ 107.149040][ T4384] BTRFS info (device loop0): turning off barriers [ 107.175082][ T4384] BTRFS info (device loop0): turning off discard [ 107.205406][ T4384] BTRFS info (device loop0): doing ref verification [ 107.227512][ T4384] BTRFS info (device loop0): disk space caching is enabled [ 107.238938][ T4384] BTRFS info (device loop0): has skinny extents [ 107.411746][ T4432] loop1: detected capacity change from 0 to 24 [ 107.474279][ T4384] BTRFS info (device loop0): enabling ssd optimizations [ 107.545491][ T4384] BTRFS info (device loop0): clearing free space tree [ 107.552615][ T4384] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.561672][ T4432] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 107.574563][ T4384] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 107.596507][ T4432] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 107.767230][ T4444] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.790480][ T4444] FAT-fs (loop5): unable to read boot sector [ 107.991193][ T3643] hfsplus: b-tree write err: -5, ino 3 [ 108.039843][ T26] kauditd_printk_skb: 191 callbacks suppressed [ 108.039861][ T26] audit: type=1800 audit(1718881710.512:491): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1940 res=0 errno=0 [ 108.090047][ T4457] loop2: detected capacity change from 0 to 256 [ 108.121311][ T26] audit: type=1804 audit(1718881710.542:492): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3422824639/syzkaller.mJgSDw/63/file0" dev="sda1" ino=1940 res=1 errno=0 [ 108.151804][ T4457] FAT-fs (loop2): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 108.151804][ T4457] 18446744073709551615" or missing value [ 108.195821][ T4459] loop4: detected capacity change from 0 to 8 [ 108.229219][ T26] audit: type=1800 audit(1718881710.702:493): pid=4461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 108.287775][ T26] audit: type=1800 audit(1718881710.732:494): pid=4461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 108.640290][ T26] audit: type=1326 audit(1718881711.072:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ffc0000 [ 108.725402][ T4474] loop0: detected capacity change from 0 to 128 [ 108.770631][ T26] audit: type=1326 audit(1718881711.092:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b0392f29 code=0x7ffc0000 [ 108.819665][ T4476] loop4: detected capacity change from 0 to 24 [ 108.842524][ T4466] loop1: detected capacity change from 0 to 65536 [ 108.851248][ T26] audit: type=1326 audit(1718881711.092:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ffc0000 [ 108.874320][ T4474] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 108.874497][ T26] audit: type=1326 audit(1718881711.092:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ffc0000 [ 108.918311][ T4474] sysv_count_free_blocks: cannot read free-list block [ 108.926958][ T4476] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 108.935261][ T26] audit: type=1326 audit(1718881711.102:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b0392f29 code=0x7ffc0000 [ 108.960868][ T26] audit: type=1326 audit(1718881711.102:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0392f29 code=0x7ffc0000 [ 108.962918][ T4476] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 109.034160][ T4466] XFS (loop1): Mounting V5 Filesystem [ 109.068494][ T4474] sysv_count_free_inodes: unable to read inode table [ 109.143064][ T4488] loop3: detected capacity change from 0 to 128 [ 109.152450][ T4466] XFS (loop1): Ending clean mount [ 109.161278][ T3531] sysv_free_block: trying to free block not in datazone [ 109.171531][ T4466] XFS (loop1): Quotacheck needed: Please wait. [ 109.174152][ T3531] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 109.206286][ T4488] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 109.240990][ T4466] XFS (loop1): Quotacheck: Done. [ 110.492606][ T3526] XFS (loop1): Unmounting Filesystem [ 110.666909][ T4511] loop4: detected capacity change from 0 to 256 [ 110.704732][ T4511] ======================================================= [ 110.704732][ T4511] WARNING: The mand mount option has been deprecated and [ 110.704732][ T4511] and is ignored by this kernel. Remove the mand [ 110.704732][ T4511] option from the mount to silence this warning. [ 110.704732][ T4511] ======================================================= [ 110.796763][ T4516] loop0: detected capacity change from 0 to 128 [ 110.827000][ T4493] loop2: detected capacity change from 0 to 32768 [ 110.905702][ T4516] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 110.933181][ T4516] sysv_count_free_blocks: cannot read free-list block [ 111.019765][ T4516] sysv_count_free_inodes: unable to read inode table [ 111.088939][ T3531] sysv_free_block: trying to free block not in datazone [ 111.116982][ T4522] loop4: detected capacity change from 0 to 512 [ 111.140480][ T3531] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 111.175165][ T4522] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 111.181786][ T4526] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.355806][ T4511] kvm: emulating exchange as write [ 111.390460][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.743725][ T4530] loop1: detected capacity change from 0 to 65536 [ 112.169571][ T4530] XFS (loop1): Mounting V5 Filesystem [ 112.640671][ T4530] XFS (loop1): Ending clean mount [ 112.648906][ T4530] XFS (loop1): Quotacheck needed: Please wait. [ 112.708459][ T4530] XFS (loop1): Quotacheck: Done. [ 113.282947][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.709088][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 113.759352][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.862951][ T13] usb 4-1: config 0 descriptor?? [ 113.933007][ T13] usb 4-1: can't set config #0, error -71 [ 113.951573][ T3526] XFS (loop1): Unmounting Filesystem [ 113.952532][ T4569] loop3: detected capacity change from 0 to 256 [ 113.959988][ T13] usb 4-1: USB disconnect, device number 4 [ 114.027192][ T4569] FAT-fs (loop3): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 114.027192][ T4569] 18446744073709551615" or missing value [ 114.074212][ T4571] loop2: detected capacity change from 0 to 256 [ 114.376083][ T4558] loop0: detected capacity change from 0 to 32768 [ 114.388580][ T4571] loop2: detected capacity change from 0 to 512 [ 114.410757][ T4053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.428835][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 114.428851][ T26] audit: type=1326 audit(1718881716.902:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5520c1f29 code=0x7ffc0000 [ 114.489627][ T4566] chnl_net:caif_netlink_parms(): no params data found [ 114.510364][ T4558] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4558) [ 114.525872][ T4571] EXT4-fs (loop2): error: journal path ./file0 is not a block device [ 114.570242][ T26] audit: type=1326 audit(1718881716.952:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5520c1f29 code=0x7ffc0000 [ 114.593288][ T26] audit: type=1326 audit(1718881716.952:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5520c1f29 code=0x7ffc0000 [ 114.599100][ T4053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.616461][ T26] audit: type=1326 audit(1718881716.952:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5520c1f29 code=0x7ffc0000 [ 114.678706][ T4558] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 114.684541][ T4579] loop1: detected capacity change from 0 to 8 [ 114.693965][ T26] audit: type=1326 audit(1718881716.952:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5520c1f29 code=0x7ffc0000 [ 114.717173][ T4558] BTRFS info (device loop0): disabling tree log [ 114.724138][ T4558] BTRFS info (device loop0): metadata ratio 65537 [ 114.730799][ T4558] BTRFS info (device loop0): metadata ratio 64 [ 114.737154][ T26] audit: type=1326 audit(1718881716.952:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5520bf6a7 code=0x7ffc0000 [ 114.767658][ T4558] BTRFS info (device loop0): using free space tree [ 114.775954][ T4558] BTRFS info (device loop0): has skinny extents [ 114.783966][ T26] audit: type=1326 audit(1718881716.952:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa552085379 code=0x7ffc0000 [ 114.804872][ T4053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.807682][ T26] audit: type=1326 audit(1718881716.952:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa5520c1f29 code=0x7ffc0000 [ 114.840701][ T26] audit: type=1326 audit(1718881716.952:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5520bf6a7 code=0x7ffc0000 [ 114.864789][ T26] audit: type=1326 audit(1718881716.982:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa552085379 code=0x7ffc0000 [ 115.023880][ T4053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.075562][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.091310][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.098585][ T4558] BTRFS info (device loop0): enabling ssd optimizations [ 115.128531][ T4566] device bridge_slave_0 entered promiscuous mode [ 115.167074][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.202895][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.238617][ T4566] device bridge_slave_1 entered promiscuous mode [ 115.367754][ T4566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.421990][ T4566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.503784][ T4566] team0: Port device team_slave_0 added [ 115.545259][ T4566] team0: Port device team_slave_1 added [ 115.721511][ T4602] loop1: detected capacity change from 0 to 40427 [ 115.802451][ T4602] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 115.810980][ T4602] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 115.900225][ T4602] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.911076][ T4566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.918137][ T4566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.960494][ T3569] Bluetooth: hci2: command 0x0409 tx timeout [ 116.038361][ T4566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.047446][ T4602] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 116.104768][ T4566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.120706][ T4602] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.121016][ T4566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.213614][ T4646] loop3: detected capacity change from 0 to 8 [ 116.219000][ T4566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.268214][ T3526] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 116.268297][ T3526] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 116.278138][ T4643] loop0: detected capacity change from 0 to 8192 [ 116.286956][ T3526] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 116.314448][ T3526] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 116.338976][ T4646] overlayfs: failed to verify origin (/, ino=7, err=-1) [ 116.361310][ T4566] device hsr_slave_0 entered promiscuous mode [ 116.364970][ T3526] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 116.367465][ T3526] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 116.384689][ T4566] device hsr_slave_1 entered promiscuous mode [ 116.385009][ T3526] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 116.400280][ T4646] overlayfs: failed to verify upper root origin [ 116.428563][ T4566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.439713][ T4643] loop0: p2 p3 p4 [ 116.444304][ T4566] Cannot create hsr debugfs directory [ 116.501669][ T4643] loop0: p2 start 14935 is beyond EOD, truncated [ 116.508488][ T4643] loop0: p3 size 196608 extends beyond EOD, truncated [ 116.631560][ T4654] overlayfs: missing 'lowerdir' [ 116.709200][ T4643] loop0: p4 start 4026530307 is beyond EOD, truncated [ 116.817599][ T4659] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 116.897473][ T4659] loop3: detected capacity change from 0 to 256 [ 117.197407][ T4670] loop1: detected capacity change from 0 to 8 [ 117.252791][ T4653] loop2: detected capacity change from 0 to 32768 [ 117.291333][ T4653] XFS: ikeep mount option is deprecated. [ 117.297004][ T4653] XFS: ikeep mount option is deprecated. [ 117.384385][ T4653] XFS (loop2): Mounting V5 Filesystem [ 117.756286][ T4053] device hsr_slave_0 left promiscuous mode [ 117.779039][ T4653] XFS (loop2): Ending clean mount [ 117.784880][ T4053] device hsr_slave_1 left promiscuous mode [ 117.794982][ T4053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.813051][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.835366][ T4053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.845908][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.857742][ T4053] device bridge_slave_1 left promiscuous mode [ 117.866885][ T4053] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.925735][ T3534] XFS (loop2): Unmounting Filesystem [ 117.936897][ T4053] device bridge_slave_0 left promiscuous mode [ 117.948997][ T4053] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.044466][ T3575] Bluetooth: hci2: command 0x041b tx timeout [ 118.121751][ T4053] device veth1_macvtap left promiscuous mode [ 118.162781][ T4053] device veth0_macvtap left promiscuous mode [ 118.190860][ T4053] device veth1_vlan left promiscuous mode [ 118.203615][ T4053] device veth0_vlan left promiscuous mode [ 118.693349][ T4692] loop2: detected capacity change from 0 to 1024 [ 118.701363][ T4682] loop0: detected capacity change from 0 to 40427 [ 118.746177][ T4682] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 118.755381][ T4682] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 118.804612][ T4692] hfsplus: xattr searching failed [ 118.818042][ T4682] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.886220][ T4692] hfsplus: xattr searching failed [ 118.907895][ T4692] hfsplus: xattr searching failed [ 119.025963][ T4692] hfsplus: xattr searching failed [ 119.034939][ T4682] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.047212][ T4682] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 119.094820][ T4053] team0 (unregistering): Port device team_slave_1 removed [ 119.133666][ T4053] team0 (unregistering): Port device team_slave_0 removed [ 119.147503][ T3531] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 119.147530][ T3531] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 119.163717][ T3643] hfsplus: b-tree write err: -5, ino 4 [ 119.176041][ T3531] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 119.264099][ T4053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.335157][ T3535] Bluetooth: unknown link type 36 [ 119.357386][ T4053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.791573][ T4053] bond0 (unregistering): Released all slaves [ 119.901057][ T4706] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.920911][ T4706] IPv6: NLM_F_REPLACE set, but no existing node found! [ 120.109714][ T4566] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.120225][ T3569] Bluetooth: hci2: command 0x040f tx timeout [ 120.147620][ T4566] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.163896][ T4715] loop0: detected capacity change from 0 to 8 [ 120.199550][ T4566] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.230578][ T4566] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.257540][ T4715] overlayfs: failed to verify origin (/, ino=7, err=-1) [ 120.310473][ T4715] overlayfs: failed to verify upper root origin [ 120.350292][ T4716] loop1: detected capacity change from 0 to 8192 [ 120.395722][ T4718] loop2: detected capacity change from 0 to 1024 [ 120.432424][ T4716] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 120.625526][ T4716] REISERFS (device loop1): using ordered data mode [ 120.699402][ T4716] reiserfs: using flush barriers [ 120.713390][ T4566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.732991][ T4716] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.764915][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.786398][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.799328][ T4566] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.811940][ T4702] loop3: detected capacity change from 0 to 32768 [ 120.812853][ T4716] REISERFS (device loop1): checking transaction log (loop1) [ 120.844827][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.856030][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.877434][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.884583][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.898641][ T4716] REISERFS (device loop1): Using r5 hash to sort names [ 120.928811][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.944085][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.964307][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.975474][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.982615][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.998847][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.036465][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.053594][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.069053][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.086187][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.098049][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.155107][ T4702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4702) [ 121.194322][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.204376][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.223704][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.246993][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.267874][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.309916][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.333173][ T4702] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 121.359195][ T4702] BTRFS info (device loop3): force clearing of disk cache [ 121.370495][ T4702] BTRFS info (device loop3): using free space tree [ 121.383984][ T4702] BTRFS info (device loop3): has skinny extents [ 121.400408][ T1289] Bluetooth: hci1: command 0x0409 tx timeout [ 121.580464][ T1065] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.704654][ T4702] BTRFS info (device loop3): enabling ssd optimizations [ 121.718578][ T4702] BTRFS info (device loop3): clearing free space tree [ 121.726695][ T4702] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.737622][ T4702] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.790903][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.798695][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.821405][ T4702] BTRFS info (device loop3): creating free space tree [ 121.856032][ T4702] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.866374][ T4702] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.916315][ T4566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.990496][ T1065] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 122.034854][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.091720][ T1065] usb 1-1: config 0 descriptor?? [ 122.143845][ T1065] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 122.200799][ T1289] Bluetooth: hci2: command 0x0419 tx timeout [ 122.295300][ T4052] hfsplus: b-tree write err: -5, ino 3 [ 122.350609][ T1065] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 122.370366][ T1065] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 122.379405][ T1065] usb 1-1: USB disconnect, device number 6 [ 122.561620][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.586120][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.700508][ T4770] loop2: detected capacity change from 0 to 16 [ 122.721702][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.744442][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.786565][ T4770] erofs: (device loop2): mounted with root inode @ nid 36. [ 122.791563][ T4566] device veth0_vlan entered promiscuous mode [ 122.807698][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.820396][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.845501][ T4566] device veth1_vlan entered promiscuous mode [ 122.859869][ T4774] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.926468][ T4776] loop3: detected capacity change from 0 to 512 [ 122.944350][ T4774] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.951253][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.974966][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.008329][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.026332][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.043359][ T4776] EXT4-fs (loop3): 1 truncate cleaned up [ 123.062559][ T4566] device veth0_macvtap entered promiscuous mode [ 123.077808][ T4776] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,quota,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 123.115246][ T4566] device veth1_macvtap entered promiscuous mode [ 123.136785][ T4788] loop0: detected capacity change from 0 to 512 [ 123.198495][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.232868][ T4776] EXT4-fs error (device loop3): ext4_nfs_get_inode:1433: inode #11: comm syz-executor.3: iget: Dir with htree data on filesystem without dir_index feature. [ 123.241846][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.271811][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.282435][ T3535] Bluetooth: unknown link type 36 [ 123.319120][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.340257][ T4626] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.402635][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.470661][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.481569][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.484421][ T3530] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2164173194/syzkaller.o105qh/62/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 123.536806][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.580434][ T4626] usb 3-1: Using ep0 maxpacket: 16 [ 123.613409][ T4566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.635632][ T4788] EXT4-fs (loop0): 1 orphan inode deleted [ 123.655993][ T3530] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor.3: iget: Dir with htree data on filesystem without dir_index feature. [ 123.663420][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.684395][ T4788] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 123.700367][ T4626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 123.718706][ T4626] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 123.793219][ T4788] ext4 filesystem being mounted at /root/syzkaller-testdir53834864/syzkaller.NAvtx9/73/file1 supports timestamps until 2038 (0x7fffffff) [ 123.841011][ T3530] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor.3: iget: Dir with htree data on filesystem without dir_index feature. [ 123.852761][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.873663][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.890856][ T4626] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=8f.af [ 123.899931][ T4626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.909057][ T4626] usb 3-1: Product: syz [ 123.913579][ T4626] usb 3-1: Manufacturer: syz [ 123.919184][ T4626] usb 3-1: SerialNumber: syz [ 123.928435][ T4626] usb 3-1: config 0 descriptor?? [ 123.935537][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.945962][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.959507][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.976185][ T4626] iuu_phoenix 3-1:0.0: required endpoints missing [ 123.998166][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.009054][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.028513][ T4566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.045563][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.072167][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.086741][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.104931][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.125978][ T4566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.153604][ T4566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.169796][ T4566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.186084][ T4566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.193809][ T1065] usb 3-1: USB disconnect, device number 4 [ 124.465729][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.486943][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.568525][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.583878][ T4051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.607528][ T4051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.652783][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.321151][ T4769] Bluetooth: hci0: command 0x0409 tx timeout [ 125.433258][ T4814] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 125.514170][ T4814] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.587806][ T4808] chnl_net:caif_netlink_parms(): no params data found [ 125.598299][ T4817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.725849][ T4799] loop0: detected capacity change from 0 to 40427 [ 125.849480][ T4808] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.874819][ T4799] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.910450][ T4808] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.938358][ T4791] loop1: detected capacity change from 0 to 32768 [ 125.939709][ T4808] device bridge_slave_0 entered promiscuous mode [ 126.011073][ T4791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4791) [ 126.017235][ T4053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.057185][ T4808] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.066031][ T4808] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.092317][ T4808] device bridge_slave_1 entered promiscuous mode [ 126.099843][ T4799] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.116363][ T4791] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 126.127464][ T4791] BTRFS info (device loop1): force clearing of disk cache [ 126.135238][ T4791] BTRFS info (device loop1): using free space tree [ 126.143212][ T4791] BTRFS info (device loop1): has skinny extents [ 126.156275][ T4799] overlayfs: missing 'lowerdir' [ 126.186389][ T4053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.385778][ T3531] attempt to access beyond end of device [ 126.385778][ T3531] loop0: rw=2049, want=45120, limit=40427 [ 126.481905][ T4791] BTRFS error (device loop1): open_ctree failed [ 126.507840][ T4053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.596881][ T4808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.627903][ T4808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.692059][ T4053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.802700][ T4808] team0: Port device team_slave_0 added [ 126.862362][ T4808] team0: Port device team_slave_1 added [ 126.946603][ T4808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.974242][ T4808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.040253][ T4808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.078378][ T4808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.098981][ T4808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.141254][ T4808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.240812][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 127.288522][ T4865] syz-executor.0[4865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.288627][ T4865] syz-executor.0[4865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.306543][ T4845] loop4: detected capacity change from 0 to 32768 [ 127.307430][ T4868] loop2: detected capacity change from 0 to 16 [ 127.390034][ T4808] device hsr_slave_0 entered promiscuous mode [ 127.402074][ T4808] device hsr_slave_1 entered promiscuous mode [ 127.409792][ T4808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.419030][ T4868] erofs: Unknown parameter '' [ 127.425625][ T4808] Cannot create hsr debugfs directory [ 127.473085][ T4868] loop2: detected capacity change from 0 to 16 [ 127.501557][ T4845] XFS (loop4): Mounting V5 Filesystem [ 127.534397][ T4868] erofs: (device loop2): mounted with root inode @ nid 36. [ 127.568755][ T3535] Bluetooth: unknown link type 36 [ 127.592274][ T4868] erofs: (device loop2): erofs_read_inode: unsupported i_format 36 of nid 37 [ 127.641187][ T4868] erofs: (device loop2): erofs_read_inode: unsupported i_format 36 of nid 37 [ 127.733334][ T4845] XFS (loop4): Ending clean mount [ 127.840934][ T4566] XFS (loop4): Unmounting Filesystem [ 128.050789][ T1065] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.255674][ T4808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 128.315856][ T4808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 128.359044][ T4053] device hsr_slave_0 left promiscuous mode [ 128.387736][ T4053] device hsr_slave_1 left promiscuous mode [ 128.409827][ T4053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.428320][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.450816][ T4053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.464897][ T1065] usb 2-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 128.468802][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.482349][ T1065] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.504060][ T1065] usb 2-1: config 0 descriptor?? [ 128.504876][ T4053] device bridge_slave_1 left promiscuous mode [ 128.519496][ T4053] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.540490][ T4053] device bridge_slave_0 left promiscuous mode [ 128.548404][ T4053] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.573580][ T4053] device veth1_macvtap left promiscuous mode [ 128.579901][ T4053] device veth0_macvtap left promiscuous mode [ 128.586533][ T4053] device veth1_vlan left promiscuous mode [ 128.594132][ T1065] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 128.605963][ T4053] device veth0_vlan left promiscuous mode [ 128.815749][ T1065] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 128.825613][ T1065] gspca_pac7302: probe of 2-1:0.0 failed with error -71 [ 128.846277][ T1065] usb 2-1: USB disconnect, device number 4 [ 128.944796][ T4881] loop0: detected capacity change from 0 to 32768 [ 129.003800][ T4881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4881) [ 129.051126][ T4881] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 129.062080][ T4881] BTRFS info (device loop0): force clearing of disk cache [ 129.069495][ T4881] BTRFS info (device loop0): using free space tree [ 129.077324][ T4881] BTRFS info (device loop0): has skinny extents [ 129.109667][ T4881] BTRFS info (device loop0): enabling ssd optimizations [ 129.124334][ T4881] BTRFS info (device loop0): clearing free space tree [ 129.132932][ T4881] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.139850][ T4053] team0 (unregistering): Port device team_slave_1 removed [ 129.157925][ T4881] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.186733][ T4881] BTRFS info (device loop0): creating free space tree [ 129.199550][ T4881] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.209026][ T4053] team0 (unregistering): Port device team_slave_0 removed [ 129.228304][ T4881] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.256003][ T4053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.293801][ T4053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.320562][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 129.507476][ T4053] bond0 (unregistering): Released all slaves [ 129.640600][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 129.722398][ T4808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.741226][ T4808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.914819][ T4930] loop4: detected capacity change from 0 to 16 [ 129.981906][ T4930] erofs: Unknown parameter '' [ 130.003381][ T4808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.025110][ T4930] loop4: detected capacity change from 0 to 16 [ 130.089370][ T4808] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.109172][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.118995][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.128717][ T4926] loop2: detected capacity change from 0 to 8192 [ 130.146049][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.155972][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.175290][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.182457][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.205139][ T4930] erofs: (device loop4): mounted with root inode @ nid 36. [ 130.215782][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.244500][ T4926] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 130.265863][ T4926] REISERFS (device loop2): using ordered data mode [ 130.277085][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.289798][ T4930] erofs: (device loop4): erofs_read_inode: unsupported i_format 36 of nid 37 [ 130.319170][ T4926] reiserfs: using flush barriers [ 130.336401][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.343686][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.356576][ T4934] loop0: detected capacity change from 0 to 32768 [ 130.370412][ T4926] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.388927][ T4930] erofs: (device loop4): erofs_read_inode: unsupported i_format 36 of nid 37 [ 130.412256][ T4934] XFS: noattr2 mount option is deprecated. [ 130.421803][ T4926] REISERFS (device loop2): checking transaction log (loop2) [ 130.440062][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.448534][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.458525][ T4926] REISERFS (device loop2): Using r5 hash to sort names [ 130.466708][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.482610][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.500045][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.546046][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.557230][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.625715][ T4934] XFS (loop0): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 130.647180][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.661647][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.698259][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.742289][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.760904][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.800605][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.079467][ T4932] loop1: detected capacity change from 0 to 32768 [ 131.107207][ T4945] loop4: detected capacity change from 0 to 32768 [ 131.208925][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.232839][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.293733][ T4808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.330437][ T4932] XFS (loop1): Mounting V5 Filesystem [ 131.400239][ T3569] Bluetooth: hci1: command 0x040f tx timeout [ 131.417162][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.433484][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.471134][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.485960][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.519017][ T4808] device veth0_vlan entered promiscuous mode [ 131.532056][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.538428][ T4932] XFS (loop1): Ending clean mount [ 131.542528][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.597543][ T4808] device veth1_vlan entered promiscuous mode [ 131.627125][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 131.627140][ T26] audit: type=1800 audit(1718881734.102:635): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 131.711351][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.741051][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.754567][ T3526] XFS (loop1): Unmounting Filesystem [ 131.770990][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.790367][ T4985] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 131.800981][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.858548][ T4808] device veth0_macvtap entered promiscuous mode [ 131.887756][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.939185][ T4808] device veth1_macvtap entered promiscuous mode [ 131.992640][ T4808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.013954][ T4991] loop2: detected capacity change from 0 to 256 [ 132.022909][ T4808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.034137][ T4808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.045129][ T4808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.059233][ T4808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.070758][ T4808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.080988][ T4808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.094348][ T4808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.105945][ T4808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.132913][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.152261][ T26] audit: type=1800 audit(1718881734.622:636): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=1048606 res=0 errno=0 [ 132.154877][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.193928][ T4991] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 132.210050][ T4991] FAT-fs (loop2): Filesystem has been set read-only [ 132.248397][ T4808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.286554][ T4808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.317950][ T3529] Bluetooth: hci5: sending frame failed (-49) [ 132.340350][ T4808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.392278][ T4808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.402396][ T4808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.414338][ T4808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.424456][ T4808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.435237][ T4808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.455492][ T4808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.471798][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.481726][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.503427][ T4808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.541589][ T4808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.647226][ T5008] loop0: detected capacity change from 0 to 64 [ 132.667494][ T4808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.715060][ T4808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.920824][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.959486][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.684374][ T3569] Bluetooth: hci1: command 0x0419 tx timeout [ 133.766338][ T5015] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 133.815896][ T4051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.835902][ T4051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.880503][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.925579][ T4051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.942485][ T5018] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.950252][ T4051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.972856][ T5019] loop0: detected capacity change from 0 to 2048 [ 133.989724][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.065130][ T5021] loop3: detected capacity change from 0 to 16 [ 134.130518][ T5021] erofs: (device loop3): mounted with root inode @ nid 36. [ 134.138513][ T5022] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.277909][ T5012] loop1: detected capacity change from 0 to 32768 [ 134.360635][ T3569] Bluetooth: hci5: command 0x1003 tx timeout [ 134.366822][ T3529] Bluetooth: hci5: sending frame failed (-49) [ 134.397400][ T5012] XFS (loop1): Mounting V5 Filesystem [ 134.721200][ T5012] XFS (loop1): Ending clean mount [ 134.875607][ T3526] XFS (loop1): Unmounting Filesystem [ 134.932484][ T5039] loop0: detected capacity change from 0 to 65536 [ 135.049609][ T5039] XFS (loop0): Mounting V5 Filesystem [ 135.101515][ T5039] XFS (loop0): Ending clean mount [ 135.118816][ T5039] XFS (loop0): Quotacheck needed: Please wait. [ 135.220581][ T4351] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.234681][ T5039] XFS (loop0): Quotacheck: Done. [ 135.508668][ T5068] loop1: detected capacity change from 0 to 16 [ 135.816536][ T5066] loop3: detected capacity change from 0 to 1024 [ 136.399892][ T4351] usb 3-1: Using ep0 maxpacket: 8 [ 136.427518][ T5068] erofs: (device loop1): mounted with root inode @ nid 36. [ 136.439870][ T3531] XFS (loop0): Unmounting Filesystem [ 136.446270][ T3568] Bluetooth: hci5: command 0x1001 tx timeout [ 136.456425][ T3529] Bluetooth: hci5: sending frame failed (-49) [ 136.481012][ T5066] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.541399][ T4351] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.566553][ T4351] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.585906][ T4351] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 136.595837][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.775780][ T26] audit: type=1326 audit(1718881739.252:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3572b4cf29 code=0x0 [ 136.900744][ T5074] loop1: detected capacity change from 0 to 32768 [ 136.939562][ T5074] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5074) [ 136.978911][ T5079] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.003983][ T5074] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 137.015545][ T5074] BTRFS info (device loop1): using free space tree [ 137.022322][ T5074] BTRFS info (device loop1): has skinny extents [ 137.050312][ T5074] BTRFS info (device loop1): enabling ssd optimizations [ 137.091493][ T4351] uclogic 0003:28BD:0075.0006: unknown main item tag 0x0 [ 137.098596][ T4351] uclogic 0003:28BD:0075.0006: unknown main item tag 0x0 [ 137.115541][ T4351] uclogic 0003:28BD:0075.0006: unknown main item tag 0x4 [ 137.138225][ T4351] uclogic 0003:28BD:0075.0006: unknown main item tag 0x0 [ 137.147836][ T4351] uclogic 0003:28BD:0075.0006: No inputs registered, leaving [ 137.161915][ T4351] uclogic 0003:28BD:0075.0006: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.2-1/input0 [ 137.350768][ T4344] usb 3-1: USB disconnect, device number 5 [ 137.881449][ T5106] loop1: detected capacity change from 0 to 512 [ 137.938970][ T5115] loop0: detected capacity change from 0 to 16 [ 137.953969][ T5106] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 137.993653][ T5106] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.1: missing EA_INODE flag [ 138.013794][ T5115] erofs: (device loop0): mounted with root inode @ nid 36. [ 138.055757][ T5115] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 138.065379][ T5106] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 2 err=-117 [ 138.110985][ T5106] EXT4-fs (loop1): 1 orphan inode deleted [ 138.116780][ T5106] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.150724][ T5120] loop2: detected capacity change from 0 to 1024 [ 138.260602][ T5122] loop0: detected capacity change from 0 to 2048 [ 138.315430][ T4051] hfsplus: b-tree write err: -5, ino 4 [ 138.374359][ T5123] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.404643][ T5112] loop3: detected capacity change from 0 to 40427 [ 138.439841][ T5125] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.502732][ T5112] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.520949][ T4626] Bluetooth: hci5: command 0x1009 tx timeout [ 138.642899][ T5112] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.717040][ T4808] attempt to access beyond end of device [ 138.717040][ T4808] loop3: rw=2049, want=45112, limit=40427 [ 138.816848][ T5139] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 139.221011][ T5152] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 139.262642][ T5152] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.636157][ T5159] loop3: detected capacity change from 0 to 256 [ 139.901424][ T5159] FAT-fs (loop3): Directory bread(block 64) failed [ 139.908300][ T5159] FAT-fs (loop3): Directory bread(block 65) failed [ 139.915600][ T5159] FAT-fs (loop3): Directory bread(block 66) failed [ 139.922357][ T5159] FAT-fs (loop3): Directory bread(block 67) failed [ 139.929444][ T5159] FAT-fs (loop3): Directory bread(block 68) failed [ 139.936176][ T5159] FAT-fs (loop3): Directory bread(block 69) failed [ 139.943274][ T5159] FAT-fs (loop3): Directory bread(block 70) failed [ 139.950553][ T5159] FAT-fs (loop3): Directory bread(block 71) failed [ 139.957760][ T5159] FAT-fs (loop3): Directory bread(block 72) failed [ 139.964500][ T5159] FAT-fs (loop3): Directory bread(block 73) failed [ 140.549480][ T5148] loop1: detected capacity change from 0 to 32768 [ 140.632326][ T5148] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5148) [ 140.738053][ T5148] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 140.758607][ T5148] BTRFS info (device loop1): using free space tree [ 140.790299][ T5148] BTRFS info (device loop1): has skinny extents [ 140.847704][ T5164] loop3: detected capacity change from 0 to 2048 [ 140.911406][ T5164] loop3: p3 < > p4 < > [ 140.915614][ T5164] loop3: partition table partially beyond EOD, truncated [ 140.947675][ T5164] loop3: p3 start 4284289 is beyond EOD, truncated [ 140.956692][ T5157] loop2: detected capacity change from 0 to 32768 [ 141.040644][ T5148] BTRFS info (device loop1): enabling ssd optimizations [ 141.064738][ T5162] loop0: detected capacity change from 0 to 32768 [ 141.100320][ T5157] XFS (loop2): Mounting V5 Filesystem [ 141.195388][ T5162] read_mapping_page failed! [ 141.230440][ T5162] ERROR: (device loop0): txCommit: [ 141.230440][ T5162] [ 141.256027][ T5157] XFS (loop2): Ending clean mount [ 141.339265][ T5157] XFS (loop2): Quotacheck needed: Please wait. [ 141.404748][ T5194] jfs_create: dtSearch returned -17 [ 141.454773][ T5194] ERROR: (device loop0): diFree: numfree > numinos [ 141.454773][ T5194] [ 141.467996][ T5196] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 141.670051][ T5157] XFS (loop2): Quotacheck: Done. [ 141.879530][ T3534] XFS (loop2): Unmounting Filesystem [ 141.956611][ T5209] loop0: detected capacity change from 0 to 1024 [ 141.991931][ T5210] loop1: detected capacity change from 0 to 256 [ 142.026279][ T5209] EXT4-fs (loop0): Ignoring removed orlov option [ 142.073214][ T26] audit: type=1800 audit(1718881744.552:638): pid=5210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=1048629 res=0 errno=0 [ 142.091146][ T5210] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 142.115427][ T5210] FAT-fs (loop1): Filesystem has been set read-only [ 142.156799][ T5209] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noinit_itable,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 142.926756][ T3535] Bluetooth: unknown link type 36 [ 143.200421][ T5215] loop3: detected capacity change from 0 to 32768 [ 143.250788][ T5215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5215) [ 143.367660][ T5215] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 143.407126][ T5215] BTRFS info (device loop3): using free space tree [ 143.428335][ T5215] BTRFS info (device loop3): has skinny extents [ 143.597999][ T5232] loop0: detected capacity change from 0 to 40427 [ 143.609174][ T5228] loop2: detected capacity change from 0 to 32768 [ 143.634429][ T5227] loop4: detected capacity change from 0 to 32768 [ 143.686732][ T5228] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5228) [ 143.713262][ T5232] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.769266][ T5227] read_mapping_page failed! [ 143.784670][ T5228] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 143.800360][ T5228] BTRFS info (device loop2): force zlib compression, level 3 [ 143.809028][ T5227] ERROR: (device loop4): txCommit: [ 143.809028][ T5227] [ 143.825492][ T5228] BTRFS info (device loop2): force clearing of disk cache [ 143.869810][ T5215] BTRFS info (device loop3): enabling ssd optimizations [ 143.906763][ T5228] BTRFS info (device loop2): setting nodatasum [ 143.924330][ T5228] BTRFS info (device loop2): allowing degraded mounts [ 143.925902][ T5256] jfs_create: dtSearch returned -17 [ 143.934700][ T5228] BTRFS info (device loop2): enabling disk space caching [ 143.944699][ T5228] BTRFS info (device loop2): disk space caching is enabled [ 143.952711][ T5256] ERROR: (device loop4): diFree: numfree > numinos [ 143.952711][ T5256] [ 143.967641][ T5228] BTRFS info (device loop2): has skinny extents [ 143.994123][ T5232] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.095664][ T3531] attempt to access beyond end of device [ 144.095664][ T3531] loop0: rw=2049, want=45104, limit=40427 [ 144.416203][ T5228] BTRFS info (device loop2): clearing free space tree [ 144.435580][ T5228] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.486832][ T5235] loop1: detected capacity change from 0 to 32768 [ 144.500483][ T5228] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.587783][ T5235] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5235) [ 144.646420][ T5235] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 144.674737][ T5235] BTRFS info (device loop1): force clearing of disk cache [ 144.686363][ T5235] BTRFS info (device loop1): using free space tree [ 144.693415][ T5235] BTRFS info (device loop1): has skinny extents [ 145.000458][ T4772] Bluetooth: hci0: command 0x0409 tx timeout [ 145.012048][ T5293] loop3: detected capacity change from 0 to 16 [ 145.077547][ T5293] erofs: (device loop3): mounted with root inode @ nid 36. [ 145.246252][ T5235] BTRFS info (device loop1): enabling ssd optimizations [ 145.255404][ T5235] BTRFS info (device loop1): clearing free space tree [ 146.191078][ T5235] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.207155][ T5310] loop0: detected capacity change from 0 to 1024 [ 146.214112][ T5235] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.274485][ T3724] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.317680][ T5310] EXT4-fs (loop0): Ignoring removed orlov option [ 146.347240][ T5235] BTRFS info (device loop1): creating free space tree [ 146.383399][ T5235] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.397732][ T5310] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noinit_itable,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 146.408401][ T5235] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.552463][ T5332] loop4: detected capacity change from 0 to 256 [ 146.640355][ T4769] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.032329][ T4769] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.049754][ T4769] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.066815][ T4769] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.240596][ T4769] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 147.259268][ T4769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.267694][ T4769] usb 4-1: Product: syz [ 147.278175][ T4769] usb 4-1: Manufacturer: syz [ 147.282986][ T4769] usb 4-1: SerialNumber: syz [ 147.543725][ T4769] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 147.748760][ T4769] usb 4-1: USB disconnect, device number 5 [ 147.762358][ T4769] usblp0: removed [ 148.032673][ T5330] sched: RT throttling activated [ 148.105350][ T5332] FAT-fs (loop4): Directory bread(block 64) failed [ 148.112339][ T5332] FAT-fs (loop4): Directory bread(block 65) failed [ 148.119481][ T5332] FAT-fs (loop4): Directory bread(block 66) failed [ 148.126347][ T5332] FAT-fs (loop4): Directory bread(block 67) failed [ 148.133480][ T5332] FAT-fs (loop4): Directory bread(block 68) failed [ 148.140460][ T5332] FAT-fs (loop4): Directory bread(block 69) failed [ 148.147924][ T5332] FAT-fs (loop4): Directory bread(block 70) failed [ 148.154822][ T5332] FAT-fs (loop4): Directory bread(block 71) failed [ 148.161909][ T5332] FAT-fs (loop4): Directory bread(block 72) failed [ 148.168562][ T5332] FAT-fs (loop4): Directory bread(block 73) failed [ 148.402522][ T3578] Bluetooth: hci5: command 0x1003 tx timeout [ 148.408718][ T3529] Bluetooth: hci5: sending frame failed (-49) [ 148.593340][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.621041][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.031228][ T5368] loop4: detected capacity change from 0 to 1024 [ 150.135889][ T5368] EXT4-fs (loop4): Ignoring removed orlov option [ 150.164575][ T5366] loop3: detected capacity change from 0 to 4096 [ 150.201458][ T5368] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noinit_itable,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 150.267147][ T5366] ntfs3: Unknown parameter 'iocݩ et' [ 150.309640][ T5362] loop1: detected capacity change from 0 to 65536 [ 150.427121][ T5349] loop0: detected capacity change from 0 to 40427 [ 150.440277][ T4769] Bluetooth: hci5: command 0x1001 tx timeout [ 150.446968][ T3529] Bluetooth: hci5: sending frame failed (-49) [ 150.456987][ T5362] XFS (loop1): Mounting V5 Filesystem [ 150.490757][ T5349] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.565984][ T5362] XFS (loop1): Ending clean mount [ 150.583871][ T5387] loop3: detected capacity change from 0 to 256 [ 150.605321][ T5362] XFS (loop1): Quotacheck needed: Please wait. [ 150.856653][ T5387] FAT-fs (loop3): Directory bread(block 64) failed [ 150.863714][ T5387] FAT-fs (loop3): Directory bread(block 65) failed [ 150.872570][ T5387] FAT-fs (loop3): Directory bread(block 66) failed [ 150.880784][ T5387] FAT-fs (loop3): Directory bread(block 67) failed [ 150.889598][ T5387] FAT-fs (loop3): Directory bread(block 68) failed [ 150.896419][ T5387] FAT-fs (loop3): Directory bread(block 69) failed [ 150.903683][ T5387] FAT-fs (loop3): Directory bread(block 70) failed [ 150.911060][ T5387] FAT-fs (loop3): Directory bread(block 71) failed [ 150.918528][ T5387] FAT-fs (loop3): Directory bread(block 72) failed [ 150.925317][ T5387] FAT-fs (loop3): Directory bread(block 73) failed [ 151.478694][ T5362] XFS (loop1): Quotacheck: Done. [ 151.498931][ T5349] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.698240][ T3531] attempt to access beyond end of device [ 151.698240][ T3531] loop0: rw=2049, want=45104, limit=40427 [ 152.520422][ T3578] Bluetooth: hci5: command 0x1009 tx timeout [ 152.589234][ T5394] loop3: detected capacity change from 0 to 2048 [ 152.648365][ T3526] XFS (loop1): Unmounting Filesystem [ 152.670333][ T5394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.393978][ T5400] loop3: detected capacity change from 0 to 32768 [ 153.429406][ T5398] loop4: detected capacity change from 0 to 40427 [ 153.469973][ T5400] XFS (loop3): Mounting V5 Filesystem [ 153.515912][ T5424] loop0: detected capacity change from 0 to 24 [ 153.534886][ T5398] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.595535][ T5400] XFS (loop3): Ending clean mount [ 153.664773][ T5424] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 153.672182][ T4808] XFS (loop3): Unmounting Filesystem [ 153.862110][ T5398] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.940015][ T5424] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 154.010779][ T4566] attempt to access beyond end of device [ 154.010779][ T4566] loop4: rw=2049, want=45112, limit=40427 [ 154.377860][ T5440] loop3: detected capacity change from 0 to 256 [ 156.241557][ T5440] FAT-fs (loop3): Directory bread(block 64) failed [ 156.248280][ T5440] FAT-fs (loop3): Directory bread(block 65) failed [ 156.254959][ T5440] FAT-fs (loop3): Directory bread(block 66) failed [ 156.261529][ T5440] FAT-fs (loop3): Directory bread(block 67) failed [ 156.268277][ T5440] FAT-fs (loop3): Directory bread(block 68) failed [ 156.274916][ T5440] FAT-fs (loop3): Directory bread(block 69) failed [ 156.281587][ T5440] FAT-fs (loop3): Directory bread(block 70) failed [ 156.288274][ T5440] FAT-fs (loop3): Directory bread(block 71) failed [ 156.294983][ T5440] FAT-fs (loop3): Directory bread(block 72) failed [ 156.301522][ T5440] FAT-fs (loop3): Directory bread(block 73) failed [ 156.352011][ T5424] VFS: Lookup of 'file0' in romfs loop0 would have caused loop [ 157.297812][ T5452] loop4: detected capacity change from 0 to 128 [ 157.852305][ T5472] loop4: detected capacity change from 0 to 256 [ 160.000658][ T5458] loop3: detected capacity change from 0 to 32768 [ 160.175446][ T5458] XFS (loop3): Mounting V5 Filesystem [ 160.307725][ T5528] loop1: detected capacity change from 0 to 24 [ 160.347194][ T5458] XFS (loop3): Ending clean mount [ 160.433521][ T5528] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 160.439316][ T5458] XFS (loop3): Quotacheck needed: Please wait. [ 160.486084][ T5528] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 160.541856][ T5458] XFS (loop3): Quotacheck: Done. [ 160.581070][ T4808] XFS (loop3): Unmounting Filesystem [ 160.654692][ T5528] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 161.636207][ T5555] loop2: detected capacity change from 0 to 512 [ 161.845831][ T5532] loop4: detected capacity change from 0 to 32768 [ 161.958490][ T5532] XFS (loop4): Mounting V5 Filesystem [ 162.054399][ T5555] EXT4-fs (loop2): Test dummy encryption mode enabled [ 162.065035][ T5566] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.096376][ T5532] XFS (loop4): Ending clean mount [ 162.106254][ T5555] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 162.137262][ T5532] XFS (loop4): Quotacheck needed: Please wait. [ 162.156582][ T5555] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 162.252806][ T5555] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,inode_readahead_blks=0x0000000000200000,sb=0x0000000000000001,prjquota,usrquota,usrjquota=,nojournal_checksum,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 162.293901][ T5532] XFS (loop4): Quotacheck: Done. [ 162.330634][ T4626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.431122][ T4626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.520440][ T4626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.610489][ T3578] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.619612][ T5555] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 162.702959][ T5575] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 162.760418][ T3578] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.840441][ T3578] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.881275][ T4566] XFS (loop4): Unmounting Filesystem [ 162.891644][ T4769] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.970407][ T4626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.061018][ T4769] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.120382][ T4769] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.210718][ T5558] loop0: detected capacity change from 0 to 32768 [ 163.331469][ T4771] kernel write not supported for file 5609/task/5610/setgroups (pid: 4771 comm: kworker/0:14) [ 163.596504][ T5624] loop4: detected capacity change from 0 to 512 [ 163.737503][ T5630] syz-executor.2[5630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.737952][ T5630] syz-executor.2[5630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.898305][ T4343] kernel write not supported for file /5613/attr/keycreate (pid: 4343 comm: kworker/1:10) [ 164.177360][ T5629] loop1: detected capacity change from 0 to 64 [ 164.576809][ T5624] EXT4-fs (loop4): Test dummy encryption mode enabled [ 164.612630][ T5624] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz-executor.4: inline data xattr refers to an external xattr inode [ 164.639331][ T5624] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 164.710823][ T5624] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,inode_readahead_blks=0x0000000000200000,sb=0x0000000000000001,prjquota,usrquota,usrjquota=,nojournal_checksum,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 164.962109][ T3578] kernel write not supported for file 5649/task/5651/setgroups (pid: 3578 comm: kworker/0:7) [ 164.992087][ T5624] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 165.081895][ T5657] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.135729][ T5657] loop3: detected capacity change from 0 to 1024 [ 165.143902][ T5667] loop1: detected capacity change from 0 to 512 [ 165.196484][ T5667] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.196588][ T5657] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.214105][ T5657] EXT4-fs (loop3): Ignoring removed orlov option [ 165.232058][ T5657] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,noauto_da_alloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 165.291580][ T5667] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 165.306251][ T5667] EXT4-fs (loop1): 1 truncate cleaned up [ 165.339340][ T5667] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 165.470606][ T5657] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 165.503875][ T5680] loop0: detected capacity change from 0 to 256 [ 165.734752][ T5684] loop1: detected capacity change from 0 to 64 [ 167.544278][ T5673] loop4: detected capacity change from 0 to 32768 [ 167.590006][ T5704] loop3: detected capacity change from 0 to 16 [ 167.650339][ T3520] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.696461][ T5704] erofs: (device loop3): mounted with root inode @ nid 36. [ 169.120271][ T3520] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 169.129417][ T3520] usb 3-1: config 1 has no interface number 1 [ 169.191413][ T3520] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 169.256162][ T3520] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 169.580360][ T3520] usb 3-1: string descriptor 0 read error: -22 [ 169.586749][ T3520] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.636019][ T3520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.652667][ T5728] loop4: detected capacity change from 0 to 64 [ 169.715650][ T3520] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 169.880703][ T3520] usb 3-1: USB disconnect, device number 6 [ 169.999737][ T5733] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 170.056106][ T5736] loop4: detected capacity change from 0 to 128 [ 170.089293][ T5730] loop2: detected capacity change from 0 to 1024 [ 170.118392][ T5723] loop1: detected capacity change from 0 to 32768 [ 170.149023][ T5724] loop3: detected capacity change from 0 to 32768 [ 170.176767][ T5730] EXT4-fs (loop2): Test dummy encryption mode enabled [ 170.194897][ T5730] EXT4-fs (loop2): Ignoring removed orlov option [ 170.204502][ T5723] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5723) [ 170.219500][ T5736] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 170.269536][ T5736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.287308][ T5726] loop0: detected capacity change from 0 to 40427 [ 170.288080][ T5723] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 170.307085][ T5730] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,noauto_da_alloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 170.344987][ T5726] F2FS-fs (loop0): Invalid segment count (0) [ 170.355134][ T5726] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 170.366760][ T5723] BTRFS info (device loop1): using free space tree [ 170.392114][ T5726] F2FS-fs (loop0): invalid crc value [ 170.394196][ T5723] BTRFS info (device loop1): has skinny extents [ 170.432073][ T5726] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.579479][ T5726] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 170.589176][ T5726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 170.649287][ T5723] BTRFS info (device loop1): enabling ssd optimizations [ 170.662894][ T3531] attempt to access beyond end of device [ 170.662894][ T3531] loop0: rw=2049, want=45104, limit=40427 [ 170.836171][ T5765] loop4: detected capacity change from 0 to 16 [ 170.957494][ T5765] erofs: (device loop4): mounted with root inode @ nid 36. [ 172.554474][ T3643] Bluetooth: hci6: Frame reassembly failed (-84) [ 172.565627][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 172.883747][ T5796] loop4: detected capacity change from 0 to 1024 [ 172.966497][ T5796] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 172.982936][ T5798] loop2: detected capacity change from 0 to 16 [ 172.989324][ T5796] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 173.000490][ T3578] Bluetooth: hci5: command 0x0409 tx timeout [ 173.036978][ T5798] erofs: (device loop2): mounted with root inode @ nid 36. [ 173.059050][ T5796] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 173.078648][ T5796] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,lazytime,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 173.243552][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.257628][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.268312][ T5768] device bridge_slave_0 entered promiscuous mode [ 173.279904][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.289989][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.305947][ T5768] device bridge_slave_1 entered promiscuous mode [ 173.435000][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.474872][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.627927][ T5768] team0: Port device team_slave_0 added [ 173.664132][ T5768] team0: Port device team_slave_1 added [ 173.733234][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.766746][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.773421][ T5829] fscrypt (sda1, inode 1959): Mutually exclusive encryption flags (0x1a) [ 173.784537][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.820488][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.834814][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.842952][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.876186][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.911813][ T5825] device macsec0 entered promiscuous mode [ 173.927993][ T5825] device macsec1 entered promiscuous mode [ 174.024391][ T5768] device hsr_slave_0 entered promiscuous mode [ 174.052939][ T5768] device hsr_slave_1 entered promiscuous mode [ 174.086690][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.096836][ T5768] Cannot create hsr debugfs directory [ 174.115702][ T5835] loop2: detected capacity change from 0 to 1024 [ 174.164981][ T5823] loop4: detected capacity change from 0 to 32768 [ 174.182308][ T5835] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 174.200203][ T5835] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 174.223199][ T5835] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 174.247845][ T5823] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5823) [ 174.272242][ T5835] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,lazytime,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 174.304728][ T5844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.339817][ T5768] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.370670][ T5823] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 174.389704][ T5823] BTRFS info (device loop4): using free space tree [ 174.414296][ T5823] BTRFS info (device loop4): has skinny extents [ 174.474078][ T5768] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.519886][ T5823] BTRFS info (device loop4): enabling ssd optimizations [ 174.599894][ T5870] fscrypt (sda1, inode 1959): Mutually exclusive encryption flags (0x1a) [ 174.624804][ T4769] Bluetooth: hci6: command 0x1003 tx timeout [ 174.637721][ T3535] Bluetooth: hci6: sending frame failed (-49) [ 174.657645][ T5768] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.028616][ T5874] loop2: detected capacity change from 0 to 65536 [ 175.122497][ T4625] Bluetooth: hci5: command 0x041b tx timeout [ 175.196021][ T5768] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.224942][ T5848] loop1: detected capacity change from 0 to 32768 [ 175.239929][ T5874] XFS (loop2): Mounting V5 Filesystem [ 175.299248][ T5874] XFS (loop2): Ending clean mount [ 175.312191][ T5874] XFS (loop2): Quotacheck needed: Please wait. [ 175.406782][ T5848] XFS (loop1): Mounting V5 Filesystem [ 175.451794][ T5874] XFS (loop2): Quotacheck: Done. [ 175.479290][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.661503][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.664982][ T5848] XFS (loop1): Ending clean mount [ 175.677713][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.688273][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.285861][ T3526] XFS (loop1): Unmounting Filesystem [ 176.405476][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.505970][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.577233][ T5768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.595555][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.629582][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.637553][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.653185][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.670206][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.678981][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.679837][ T4769] Bluetooth: hci6: command 0x1001 tx timeout [ 176.686446][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.710138][ T3535] Bluetooth: hci6: sending frame failed (-49) [ 176.713453][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.726181][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.734972][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.742107][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.750078][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.758927][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.767970][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.776723][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.785340][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.795324][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.803936][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.813522][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.822813][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.837331][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.849664][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.857846][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.866919][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.885023][ T3534] XFS (loop2): Unmounting Filesystem [ 176.978198][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.039623][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.047254][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.080869][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.100011][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.169539][ T4771] Bluetooth: hci5: command 0x040f tx timeout [ 177.176879][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.200834][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.212470][ T5768] device veth0_vlan entered promiscuous mode [ 177.229184][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.238775][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.266701][ T5768] device veth1_vlan entered promiscuous mode [ 177.357115][ T5768] device veth0_macvtap entered promiscuous mode [ 177.382197][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.392506][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.420338][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.450579][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.472173][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.493844][ T5768] device veth1_macvtap entered promiscuous mode [ 177.582271][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.599633][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.629233][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.673903][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.683150][ T5900] loop4: detected capacity change from 0 to 32768 [ 177.693218][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.704387][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.714529][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.725617][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.736322][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.746933][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.759379][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.770068][ T5904] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.795622][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.810695][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.820414][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.838819][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.852174][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.865275][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.877182][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.888127][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.898679][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.908586][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.919317][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.929191][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.942120][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.954279][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.970123][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.000075][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.032734][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.060324][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.089440][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.102955][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.108769][ T5910] loop1: detected capacity change from 0 to 512 [ 178.196004][ T5910] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.256156][ T5917] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.266734][ T5914] 9p: Unknown access argument client" [ 178.267086][ T5910] EXT4-fs (loop1): 1 truncate cleaned up [ 178.284464][ T4019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.301640][ T5910] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 178.307457][ T4019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.338308][ T3724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.360241][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.386733][ T3724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.406858][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.586457][ T5932] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.759259][ T3578] Bluetooth: hci6: command 0x1009 tx timeout [ 178.927783][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.950363][ T5948] syz-executor.2[5948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.950821][ T5948] syz-executor.2[5948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.066880][ T4351] kernel write not supported for file /5934/attr/keycreate (pid: 4351 comm: kworker/1:18) [ 179.652045][ T3578] Bluetooth: hci5: command 0x0419 tx timeout [ 179.835176][ T5952] 9p: Unknown access argument client" [ 179.852859][ T5956] loop2: detected capacity change from 0 to 512 [ 179.904077][ T5956] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.950162][ T5956] EXT4-fs (loop2): 1 truncate cleaned up [ 179.955847][ T5956] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 180.220929][ T5944] loop4: detected capacity change from 0 to 40427 [ 180.253476][ T5972] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.266326][ T5944] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 180.276350][ T5944] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.307132][ T5944] F2FS-fs (loop4): invalid crc value [ 180.327163][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.344597][ T5944] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.415847][ T5944] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.424008][ T5944] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.446028][ T26] audit: type=1800 audit(1718881782.924:639): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 180.478830][ T5944] attempt to access beyond end of device [ 180.478830][ T5944] loop4: rw=16812033, want=78688, limit=40427 [ 180.525095][ T4566] attempt to access beyond end of device [ 180.525095][ T4566] loop4: rw=2049, want=45104, limit=40427 [ 180.739200][ T5996] loop1: detected capacity change from 0 to 512 [ 180.792543][ T5996] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.815123][ T5996] EXT4-fs (loop1): 1 truncate cleaned up [ 180.822253][ T5996] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 180.955291][ T5999] 9p: Unknown access argument client" [ 181.087851][ T4351] Bluetooth: hci3: command 0x0406 tx timeout [ 181.093965][ T4351] Bluetooth: hci0: command 0x0406 tx timeout [ 181.132730][ T6007] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.195483][ T6009] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.265726][ T6009] loop1: detected capacity change from 0 to 1024 [ 181.338187][ T6009] EXT4-fs (loop1): Test dummy encryption mode enabled [ 181.347364][ T6009] EXT4-fs (loop1): Ignoring removed orlov option [ 181.385570][ T6009] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,noauto_da_alloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 182.042209][ T6017] usb usb9: usbfs: process 6017 (syz-executor.1) did not claim interface 0 before use [ 182.064213][ T6017] usb usb9: selecting invalid altsetting 21783 [ 182.873767][ T6027] loop3: detected capacity change from 0 to 2048 [ 182.937028][ T6027] NILFS (loop3): invalid segment: Magic number mismatch [ 182.954101][ T6027] NILFS (loop3): trying rollback from an earlier position [ 182.975497][ T6027] NILFS (loop3): recovery complete [ 183.004227][ T6032] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.284504][ T6031] loop4: detected capacity change from 0 to 32768 [ 183.371992][ T6031] XFS (loop4): Mounting V5 Filesystem [ 183.450000][ T6031] XFS (loop4): Ending clean mount [ 183.518616][ T4566] XFS (loop4): Unmounting Filesystem [ 183.812249][ T6047] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.275979][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.282331][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.861112][ T4625] Bluetooth: hci4: command 0x0409 tx timeout [ 214.340867][ T3578] Bluetooth: hci6: command 0x0409 tx timeout [ 214.980769][ T4625] Bluetooth: hci7: command 0x0409 tx timeout [ 215.940182][ T3578] Bluetooth: hci4: command 0x041b tx timeout [ 216.179917][ T3578] Bluetooth: hci8: command 0x0409 tx timeout [ 216.269857][ T3578] Bluetooth: hci9: command 0x0409 tx timeout [ 216.419866][ T3578] Bluetooth: hci6: command 0x041b tx timeout [ 217.059789][ T4625] Bluetooth: hci7: command 0x041b tx timeout [ 218.019068][ T3578] Bluetooth: hci4: command 0x040f tx timeout [ 218.258962][ T3578] Bluetooth: hci8: command 0x041b tx timeout [ 218.339050][ T3578] Bluetooth: hci9: command 0x041b tx timeout [ 218.498869][ T3578] Bluetooth: hci6: command 0x040f tx timeout [ 219.138985][ T4769] Bluetooth: hci7: command 0x040f tx timeout [ 220.098158][ T4769] Bluetooth: hci4: command 0x0419 tx timeout [ 220.338286][ T4769] Bluetooth: hci8: command 0x040f tx timeout [ 220.418036][ T3578] Bluetooth: hci9: command 0x040f tx timeout [ 220.577761][ T3578] Bluetooth: hci6: command 0x0419 tx timeout [ 221.218045][ T3578] Bluetooth: hci7: command 0x0419 tx timeout [ 222.417038][ T3578] Bluetooth: hci8: command 0x0419 tx timeout [ 222.497268][ T3578] Bluetooth: hci9: command 0x0419 tx timeout [ 237.290951][ T3578] Bluetooth: hci2: command 0x0406 tx timeout [ 247.534369][ T4769] Bluetooth: hci1: command 0x0406 tx timeout [ 255.684660][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.691005][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.350485][ T3578] Bluetooth: hci10: command 0x0409 tx timeout [ 279.508174][ T3578] Bluetooth: hci11: command 0x0409 tx timeout [ 279.988382][ T3520] Bluetooth: hci12: command 0x0409 tx timeout [ 281.187630][ T3578] Bluetooth: hci14: command 0x0409 tx timeout [ 281.187879][ T4351] Bluetooth: hci13: command 0x0409 tx timeout [ 281.437537][ T3578] Bluetooth: hci10: command 0x041b tx timeout [ 281.587571][ T3578] Bluetooth: hci11: command 0x041b tx timeout [ 282.067246][ T3578] Bluetooth: hci12: command 0x041b tx timeout [ 283.266524][ T4769] Bluetooth: hci13: command 0x041b tx timeout [ 283.272769][ T4769] Bluetooth: hci14: command 0x041b tx timeout [ 283.506262][ T4769] Bluetooth: hci10: command 0x040f tx timeout [ 283.666124][ T4769] Bluetooth: hci11: command 0x040f tx timeout [ 284.146160][ T3578] Bluetooth: hci12: command 0x040f tx timeout [ 285.345609][ T4769] Bluetooth: hci14: command 0x040f tx timeout [ 285.352582][ T4769] Bluetooth: hci13: command 0x040f tx timeout [ 285.585259][ T4769] Bluetooth: hci10: command 0x0419 tx timeout [ 285.745221][ T4769] Bluetooth: hci11: command 0x0419 tx timeout [ 286.234877][ T4769] Bluetooth: hci12: command 0x0419 tx timeout [ 287.424356][ T4769] Bluetooth: hci13: command 0x0419 tx timeout [ 287.430540][ T4769] Bluetooth: hci14: command 0x0419 tx timeout [ 293.581523][ T4351] Bluetooth: hci5: command 0x0406 tx timeout [ 317.097234][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.103602][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.532272][ T4351] Bluetooth: hci4: command 0x0406 tx timeout [ 334.544364][ T4351] Bluetooth: hci6: command 0x0406 tx timeout [ 339.652626][ T21] Bluetooth: hci7: command 0x0406 tx timeout [ 339.658759][ T21] Bluetooth: hci8: command 0x0406 tx timeout [ 339.666785][ T21] Bluetooth: hci9: command 0x0406 tx timeout [ 340.132310][ T27] INFO: task syz-executor.1:6019 blocked for more than 143 seconds. [ 340.140331][ T27] Not tainted 5.15.161-syzkaller #0 [ 340.156104][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.167261][ T27] task:syz-executor.1 state:D stack:26808 pid: 6019 ppid: 3526 flags:0x00004006 2024/06/20 11:12:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 340.183117][ T27] Call Trace: [ 340.208746][ T27] [ 340.211876][ T27] __schedule+0x12c4/0x45b0 [ 340.241325][ T27] ? release_firmware_map_entry+0x190/0x190 [ 340.247612][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 340.272416][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 340.277963][ T27] schedule+0x11b/0x1f0 [ 340.292176][ T27] schedule_preempt_disabled+0xf/0x20 [ 340.297600][ T27] __mutex_lock_common+0xe34/0x25a0 [ 340.312143][ T27] ? ppp_ioctl+0x6f4/0x1cd0 [ 340.316780][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 340.322004][ T27] ? xdp_rxq_info_reg+0xe3/0x2f0 [ 340.337428][ T27] ? alloc_netdev_mqs+0x9bb/0xc10 [ 340.352136][ T27] mutex_lock_nested+0x17/0x20 [ 340.356947][ T27] ppp_ioctl+0x6f4/0x1cd0 [ 340.361313][ T27] ? ppp_poll+0x240/0x240 [ 340.382090][ T27] ? __fget_files+0x413/0x480 [ 340.386836][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 340.391798][ T27] ? security_file_ioctl+0x7d/0xa0 [ 340.399395][ T27] ? ppp_poll+0x240/0x240 [ 340.403893][ T27] __se_sys_ioctl+0xf1/0x160 [ 340.408507][ T27] do_syscall_64+0x3b/0xb0 [ 340.422375][ T27] ? clear_bhb_loop+0x15/0x70 [ 340.427105][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.442188][ T27] RIP: 0033:0x7ffb6bd33f29 [ 340.446660][ T27] RSP: 002b:00007ffb6a8ad0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.472144][ T27] RAX: ffffffffffffffda RBX: 00007ffb6be6af80 RCX: 00007ffb6bd33f29 [ 340.480356][ T27] RDX: 0000000020001439 RSI: 00000000c004743e RDI: 0000000000000003 [