last executing test programs: 1m3.196102865s ago: executing program 4 (id=54): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1d}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 1m2.725038933s ago: executing program 4 (id=59): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x2, 0x0, 0x7d, 0x15, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x8, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb6, 0x11e, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x0, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a], [0x63, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x200009, 0x0, 0x9, 0x2, 0xff, 0x0, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x0, 0x3, 0x9f5, 0xfffffffe, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x63, 0x0, 0x0, 0x0, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0xddda, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0x9, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0xa, 0x0, @SEQ_NOTEON=@note=0x3a, 0x7f, 0x0, 0xfb}) 1m2.387504746s ago: executing program 4 (id=62): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x4e24, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffb}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@loopback={0x300}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 1m2.052996934s ago: executing program 4 (id=68): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3c1uG0UcAPD/bj6bliaVOPBxiQCJSIikSVugEkhEXDjQEz1wJIrdEtVpUGIkWkV8CMQNJBAPAAfgETjCgXeAM3CAShHKgZSb0dq7jhvbaZPadZX8ftLIMztrz6zHs15PZicBHFvTEfFqRAxFxNmImMy3p3mIjxoh229ne3P5v+3N5SRqtTf/SSLJtxWvleSPJ/MXmEkj0k+TeLJDuRs3bl5bqlTK63l6rrr67tzGjZvPr6wuXS1fLV9feOHc+QsXXrq48GLPjnVrNfn8me/f+PPLz0pf/fr3T1NZfU/lea3H0SvTMd18T/a62OvCBmy8JZ4MD7AiAADsK82v/Yfr1/+TMRS7F2+T8cUvA60cAAAA0BO1WvEIAAAAHF2J3/4AAABwxBXzAHa2N5eLMMDpCDxgW4sRMdVo/9t5aOQMN+/pHYkYGe9T+dMR8fr4pYUsRJ/uwwYAAAA4zn5ebCz81z7+l8ZjLfudiIiJYm2/Hprek24f/0lv9bhIWmwtRrwcEbfbxv/SYpepoTz1SH2ocCS5slIpn42I0xExEyNjWXp+nzI+eOraD93yWsf/vvnjrfms/Oxxd4/01vDYnc8pLVWX7ueY2bX1ccQTw53aP2mO/7auk3kYb6/svNItL2v/rL2L0N7+9FPt24hnO/b/3ZVLk/3XZ52rnw/m8rPCWHsZv5/67pNu5bf2/yxk5Rd/C6D/sv4/sX/719fJba7Xu3HwMn7899Jv3fLu3v6dz/+jyeV6BUfzbe8vVavr8xGjSWPLHdt9mpqK96N4v7L2n3m68/d/cf2X5N/9p1vWhz6I1z48c7lbnv4/WFn7lw7U/w8eeWfi8Zlu5d9b/z9fr0zxIq7/7u5eG2jQ9QQAAAAAAACgN9L63L4knW3G03R2tjHP99GYSCtrG9Xnrqy9d73UmAM4FSNpMf9zsmU+6HzjNvJmemFP+lxEnImIrydP1NOzy2uV0qAPHgAAAI6Jk11+/2f+OszNHgAAAMDDaWrQFQAAAAD6zu9/AAAAONLuZ13/Snm9+BdBh3y6iMjhIkP5B+9hqc/RiwzwpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/B8AAP//91C79Q==") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0) 1m1.196694682s ago: executing program 4 (id=79): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c402, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100001800400"], 0x28}}, 0x0) 59.848624418s ago: executing program 4 (id=85): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x24) 59.297065479s ago: executing program 32 (id=85): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x24) 53.640544599s ago: executing program 5 (id=112): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) unshare(0x20000400) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r2, 0x0, 0x0}) 52.911436828s ago: executing program 5 (id=114): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x1a4, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x154, 0x1, [@m_sample={0x150, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x0, 0x6, 0xa}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x674, 0x20000000, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800}]}, {0xc1, 0x6, "9200fd45cfbfaf345fb3a8a997749fefa053a1e631f289e2733a34bfda3a1983d7027974d46e922209e9f418398e634151458aec78c3e590819e1ab74e5f08ce9f128c78176c6afb718af7f892cc43aa236ae8553e2bcb9475712e849a72c8618a556ea37252caba7ed994f095c56da51cd5d78c3a9aeb9b782ad180c98a44e20973f69e8f22bb71a2cc45b0df0fd876caa6827c38ba0bd9731585a5d2054dde461d79f8ad529bef9fe86f8f1d6b990c101919ac92fb4cd6cd1cd38b8a"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x68, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200400d0}, 0x40) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 49.429979323s ago: executing program 5 (id=132): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 49.075335257s ago: executing program 5 (id=136): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000340), 0x0}, 0x20) 48.396656773s ago: executing program 5 (id=138): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 45.421703871s ago: executing program 1 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="2c00238008"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) 40.208440049s ago: executing program 1 (id=164): connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x4000, 0x3, 0x5, 0x0, 0x0, "3eccd8f9d20500005a1a320900"}) 38.862380715s ago: executing program 1 (id=171): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) 38.535524679s ago: executing program 1 (id=172): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = syz_io_uring_setup(0x10e, &(0x7f00000003c0)={0x0, 0x8380, 0x0, 0x0, 0x805}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0xa8}) io_uring_enter(r0, 0x3516, 0xdbaa, 0x0, 0x0, 0x0) 36.580753683s ago: executing program 1 (id=178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000c40)="94b1942b892f", 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0x1}], 0x4) 31.2203529s ago: executing program 0 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) 30.332687023s ago: executing program 0 (id=217): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae96"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$cdc_ncm(0x6, 0x94, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a4400001020301090282000201042004090400000102dd50b14ad3a19e0d0000052406000105240006000d240f0106000000020006000606241a05ed0d05241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 10.428842539s ago: executing program 5 (id=138): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 7.233495893s ago: executing program 1 (id=178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000c40)="94b1942b892f", 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0x1}], 0x4) 3.728245457s ago: executing program 0 (id=217): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae96"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$cdc_ncm(0x6, 0x94, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a4400001020301090282000201042004090400000102dd50b14ad3a19e0d0000052406000105240006000d240f0106000000020006000606241a05ed0d05241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.669265753s ago: executing program 2 (id=303): syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0xce1c, 0x10100}, &(0x7f0000000100), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) 3.478109165s ago: executing program 3 (id=305): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x1fd}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3.318850344s ago: executing program 2 (id=307): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.197410075s ago: executing program 2 (id=308): r0 = syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c020002"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x442}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000500)={0x40, 0x17}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0}) 2.659865008s ago: executing program 6 (id=311): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r0, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) 2.487876034s ago: executing program 6 (id=312): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) 2.403040362s ago: executing program 3 (id=313): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141b42, 0xb) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.131183863s ago: executing program 6 (id=314): r0 = syz_io_uring_setup(0xc17, &(0x7f0000000140)={0x0, 0x3ae7, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x80053c) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.88769147s ago: executing program 0 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.732301073s ago: executing program 3 (id=316): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eee, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.292538411s ago: executing program 6 (id=317): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/sockcreate\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 1.24823075s ago: executing program 2 (id=318): socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x3406}, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.124806248s ago: executing program 3 (id=319): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) write$binfmt_script(r1, &(0x7f0000000180), 0xb) copy_file_range(r1, &(0x7f0000000080), r0, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) 875.341865ms ago: executing program 0 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, 0x0, 0x0) 798.984976ms ago: executing program 6 (id=321): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r2 = dup(r1) read(r2, &(0x7f0000000040), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 691.616427ms ago: executing program 3 (id=322): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)) 456.610127ms ago: executing program 2 (id=323): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file3\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@noinit_itable}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mknod$loop(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200, 0x1) 455.977714ms ago: executing program 0 (id=324): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000100)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@noblock_validity}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x6995, 0x500000001, 0x8000000000000001, 0x8}) 383.398653ms ago: executing program 6 (id=325): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) 79.043734ms ago: executing program 3 (id=326): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r1, &(0x7f0000000cc0)=""/144, 0x90) 0s ago: executing program 2 (id=327): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x5599, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) lseek(r0, 0x100000000, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) kernel console output (not intermixed with test programs): [ 99.930776][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.943213][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.960753][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.977109][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.016925][ T5831] veth1_macvtap: entered promiscuous mode [ 100.036511][ T5829] veth0_macvtap: entered promiscuous mode [ 100.075397][ T5829] veth1_macvtap: entered promiscuous mode [ 100.086067][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.099257][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.109768][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.120624][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.131371][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.151524][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.163572][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.173981][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.186501][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.195247][ T5949] lo: entered promiscuous mode [ 100.219926][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.231348][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.244717][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.255346][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.267529][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.278127][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.288061][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.298575][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.312890][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.320528][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.332631][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.342641][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.353182][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.363074][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.373598][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.385590][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.397489][ T5949] lo: entered allmulticast mode [ 100.403136][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.413794][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.423701][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.437747][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.447903][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.458790][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.469063][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.479558][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.489405][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.499970][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.511777][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.530294][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.542829][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.552780][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.564006][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.573970][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.584518][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.594544][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.605112][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.616494][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.629792][ T5948] lo: left allmulticast mode [ 100.637132][ T5948] lo: left promiscuous mode [ 100.643091][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.654227][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.664448][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.675019][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.688784][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.704974][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.715243][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.725890][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.736308][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.747950][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.764894][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.789135][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.805617][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.816823][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.825854][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.849930][ T5831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.860910][ T5831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.878465][ T5831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.887382][ T5831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.888734][ T5953] loop2: detected capacity change from 0 to 24 [ 100.912484][ T5953] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 100.939334][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.960231][ T5953] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 100.970156][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.987347][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.001796][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.042588][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.114146][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.125678][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.211353][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.221679][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.233904][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.235849][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.255317][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 101.259437][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.268734][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.325220][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.349475][ T9] usb 4-1: config 1 has no interface number 1 [ 101.369550][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 101.388122][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.400795][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.416705][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.426048][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.434688][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.458581][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.467931][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.481854][ T5895] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.490955][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.502800][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.503316][ T9] usb 4-1: Product: syz [ 101.514628][ T5895] usb 3-1: SerialNumber: syz [ 101.543843][ T9] usb 4-1: Manufacturer: syz [ 101.548463][ T9] usb 4-1: SerialNumber: syz [ 101.611032][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.621100][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.708144][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.708868][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.716804][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.740098][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.845047][ T5895] usb 3-1: 0:2 : does not exist [ 101.861691][ T52] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.874827][ T9] usb 4-1: USB disconnect, device number 2 [ 101.956157][ T5895] usb 3-1: USB disconnect, device number 2 [ 102.063143][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 102.091245][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.138043][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.166335][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.209509][ T52] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 102.253284][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 102.262769][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.355375][ T52] usb 5-1: config 0 descriptor?? [ 102.652754][ T5970] input: syz1 as /devices/virtual/input/input5 [ 102.901023][ T52] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 102.983450][ T5979] mmap: syz.0.17 (5979) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.094903][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'. [ 103.118977][ T5985] loop1: detected capacity change from 0 to 2048 [ 103.131298][ T52] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 103.161801][ T5985] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.261960][ T5987] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.329889][ T30] audit: type=1800 audit(1746671263.241:2): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 103.332406][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'. [ 103.545726][ T5993] warning: `syz.3.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.576534][ T5956] usb 5-1: USB disconnect, device number 2 [ 103.622844][ T5962] loop5: detected capacity change from 0 to 32768 [ 103.653231][ T5962] ======================================================= [ 103.653231][ T5962] WARNING: The mand mount option has been deprecated and [ 103.653231][ T5962] and is ignored by this kernel. Remove the mand [ 103.653231][ T5962] option from the mount to silence this warning. [ 103.653231][ T5962] ======================================================= [ 103.806647][ T5962] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 103.952626][ T5962] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 104.128637][ T5962] overlayfs: upper fs does not support tmpfile. [ 104.175281][ T5962] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.199834][ T5962] overlayfs: failed to set xattr on upper [ 104.255539][ T5962] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.362023][ T5962] overlayfs: ...falling back to index=off. [ 104.378775][ T5962] overlayfs: ...falling back to uuid=null. [ 104.417768][ T5962] overlayfs: upper fs missing required features. [ 104.739275][ T5831] ocfs2: Unmounting device (7,5) on (node local) [ 105.281727][ T5895] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.349057][ T6008] loop0: detected capacity change from 0 to 32768 [ 105.368036][ T6008] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.28 (6008) [ 105.421316][ T6008] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.441151][ T6008] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 105.454186][ T6008] BTRFS info (device loop0): using free-space-tree [ 105.489192][ T5895] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.514828][ T5895] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.595157][ T5895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.614522][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.647207][ T6026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.715368][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.884020][ T6056] loop5: detected capacity change from 0 to 764 [ 106.030486][ T6056] Symlink component flag not implemented [ 106.051721][ T5858] usb 2-1: USB disconnect, device number 2 [ 106.059350][ T6056] Symlink component flag not implemented (7) [ 106.362213][ T5828] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.809146][ T6053] loop2: detected capacity change from 0 to 32768 [ 106.854411][ T6053] (syz.2.42,6053,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.917725][ T6053] (syz.2.42,6053,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.044007][ T6053] JBD2: Ignoring recovery information on journal [ 107.256811][ T6053] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 107.455109][ T6053] syz.2.42 (6053) used greatest stack depth: 20224 bytes left [ 107.540431][ T5833] ocfs2: Unmounting device (7,2) on (node local) [ 107.576040][ T6080] loop3: detected capacity change from 0 to 2048 [ 107.693508][ T6080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.769420][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.54'. [ 108.160131][ T5194] udevd[5194]: worker [5959] terminated by signal 33 (Unknown signal 33) [ 108.192558][ T5194] udevd[5194]: worker [5959] failed while handling '/devices/virtual/block/loop3' [ 108.546328][ T6107] netlink: 104 bytes leftover after parsing attributes in process `syz.4.62'. [ 108.846561][ T6117] loop4: detected capacity change from 0 to 512 [ 108.874624][ T6117] EXT4-fs: Ignoring removed i_version option [ 108.887800][ T6120] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 109.016218][ T6117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.262447][ T6117] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.68: corrupted in-inode xattr: overlapping e_value [ 109.412566][ T6139] loop1: detected capacity change from 0 to 8 [ 109.789361][ T6143] loop2: detected capacity change from 0 to 32768 [ 109.796699][ T5832] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 109.830711][ T6146] loop0: detected capacity change from 0 to 512 [ 109.861976][ T5832] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 109.996083][ T6143] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 110.153647][ T6143] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 110.153647][ T6143] allowing incompatible features above 0.0: (unknown version) [ 110.183876][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.192803][ T6143] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 110.201150][ T6143] bcachefs (loop2): Version upgrade required: [ 110.201150][ T6143] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 110.201150][ T6143] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags [ 110.201150][ T6143] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 110.271038][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.282753][ T6143] bcachefs (loop2): dropping and reconstructing all alloc info [ 110.299423][ T6146] EXT4-fs (loop0): Test dummy encryption mode enabled [ 110.306467][ T6143] bcachefs (loop2): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 110.306494][ T6143] mode=100755 [ 110.306505][ T6143] flags=(15300000) [ 110.306516][ T6143] journal_seq=4 [ 110.306527][ T6143] hash_seed=d483206f1ed95abf [ 110.306538][ T6143] hash_type=siphash [ 110.306550][ T6143] bi_size=100 [ 110.306560][ T6143] bi_sectors=8 [ 110.306571][ T6143] bi_version=1126999418470400 [ 110.306583][ T6143] bi_atime=0 [ 110.306594][ T6143] bi_ctime=0 [ 110.306605][ T6143] bi_mtime=0 [ 110.306616][ T6143] bi_otime=2780562352 [ 110.306628][ T6143] bi_uid=2780562352 [ 110.306639][ T6143] bi_gid=0 [ 110.306650][ T6143] bi_nlink=2780562352 [ 110.306662][ T6143] bi_generation=0 [ 110.306673][ T6143] bi_dev=0 [ 110.306684][ T6143] bi_data_checksum=0 [ 110.306695][ T6143] bi_compression=56 [ 110.306707][ T6143] bi_project=0 [ 110.306718][ T6143] bi_background_compression=0 [ 110.306730][ T6143] bi_data_replicas=0 [ 110.306742][ T6143] bi_promote_target=0 [ 110.306753][ T6143] bi_foreground_target=0 [ 110.306765][ T6143] bi_background_target=0 [ 110.306777][ T6143] bi_erasure_code=0 [ 110.306788][ T6143] bi_fields_set=0 [ 110.306800][ T6143] bi_dir=0 [ 110.306810][ T6143] bi_dir_offset=0 [ 110.306822][ T6143] bi_subvol=0 [ 110.306832][ T6143] bi_parent_subvol=0 [ 110.306844][ T6143] bi_nocow=0 [ 110.306855][ T6143] bi_depth=0 [ 110.306866][ T6143] bi_inodes_32bit=0 [ 110.306877][ T6143] bi_casefold=0 [ 110.306888][ T6143] invalid compression opt 55, deleting [ 110.476163][ T6146] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.80: corrupted in-inode xattr: invalid ea_ino [ 110.486477][ T6143] bcachefs (loop2): accounting_read... done [ 110.528379][ T6143] bcachefs (loop2): alloc_read... done [ 110.534267][ T6143] bcachefs (loop2): snapshots_read... done [ 110.540447][ T6143] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 110.550403][ T6143] bcachefs (loop2): done starting filesystem [ 110.610205][ T6146] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.80: couldn't read orphan inode 15 (err -117) [ 110.665323][ T6146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.732490][ T5833] bcachefs (loop2): shutting down [ 110.780917][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.841611][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.923996][ T5833] bcachefs (loop2): shutdown complete [ 111.056560][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.081727][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.127801][ T6148] loop3: detected capacity change from 0 to 32768 [ 111.203661][ T6148] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 111.252553][ T6148] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 111.275297][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.382415][ T6148] syz.3.81 (6148) used greatest stack depth: 19576 bytes left [ 111.491312][ T6158] loop1: detected capacity change from 0 to 40427 [ 111.561533][ T6158] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 111.572927][ T6172] loop0: detected capacity change from 0 to 64 [ 111.605095][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.611674][ T6158] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 111.616990][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 112.223154][ T6158] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.241633][ T6158] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.337415][ T13] bridge_slave_1: left allmulticast mode [ 112.355729][ T13] bridge_slave_1: left promiscuous mode [ 112.395063][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.503528][ T6158] syz.1.82: attempt to access beyond end of device [ 112.503528][ T6158] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 112.551850][ T13] bridge_slave_0: left allmulticast mode [ 112.557534][ T13] bridge_slave_0: left promiscuous mode [ 112.610411][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.854207][ T5829] syz-executor: attempt to access beyond end of device [ 112.854207][ T5829] loop1: rw=2051, sector=45096, nr_sectors = 16 limit=40427 [ 112.928472][ T5829] F2FS-fs (loop1): Issue discard(5637, 5637, 2) failed, ret: -5 [ 112.984753][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.993356][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.006433][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.026936][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.042587][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.139134][ T6186] loop0: detected capacity change from 0 to 40427 [ 114.345700][ T6186] F2FS-fs (loop0): invalid crc value [ 114.413062][ T6213] loop1: detected capacity change from 0 to 4096 [ 114.486877][ T6213] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 114.663696][ T6213] ntfs3(loop1): ino=1a, mi_enum_attr [ 114.686538][ T6213] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 114.715523][ T6213] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 114.717726][ T6186] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 114.973231][ T5828] syz-executor: attempt to access beyond end of device [ 114.973231][ T5828] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.036371][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 115.036402][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 115.036417][ T5828] Call Trace: [ 115.036426][ T5828] [ 115.036435][ T5828] dump_stack_lvl+0x189/0x250 [ 115.036479][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.036515][ T5828] ? __pfx_queue_work_on+0x10/0x10 [ 115.036536][ T5828] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 115.036562][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 115.036589][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.036627][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 115.036662][ T5828] f2fs_write_end_io+0x4e2/0x6d0 [ 115.036710][ T5828] __submit_merged_bio+0x27a/0x6a0 [ 115.036743][ T5828] __submit_merged_write_cond+0x255/0x530 [ 115.036792][ T5828] f2fs_write_data_pages+0x2854/0x31f0 [ 115.036820][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.036888][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 115.037033][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.037064][ T5828] ? __lock_acquire+0xaac/0xd20 [ 115.037108][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.037149][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.037175][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 115.037205][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 115.037234][ T5828] do_writepages+0x3b1/0x7b0 [ 115.037286][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.037312][ T5828] ? do_raw_spin_lock+0x121/0x290 [ 115.037339][ T5828] ? __pfx_do_writepages+0x10/0x10 [ 115.037374][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.037406][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.037433][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 115.037466][ T5828] filemap_fdatawrite+0x191/0x230 [ 115.037499][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 115.037582][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.037615][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 115.037648][ T5828] f2fs_sync_dirty_inodes+0x31f/0x830 [ 115.037697][ T5828] f2fs_write_checkpoint+0x94a/0x1de0 [ 115.037756][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 115.037843][ T5828] ? kill_f2fs_super+0x298/0x6c0 [ 115.037880][ T5828] kill_f2fs_super+0x2c3/0x6c0 [ 115.037919][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 115.037946][ T5828] ? radix_tree_delete_item+0x2b6/0x400 [ 115.037988][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.038015][ T5828] ? shrinker_free+0x2ce/0x3e0 [ 115.038043][ T5828] deactivate_locked_super+0xbc/0x130 [ 115.038069][ T5828] cleanup_mnt+0x425/0x4c0 [ 115.038105][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.038132][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.038163][ T5828] task_work_run+0x1d4/0x260 [ 115.038199][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 115.038230][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.038270][ T5828] resume_user_mode_work+0x5e/0x80 [ 115.038304][ T5828] syscall_exit_to_user_mode+0x9a/0x120 [ 115.038334][ T5828] do_syscall_64+0x103/0x210 [ 115.038364][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.038408][ T5828] ? exc_page_fault+0x91/0x110 [ 115.038437][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.038460][ T5828] RIP: 0033:0x7f113a38fc97 [ 115.038480][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 115.038499][ T5828] RSP: 002b:00007ffc00aaed28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 115.038524][ T5828] RAX: 0000000000000000 RBX: 00007f113a41089d RCX: 00007f113a38fc97 [ 115.038540][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc00aaede0 [ 115.038555][ T5828] RBP: 00007ffc00aaede0 R08: 0000000000000000 R09: 0000000000000000 [ 115.038570][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc00aafe70 [ 115.038585][ T5828] R13: 00007f113a41089d R14: 000000000001c094 R15: 00007ffc00aafeb0 [ 115.038623][ T5828] [ 115.038632][ T5828] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 115.107238][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.129089][ T5943] kernel write not supported for file /40/attr/sockcreate (pid: 5943 comm: kworker/1:7) [ 115.136620][ T5846] Bluetooth: hci4: command tx timeout [ 115.179067][ T6225] loop3: detected capacity change from 0 to 128 [ 115.498677][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.520579][ T6234] loop2: detected capacity change from 0 to 1024 [ 115.562366][ T6234] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 115.573368][ T6225] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.656451][ T13] bond0 (unregistering): Released all slaves [ 115.699594][ T6234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.728637][ T6225] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.903892][ T6225] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 1803188595 (only 1 groups) [ 116.072282][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.114067][ T6245] loop1: detected capacity change from 0 to 32768 [ 116.165483][ T5830] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.209579][ T6245] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 116.348512][ T6245] XFS (loop1): Ending clean mount [ 116.388066][ T6245] XFS (loop1): Quotacheck needed: Please wait. [ 116.498248][ T6245] XFS (loop1): Quotacheck: Done. [ 116.504054][ T6245] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 117.194068][ T5846] Bluetooth: hci4: command tx timeout [ 117.498250][ T6267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.028878][ T13] hsr_slave_0: left promiscuous mode [ 118.066025][ T13] hsr_slave_1: left promiscuous mode [ 118.088881][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.121235][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.166994][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.199949][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.330401][ T13] veth1_macvtap: left promiscuous mode [ 118.357878][ T13] veth0_macvtap: left promiscuous mode [ 118.369657][ T13] veth1_vlan: left promiscuous mode [ 118.393279][ T13] veth0_vlan: left promiscuous mode [ 118.569490][ T6262] loop2: detected capacity change from 0 to 40427 [ 118.598888][ T6262] F2FS-fs (loop2): invalid crc value [ 118.618173][ T6285] loop0: detected capacity change from 0 to 1024 [ 118.658153][ T6285] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 118.691515][ T6285] EXT4-fs (loop0): group descriptors corrupted! [ 119.012013][ T6262] F2FS-fs (loop2): Start checkpoint disabled! [ 119.029805][ T6262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 119.262343][ T5846] Bluetooth: hci4: command tx timeout [ 119.995797][ T6311] loop2: detected capacity change from 0 to 512 [ 120.038501][ T6311] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.118: casefold flag without casefold feature [ 120.041823][ T13] team0 (unregistering): Port device team_slave_1 removed [ 120.084272][ T6311] EXT4-fs (loop2): Remounting filesystem read-only [ 120.128618][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.177391][ T6311] EXT4-fs (loop2): shut down requested (1) [ 120.218397][ T13] team0 (unregistering): Port device team_slave_0 removed [ 120.218617][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.253814][ T6318] loop0: detected capacity change from 0 to 512 [ 120.278330][ T6318] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.327173][ T6318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.379750][ T30] audit: type=1800 audit(1746671280.301:3): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.123" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 120.503519][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.762451][ T5956] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.931131][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 120.951094][ T5956] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 120.984249][ T5956] usb 3-1: config 0 has no interface number 0 [ 121.003619][ T5956] usb 3-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04 [ 121.021781][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.029855][ T5956] usb 3-1: Product: syz [ 121.034132][ T5956] usb 3-1: Manufacturer: syz [ 121.039576][ T5956] usb 3-1: SerialNumber: syz [ 121.047251][ T5956] usb 3-1: config 0 descriptor?? [ 121.341720][ T5846] Bluetooth: hci4: command tx timeout [ 121.355877][ T6340] sctp: [Deprecated]: syz.0.131 (pid 6340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.355877][ T6340] Use struct sctp_sack_info instead [ 121.566426][ T6197] chnl_net:caif_netlink_parms(): no params data found [ 121.689176][ T5956] asix 3-1:0.154 (unnamed net_device) (uninitialized): invalid hw address, using random [ 121.701870][ T6349] loop0: detected capacity change from 0 to 512 [ 121.720848][ T6349] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.762849][ T6349] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.796679][ T6349] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.866715][ T6349] EXT4-fs (loop0): 1 truncate cleaned up [ 121.890776][ T5956] asix 3-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 121.935876][ T6349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.987591][ T5956] asix 3-1:0.154 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 122.033279][ T5956] asix 3-1:0.154: probe with driver asix failed with error -71 [ 122.118282][ T5956] usb 3-1: USB disconnect, device number 3 [ 122.201138][ T6336] loop3: detected capacity change from 0 to 32768 [ 122.257613][ T6336] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.461173][ T6336] XFS (loop3): Ending clean mount [ 122.552448][ T6336] XFS (loop3): Quotacheck needed: Please wait. [ 122.713595][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.720772][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.727924][ T6336] XFS (loop3): Quotacheck: Done. [ 122.761963][ T6349] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 122.771889][ T6197] bridge_slave_0: entered allmulticast mode [ 122.779818][ T6197] bridge_slave_0: entered promiscuous mode [ 122.808173][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.851660][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.860612][ T6197] bridge_slave_1: entered allmulticast mode [ 122.903503][ T6197] bridge_slave_1: entered promiscuous mode [ 122.975829][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.016341][ T5830] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.449070][ T6358] loop1: detected capacity change from 0 to 32768 [ 123.453808][ T6197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.650598][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.811346][ T6197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.924798][ T6358] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 123.938350][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.948493][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.957014][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.974062][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.990197][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.037658][ T6398] loop2: detected capacity change from 0 to 1024 [ 124.098031][ T6398] EXT4-fs: Ignoring removed bh option [ 124.153985][ T6358] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 124.153985][ T6358] allowing incompatible features above 0.0: (unknown version) [ 124.154082][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.231604][ T6398] EXT4-fs (loop2): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.280773][ T6197] team0: Port device team_slave_0 added [ 124.287001][ T6358] bcachefs (loop1): initializing new filesystem [ 124.330836][ T6358] bcachefs (loop1): going read-write [ 124.374989][ T6387] loop0: detected capacity change from 0 to 32768 [ 124.379654][ T6197] team0: Port device team_slave_1 added [ 124.428630][ T6358] bcachefs (loop1): marking superblocks [ 124.436884][ T6387] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.446522][ T6398] EXT4-fs error (device loop2): ext4_xattr_block_find:1869: inode #15: comm syz.2.142: corrupted xattr block 145: invalid header [ 124.470763][ T6398] EXT4-fs (loop2): Remounting filesystem read-only [ 124.489348][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.588018][ T6358] bcachefs (loop1): initializing freespace [ 124.620058][ T5833] EXT4-fs (loop2): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 124.662492][ T6358] bcachefs (loop1): done initializing freespace [ 124.684023][ T6419] loop2: detected capacity change from 0 to 128 [ 124.704888][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.719206][ T6358] bcachefs (loop1): reading snapshots table [ 124.745548][ T6358] bcachefs (loop1): reading snapshots done [ 124.784025][ T6419] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 124.828048][ T6387] XFS (loop0): Ending clean mount [ 124.849813][ T6419] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.865958][ T6358] bcachefs (loop1): done starting filesystem [ 124.872936][ T6387] XFS (loop0): Quotacheck needed: Please wait. [ 124.993642][ T6387] XFS (loop0): Quotacheck: Done. [ 125.043030][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.050082][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.126056][ T6197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.139112][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.147713][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.173808][ T6197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.186855][ T6358] syz.1.137 (6358) used greatest stack depth: 14408 bytes left [ 125.224016][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.347061][ T5829] bcachefs (loop1): shutting down [ 125.363348][ T5829] bcachefs (loop1): going read-only [ 125.408715][ T5828] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.421185][ T5829] bcachefs (loop1): finished waiting for writes to stop [ 125.529298][ T6197] hsr_slave_0: entered promiscuous mode [ 125.530691][ T5829] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 125.571809][ T6197] hsr_slave_1: entered promiscuous mode [ 125.588358][ T6197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.627028][ T6197] Cannot create hsr debugfs directory [ 125.837711][ T5829] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 125.907089][ T5829] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 126.040992][ T5829] bcachefs (loop1): marking filesystem clean [ 126.071622][ T5134] Bluetooth: hci3: command tx timeout [ 126.395049][ T5829] bcachefs (loop1): shutdown complete [ 126.562422][ T6447] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.775878][ T13] bridge_slave_1: left allmulticast mode [ 126.804561][ T13] bridge_slave_1: left promiscuous mode [ 126.830137][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.922191][ T13] bridge_slave_0: left allmulticast mode [ 126.927983][ T13] bridge_slave_0: left promiscuous mode [ 126.989239][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.045397][ T6458] loop0: detected capacity change from 0 to 40427 [ 128.102987][ T6458] F2FS-fs (loop0): invalid crc value [ 128.141860][ T5134] Bluetooth: hci3: command tx timeout [ 128.214374][ T6474] Illegal XDP return value 4292558848 on prog (id 28) dev N/A, expect packet loss! [ 128.262135][ T6458] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 128.329659][ T6458] syz.0.154: attempt to access beyond end of device [ 128.329659][ T6458] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.356976][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.0.154 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 128.357012][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 128.357026][ T6458] Call Trace: [ 128.357044][ T6458] [ 128.357055][ T6458] dump_stack_lvl+0x189/0x250 [ 128.357103][ T6458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.357140][ T6458] ? __pfx_queue_work_on+0x10/0x10 [ 128.357163][ T6458] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 128.357191][ T6458] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 128.357223][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.357262][ T6458] f2fs_handle_critical_error+0x37c/0x540 [ 128.357298][ T6458] f2fs_write_end_io+0x4e2/0x6d0 [ 128.357348][ T6458] __submit_merged_bio+0x27a/0x6a0 [ 128.357381][ T6458] __submit_merged_write_cond+0x255/0x530 [ 128.357433][ T6458] f2fs_write_data_pages+0x2854/0x31f0 [ 128.357505][ T6458] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 128.357590][ T6458] ? __pfx_release_pages+0x10/0x10 [ 128.357617][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.357645][ T6458] ? blk_mq_flush_plug_list+0x10e/0x1760 [ 128.357695][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.357723][ T6458] ? check_path+0x21/0x40 [ 128.357744][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.357771][ T6458] ? check_noncircular+0xe0/0x160 [ 128.357801][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.357829][ T6458] ? lockdep_unlock+0x89/0x120 [ 128.357859][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.357886][ T6458] ? validate_chain+0x897/0x2140 [ 128.357937][ T6458] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 128.357968][ T6458] do_writepages+0x3b1/0x7b0 [ 128.358020][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.358047][ T6458] ? do_raw_spin_lock+0x121/0x290 [ 128.358075][ T6458] ? __pfx_do_writepages+0x10/0x10 [ 128.358111][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.358143][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.358170][ T6458] ? do_raw_spin_unlock+0x122/0x240 [ 128.358205][ T6458] filemap_fdatawrite+0x191/0x230 [ 128.358239][ T6458] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 128.358325][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.358358][ T6458] ? do_raw_spin_unlock+0x122/0x240 [ 128.358392][ T6458] f2fs_sync_dirty_inodes+0x31f/0x830 [ 128.358443][ T6458] f2fs_write_checkpoint+0x94a/0x1de0 [ 128.358505][ T6458] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 128.358587][ T6458] ? __pfx_down_write+0x10/0x10 [ 128.358635][ T6458] f2fs_issue_checkpoint+0x328/0x490 [ 128.358671][ T6458] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 128.358705][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.358732][ T6458] ? __lock_acquire+0xaac/0xd20 [ 128.358781][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.358809][ T6458] ? __up_read+0x280/0x680 [ 128.358845][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.358872][ T6458] ? f2fs_sync_fs+0x200/0x3d0 [ 128.358916][ T6458] f2fs_do_sync_file+0x86a/0x1860 [ 128.358966][ T6458] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 128.358994][ T6458] ? __lock_acquire+0xaac/0xd20 [ 128.359078][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.359105][ T6458] ? __mark_inode_dirty+0x3ab/0xdf0 [ 128.359150][ T6458] ? vfs_fsync_range+0x149/0x1c0 [ 128.359181][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.359209][ T6458] ? f2fs_sync_file+0xe9/0x160 [ 128.359243][ T6458] f2fs_file_write_iter+0x78e/0x2340 [ 128.359282][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.359316][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.359351][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.359387][ T6458] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 128.359419][ T6458] ? rcu_read_lock_any_held+0xb3/0x120 [ 128.359466][ T6458] vfs_write+0x54b/0xa90 [ 128.359500][ T6458] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 128.359536][ T6458] ? __pfx_vfs_write+0x10/0x10 [ 128.359578][ T6458] ? __fget_files+0x2a/0x420 [ 128.359615][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.359647][ T6458] ksys_write+0x145/0x250 [ 128.359672][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.359699][ T6458] ? rcu_is_watching+0x15/0xb0 [ 128.359738][ T6458] ? __pfx_ksys_write+0x10/0x10 [ 128.359771][ T6458] ? do_syscall_64+0xba/0x210 [ 128.359807][ T6458] do_syscall_64+0xf6/0x210 [ 128.359837][ T6458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.359864][ T6458] ? exc_page_fault+0x91/0x110 [ 128.359894][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.359917][ T6458] RIP: 0033:0x7f113a38e969 [ 128.359944][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.359963][ T6458] RSP: 002b:00007f113b1bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.359996][ T6458] RAX: ffffffffffffffda RBX: 00007f113a5b5fa0 RCX: 00007f113a38e969 [ 128.360014][ T6458] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000004 [ 128.360033][ T6458] RBP: 00007f113a410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 128.360048][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.360062][ T6458] R13: 0000000000000000 R14: 00007f113a5b5fa0 R15: 00007ffc00aafa98 [ 128.360102][ T6458] [ 128.864680][ T6458] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 129.158620][ T6467] loop2: detected capacity change from 0 to 32768 [ 129.289529][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.308595][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.319995][ T13] bond0 (unregistering): Released all slaves [ 129.335194][ T30] audit: type=1800 audit(1746671289.261:4): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.158" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 129.511586][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.713051][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 129.759531][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.813738][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.842021][ T10] usb 4-1: Product: syz [ 129.868599][ T10] usb 4-1: Manufacturer: syz [ 129.891908][ T10] usb 4-1: SerialNumber: syz [ 129.924131][ T6478] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.224750][ T5846] Bluetooth: hci3: command tx timeout [ 130.237389][ T10] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 130.276180][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 130.395664][ T6486] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 130.434193][ T5956] usb 4-1: USB disconnect, device number 3 [ 130.458953][ T13] hsr_slave_0: left promiscuous mode [ 130.467964][ T5956] usblp0: removed [ 130.495014][ T13] hsr_slave_1: left promiscuous mode [ 130.511435][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.519648][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.551130][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.579030][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.644092][ T13] veth1_macvtap: left promiscuous mode [ 130.668812][ T13] veth0_macvtap: left promiscuous mode [ 130.696162][ T13] veth1_vlan: left promiscuous mode [ 130.716267][ T13] veth0_vlan: left promiscuous mode [ 131.142970][ T6481] loop0: detected capacity change from 0 to 32768 [ 131.242724][ T6481] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 131.370259][ T6481] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 131.456942][ T6481] XFS (loop0): Starting recovery (logdev: internal) [ 131.541442][ T6481] XFS (loop0): Ending recovery (logdev: internal) [ 131.645731][ T6481] XFS (loop0): User initiated shutdown received. [ 131.663623][ T6481] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476). Shutting down filesystem. [ 131.688228][ T6481] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 131.854869][ T5828] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 131.908039][ T6493] loop2: detected capacity change from 0 to 32768 [ 131.999034][ T6493] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.148078][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.160463][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.183280][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.311674][ T5134] Bluetooth: hci3: command tx timeout [ 132.365073][ T6493] XFS (loop2): Ending clean mount [ 132.365212][ T5895] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.392526][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.410458][ T5895] usb 4-1: config 0 descriptor?? [ 132.412271][ T6493] XFS (loop2): Quotacheck needed: Please wait. [ 132.459700][ T5895] cp210x 4-1:0.0: cp210x converter detected [ 132.495274][ T6493] XFS (loop2): Quotacheck: Done. [ 132.583887][ T30] audit: type=1800 audit(1746671292.511:5): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.165" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 132.680576][ T5833] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.804634][ T13] team0 (unregistering): Port device team_slave_1 removed [ 132.848422][ T5895] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 132.883528][ T5895] usb 4-1: cp210x converter now attached to ttyUSB0 [ 132.943227][ T13] team0 (unregistering): Port device team_slave_0 removed [ 133.086554][ T5968] usb 4-1: USB disconnect, device number 4 [ 133.110505][ T5968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.138216][ T5968] cp210x 4-1:0.0: device disconnected [ 133.328103][ T6526] loop2: detected capacity change from 0 to 1024 [ 133.472891][ T6526] loop2: detected capacity change from 0 to 1024 [ 133.603331][ T1113] hfsplus: b-tree write err: -5, ino 4 [ 133.870155][ T6397] chnl_net:caif_netlink_parms(): no params data found [ 134.237852][ T6197] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 134.365803][ T6528] loop2: detected capacity change from 0 to 32768 [ 134.422930][ T6197] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 134.443969][ T6530] loop3: detected capacity change from 0 to 32768 [ 134.452380][ T6530] XFS: ikeep mount option is deprecated. [ 134.458142][ T6530] XFS: ikeep mount option is deprecated. [ 134.485736][ T6530] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.522884][ T6528] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 134.626228][ T6197] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 134.665192][ T6197] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 134.731920][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.793886][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.801179][ T6397] bridge_slave_0: entered allmulticast mode [ 134.913328][ T6397] bridge_slave_0: entered promiscuous mode [ 134.925870][ T6530] XFS (loop3): Ending clean mount [ 134.976342][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.012829][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.020090][ T6397] bridge_slave_1: entered allmulticast mode [ 135.087267][ T6397] bridge_slave_1: entered promiscuous mode [ 135.129648][ T5833] ocfs2: Unmounting device (7,2) on (node local) [ 135.410148][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.471248][ T5830] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.489709][ T6397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.837330][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.863292][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.880551][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.900459][ T6397] team0: Port device team_slave_0 added [ 135.914364][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.937796][ T6397] team0: Port device team_slave_1 added [ 135.945295][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.198900][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.221972][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.266124][ T6580] loop3: detected capacity change from 0 to 512 [ 136.291531][ T6397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.324577][ T6580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.373599][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.380592][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.413186][ T6397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.462411][ T6580] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 136.491690][ T6580] EXT4-fs (loop3): 1 truncate cleaned up [ 136.501182][ T6580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.564044][ T6397] hsr_slave_0: entered promiscuous mode [ 136.570827][ T6397] hsr_slave_1: entered promiscuous mode [ 136.579648][ T6397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.587300][ T6397] Cannot create hsr debugfs directory [ 136.668036][ T6571] loop2: detected capacity change from 0 to 32768 [ 136.686900][ T5918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.698434][ T6571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.184 (6571) [ 136.739290][ T6571] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.767217][ T6571] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 136.787892][ T6571] BTRFS info (device loop2): using free-space-tree [ 136.892237][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.131234][ T6571] BTRFS error (device loop2): balance: invalid convert metadata profile raid6 [ 137.188962][ T5918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.290588][ T5833] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.659455][ T5918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.812417][ T5918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.015294][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 138.066009][ T5134] Bluetooth: hci0: command tx timeout [ 138.099546][ T6197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.622280][ T6197] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.966526][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.973723][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.166461][ T6661] sctp: [Deprecated]: syz.0.206 (pid 6661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.166461][ T6661] Use struct sctp_sack_info instead [ 139.207938][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.210967][ T6662] binder: 6660:6662 ioctl c0306201 200000000540 returned -22 [ 139.215103][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.232886][ T5918] bridge_slave_1: left allmulticast mode [ 139.239542][ T5918] bridge_slave_1: left promiscuous mode [ 139.272994][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.332141][ T5918] bridge_slave_0: left allmulticast mode [ 139.337816][ T5918] bridge_slave_0: left promiscuous mode [ 139.371771][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.698101][ T30] audit: type=1800 audit(1746671299.621:6): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.212" name="file0" dev="tmpfs" ino=245 res=0 errno=0 [ 140.129382][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.141878][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.141915][ T5134] Bluetooth: hci0: command tx timeout [ 140.158287][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.169548][ T5918] bond0 (unregistering): Released all slaves [ 140.267672][ T6574] chnl_net:caif_netlink_parms(): no params data found [ 140.304261][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 140.312587][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 140.341846][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 140.378158][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 140.401521][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 140.426662][ T6681] loop2: detected capacity change from 0 to 1024 [ 140.433366][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 140.448037][ T5838] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 140.457480][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.470152][ T5838] usb 4-1: Product: syz [ 140.475594][ T6681] EXT4-fs: Ignoring removed orlov option [ 140.481335][ T5838] usb 4-1: Manufacturer: syz [ 140.487375][ T5838] usb 4-1: SerialNumber: syz [ 140.496391][ T6681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.506068][ T5838] usb 4-1: config 0 descriptor?? [ 140.589204][ T6681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.706632][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.933093][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 140.939165][ T5838] input input7: Device does not respond to id packet M [ 140.952448][ T5838] input input7: Device does not respond to id packet P [ 141.057774][ T5918] hsr_slave_0: left promiscuous mode [ 141.071552][ T5918] hsr_slave_1: left promiscuous mode [ 141.083712][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.091140][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.152353][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.154254][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 141.159782][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.193530][ T5838] input input7: Device does not respond to id packet B [ 141.204949][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 141.231888][ T5838] input input7: Device does not respond to id packet N [ 141.254394][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 141.269803][ T5918] veth1_macvtap: left promiscuous mode [ 141.271649][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 141.302059][ T5918] veth0_macvtap: left promiscuous mode [ 141.309878][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 141.330205][ T5918] veth1_vlan: left promiscuous mode [ 141.336888][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 141.351636][ T5918] veth0_vlan: left promiscuous mode [ 141.368575][ T5838] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 141.464695][ T5838] usb 4-1: USB disconnect, device number 5 [ 141.582218][ T6701] loop2: detected capacity change from 0 to 512 [ 141.623970][ T6701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.690101][ T6701] EXT4-fs (loop2): 1 truncate cleaned up [ 141.730484][ T6701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.768295][ T6701] EXT4-fs error (device loop2): ext4_find_dest_de:2054: inode #2: block 13: comm syz.2.220: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 141.832705][ T6701] EXT4-fs (loop2): Remounting filesystem read-only [ 141.890041][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.908709][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.917391][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.942759][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.950792][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.987606][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.222620][ T5846] Bluetooth: hci0: command tx timeout [ 142.253199][ T6716] netlink: 176 bytes leftover after parsing attributes in process `syz.3.223'. [ 142.676825][ T6713] loop2: detected capacity change from 0 to 40427 [ 142.690682][ T6713] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 142.699044][ T6713] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.737467][ T6713] F2FS-fs (loop2): invalid crc value [ 142.749478][ T5918] team0 (unregistering): Port device team_slave_1 removed [ 142.838489][ T5918] team0 (unregistering): Port device team_slave_0 removed [ 142.889133][ T6713] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.903254][ T6713] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.755141][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.787267][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.813050][ T6574] bridge_slave_0: entered allmulticast mode [ 143.833505][ T6574] bridge_slave_0: entered promiscuous mode [ 143.863062][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.880517][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.899042][ T6574] bridge_slave_1: entered allmulticast mode [ 143.924497][ T6574] bridge_slave_1: entered promiscuous mode [ 144.062403][ T5846] Bluetooth: hci2: command tx timeout [ 144.162621][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.226077][ T6727] loop3: detected capacity change from 0 to 40427 [ 144.232870][ T6397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.263301][ T6397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.281674][ T6727] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 144.289333][ T6727] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 144.304107][ T5846] Bluetooth: hci0: command tx timeout [ 144.319981][ T6727] F2FS-fs (loop3): invalid crc value [ 144.330167][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.375327][ T6737] loop2: detected capacity change from 0 to 32768 [ 144.391685][ T6737] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.227 (6737) [ 144.436077][ T6737] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 144.476145][ T6737] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 144.548257][ T6397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.584856][ T6397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.626254][ T6727] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.646376][ T6727] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.663056][ T6737] BTRFS info (device loop2): rebuilding free space tree [ 144.668879][ T6574] team0: Port device team_slave_0 added [ 144.726003][ T6737] BTRFS info (device loop2): disabling free space tree [ 144.731040][ T6738] f2fs_ckpt-7:3: attempt to access beyond end of device [ 144.731040][ T6738] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 144.758037][ T6738] CPU: 1 UID: 0 PID: 6738 Comm: f2fs_ckpt-7:3 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 144.758068][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 144.758082][ T6738] Call Trace: [ 144.758091][ T6738] [ 144.758101][ T6738] dump_stack_lvl+0x189/0x250 [ 144.758147][ T6738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.758184][ T6738] ? __pfx_queue_work_on+0x10/0x10 [ 144.758206][ T6738] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 144.758233][ T6738] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.758261][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.758301][ T6738] f2fs_handle_critical_error+0x37c/0x540 [ 144.758337][ T6738] f2fs_write_end_io+0x4e2/0x6d0 [ 144.758384][ T6738] __submit_merged_bio+0x27a/0x6a0 [ 144.758416][ T6738] __submit_merged_write_cond+0x255/0x530 [ 144.758461][ T6738] f2fs_write_data_pages+0x2854/0x31f0 [ 144.758531][ T6738] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.758686][ T6738] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.758712][ T6738] do_writepages+0x3b1/0x7b0 [ 144.758770][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.758793][ T6738] ? do_raw_spin_lock+0x121/0x290 [ 144.758818][ T6738] ? __pfx_do_writepages+0x10/0x10 [ 144.758851][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.758880][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.758903][ T6738] ? do_raw_spin_unlock+0x122/0x240 [ 144.758934][ T6738] filemap_fdatawrite+0x191/0x230 [ 144.758966][ T6738] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 144.759052][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.759082][ T6738] ? do_raw_spin_unlock+0x122/0x240 [ 144.759113][ T6738] f2fs_sync_dirty_inodes+0x31f/0x830 [ 144.759160][ T6738] f2fs_write_checkpoint+0x94a/0x1de0 [ 144.759223][ T6738] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 144.759248][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.759326][ T6738] ? __pfx_down_write+0x10/0x10 [ 144.759356][ T6738] ? __pfx___schedule+0x10/0x10 [ 144.759388][ T6738] __checkpoint_and_complete_reqs+0xd9/0x3b0 [ 144.759423][ T6738] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 144.759474][ T6738] issue_checkpoint_thread+0xd9/0x260 [ 144.759507][ T6738] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 144.759536][ T6738] ? __pfx_autoremove_wake_function+0x10/0x10 [ 144.759565][ T6738] ? __kthread_parkme+0x7b/0x200 [ 144.759586][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.759610][ T6738] ? __kthread_parkme+0x1a1/0x200 [ 144.759640][ T6738] kthread+0x711/0x8a0 [ 144.759671][ T6738] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 144.759699][ T6738] ? __pfx_kthread+0x10/0x10 [ 144.759723][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.759756][ T6738] ? __pfx_kthread+0x10/0x10 [ 144.759780][ T6738] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.759800][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.759823][ T6738] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.759848][ T6738] ? __pfx_kthread+0x10/0x10 [ 144.759873][ T6738] ret_from_fork+0x4e/0x80 [ 144.759894][ T6738] ? __pfx_kthread+0x10/0x10 [ 144.759919][ T6738] ret_from_fork_asm+0x1a/0x30 [ 144.759961][ T6738] [ 144.761007][ T6738] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 144.770897][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.780263][ T6738] CPU: 1 UID: 0 PID: 6738 Comm: f2fs_ckpt-7:3 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 144.780293][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 144.780307][ T6738] Call Trace: [ 144.780317][ T6738] [ 144.780327][ T6738] dump_stack_lvl+0x189/0x250 [ 144.780372][ T6738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.780407][ T6738] ? __pfx_queue_work_on+0x10/0x10 [ 144.780429][ T6738] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 144.780455][ T6738] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.780484][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.780524][ T6738] f2fs_handle_critical_error+0x37c/0x540 [ 144.780561][ T6738] f2fs_write_end_io+0x4e2/0x6d0 [ 144.780614][ T6738] __submit_merged_bio+0x27a/0x6a0 [ 144.780650][ T6738] __submit_merged_write_cond+0x255/0x530 [ 144.780701][ T6738] f2fs_write_data_pages+0x2854/0x31f0 [ 144.780789][ T6738] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.780968][ T6738] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.780997][ T6738] do_writepages+0x3b1/0x7b0 [ 144.781054][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.781080][ T6738] ? do_raw_spin_lock+0x121/0x290 [ 144.781108][ T6738] ? __pfx_do_writepages+0x10/0x10 [ 144.781145][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.781178][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.781204][ T6738] ? do_raw_spin_unlock+0x122/0x240 [ 144.781243][ T6738] filemap_fdatawrite+0x191/0x230 [ 144.781276][ T6738] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 144.781371][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.781405][ T6738] ? do_raw_spin_unlock+0x122/0x240 [ 144.781440][ T6738] f2fs_sync_dirty_inodes+0x31f/0x830 [ 144.781495][ T6738] f2fs_write_checkpoint+0x94a/0x1de0 [ 144.781562][ T6738] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 144.781590][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.781680][ T6738] ? __pfx_down_write+0x10/0x10 [ 144.781713][ T6738] ? __pfx___schedule+0x10/0x10 [ 144.781754][ T6738] __checkpoint_and_complete_reqs+0xd9/0x3b0 [ 144.781794][ T6738] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 144.781851][ T6738] issue_checkpoint_thread+0xd9/0x260 [ 144.781888][ T6738] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 144.781922][ T6738] ? __pfx_autoremove_wake_function+0x10/0x10 [ 144.781954][ T6738] ? __kthread_parkme+0x7b/0x200 [ 144.781979][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.782005][ T6738] ? __kthread_parkme+0x1a1/0x200 [ 144.782041][ T6738] kthread+0x711/0x8a0 [ 144.782076][ T6738] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 144.782107][ T6738] ? __pfx_kthread+0x10/0x10 [ 144.782135][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.782163][ T6738] ? __pfx_kthread+0x10/0x10 [ 144.782191][ T6738] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.782214][ T6738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.782240][ T6738] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.782269][ T6738] ? __pfx_kthread+0x10/0x10 [ 144.782296][ T6738] ret_from_fork+0x4e/0x80 [ 144.782320][ T6738] ? __pfx_kthread+0x10/0x10 [ 144.782348][ T6738] ret_from_fork_asm+0x1a/0x30 [ 144.782396][ T6738] [ 144.790542][ T6738] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 144.795321][ T6737] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.973483][ T6574] team0: Port device team_slave_1 added [ 145.464146][ T6737] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.624899][ T5918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.690531][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.713701][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.779814][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.845470][ T5833] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.920577][ T5918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.977858][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.010974][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.086217][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.151583][ T5846] Bluetooth: hci2: command tx timeout [ 146.196712][ T5918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.434017][ T5918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.553310][ T6574] hsr_slave_0: entered promiscuous mode [ 146.560014][ T6574] hsr_slave_1: entered promiscuous mode [ 146.582947][ T6574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.591808][ T6574] Cannot create hsr debugfs directory [ 147.060135][ T6197] veth0_vlan: entered promiscuous mode [ 147.145587][ T6770] loop3: detected capacity change from 0 to 40427 [ 147.175135][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.192951][ T6770] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3fffff [ 147.222499][ T6707] chnl_net:caif_netlink_parms(): no params data found [ 147.243835][ T6770] F2FS-fs (loop3): heap/no_heap options were deprecated [ 147.277269][ T6770] F2FS-fs (loop3): invalid crc value [ 147.413193][ T6197] veth1_vlan: entered promiscuous mode [ 147.538546][ T6770] F2FS-fs (loop3): Start checkpoint disabled! [ 147.583296][ T6770] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 147.763149][ T13] kworker/u8:1: attempt to access beyond end of device [ 147.763149][ T13] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.831998][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 147.832037][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 147.832053][ T13] Workqueue: writeback wb_workfn (flush-7:3) [ 147.832097][ T13] Call Trace: [ 147.832107][ T13] [ 147.832117][ T13] dump_stack_lvl+0x189/0x250 [ 147.832158][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.832194][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 147.832216][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 147.832242][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.832269][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.832307][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 147.832341][ T13] f2fs_write_end_io+0x4e2/0x6d0 [ 147.832388][ T13] __submit_merged_bio+0x27a/0x6a0 [ 147.832421][ T13] __submit_merged_write_cond+0x255/0x530 [ 147.832470][ T13] f2fs_write_data_pages+0x2854/0x31f0 [ 147.832534][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 147.832557][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.832595][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.832618][ T13] ? __lock_acquire+0xaac/0xd20 [ 147.832675][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.832702][ T13] ? unwind_next_frame+0xa5/0x2390 [ 147.832732][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.832755][ T13] ? unwind_next_frame+0x19ae/0x2390 [ 147.832798][ T13] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 147.832822][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.832845][ T13] ? arch_stack_walk+0x11c/0x150 [ 147.832894][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 147.832919][ T13] do_writepages+0x3b1/0x7b0 [ 147.832945][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.832978][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.833016][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.833041][ T13] ? __pfx_do_writepages+0x10/0x10 [ 147.833071][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.833094][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 147.833113][ T13] ? writeback_sb_inodes+0x372/0x1000 [ 147.833144][ T13] __writeback_single_inode+0x145/0xff0 [ 147.833166][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.833189][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 147.833218][ T13] writeback_sb_inodes+0x6b5/0x1000 [ 147.833239][ T13] ? unwind_next_frame+0xa5/0x2390 [ 147.833291][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 147.833357][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.833380][ T13] ? rcu_is_watching+0x15/0xb0 [ 147.833412][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.833445][ T13] wb_writeback+0x43b/0xaf0 [ 147.833475][ T13] ? queue_io+0x331/0x590 [ 147.833500][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 147.833531][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.833558][ T13] wb_workfn+0x409/0xef0 [ 147.833606][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 147.833632][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.833655][ T13] ? register_lock_class+0x51/0x320 [ 147.833690][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.833713][ T13] ? __lock_acquire+0xaac/0xd20 [ 147.833752][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.833779][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.833807][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.833827][ T13] ? process_scheduled_works+0x9ec/0x17a0 [ 147.833859][ T13] ? process_scheduled_works+0x9ec/0x17a0 [ 147.833895][ T13] process_scheduled_works+0xade/0x17a0 [ 147.833959][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 147.834007][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.834041][ T13] worker_thread+0x8a0/0xda0 [ 147.834089][ T13] kthread+0x711/0x8a0 [ 147.834118][ T13] ? __pfx_worker_thread+0x10/0x10 [ 147.834137][ T13] ? __pfx_kthread+0x10/0x10 [ 147.834161][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.834186][ T13] ? __pfx_kthread+0x10/0x10 [ 147.834210][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.834229][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.834252][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.834277][ T13] ? __pfx_kthread+0x10/0x10 [ 147.834301][ T13] ret_from_fork+0x4e/0x80 [ 147.834322][ T13] ? __pfx_kthread+0x10/0x10 [ 147.834346][ T13] ret_from_fork_asm+0x1a/0x30 [ 147.834384][ T13] [ 147.834400][ T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 148.271985][ T5846] Bluetooth: hci2: command tx timeout [ 148.346751][ T6397] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.448800][ T6197] veth0_macvtap: entered promiscuous mode [ 148.474478][ T5918] bridge_slave_1: left allmulticast mode [ 148.480158][ T5918] bridge_slave_1: left promiscuous mode [ 148.486496][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.505345][ T5918] bridge_slave_0: left allmulticast mode [ 148.511013][ T5918] bridge_slave_0: left promiscuous mode [ 148.521305][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.767362][ T6793] loop2: detected capacity change from 0 to 32768 [ 148.817489][ T6793] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.890868][ T6793] XFS (loop2): Ending clean mount [ 149.115856][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.147536][ T5833] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 149.158878][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.177062][ T5918] bond0 (unregistering): Released all slaves [ 149.358547][ T6197] veth1_macvtap: entered promiscuous mode [ 149.489276][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.496476][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.634647][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.646278][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.662022][ T6707] bridge_slave_0: entered allmulticast mode [ 149.691858][ T6707] bridge_slave_0: entered promiscuous mode [ 149.706080][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.743020][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.750401][ T6707] bridge_slave_1: entered allmulticast mode [ 149.775871][ T6707] bridge_slave_1: entered promiscuous mode [ 149.798770][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.805938][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.912580][ T6819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.002654][ T5838] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.048051][ T6707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.068993][ T6707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.164620][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 150.177169][ T5838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 150.197120][ T5838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 150.209542][ T5838] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.235902][ T5838] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 150.250284][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 150.252619][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.258930][ T5838] usb 4-1: Product: syz [ 150.274017][ T5838] usb 4-1: Manufacturer: syz [ 150.278623][ T5838] usb 4-1: SerialNumber: syz [ 150.298935][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.309121][ T5846] Bluetooth: hci2: command tx timeout [ 150.315902][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.327524][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.332436][ T5838] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 150.356185][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.401374][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.443342][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.470645][ T5918] hsr_slave_0: left promiscuous mode [ 150.496010][ T5918] hsr_slave_1: left promiscuous mode [ 150.512273][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.519708][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.547765][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.558628][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.559441][ T5838] usb 4-1: USB disconnect, device number 6 [ 150.608289][ T5918] veth1_macvtap: left promiscuous mode [ 150.617377][ T5918] veth0_macvtap: left promiscuous mode [ 150.625347][ T5918] veth1_vlan: left promiscuous mode [ 150.625674][ T5838] appletouch 4-1:1.0: input: appletouch disconnected [ 150.631028][ T5918] veth0_vlan: left promiscuous mode [ 150.859476][ T6823] loop2: detected capacity change from 0 to 32768 [ 150.923578][ T6823] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 150.923578][ T6823] [ 151.514619][ T5918] team0 (unregistering): Port device team_slave_1 removed [ 151.586345][ T6827] loop2: detected capacity change from 0 to 4096 [ 151.596619][ T5918] team0 (unregistering): Port device team_slave_0 removed [ 151.711000][ T6825] loop3: detected capacity change from 0 to 32768 [ 151.783510][ T6825] JBD2: Ignoring recovery information on journal [ 151.899736][ T6825] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 152.183889][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 152.461078][ T6836] loop2: detected capacity change from 0 to 1024 [ 152.527447][ T6836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.547091][ T6838] loop3: detected capacity change from 0 to 1024 [ 152.560182][ T6707] team0: Port device team_slave_0 added [ 152.578651][ T6838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.656693][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.681572][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.691401][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.702496][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.715508][ T6836] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.245: Abort forced by user [ 152.727490][ T6836] EXT4-fs (loop2): Remounting filesystem read-only [ 152.731291][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.758571][ T6707] team0: Port device team_slave_1 added [ 152.801343][ T6836] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 152.839316][ T6197] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.854869][ T6197] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.876089][ T6197] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.884958][ T6197] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.963651][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.970645][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.996847][ T6707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.016994][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.089805][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.121536][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.199232][ T6707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.381391][ T6851] binder: 6850:6851 ioctl c0306201 200000000540 returned -14 [ 153.545342][ T6707] hsr_slave_0: entered promiscuous mode [ 153.568368][ T6707] hsr_slave_1: entered promiscuous mode [ 153.582341][ T6707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.604207][ T6707] Cannot create hsr debugfs directory [ 153.615975][ T6574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.765101][ T6574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.812233][ T6574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.862968][ T6574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 154.023434][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.031293][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.316066][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.339640][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.367879][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.647535][ T6856] loop3: detected capacity change from 0 to 40427 [ 154.698564][ T6856] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3fffff [ 154.736960][ T6856] F2FS-fs (loop3): Image doesn't support compression [ 154.749788][ T6856] F2FS-fs (loop3): Image doesn't support compression [ 154.805336][ T6856] F2FS-fs (loop3): invalid crc value [ 154.834925][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.920426][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.977720][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.984915][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.067637][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.074862][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.169565][ T6856] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.267939][ T6856] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0xfe/0x1050 [ 155.406644][ T5830] syz-executor: attempt to access beyond end of device [ 155.406644][ T5830] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 155.443058][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 155.443091][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 155.443105][ T5830] Call Trace: [ 155.443114][ T5830] [ 155.443123][ T5830] dump_stack_lvl+0x189/0x250 [ 155.443167][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.443203][ T5830] ? __pfx_queue_work_on+0x10/0x10 [ 155.443225][ T5830] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 155.443251][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.443278][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.443315][ T5830] f2fs_handle_critical_error+0x37c/0x540 [ 155.443349][ T5830] f2fs_write_end_io+0x4e2/0x6d0 [ 155.443397][ T5830] __submit_merged_bio+0x27a/0x6a0 [ 155.443429][ T5830] __submit_merged_write_cond+0x255/0x530 [ 155.443477][ T5830] f2fs_write_data_pages+0x2854/0x31f0 [ 155.443506][ T5830] ? unwind_next_frame+0x19ae/0x2390 [ 155.443573][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.443618][ T5830] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 155.443676][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.443708][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.443734][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 155.443788][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.443815][ T5830] ? __lock_acquire+0xaac/0xd20 [ 155.443858][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.443898][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.443924][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 155.443954][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.443982][ T5830] do_writepages+0x3b1/0x7b0 [ 155.444038][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.444065][ T5830] ? do_raw_spin_lock+0x121/0x290 [ 155.444091][ T5830] ? __pfx_do_writepages+0x10/0x10 [ 155.444126][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.444157][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.444183][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 155.444216][ T5830] filemap_fdatawrite+0x191/0x230 [ 155.444249][ T5830] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 155.444329][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.444362][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 155.444394][ T5830] f2fs_sync_dirty_inodes+0x31f/0x830 [ 155.444443][ T5830] f2fs_write_checkpoint+0x94a/0x1de0 [ 155.444502][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 155.444589][ T5830] ? kill_f2fs_super+0x298/0x6c0 [ 155.444626][ T5830] kill_f2fs_super+0x2c3/0x6c0 [ 155.444664][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 155.444692][ T5830] ? radix_tree_delete_item+0x2b6/0x400 [ 155.444727][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.444756][ T5830] ? shrinker_free+0x2ce/0x3e0 [ 155.444785][ T5830] deactivate_locked_super+0xbc/0x130 [ 155.444811][ T5830] cleanup_mnt+0x425/0x4c0 [ 155.444847][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.444873][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.444905][ T5830] task_work_run+0x1d4/0x260 [ 155.444939][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 155.444970][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.445010][ T5830] resume_user_mode_work+0x5e/0x80 [ 155.445044][ T5830] syscall_exit_to_user_mode+0x9a/0x120 [ 155.445074][ T5830] do_syscall_64+0x103/0x210 [ 155.445105][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.445135][ T5830] ? exc_page_fault+0x91/0x110 [ 155.445164][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.445187][ T5830] RIP: 0033:0x7f3756b8fc97 [ 155.445208][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 155.445227][ T5830] RSP: 002b:00007fff0f728078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 155.445252][ T5830] RAX: 0000000000000000 RBX: 00007f3756c1089d RCX: 00007f3756b8fc97 [ 155.445268][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0f728130 [ 155.445283][ T5830] RBP: 00007fff0f728130 R08: 0000000000000000 R09: 0000000000000000 [ 155.445298][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0f7291c0 [ 155.445313][ T5830] R13: 00007f3756c1089d R14: 0000000000025eaf R15: 00007fff0f729200 [ 155.445351][ T5830] [ 155.445924][ T5830] F2FS-fs (loop3): Remounting filesystem read-only [ 155.782859][ T6707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.885793][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 155.885826][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 155.885840][ T5830] Call Trace: [ 155.885850][ T5830] [ 155.885859][ T5830] dump_stack_lvl+0x189/0x250 [ 155.885903][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.885945][ T5830] ? __pfx_queue_work_on+0x10/0x10 [ 155.885970][ T5830] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 155.886003][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.886030][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.886068][ T5830] f2fs_handle_critical_error+0x37c/0x540 [ 155.886110][ T5830] f2fs_write_end_io+0x4e2/0x6d0 [ 155.886157][ T5830] __submit_merged_bio+0x27a/0x6a0 [ 155.886191][ T5830] __submit_merged_write_cond+0x255/0x530 [ 155.886239][ T5830] f2fs_write_data_pages+0x2854/0x31f0 [ 155.886269][ T5830] ? unwind_next_frame+0x19ae/0x2390 [ 155.886337][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.886384][ T5830] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 155.886443][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.886476][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.886502][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 155.886560][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.886587][ T5830] ? __lock_acquire+0xaac/0xd20 [ 155.886631][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.886672][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.886699][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 155.886729][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.886758][ T5830] do_writepages+0x3b1/0x7b0 [ 155.886810][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.886836][ T5830] ? do_raw_spin_lock+0x121/0x290 [ 155.886863][ T5830] ? __pfx_do_writepages+0x10/0x10 [ 155.886898][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.886930][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.886957][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 155.886996][ T5830] filemap_fdatawrite+0x191/0x230 [ 155.887030][ T5830] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 155.887113][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.887146][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 155.887180][ T5830] f2fs_sync_dirty_inodes+0x31f/0x830 [ 155.887229][ T5830] f2fs_write_checkpoint+0x94a/0x1de0 [ 155.887289][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 155.887377][ T5830] ? kill_f2fs_super+0x298/0x6c0 [ 155.887414][ T5830] kill_f2fs_super+0x2c3/0x6c0 [ 155.887453][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 155.887482][ T5830] ? radix_tree_delete_item+0x2b6/0x400 [ 155.887517][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.887544][ T5830] ? shrinker_free+0x2ce/0x3e0 [ 155.887572][ T5830] deactivate_locked_super+0xbc/0x130 [ 155.887599][ T5830] cleanup_mnt+0x425/0x4c0 [ 155.887637][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.887663][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.887695][ T5830] task_work_run+0x1d4/0x260 [ 155.887731][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 155.887763][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.887803][ T5830] resume_user_mode_work+0x5e/0x80 [ 155.887839][ T5830] syscall_exit_to_user_mode+0x9a/0x120 [ 155.887869][ T5830] do_syscall_64+0x103/0x210 [ 155.887900][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.887928][ T5830] ? exc_page_fault+0x91/0x110 [ 155.887958][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.887981][ T5830] RIP: 0033:0x7f3756b8fc97 [ 155.888009][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 155.888029][ T5830] RSP: 002b:00007fff0f728078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 155.888054][ T5830] RAX: 0000000000000000 RBX: 00007f3756c1089d RCX: 00007f3756b8fc97 [ 155.888071][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0f728130 [ 155.888086][ T5830] RBP: 00007fff0f728130 R08: 0000000000000000 R09: 0000000000000000 [ 155.888102][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0f7291c0 [ 155.888124][ T5830] R13: 00007f3756c1089d R14: 0000000000025eaf R15: 00007fff0f729200 [ 155.888165][ T5830] [ 155.888175][ T5830] F2FS-fs (loop3): Remounting filesystem read-only [ 156.333791][ T6707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.404937][ T6707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.487668][ T6707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.528541][ T6397] veth0_vlan: entered promiscuous mode [ 156.654698][ T6397] veth1_vlan: entered promiscuous mode [ 156.786263][ T6912] loop6: detected capacity change from 0 to 256 [ 156.997224][ T6397] veth0_macvtap: entered promiscuous mode [ 157.110728][ T6397] veth1_macvtap: entered promiscuous mode [ 157.289048][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.346554][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.372548][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.392043][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.407777][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.422106][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.434738][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.463248][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.587957][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.632120][ T5956] kernel write not supported for file /157/attr/exec (pid: 5956 comm: kworker/0:8) [ 157.638023][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.690243][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.713784][ T6928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.722358][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.761579][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.805272][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.844980][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.919520][ T6397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.985292][ T6397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.013484][ T6397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.031550][ T6397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.067317][ T6707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.264736][ T6707] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.306981][ T6918] loop6: detected capacity change from 0 to 32768 [ 158.334589][ T6574] veth0_vlan: entered promiscuous mode [ 158.369103][ T6918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.265 (6918) [ 158.377190][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.388997][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.473652][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.480816][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.518834][ T6918] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.546702][ T6918] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 158.577771][ T6918] BTRFS info (device loop6): disk space caching is enabled [ 158.598190][ T6918] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 158.626365][ T6574] veth1_vlan: entered promiscuous mode [ 158.708454][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.721754][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 158.766031][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.831313][ T6574] veth0_macvtap: entered promiscuous mode [ 158.864181][ T6918] BTRFS info (device loop6): rebuilding free space tree [ 158.921664][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 158.939551][ T6574] veth1_macvtap: entered promiscuous mode [ 158.956458][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.975266][ T9] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 158.996990][ T6918] BTRFS info (device loop6): disabling free space tree [ 159.011063][ T9] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 159.024478][ T6918] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.051670][ T6918] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.064482][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 159.084489][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 159.102025][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.118657][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.128299][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.160702][ T9] usb 4-1: Product: syz [ 159.177418][ T9] usb 4-1: Manufacturer: syz [ 159.194871][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.198103][ T9] usb 4-1: SerialNumber: syz [ 159.252230][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.263473][ T6944] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.285787][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.328133][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.361716][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.395682][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.432734][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.458395][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.477381][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.528702][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9 [ 159.570393][ T6197] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.573446][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.644542][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.675143][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.698289][ T6942] loop2: detected capacity change from 0 to 32768 [ 159.709335][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.722455][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.733822][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.751255][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.762076][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.781356][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.861893][ T6942] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.069811][ T6942] XFS (loop2): Ending clean mount [ 160.123543][ T6574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.179270][ T6942] XFS (loop2): Quotacheck needed: Please wait. [ 160.187347][ T6574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.197197][ T5179] bcm5974 4-1:1.0: could not read from device [ 160.197868][ T9] usb 4-1: USB disconnect, device number 7 [ 160.225762][ T6574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.261625][ T6942] XFS (loop2): Quotacheck: Done. [ 160.271717][ T6574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.320142][ T5179] bcm5974 4-1:1.0: could not read from device [ 160.360157][ T6060] bcm5974 4-1:1.0: could not read from device [ 160.521127][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.791080][ T5833] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.809251][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.992657][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.122323][ T6707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.146162][ T6987] loop3: detected capacity change from 0 to 2048 [ 161.208027][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.254796][ T6987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.479044][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.506775][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.532575][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.538818][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.704539][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.739729][ T10] usb 3-1: config 1 has no interface number 0 [ 161.778153][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.820693][ T10] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 161.845314][ T6707] veth0_vlan: entered promiscuous mode [ 161.851884][ T53] bridge_slave_1: left allmulticast mode [ 161.851879][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26232, setting to 64 [ 161.854819][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.857514][ T53] bridge_slave_1: left promiscuous mode [ 161.857716][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.898889][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.908360][ T53] bridge_slave_0: left allmulticast mode [ 161.909860][ T6988] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 161.922373][ T53] bridge_slave_0: left promiscuous mode [ 161.922576][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.947713][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.957022][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.965161][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.965431][ T6988] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 161.979530][ T10] usb 3-1: Product: syz [ 161.986165][ T10] usb 3-1: Manufacturer: syz [ 161.990843][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.006967][ T10] usb 3-1: SerialNumber: syz [ 162.007053][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.252251][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.279'. [ 162.628652][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.640418][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.673524][ T53] bond0 (unregistering): Released all slaves [ 162.728816][ T6707] veth1_vlan: entered promiscuous mode [ 162.808782][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.832885][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.874165][ T10] cdc_ncm 3-1:1.1: bind() failure [ 162.954277][ T7019] block nbd3: shutting down sockets [ 163.003284][ T6707] veth0_macvtap: entered promiscuous mode [ 163.076424][ T10] usb 3-1: USB disconnect, device number 4 [ 163.278163][ T6707] veth1_macvtap: entered promiscuous mode [ 163.385026][ T7028] sctp: [Deprecated]: syz.3.283 (pid 7028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.385026][ T7028] Use struct sctp_sack_info instead [ 163.467574][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.478572][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.488911][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.504428][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.515452][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.526024][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.535870][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.546412][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.556294][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.566876][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.579889][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.672122][ T53] hsr_slave_0: left promiscuous mode [ 163.692298][ T53] hsr_slave_1: left promiscuous mode [ 163.710529][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.726346][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.739604][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.757134][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.789294][ T53] veth1_macvtap: left promiscuous mode [ 163.799732][ T53] veth0_macvtap: left promiscuous mode [ 163.807868][ T53] veth1_vlan: left promiscuous mode [ 163.819053][ T53] veth0_vlan: left promiscuous mode [ 164.071983][ T5134] Bluetooth: hci3: command tx timeout [ 164.522099][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.539506][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.549668][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.562912][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.570662][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.852934][ T53] team0 (unregistering): Port device team_slave_1 removed [ 164.910048][ T53] team0 (unregistering): Port device team_slave_0 removed [ 165.284824][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.299188][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.309136][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.320952][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.330887][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.344271][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.355751][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.366342][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.377794][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.411350][ T6707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.441938][ T6707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.450662][ T6707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.470062][ T6707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.141923][ T5846] Bluetooth: hci3: command tx timeout [ 166.210723][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.226990][ T7004] chnl_net:caif_netlink_parms(): no params data found [ 166.253205][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.623351][ T5846] Bluetooth: hci0: command tx timeout [ 166.663724][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.746558][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.879455][ T7088] loop6: detected capacity change from 0 to 2048 [ 166.915359][ T5838] IPVS: starting estimator thread 0... [ 166.918361][ T7088] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.951568][ T7092] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 167.023667][ T7095] IPVS: using max 24 ests per chain, 57600 per kthread [ 167.091582][ T7088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.116991][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.378682][ T30] audit: type=1326 audit(1746671327.301:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.3.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3756b8e969 code=0x0 [ 167.413531][ T6197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.431655][ T52] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 167.612309][ T52] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 167.626223][ T52] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 167.637737][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.671579][ T52] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 167.698490][ T52] usb 1-1: config 220 has no interface number 2 [ 167.721108][ T52] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 167.771557][ T52] usb 1-1: config 220 interface 0 has no altsetting 0 [ 167.781510][ T52] usb 1-1: config 220 interface 76 has no altsetting 0 [ 167.791040][ T52] usb 1-1: config 220 interface 1 has no altsetting 0 [ 167.807392][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.826133][ T52] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 167.835427][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.853970][ T52] usb 1-1: Product: syz [ 167.858996][ T52] usb 1-1: Manufacturer: syz [ 167.863718][ T52] usb 1-1: SerialNumber: syz [ 167.883761][ T5895] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.017177][ T7126] ALSA: mixer_oss: invalid OSS volume ' €' [ 168.054982][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.093343][ T52] usb 1-1: selecting invalid altsetting 0 [ 168.111591][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 168.129867][ T5895] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 168.140416][ T52] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 168.140707][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.154160][ T52] usb 1-1: No valid video chain found. [ 168.169614][ T5895] usb 3-1: config 8 has no interface number 0 [ 168.174364][ T52] usb 1-1: selecting invalid altsetting 0 [ 168.176894][ T5895] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 168.191725][ T52] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 168.195035][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.209136][ T7004] bridge_slave_0: entered allmulticast mode [ 168.229689][ T5846] Bluetooth: hci3: command tx timeout [ 168.232604][ T52] usb 1-1: USB disconnect, device number 2 [ 168.247037][ T5895] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 168.271593][ T5895] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 168.285310][ T5895] usb 3-1: config 8 interface 206 has no altsetting 0 [ 168.296090][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 168.296125][ T7004] bridge_slave_0: entered promiscuous mode [ 168.305597][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.319289][ T5895] usb 3-1: Product: syz [ 168.325627][ T5895] usb 3-1: Manufacturer: syz [ 168.330353][ T5895] usb 3-1: SerialNumber: syz [ 168.362745][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.369950][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.387345][ T7004] bridge_slave_1: entered allmulticast mode [ 168.415815][ T7004] bridge_slave_1: entered promiscuous mode [ 168.427344][ T7041] chnl_net:caif_netlink_parms(): no params data found [ 168.472455][ T7133] loop3: detected capacity change from 0 to 512 [ 168.530864][ T7133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.574445][ T5895] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 168.590656][ T7133] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.606124][ T5895] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 168.701690][ T5846] Bluetooth: hci0: command tx timeout [ 168.764833][ T7004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.848706][ T5895] usb 3-1: USB disconnect, device number 5 [ 168.872975][ T5895] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 168.932389][ T5895] garmin_gps 3-1:8.206: device disconnected [ 169.024301][ T7004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.074015][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.622128][ T5858] kernel write not supported for file /53/attr/sockcreate (pid: 5858 comm: kworker/0:4) [ 169.847597][ T7004] team0: Port device team_slave_0 added [ 169.889362][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.951570][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.961359][ T7041] bridge_slave_0: entered allmulticast mode [ 170.043700][ T7041] bridge_slave_0: entered promiscuous mode [ 170.090080][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.125314][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.155495][ T7041] bridge_slave_1: entered allmulticast mode [ 170.202182][ T7041] bridge_slave_1: entered promiscuous mode [ 170.309488][ T5846] Bluetooth: hci3: command tx timeout [ 170.334509][ T7179] loop2: detected capacity change from 0 to 512 [ 170.396267][ T7183] loop6: detected capacity change from 0 to 512 [ 170.407150][ T7004] team0: Port device team_slave_1 added [ 170.435731][ T7179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.464371][ T7183] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 170.528812][ T7179] ext4 filesystem being mounted at /91/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.609076][ T7187] loop0: detected capacity change from 0 to 512 [ 170.616562][ T7183] EXT4-fs (loop6): 1 truncate cleaned up [ 170.654387][ T7183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.708749][ T7179] EXT4-fs (loop2): shut down requested (2) [ 170.725749][ T7187] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.781762][ T5846] Bluetooth: hci0: command tx timeout [ 170.793797][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.801615][ T7187] EXT4-fs (loop0): 1 truncate cleaned up [ 170.810715][ T7187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.896159][ T7041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.975856][ T7187] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.324: invalid indirect mapped block 3489660928 (level 0) [ 170.976540][ T7193] [ 170.992256][ T7193] ====================================================== [ 170.995309][ T30] audit: type=1800 audit(1746671330.901:8): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.324" name="file1" dev="loop0" ino=16 res=0 errno=0 [ 170.999257][ T7193] WARNING: possible circular locking dependency detected [ 170.999272][ T7193] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 171.025310][ T52] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.025480][ T7193] ------------------------------------------------------ [ 171.047016][ T7193] syz.6.325/7193 is trying to acquire lock: [ 171.052982][ T7193] ffff888058389808 (&sb->s_type->i_mutex_key#9/1){+.+.}-{4:4}, at: ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 171.064846][ T7193] [ 171.064846][ T7193] but task is already holding lock: [ 171.072195][ T7193] ffff888059e25208 (&ei->i_data_sem/3){++++}-{4:4}, at: ext4_setattr+0x1522/0x1bd0 [ 171.081535][ T7193] [ 171.081535][ T7193] which lock already depends on the new lock. [ 171.081535][ T7193] [ 171.091934][ T7193] [ 171.091934][ T7193] the existing dependency chain (in reverse order) is: [ 171.100941][ T7193] [ 171.100941][ T7193] -> #1 (&ei->i_data_sem/3){++++}-{4:4}: [ 171.108816][ T7193] lock_acquire+0x120/0x360 [ 171.113852][ T7193] down_write+0x96/0x1f0 [ 171.118617][ T7193] ext4_xattr_inode_lookup_create+0x14d1/0x1c20 [ 171.125376][ T7193] ext4_xattr_ibody_set+0x202/0x6a0 [ 171.131086][ T7193] ext4_xattr_set_handle+0xc9a/0x1590 [ 171.136971][ T7193] ext4_xattr_set+0x230/0x320 [ 171.142160][ T7193] __vfs_setxattr+0x43c/0x480 [ 171.147356][ T7193] __vfs_setxattr_noperm+0x12d/0x660 [ 171.153181][ T7193] vfs_setxattr+0x16b/0x2f0 [ 171.158201][ T7193] filename_setxattr+0x274/0x600 [ 171.163656][ T7193] path_setxattrat+0x364/0x3a0 [ 171.168930][ T7193] __x64_sys_lsetxattr+0xbf/0xe0 [ 171.174385][ T7193] do_syscall_64+0xf6/0x210 [ 171.179409][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.185820][ T7193] [ 171.185820][ T7193] -> #0 (&sb->s_type->i_mutex_key#9/1){+.+.}-{4:4}: [ 171.194711][ T7193] validate_chain+0xb9b/0x2140 [ 171.200026][ T7193] __lock_acquire+0xaac/0xd20 [ 171.205226][ T7193] lock_acquire+0x120/0x360 [ 171.210252][ T7193] down_write+0x96/0x1f0 [ 171.215014][ T7193] ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 171.221767][ T7193] ext4_xattr_block_set+0x223/0x2ac0 [ 171.227562][ T7193] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 171.233966][ T7193] __ext4_expand_extra_isize+0x30d/0x400 [ 171.240115][ T7193] __ext4_mark_inode_dirty+0x46c/0x700 [ 171.246093][ T7193] ext4_setattr+0x1597/0x1bd0 [ 171.251283][ T7193] notify_change+0xb36/0xe40 [ 171.256404][ T7193] do_truncate+0x19a/0x220 [ 171.261336][ T7193] vfs_truncate+0x493/0x520 [ 171.266355][ T7193] do_sys_truncate+0xdb/0x190 [ 171.271550][ T7193] __x64_sys_truncate+0x5b/0x70 [ 171.276921][ T7193] do_syscall_64+0xf6/0x210 [ 171.281947][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.288356][ T7193] [ 171.288356][ T7193] other info that might help us debug this: [ 171.288356][ T7193] [ 171.298573][ T7193] Possible unsafe locking scenario: [ 171.298573][ T7193] [ 171.306008][ T7193] CPU0 CPU1 [ 171.311356][ T7193] ---- ---- [ 171.316705][ T7193] lock(&ei->i_data_sem/3); [ 171.321307][ T7193] lock(&sb->s_type->i_mutex_key#9/1); [ 171.329401][ T7193] lock(&ei->i_data_sem/3); [ 171.336517][ T7193] lock(&sb->s_type->i_mutex_key#9/1); [ 171.342080][ T7193] [ 171.342080][ T7193] *** DEADLOCK *** [ 171.342080][ T7193] [ 171.350209][ T7193] 5 locks held by syz.6.325/7193: [ 171.355219][ T7193] #0: ffff888029988420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 171.364396][ T7193] #1: ffff888059e25378 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: do_truncate+0x186/0x220 [ 171.374691][ T7193] #2: ffff888059e25518 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_setattr+0xe9d/0x1bd0 [ 171.385080][ T7193] #3: ffff888059e25208 (&ei->i_data_sem/3){++++}-{4:4}, at: ext4_setattr+0x1522/0x1bd0 [ 171.394856][ T7193] #4: ffff888059e25008 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 171.405154][ T7193] [ 171.405154][ T7193] stack backtrace: [ 171.411032][ T7193] CPU: 0 UID: 0 PID: 7193 Comm: syz.6.325 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 171.411058][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 171.411071][ T7193] Call Trace: [ 171.411079][ T7193] [ 171.411088][ T7193] dump_stack_lvl+0x189/0x250 [ 171.411123][ T7193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.411153][ T7193] ? __pfx__printk+0x10/0x10 [ 171.411176][ T7193] ? print_lock_name+0xde/0x100 [ 171.411212][ T7193] print_circular_bug+0x2ee/0x310 [ 171.411236][ T7193] check_noncircular+0x134/0x160 [ 171.411260][ T7193] validate_chain+0xb9b/0x2140 [ 171.411293][ T7193] __lock_acquire+0xaac/0xd20 [ 171.411324][ T7193] ? ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 171.411345][ T7193] lock_acquire+0x120/0x360 [ 171.411373][ T7193] ? ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 171.411397][ T7193] ? dquot_free_inode+0x879/0xa10 [ 171.411425][ T7193] ? ext4_reserve_inode_write+0x2cf/0x330 [ 171.411455][ T7193] down_write+0x96/0x1f0 [ 171.411484][ T7193] ? ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 171.411505][ T7193] ? __pfx_down_write+0x10/0x10 [ 171.411534][ T7193] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.411558][ T7193] ? ext4_get_dquots+0xd/0x20 [ 171.411584][ T7193] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.411607][ T7193] ? dquot_drop+0x144/0x170 [ 171.411635][ T7193] ext4_xattr_inode_lookup_create+0x17d4/0x1c20 [ 171.411665][ T7193] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 171.411690][ T7193] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.411716][ T7193] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 171.411760][ T7193] ext4_xattr_block_set+0x223/0x2ac0 [ 171.411788][ T7193] ? fs_reclaim_acquire+0x7d/0x100 [ 171.411827][ T7193] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.411855][ T7193] ? __pfx_check_xattrs+0x10/0x10 [ 171.411889][ T7193] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 171.411912][ T7193] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.411935][ T7193] ? ext4_xattr_block_find+0x2d4/0x350 [ 171.411958][ T7193] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 171.412001][ T7193] __ext4_expand_extra_isize+0x30d/0x400 [ 171.412030][ T7193] __ext4_mark_inode_dirty+0x46c/0x700 [ 171.412067][ T7193] ext4_setattr+0x1597/0x1bd0 [ 171.412097][ T7193] ? __pfx_ext4_setattr+0x10/0x10 [ 171.412119][ T7193] notify_change+0xb36/0xe40 [ 171.412147][ T7193] do_truncate+0x19a/0x220 [ 171.412172][ T7193] ? __pfx_do_truncate+0x10/0x10 [ 171.412194][ T7193] ? apparmor_path_truncate+0x238/0x2d0 [ 171.412228][ T7193] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.412252][ T7193] ? mnt_get_write_access+0x223/0x2a0 [ 171.412286][ T7193] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.412313][ T7193] vfs_truncate+0x493/0x520 [ 171.412335][ T7193] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.412361][ T7193] ? __pfx_vfs_truncate+0x10/0x10 [ 171.412383][ T7193] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.412412][ T7193] do_sys_truncate+0xdb/0x190 [ 171.412436][ T7193] ? __pfx_do_sys_truncate+0x10/0x10 [ 171.412459][ T7193] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.412489][ T7193] __x64_sys_truncate+0x5b/0x70 [ 171.412513][ T7193] do_syscall_64+0xf6/0x210 [ 171.412539][ T7193] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.412562][ T7193] ? exc_page_fault+0x91/0x110 [ 171.412585][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.412606][ T7193] RIP: 0033:0x7fa05b18e969 [ 171.412624][ T7193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.412642][ T7193] RSP: 002b:00007fa05c07e038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 171.412663][ T7193] RAX: ffffffffffffffda RBX: 00007fa05b3b6080 RCX: 00007fa05b18e969 [ 171.412679][ T7193] RDX: 0000000000000000 RSI: 0000000000008008 RDI: 00002000000000c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.412692][ T7193] RBP: 00007fa05b210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 171.412706][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.412718][ T7193] R13: 0000000000000001 R14: 00007fa05b3b6080 R15: 00007fffcbaa5258 [ 171.412748][ T7193] [ 171.803249][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.866221][ T7187] EXT4-fs (loop0): Remounting filesystem read-only [ 171.997071][ T7194] loop2: detected capacity change from 0 to 32768 [ 172.003307][ T6197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.016776][ T7194] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.327 (7194) [ 172.051612][ T52] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.093023][ T52] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.155213][ T53] bridge_slave_1: left allmulticast mode [ 172.160898][ T53] bridge_slave_1: left promiscuous mode [ 172.175331][ T52] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.205945][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.208236][ T7194] BTRFS error (device loop2): open_ctree failed: -4 [ 172.251756][ T52] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 172.296479][ T7187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.305498][ T52] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 172.332123][ T52] usb 4-1: string descriptor 0 read error: -71 [ 172.338337][ T52] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.362649][ T53] bridge_slave_0: left allmulticast mode [ 172.368302][ T53] bridge_slave_0: left promiscuous mode [ 172.395355][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.414001][ T52] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.467976][ T52] usb 4-1: can't set config #1, error -71 [ 172.487040][ T52] usb 4-1: USB disconnect, device number 8 [ 172.861788][ T5846] Bluetooth: hci0: command tx timeout [ 172.950454][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.964500][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.974636][ T53] bond0 (unregistering): Released all slaves [ 173.020345][ T7041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.354289][ T53] hsr_slave_0: left promiscuous mode [ 173.362143][ T53] hsr_slave_1: left promiscuous mode [ 173.367897][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.377248][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.385343][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.398038][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.417769][ T53] veth1_macvtap: left promiscuous mode [ 173.434836][ T53] veth0_macvtap: left promiscuous mode [ 173.440641][ T53] veth1_vlan: left promiscuous mode [ 173.452532][ T53] veth0_vlan: left promiscuous mode [ 173.650493][ T53] team0 (unregistering): Port device team_slave_1 removed [ 173.664174][ T53] team0 (unregistering): Port device team_slave_0 removed [ 174.039376][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.086010][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.149797][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.196360][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.304537][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.379125][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.438782][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.496798][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.588917][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.647432][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.715626][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.760276][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.870738][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.917715][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.989291][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.064738][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.197035][ T53] bridge_slave_1: left allmulticast mode [ 175.204906][ T53] bridge_slave_1: left promiscuous mode [ 175.210593][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.221255][ T53] bridge_slave_0: left allmulticast mode [ 175.226959][ T53] bridge_slave_0: left promiscuous mode [ 175.234922][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.244878][ T53] bridge_slave_1: left allmulticast mode [ 175.250532][ T53] bridge_slave_1: left promiscuous mode [ 175.256438][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.265247][ T53] bridge_slave_0: left allmulticast mode [ 175.270892][ T53] bridge_slave_0: left promiscuous mode [ 175.278992][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.291292][ T53] bridge_slave_1: left allmulticast mode [ 175.299853][ T53] bridge_slave_1: left promiscuous mode [ 175.306879][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.315509][ T53] bridge_slave_0: left allmulticast mode [ 175.321154][ T53] bridge_slave_0: left promiscuous mode [ 175.327282][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.338794][ T53] bridge_slave_1: left allmulticast mode [ 175.344537][ T53] bridge_slave_1: left promiscuous mode [ 175.350195][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.362895][ T53] bridge_slave_0: left allmulticast mode [ 175.368550][ T53] bridge_slave_0: left promiscuous mode [ 175.376563][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.386857][ T53] bridge_slave_1: left allmulticast mode [ 175.393658][ T53] bridge_slave_1: left promiscuous mode [ 175.399302][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.409780][ T53] bridge_slave_0: left allmulticast mode [ 175.416050][ T53] bridge_slave_0: left promiscuous mode [ 175.422081][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.431178][ T53] bridge_slave_1: left allmulticast mode [ 175.436968][ T53] bridge_slave_1: left promiscuous mode [ 175.442775][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.451264][ T53] bridge_slave_0: left allmulticast mode [ 175.457101][ T53] bridge_slave_0: left promiscuous mode [ 175.462897][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.035296][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.045178][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.054956][ T53] bond0 (unregistering): Released all slaves [ 176.068480][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.078528][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.088455][ T53] bond0 (unregistering): Released all slaves [ 176.101802][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.115360][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.126871][ T53] bond0 (unregistering): Released all slaves [ 176.139685][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.150065][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.159510][ T53] bond0 (unregistering): Released all slaves [ 176.174842][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.185020][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.195404][ T53] bond0 (unregistering): Released all slaves [ 176.208658][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.219511][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.230778][ T53] bond0 (unregistering): Released all slaves [ 176.875472][ T53] hsr_slave_0: left promiscuous mode [ 176.881186][ T53] hsr_slave_1: left promiscuous mode [ 176.887058][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.894656][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.903540][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.910927][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.921790][ T53] hsr_slave_0: left promiscuous mode [ 176.927752][ T53] hsr_slave_1: left promiscuous mode [ 176.933471][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.940856][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.949231][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.957385][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.967399][ T53] hsr_slave_0: left promiscuous mode [ 176.973550][ T53] hsr_slave_1: left promiscuous mode [ 176.979215][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.986743][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.994559][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.002442][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.013734][ T53] hsr_slave_0: left promiscuous mode [ 177.019417][ T53] hsr_slave_1: left promiscuous mode [ 177.025540][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.033068][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.040768][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.048461][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.066755][ T53] veth1_macvtap: left promiscuous mode [ 177.072408][ T53] veth0_macvtap: left promiscuous mode [ 177.078060][ T53] veth1_vlan: left promiscuous mode [ 177.084065][ T53] veth0_vlan: left promiscuous mode [ 177.090028][ T53] veth1_macvtap: left promiscuous mode [ 177.099570][ T53] veth0_macvtap: left promiscuous mode [ 177.105270][ T53] veth1_vlan: left promiscuous mode [ 177.110510][ T53] veth0_vlan: left promiscuous mode [ 177.117942][ T53] veth1_macvtap: left promiscuous mode [ 177.123456][ T53] veth0_macvtap: left promiscuous mode [ 177.128982][ T53] veth1_vlan: left promiscuous mode [ 177.134418][ T53] veth0_vlan: left promiscuous mode [ 177.140378][ T53] veth1_macvtap: left promiscuous mode [ 177.145975][ T53] veth0_macvtap: left promiscuous mode [ 177.151598][ T53] veth1_vlan: left promiscuous mode [ 177.156895][ T53] veth0_vlan: left promiscuous mode [ 177.490438][ T53] team0 (unregistering): Port device team_slave_1 removed [ 177.518343][ T53] team0 (unregistering): Port device team_slave_0 removed [ 177.697778][ T53] team0 (unregistering): Port device team_slave_1 removed [ 177.718195][ T53] team0 (unregistering): Port device team_slave_0 removed [ 177.891068][ T53] team0 (unregistering): Port device team_slave_1 removed [ 177.915717][ T53] team0 (unregistering): Port device team_slave_0 removed [ 178.129073][ T53] team0 (unregistering): Port device team_slave_1 removed [ 178.153503][ T53] team0 (unregistering): Port device team_slave_0 removed [ 178.258321][ T53] team0 (unregistering): Port device team_slave_1 removed [ 178.283919][ T53] team0 (unregistering): Port device team_slave_0 removed [ 179.641887][ T53] IPVS: stop unused estimator thread 0...