last executing test programs: 2m8.067072142s ago: executing program 2 (id=24): shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2m7.949718252s ago: executing program 2 (id=26): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101a40, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2m4.809809722s ago: executing program 2 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x84, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRESOCT, @ANYRES16=r0, @ANYRESOCT, @ANYRESOCT], 0x6, 0x2cb, &(0x7f0000001040)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) 2m3.277279242s ago: executing program 2 (id=43): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000040)='./file2\x00', 0x14018, &(0x7f0000000080)={[{}, {@umask={'umask', 0x3d, 0x20}}, {@type={'type', 0x3d, "a7868828"}}, {@umask={'umask', 0x3d, 0x8001}}, {@nls={'nls', 0x3d, 'cp866'}}, {@umask={'umask', 0x3d, 0x9}}, {@barrier}, {@creator={'creator', 0x3d, "8e4d9137"}}, {@nobarrier}]}, 0x1, 0x6a3, &(0x7f0000000380)="$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") r0 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0x0, 0x1a, "ebbf52748b0b2aff330c21367b06624fde30887fda172ee251ca9dea03ca094880225571645cc027cd4c7a81388e08c0a4a8773191410848a89410f319bde2ed", "c11030f6991c26eb667e4d7fbaeb5be6d958df81117f6cfe5e5bf3dc30bbfb716d91ad12a0c2b9cf2e15d161e01f425260d31c04078e907e2474fe96729fd2a6", "0a8c8c37ab0bceeae83d73e25704184a6e89562a717a4af0457d7c0496069c89"}) 2m1.757687156s ago: executing program 2 (id=52): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0xb, 0x323b, 0x25}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4e23, 0x2002, 0x84000000, 0x12d5c, 0x12d5c}}, 0x44) 2m1.181655375s ago: executing program 2 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) 2m1.084658935s ago: executing program 32 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) 2m0.032340085s ago: executing program 1 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) get_robust_list(r0, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f00000001c0), 0x0, &(0x7f0000000400)={&(0x7f00000003c0)}}, &(0x7f00000004c0)=0x18) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(r7, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) syz_io_uring_setup(0x4f15, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x4, 0x352}, &(0x7f0000000080), 0x0) 1m59.115785045s ago: executing program 1 (id=77): r0 = gettid() setpgid(0xffffffffffffffff, r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) write$tun(0xffffffffffffffff, 0x0, 0x46) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x1a, 0x0, 0x0) 1m58.216829417s ago: executing program 1 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1m55.761329452s ago: executing program 1 (id=88): socket$phonet_pipe(0x23, 0x5, 0x2) 1m55.709570187s ago: executing program 1 (id=89): syz_mount_image$bcachefs(&(0x7f0000000b40), &(0x7f0000005900)='./file0\x00', 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d6669785f736166652c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c76657273696f6e5f757067726164653d6e6f6e652c736d61636b66736861743d2a2c6f626a5f747970653d28aa2900212c66756e633d4b455845435f4b45524e454c5f434845434b2c657569643d", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC, @ANYBLOB=',obj_type=BPRM_CHECK,obj_role=\',,\x00'], 0x1, 0x58de, &(0x7f000000b240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300), 0x1000a) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) 1m54.808656273s ago: executing program 1 (id=95): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x0, 0x51, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 1m39.433295859s ago: executing program 33 (id=95): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x0, 0x51, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 1m21.202290013s ago: executing program 6 (id=255): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1m18.808310789s ago: executing program 6 (id=271): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1f, @local, 0x100}}}, 0x80, 0x0}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0443050c"], 0x7) r1 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) socket$kcm(0x2, 0x1, 0x84) 1m18.72462368s ago: executing program 6 (id=273): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYBLOB="5333c923ead7d62a1aa7e1ad6926618430329b0ea6e6e24d7310d2249d89707d2a2ee55d187812e2a0109f36ed3b24151208962f1353f76d5dc207c8b61a67695d2e4632e520"], 0x1, 0x182, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) open_by_handle_at(r0, &(0x7f0000000000)=@isofs_parent={0x14, 0x2, {0x2e, 0x4, 0x7, 0xfe4b, 0x7d, 0x80101}}, 0x101000) 1m18.496834994s ago: executing program 6 (id=276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4084) 1m18.437441838s ago: executing program 6 (id=277): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[], 0x3f}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m17.74831773s ago: executing program 6 (id=278): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f080, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sync() 1m2.676827123s ago: executing program 34 (id=278): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f080, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sync() 6.51866676s ago: executing program 5 (id=873): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1ae}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 6.373881062s ago: executing program 5 (id=878): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x5}}, {0x4}}]}]}, 0x58}}, 0x0) 6.320800568s ago: executing program 5 (id=879): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x40900) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0485510, &(0x7f0000000100)={0xd, 0x1, 0x6, 0x2, &(0x7f0000001fc0)=[{}]}) 6.271787634s ago: executing program 5 (id=881): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0443050c"], 0x7) r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) socket$kcm(0x2, 0x1, 0x84) 6.200736986s ago: executing program 5 (id=884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r0, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) 6.119176602s ago: executing program 5 (id=886): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 3.833571519s ago: executing program 4 (id=945): syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.014353372s ago: executing program 4 (id=954): socket(0x10, 0x803, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0xec0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 2.94140761s ago: executing program 4 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r4 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000000)=@id, 0x10) 2.085415588s ago: executing program 4 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x40) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x9901) 2.055064937s ago: executing program 4 (id=971): r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8949, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 1.990687505s ago: executing program 3 (id=973): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 1.657656149s ago: executing program 4 (id=979): timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1.633097104s ago: executing program 35 (id=979): timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1.593515239s ago: executing program 0 (id=981): open_tree(0xffffffffffffff9c, 0x0, 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) 1.586450886s ago: executing program 3 (id=982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.489666909s ago: executing program 0 (id=983): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) 1.489441903s ago: executing program 3 (id=984): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, &(0x7f0000000340)) 1.442321733s ago: executing program 0 (id=986): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0214f9f407000904008100000000030000000000000800040006c00e00", 0x24) 1.44207304s ago: executing program 7 (id=987): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) 1.360901282s ago: executing program 7 (id=988): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004fb80)={0x5, [], 0x9, "cbae00ccb770cd"}) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e40)={0x80000001, [], 0x9, "39b2ecd97bb75e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r2, 0x540b, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000019c0)) 1.360729064s ago: executing program 0 (id=989): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) 1.359849612s ago: executing program 3 (id=990): socket$unix(0x1, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea"], 0x20000600}}, 0x0) 1.269518117s ago: executing program 0 (id=991): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/4090, 0xffa}], 0x1) 1.220582358s ago: executing program 7 (id=992): open_tree(0xffffffffffffff9c, 0x0, 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) 1.218157349s ago: executing program 3 (id=993): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2c00, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/38, 0x26) 1.117504243s ago: executing program 3 (id=994): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x10, 0x1403, 0x1, 0x70ad30, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4048086}, 0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 1.077081977s ago: executing program 7 (id=995): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() 1.076086555s ago: executing program 0 (id=996): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) 797.087417ms ago: executing program 7 (id=997): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) 0s ago: executing program 7 (id=998): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x64, &(0x7f0000000080)={0x0, 0x0, 0x11, "0300fe96fcb7012ebf3d74c975b4032d99"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): T6435] hsr_slave_1: entered promiscuous mode [ 37.400339][ T6435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.402180][ T6435] Cannot create hsr debugfs directory [ 37.483324][ T6430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.486721][ T6430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.507437][ T6430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.512760][ T6430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.553798][ T6439] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.561989][ T6439] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.567110][ T6439] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.580978][ T6439] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.599668][ T6429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.603944][ T6429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.615289][ T6429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.618444][ T6429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.656277][ T6431] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.664431][ T6431] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.673501][ T6431] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.677061][ T6431] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.701236][ T6432] Bluetooth: hci3: command tx timeout [ 37.705885][ T6435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.712815][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.715029][ T6435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.718011][ T6435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.724582][ T6435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.749080][ T6430] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.768061][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.769758][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.773310][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.774895][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.780866][ T6432] Bluetooth: hci2: command tx timeout [ 37.782099][ T6432] Bluetooth: hci1: command tx timeout [ 37.783355][ T6432] Bluetooth: hci4: command tx timeout [ 37.784604][ T6432] Bluetooth: hci0: command tx timeout [ 37.831645][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.844007][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.850605][ T6429] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.871575][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.873156][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.904983][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.906522][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.915333][ T6439] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.927443][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.928895][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.933490][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.935006][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.966747][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.976947][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.984204][ T6429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.988018][ T6439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.008299][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.053421][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.064304][ T6431] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.076930][ T6430] veth0_vlan: entered promiscuous mode [ 38.082643][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.084195][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.109161][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.114686][ T6430] veth1_vlan: entered promiscuous mode [ 38.121258][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.122716][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.125224][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.126873][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.136966][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.138653][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.145851][ T6430] veth0_macvtap: entered promiscuous mode [ 38.149153][ T6430] veth1_macvtap: entered promiscuous mode [ 38.157736][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.167337][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.179357][ T6430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.182561][ T6430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.184514][ T6430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.186300][ T6430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.239416][ T6429] veth0_vlan: entered promiscuous mode [ 38.255239][ T6435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.268242][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.272339][ T6429] veth1_vlan: entered promiscuous mode [ 38.304845][ T6429] veth0_macvtap: entered promiscuous mode [ 38.307712][ T6429] veth1_macvtap: entered promiscuous mode [ 38.352142][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.354568][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.357561][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.363161][ T4658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.364931][ T4658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.376099][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.378296][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.383736][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.387029][ T6429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.388836][ T6429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.390921][ T6429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.392745][ T6429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.418262][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.428155][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.429906][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.430463][ T6439] veth0_vlan: entered promiscuous mode [ 38.451781][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.491905][ T6439] veth1_vlan: entered promiscuous mode [ 38.506436][ T6431] veth0_vlan: entered promiscuous mode [ 38.525611][ T6430] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.529217][ T6431] veth1_vlan: entered promiscuous mode [ 38.545635][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.547412][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.549908][ T6439] veth0_macvtap: entered promiscuous mode [ 38.578798][ T6512] loop0: detected capacity change from 0 to 128 [ 38.580747][ T6512] ======================================================= [ 38.580747][ T6512] WARNING: The mand mount option has been deprecated and [ 38.580747][ T6512] and is ignored by this kernel. Remove the mand [ 38.580747][ T6512] option from the mount to silence this warning. [ 38.580747][ T6512] ======================================================= [ 38.583305][ T6439] veth1_macvtap: entered promiscuous mode [ 38.603266][ T6431] veth0_macvtap: entered promiscuous mode [ 38.606149][ T6431] veth1_macvtap: entered promiscuous mode [ 38.614748][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.616837][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.618859][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.623288][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.626116][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.629268][ T6512] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.639434][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.641570][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.647282][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.650966][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.653321][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.655613][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.657798][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.662133][ T6512] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.662910][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.667802][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.671947][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.674131][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.676851][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.679644][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.687325][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.691712][ T6431] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.693550][ T6431] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.695395][ T6431] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.697328][ T6431] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.766117][ T4658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.767771][ T4658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.769460][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.774665][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.806250][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.815199][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.817509][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.822576][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.824610][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.826644][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.831093][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.836419][ T6439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.838329][ T6439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.840084][ T6439] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.842240][ T6439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.857666][ T6435] veth0_vlan: entered promiscuous mode [ 39.046712][ T6517] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 39.484472][ T6435] veth1_vlan: entered promiscuous mode [ 39.498012][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.503426][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.512663][ T6430] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.538497][ T6435] veth0_macvtap: entered promiscuous mode [ 39.597905][ T6435] veth1_macvtap: entered promiscuous mode [ 39.613180][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.615724][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.617988][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.619827][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.623205][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.624912][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.627572][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.629884][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.636610][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.643040][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.684102][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.725579][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.735850][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.737903][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.740057][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.742913][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.745082][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.747190][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.749681][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.754221][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.757988][ T6435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.760003][ T6435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.763782][ T6435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.765741][ T6435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.781869][ T6432] Bluetooth: hci3: command tx timeout [ 39.877359][ T6432] Bluetooth: hci0: command tx timeout [ 39.879225][ T6432] Bluetooth: hci4: command tx timeout [ 39.886049][ T6432] Bluetooth: hci1: command tx timeout [ 39.887576][ T6432] Bluetooth: hci2: command tx timeout [ 40.371770][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.373643][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.431664][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.433600][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.657053][ T6532] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 40.715553][ T6542] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 40.717196][ T6542] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 40.761651][ T6542] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 40.905186][ T6540] loop0: detected capacity change from 0 to 32768 [ 40.911219][ T6540] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10 (6540) [ 41.483898][ T6540] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 41.492847][ T6540] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 41.506659][ T6540] BTRFS info (device loop0): using free-space-tree [ 41.552304][ T6549] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 41.655289][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 41.799000][ T6540] BTRFS info (device loop0): rebuilding free space tree [ 41.912458][ T53] Bluetooth: hci3: command tx timeout [ 41.940280][ T53] Bluetooth: hci2: command tx timeout [ 41.942102][ T6432] Bluetooth: hci1: command tx timeout [ 41.943836][ T6432] Bluetooth: hci4: command tx timeout [ 42.623380][ T6540] fs-verity: sha512 using implementation "sha512-arm64" [ 42.985615][ T6540] fs-verity (loop0, inode 258): Error -4 building Merkle tree [ 43.024476][ T6540] BTRFS: error (device loop0) in rollback_verity:484: errno=-4 unknown (failed to start transaction in verity rollback 258) [ 43.032697][ T6540] BTRFS info (device loop0 state E): forced readonly [ 43.036666][ T6540] BTRFS error (device loop0 state E): failed to rollback verity items: -4 [ 43.152562][ T6430] BTRFS info (device loop0 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 43.889941][ T6554] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 43.944601][ T6442] Bluetooth: hci3: command tx timeout [ 43.997732][ T6554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 44.025006][ T6442] Bluetooth: hci2: command tx timeout [ 44.029836][ T6442] Bluetooth: hci4: command tx timeout [ 44.516422][ T6554] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 44.534228][ T6554] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 44.550097][ T6554] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 44.551838][ T6554] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.239379][ T6554] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.455631][ T6554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 45.457143][ T6554] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 45.460054][ T6554] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 45.463102][ T6554] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 45.465184][ T6554] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 45.467872][ T6554] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 45.819524][ T6628] kAFS: No cell specified [ 45.980952][ T6442] Bluetooth: hci1: command 0x0c1a tx timeout [ 46.683197][ T6442] Bluetooth: hci2: command 0x0c1a tx timeout [ 47.710222][ T30] audit: type=1326 audit(47.090:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6632 comm="syz.1.33" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x0 [ 47.732431][ T6442] Bluetooth: hci4: command 0x0c1a tx timeout [ 47.732488][ T6442] Bluetooth: hci3: command 0x0c1a tx timeout [ 47.774258][ T6636] Zero length message leads to an empty skb [ 47.811386][ T6643] loop2: detected capacity change from 0 to 256 [ 47.813152][ T6643] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0xffffffffffffffffÿÿ01777777777777777777777' [ 48.585967][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 48.833797][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 49.301153][ T6660] bridge0: port 3(syz_tun) entered blocking state [ 49.302762][ T6660] bridge0: port 3(syz_tun) entered disabled state [ 49.304280][ T6660] syz_tun: entered allmulticast mode [ 49.313388][ T6660] syz_tun: entered promiscuous mode [ 49.315803][ T6660] bridge0: port 3(syz_tun) entered blocking state [ 49.317418][ T6660] bridge0: port 3(syz_tun) entered forwarding state [ 49.338566][ T6662] loop2: detected capacity change from 0 to 1024 [ 49.797435][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 49.799192][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 50.014972][ T6442] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 50.720383][ T6442] Bluetooth: hci1: command 0x0c1a tx timeout [ 50.803338][ T6439] hfsplus: walked past end of dir [ 50.900593][ T6442] Bluetooth: hci2: command 0x0c1a tx timeout [ 51.074724][ T30] audit: type=1326 audit(50.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.1.48" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8734a2a8 code=0x0 [ 51.410295][ T6657] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 51.537109][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.539190][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.550878][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.567160][ T53] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 51.571053][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.601322][ T6707] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.604666][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.606651][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.614594][ T6698] bridge0: port 3(syz_tun) entered blocking state [ 51.616073][ T6698] bridge0: port 3(syz_tun) entered disabled state [ 51.617485][ T6698] syz_tun: entered allmulticast mode [ 51.619943][ T6698] syz_tun: entered promiscuous mode [ 51.624997][ T6698] bridge0: port 3(syz_tun) entered blocking state [ 51.626540][ T6698] bridge0: port 3(syz_tun) entered forwarding state [ 51.628514][ T6708] loop4: detected capacity change from 0 to 1024 [ 51.747811][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.121067][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.393078][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.482013][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.711817][ T6699] chnl_net:caif_netlink_parms(): no params data found [ 53.378157][ T6442] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 53.473433][ T44] bridge_slave_1: left allmulticast mode [ 53.475252][ T44] bridge_slave_1: left promiscuous mode [ 53.477207][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.483522][ T6745] loop0: detected capacity change from 0 to 1024 [ 53.524424][ T44] bridge_slave_0: left allmulticast mode [ 53.525757][ T44] bridge_slave_0: left promiscuous mode [ 53.527143][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.592227][ T6745] loop0: detected capacity change from 1024 to 3 [ 53.599972][ T6745] Dev loop0: unable to read RDB block 3 [ 53.601447][ T6745] loop0: unable to read partition table [ 53.603817][ T6745] loop0: partition table beyond EOD, truncated [ 53.608293][ T6745] loop_reread_partitions: partition scan of loop0 (ë¿Rt‹ *ÿ3 !6{bOÞ0ˆÚ.âQÊêÊ H€"Uqd\À'ÍLz8ŽÀ¤¨w1‘AH¨”ó½â) failed (rc=-5) [ 53.630449][ T6442] Bluetooth: hci4: command tx timeout [ 54.239371][ T779] kworker/u8:9: attempt to access beyond end of device [ 54.239371][ T779] loop0: rw=1, sector=206, nr_sectors = 8 limit=3 [ 54.244989][ T779] kworker/u8:9: attempt to access beyond end of device [ 54.244989][ T779] loop0: rw=1, sector=86, nr_sectors = 16 limit=3 [ 54.248393][ T779] kworker/u8:9: attempt to access beyond end of device [ 54.248393][ T779] loop0: rw=0, sector=78, nr_sectors = 2 limit=3 [ 54.257457][ T779] Buffer I/O error on dev loop0, logical block 39, async page read [ 54.259186][ T779] kworker/u8:9: attempt to access beyond end of device [ 54.259186][ T779] loop0: rw=0, sector=80, nr_sectors = 2 limit=3 [ 54.265176][ T779] Buffer I/O error on dev loop0, logical block 40, async page read [ 54.266824][ T779] kworker/u8:9: attempt to access beyond end of device [ 54.266824][ T779] loop0: rw=0, sector=82, nr_sectors = 2 limit=3 [ 54.269643][ T779] Buffer I/O error on dev loop0, logical block 41, async page read [ 54.275855][ T779] kworker/u8:9: attempt to access beyond end of device [ 54.275855][ T779] loop0: rw=0, sector=84, nr_sectors = 2 limit=3 [ 54.278838][ T779] Buffer I/O error on dev loop0, logical block 42, async page read [ 54.299032][ T779] hfsplus: b-tree write err: -5, ino 8 [ 54.328504][ T43] kworker/u8:2: attempt to access beyond end of device [ 54.328504][ T43] loop0: rw=2049, sector=198, nr_sectors = 16 limit=3 [ 55.620364][ T6747] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 55.659621][ T6786] loop0: detected capacity change from 0 to 32768 [ 55.669448][ T6786] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.83 (6786) [ 55.690670][ T6786] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 55.692867][ T6786] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 55.705356][ T6786] BTRFS info (device loop0): using free-space-tree [ 55.710441][ T6442] Bluetooth: hci4: command tx timeout [ 55.875088][ T6786] BTRFS info (device loop0): rebuilding free space tree [ 55.887994][ T6804] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.937114][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.984515][ T6430] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 55.995796][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.036930][ T44] bond0 (unregistering): Released all slaves [ 56.086801][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.088299][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.089844][ T6699] bridge_slave_0: entered allmulticast mode [ 56.091741][ T6699] bridge_slave_0: entered promiscuous mode [ 56.107789][ T6777] bridge0: port 3(syz_tun) entered disabled state [ 56.139731][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.156621][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.758523][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.760370][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.762082][ T6699] bridge_slave_1: entered allmulticast mode [ 56.763957][ T6699] bridge_slave_1: entered promiscuous mode [ 56.945409][ T6815] netlink: 'syz.4.86': attribute type 4 has an invalid length. [ 57.005196][ T6819] netlink: 'syz.4.86': attribute type 17 has an invalid length. [ 57.067742][ T6699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.081490][ T6699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.083655][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 57.123845][ T6821] loop1: detected capacity change from 0 to 32768 [ 57.176041][ T6821] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [ 57.386719][ T6821] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,version_upgrade=none [ 57.397783][ T6821] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 57.525628][ T6821] bcachefs (loop1): accounting_read... done [ 57.572451][ T6821] bcachefs (loop1): alloc_read... done [ 57.576831][ T6821] bcachefs (loop1): stripes_read... done [ 57.578175][ T6821] bcachefs (loop1): snapshots_read... done [ 57.592050][ T6821] bcachefs (loop1): journal_replay... done [ 57.600219][ T6821] bcachefs (loop1): resume_logged_ops... done [ 57.601619][ T6821] bcachefs (loop1): delete_dead_inodes... done [ 57.609728][ T6821] bcachefs (loop1): going read-write [ 57.622975][ T6821] bcachefs (loop1): done starting filesystem [ 57.625719][ T6699] team0: Port device team_slave_0 added [ 57.637243][ T6699] team0: Port device team_slave_1 added [ 57.710306][ T44] hsr_slave_0: left promiscuous mode [ 57.746919][ T44] hsr_slave_1: left promiscuous mode [ 57.800233][ T6442] Bluetooth: hci4: command tx timeout [ 57.840276][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.842037][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.844405][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.846093][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.861286][ T6842] loop3: detected capacity change from 0 to 32768 [ 57.871897][ T6842] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.94 (6842) [ 57.881499][ T44] veth1_macvtap: left promiscuous mode [ 57.884862][ T6842] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 57.886658][ T44] veth0_macvtap: left promiscuous mode [ 57.887089][ T6842] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 57.890295][ T6842] BTRFS info (device loop3): using free-space-tree [ 57.893508][ T44] veth1_vlan: left promiscuous mode [ 57.898382][ T44] veth0_vlan: left promiscuous mode [ 57.996171][ T6842] BTRFS info (device loop3): rebuilding free space tree [ 58.209789][ T6429] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 58.567881][ T6874] loop0: detected capacity change from 0 to 1024 [ 58.621285][ T6874] loop0: detected capacity change from 1024 to 3 [ 58.629679][ T6874] Dev loop0: unable to read RDB block 3 [ 58.632123][ T6874] loop0: unable to read partition table [ 58.633984][ T6874] loop0: partition table beyond EOD, truncated [ 58.638681][ T6874] loop_reread_partitions: partition scan of loop0 (ë¿Rt‹ *ÿ3 !6{bOÞ0ˆÚ.âQÊêÊ H€"Uqd\À'ÍLz8ŽÀ¤¨w1‘AH¨”ó½â) failed (rc=-5) [ 58.653777][ T4658] kworker/u8:11: attempt to access beyond end of device [ 58.653777][ T4658] loop0: rw=1, sector=206, nr_sectors = 8 limit=3 [ 58.656694][ T4658] kworker/u8:11: attempt to access beyond end of device [ 58.656694][ T4658] loop0: rw=1, sector=86, nr_sectors = 16 limit=3 [ 58.659778][ T4658] kworker/u8:11: attempt to access beyond end of device [ 58.659778][ T4658] loop0: rw=0, sector=78, nr_sectors = 2 limit=3 [ 58.662933][ T4658] Buffer I/O error on dev loop0, logical block 39, async page read [ 58.664673][ T4658] Buffer I/O error on dev loop0, logical block 40, async page read [ 58.666750][ T4658] Buffer I/O error on dev loop0, logical block 41, async page read [ 58.668449][ T4658] Buffer I/O error on dev loop0, logical block 42, async page read [ 58.670379][ T4658] hfsplus: b-tree write err: -5, ino 8 [ 59.789308][ T44] team0 (unregistering): Port device team_slave_1 removed [ 59.860290][ T53] Bluetooth: hci4: command tx timeout [ 59.972549][ T44] team0 (unregistering): Port device team_slave_0 removed [ 62.093776][ T6879] bridge0: port 3(syz_tun) entered disabled state [ 62.102072][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.104817][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.130880][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.135034][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.160185][ T6699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.165765][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.171846][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.177474][ T6699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.225715][ T6889] netlink: 'syz.4.101': attribute type 4 has an invalid length. [ 62.283325][ T6894] netlink: 'syz.4.101': attribute type 17 has an invalid length. [ 62.334038][ T6699] hsr_slave_0: entered promiscuous mode [ 62.370608][ T6699] hsr_slave_1: entered promiscuous mode [ 62.411584][ T6699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.419248][ T6699] Cannot create hsr debugfs directory [ 62.651634][ T6699] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.658312][ T6699] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.671583][ T6699] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.685786][ T6699] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.815487][ T6900] loop4: detected capacity change from 0 to 32768 [ 62.823149][ T6699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.837325][ T6900] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [ 62.862477][ T6699] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.887521][ T4658] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.889097][ T4658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.906575][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.908119][ T4658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.980779][ T6903] loop0: detected capacity change from 0 to 32768 [ 63.009971][ T6903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.106 (6903) [ 63.014522][ T6900] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 63.016594][ T6900] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 63.037035][ T6903] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 63.052229][ T6903] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 63.054177][ T6903] BTRFS info (device loop0): using free-space-tree [ 63.078790][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.174729][ T6903] BTRFS info (device loop0): rebuilding free space tree [ 63.196673][ T6900] bcachefs: bch2_fs_get_tree() error: EINVAL [ 63.336887][ T6430] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 63.424961][ T6699] veth0_vlan: entered promiscuous mode [ 63.448039][ T6699] veth1_vlan: entered promiscuous mode [ 63.475360][ T6699] veth0_macvtap: entered promiscuous mode [ 63.478232][ T6699] veth1_macvtap: entered promiscuous mode [ 63.497208][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.499370][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.502441][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.504541][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.506532][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.519695][ T6945] loop4: detected capacity change from 0 to 1024 [ 63.521825][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.523813][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.525760][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.538162][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.554841][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.558754][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.567795][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.576746][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.578739][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.582660][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.584581][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.586555][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.596399][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.611719][ T6699] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.613827][ T6699] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.618503][ T6699] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.624720][ T6699] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.716575][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.718431][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.764342][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.770750][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.885263][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.900530][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.015998][ T6965] netlink: 'syz.5.115': attribute type 4 has an invalid length. [ 64.039535][ T6965] netlink: 'syz.5.115': attribute type 17 has an invalid length. [ 64.310200][ T6975] loop0: detected capacity change from 0 to 1024 [ 64.380200][ T6975] loop0: detected capacity change from 1024 to 3 [ 64.383214][ T6975] Dev loop0: unable to read RDB block 3 [ 64.384515][ T6975] loop0: unable to read partition table [ 64.385795][ T6975] loop0: partition table beyond EOD, truncated [ 64.387262][ T6975] loop_reread_partitions: partition scan of loop0 (ë¿Rt‹ *ÿ3 !6{bOÞ0ˆÚ.âQÊêÊ H€"Uqd\À'ÍLz8ŽÀ¤¨w1‘AH¨”ó½â) failed (rc=-5) [ 64.425135][ T11] bio_check_eod: 4 callbacks suppressed [ 64.425151][ T11] kworker/u8:0: attempt to access beyond end of device [ 64.425151][ T11] loop0: rw=1, sector=206, nr_sectors = 8 limit=3 [ 64.432790][ T11] kworker/u8:0: attempt to access beyond end of device [ 64.432790][ T11] loop0: rw=1, sector=86, nr_sectors = 16 limit=3 [ 64.435748][ T11] kworker/u8:0: attempt to access beyond end of device [ 64.435748][ T11] loop0: rw=0, sector=78, nr_sectors = 2 limit=3 [ 64.438404][ T11] Buffer I/O error on dev loop0, logical block 39, async page read [ 64.454501][ T11] kworker/u8:0: attempt to access beyond end of device [ 64.454501][ T11] loop0: rw=0, sector=80, nr_sectors = 2 limit=3 [ 64.457405][ T11] Buffer I/O error on dev loop0, logical block 40, async page read [ 64.459159][ T11] kworker/u8:0: attempt to access beyond end of device [ 64.459159][ T11] loop0: rw=0, sector=82, nr_sectors = 2 limit=3 [ 64.477669][ T11] Buffer I/O error on dev loop0, logical block 41, async page read [ 64.479436][ T11] kworker/u8:0: attempt to access beyond end of device [ 64.479436][ T11] loop0: rw=0, sector=84, nr_sectors = 2 limit=3 [ 64.485877][ T11] Buffer I/O error on dev loop0, logical block 42, async page read [ 64.487647][ T11] hfsplus: b-tree write err: -5, ino 8 [ 64.499401][ T11] kworker/u8:0: attempt to access beyond end of device [ 64.499401][ T11] loop0: rw=2049, sector=198, nr_sectors = 16 limit=3 [ 64.517974][ T2346] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.519535][ T2346] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.636491][ T6971] loop5: detected capacity change from 0 to 32768 [ 64.656774][ T6971] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.117 (6971) [ 64.672384][ T6973] loop3: detected capacity change from 0 to 32768 [ 64.682773][ T6973] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [ 64.686868][ T6971] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 64.689081][ T6971] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 64.693252][ T6971] BTRFS info (device loop5): using free-space-tree [ 64.748413][ T6971] BTRFS info (device loop5): rebuilding free space tree [ 64.786954][ T6973] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 64.788919][ T6973] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 64.854124][ T6973] bcachefs: bch2_fs_get_tree() error: EINVAL [ 64.884746][ T6699] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 65.940447][ T7022] netlink: 'syz.5.128': attribute type 4 has an invalid length. [ 65.947668][ T7022] netlink: 'syz.5.128': attribute type 17 has an invalid length. [ 66.129880][ T7006] loop0: detected capacity change from 0 to 32768 [ 66.141213][ T7006] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.132 (7006) [ 66.151632][ T7006] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 66.153767][ T7006] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 66.188920][ T7006] BTRFS info (device loop0): using free-space-tree [ 66.218628][ T7030] loop3: detected capacity change from 0 to 1024 [ 66.304457][ T7030] loop0: detected capacity change from 32768 to 3 [ 66.310245][ T7030] Dev loop0: unable to read RDB block 3 [ 66.311526][ T7030] loop0: unable to read partition table [ 66.312818][ T7030] loop0: partition table beyond EOD, truncated [ 66.314191][ T7030] loop_reread_partitions: partition scan of loop0 (ë¿Rt‹ *ÿ3 !6{bOÞ0ˆÚ.âQÊêÊ H€"Uqd\À'ÍLz8ŽÀ¤¨w1‘AH¨”ó½â) failed (rc=-5) [ 66.317356][ T637] BTRFS error (device loop0): bad tree block start, mirror 1 want 5332992 have 16777216 [ 66.320854][ T7006] BTRFS warning (device loop0): couldn't read tree root [ 66.368658][ T7006] BTRFS error (device loop0): open_ctree failed [ 67.638057][ T7064] netlink: 'syz.4.140': attribute type 4 has an invalid length. [ 67.649093][ T7064] netlink: 'syz.4.140': attribute type 17 has an invalid length. [ 67.852909][ T7050] loop0: detected capacity change from 0 to 32768 [ 67.867442][ T7050] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 68.005123][ T7050] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 68.007754][ T7050] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 68.101042][ T7050] bcachefs: bch2_fs_get_tree() error: EINVAL [ 68.648712][ T7081] loop5: detected capacity change from 0 to 32768 [ 68.654492][ T7081] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.144 (7081) [ 68.659622][ T7081] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 68.663804][ T7081] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 68.665748][ T7081] BTRFS info (device loop5): using free-space-tree [ 69.303833][ T7081] BTRFS info (device loop5): rebuilding free space tree [ 69.375951][ T7108] loop3: detected capacity change from 0 to 16 [ 69.394287][ T7108] erofs: (device loop3): mounted with root inode @ nid 36. [ 69.746742][ T6699] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 70.179282][ T25] cfg80211: failed to load regulatory.db [ 70.611593][ T7127] netlink: 'syz.5.152': attribute type 4 has an invalid length. [ 70.614835][ T7128] netlink: 'syz.5.152': attribute type 17 has an invalid length. [ 70.845476][ T7125] loop4: detected capacity change from 0 to 32768 [ 70.850715][ T7125] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [ 71.212528][ T7125] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 71.219366][ T7134] loop3: detected capacity change from 0 to 32768 [ 71.225813][ T7125] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 71.235543][ T7134] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.158 (7134) [ 71.311106][ T7134] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 71.313531][ T7134] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 71.315464][ T7134] BTRFS info (device loop3): using free-space-tree [ 71.354939][ T7125] bcachefs: bch2_fs_get_tree() error: EINVAL [ 71.386164][ T7134] BTRFS info (device loop3): rebuilding free space tree [ 71.447473][ T6429] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 71.826476][ T7163] loop0: detected capacity change from 0 to 32768 [ 72.072562][ T7163] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.170 (7163) [ 72.773847][ T44] Bluetooth: hci5: Frame reassembly failed (-84) [ 72.959046][ T7163] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 73.004145][ T7163] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 73.039428][ T7163] BTRFS info (device loop0): using free-space-tree [ 73.150890][ T7167] loop4: detected capacity change from 0 to 32768 [ 73.153242][ T7167] BTRFS: device /dev/loop4 (7:4) using temp-fsid 69a6a253-0ea8-4463-96d0-a82c219f0ea6 [ 73.155427][ T7167] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.162 (7167) [ 73.269107][ T6432] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.273426][ T7167] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 73.275671][ T7167] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 73.277422][ T7167] BTRFS info (device loop4): using free-space-tree [ 73.281643][ T6432] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.284827][ T6432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.288450][ T6432] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.290726][ T6432] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.292555][ T6432] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.311831][ T7163] BTRFS info (device loop0): rebuilding free space tree [ 73.452456][ T7167] BTRFS info (device loop4): rebuilding free space tree [ 73.538205][ T6430] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 73.741504][ T6435] BTRFS info (device loop4): last unmount of filesystem 69a6a253-0ea8-4463-96d0-a82c219f0ea6 [ 73.787962][ T7193] chnl_net:caif_netlink_parms(): no params data found [ 73.942278][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.943976][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.945698][ T7193] bridge_slave_0: entered allmulticast mode [ 73.950873][ T7193] bridge_slave_0: entered promiscuous mode [ 73.958185][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.959765][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.967508][ T7193] bridge_slave_1: entered allmulticast mode [ 73.969615][ T7193] bridge_slave_1: entered promiscuous mode [ 73.999475][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.024386][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.255531][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.259498][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.284656][ T7193] team0: Port device team_slave_0 added [ 74.287946][ T7193] team0: Port device team_slave_1 added [ 74.740865][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 75.117224][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.118872][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.152997][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.160211][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.161668][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.178650][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.404732][ T6432] Bluetooth: hci6: command tx timeout [ 75.856170][ T7248] delete_channel: no stack [ 75.863063][ T7193] hsr_slave_0: entered promiscuous mode [ 75.926364][ T7244] loop0: detected capacity change from 0 to 32768 [ 75.948146][ T7244] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 75.955806][ T7193] hsr_slave_1: entered promiscuous mode [ 76.000879][ T7193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.003007][ T7193] Cannot create hsr debugfs directory [ 76.048177][ T7244] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 76.050530][ T7244] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 76.220073][ T7260] loop4: detected capacity change from 0 to 32768 [ 76.225347][ T7260] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.177 (7260) [ 76.428966][ T7244] bcachefs: bch2_fs_get_tree() error: EINVAL [ 76.801040][ T7260] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.811642][ T7260] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 76.823029][ T7260] BTRFS info (device loop4): using free-space-tree [ 76.952854][ T7193] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 76.960633][ T7265] loop5: detected capacity change from 0 to 32768 [ 76.969139][ T7265] BTRFS: device /dev/loop5 (7:5) using temp-fsid 44abede7-6138-475d-a720-6cff28059f17 [ 76.973760][ T7193] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.980336][ T7265] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.178 (7265) [ 76.998523][ T7193] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 77.108734][ T7193] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 77.140006][ T7265] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 77.143407][ T7265] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 77.145213][ T7265] BTRFS info (device loop5): using free-space-tree [ 77.465003][ T4658] Bluetooth: hci5: Frame reassembly failed (-84) [ 77.466969][ T713] Bluetooth: hci5: Frame reassembly failed (-84) [ 77.479833][ T53] Bluetooth: hci6: command tx timeout [ 77.768311][ T7260] BTRFS info (device loop4): rebuilding free space tree [ 77.797480][ T7265] BTRFS info (device loop5): rebuilding free space tree [ 77.888111][ T6435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 77.908453][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.919724][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.927314][ T713] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.928814][ T713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.941447][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.942927][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.986581][ T7193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.995861][ T7193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.671445][ T6699] BTRFS info (device loop5): last unmount of filesystem 44abede7-6138-475d-a720-6cff28059f17 [ 78.683163][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.041219][ T30] audit: type=1326 audit(79.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz.4.185" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8274a2a8 code=0x0 [ 79.464890][ T6432] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 79.600285][ T6432] Bluetooth: hci6: command tx timeout [ 79.913823][ T7193] veth0_vlan: entered promiscuous mode [ 79.918300][ T7193] veth1_vlan: entered promiscuous mode [ 79.928305][ T7193] veth0_macvtap: entered promiscuous mode [ 79.932285][ T7193] veth1_macvtap: entered promiscuous mode [ 79.938827][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.941096][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.943214][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.945314][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.947268][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.949572][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.951697][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.953752][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.955722][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.957801][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.976728][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.979813][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.988054][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.990848][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.993203][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.995833][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.998090][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.000215][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.002604][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.004707][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.006911][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.010067][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.014405][ T7193] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.016278][ T7193] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.018330][ T7193] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.020033][ T7193] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.144330][ T7352] loop4: detected capacity change from 0 to 32768 [ 80.180363][ T7352] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [ 80.451094][ T7352] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 80.453067][ T7352] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 80.576197][ T779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.577964][ T779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.602939][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.604775][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.638801][ T7352] bcachefs: bch2_fs_get_tree() error: EINVAL [ 80.825777][ T7369] loop5: detected capacity change from 0 to 32768 [ 80.889968][ T7369] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.195 (7369) [ 81.218258][ T7369] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.227107][ T7369] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 81.265405][ T7365] loop0: detected capacity change from 0 to 32768 [ 81.270274][ T7365] BTRFS: device /dev/loop0 (7:0) using temp-fsid 3fae12fa-d35a-4be1-b9d5-d4305b8193b1 [ 81.272460][ T7365] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.194 (7365) [ 81.278440][ T7369] BTRFS info (device loop5): using free-space-tree [ 81.367449][ T7387] netlink: 'syz.6.166': attribute type 4 has an invalid length. [ 81.377232][ T7365] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.379522][ T7365] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 81.388431][ T7365] BTRFS info (device loop0): using free-space-tree [ 81.397865][ T7387] netlink: 'syz.6.166': attribute type 17 has an invalid length. [ 81.430230][ T7369] BTRFS info (device loop5): rebuilding free space tree [ 81.637247][ T6432] Bluetooth: hci6: command tx timeout [ 81.738890][ T30] audit: type=1326 audit(81.710:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.6.199" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d14a2a8 code=0x0 [ 82.191128][ T7365] BTRFS info (device loop0): rebuilding free space tree [ 82.226839][ T7365] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 82.368514][ T6699] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.936920][ T6430] BTRFS info (device loop0): last unmount of filesystem 3fae12fa-d35a-4be1-b9d5-d4305b8193b1 [ 82.962303][ T7437] batman_adv: batadv0: Adding interface: ip6gretap1 [ 82.963768][ T7437] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.974131][ T7437] batman_adv: batadv0: Interface activated: ip6gretap1 [ 83.262067][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.271740][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.952730][ T7441] loop4: detected capacity change from 0 to 32768 [ 83.985003][ T7441] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [ 84.778465][ T7441] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 84.810356][ T7441] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 84.889997][ T7461] loop3: detected capacity change from 0 to 32768 [ 84.893987][ T7461] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.214 (7461) [ 84.898457][ T7441] bcachefs: bch2_fs_get_tree() error: EINVAL [ 84.967539][ T7461] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 84.969782][ T7461] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 84.977006][ T7461] BTRFS info (device loop3): using free-space-tree [ 85.112456][ T6432] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 85.281623][ T30] audit: type=1326 audit(85.250:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.5.216" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x0 [ 85.715497][ T7465] loop6: detected capacity change from 0 to 32768 [ 85.736500][ T7465] BTRFS: device /dev/loop6 (7:6) using temp-fsid 5a294047-2b54-4c79-bc1e-385755974efd [ 85.738620][ T7465] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.215 (7465) [ 85.886216][ T7501] loop5: detected capacity change from 0 to 16 [ 85.890901][ T7465] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 85.893207][ T7465] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 85.895092][ T7465] BTRFS info (device loop6): using free-space-tree [ 85.897042][ T7501] erofs: (device loop5): mounted with root inode @ nid 36. [ 86.652109][ T7461] BTRFS info (device loop3): rebuilding free space tree [ 86.664600][ T7465] BTRFS info (device loop6): rebuilding free space tree [ 86.696027][ T7461] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 86.848942][ T6429] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.968827][ T7193] BTRFS info (device loop6): last unmount of filesystem 5a294047-2b54-4c79-bc1e-385755974efd [ 87.140397][ T6432] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 87.387669][ T30] audit: type=1326 audit(87.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.231" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c74a2a8 code=0x0 [ 88.831939][ T6840] Allocator stuck? Waited for 30 seconds [ 88.831968][ T6840] Allocator debug: [ 88.831975][ T6840] capacity1536 [ 88.831982][ T6840] reserved 31232 [ 88.831989][ T6840] hidden 0 [ 88.831996][ T6840] btree 0 [ 88.832003][ T6840] data 0 [ 88.832010][ T6840] cached 0 [ 88.832017][ T6840] reserved 0 [ 88.832024][ T6840] online_reserved 1024 [ 88.832031][ T6840] nr_inodes 0 [ 88.832038][ T6840] [ 88.832045][ T6840] freelist_wait waiting [ 88.832052][ T6840] open buckets allocated1 [ 88.832059][ T6840] open buckets total 1024 [ 88.832066][ T6840] open_buckets_wait empty [ 88.832073][ T6840] open_buckets_btree 0 [ 88.832080][ T6840] open_buckets_user 0 [ 88.832087][ T6840] btree reserve cache 0 [ 88.832094][ T6840] [ 88.832100][ T6840] Dev 0: [ 88.832107][ T6840] buckets sectors fragmented [ 88.832115][ T6840] free 0 0 0 [ 88.832123][ T6840] sb 0 0 0 [ 88.832131][ T6840] journal 0 0 0 [ 88.832139][ T6840] btree 0 0 0 [ 88.832147][ T6840] user 0 0 0 [ 88.832155][ T6840] cached 0 0 0 [ 88.832163][ T6840] parity 0 0 0 [ 88.832171][ T6840] stripe 0 0 0 [ 88.832179][ T6840] need_gc_gens 0 0 0 [ 88.832188][ T6840] need_discard 0 0 0 [ 88.832195][ T6840] unstriped 0 0 0 [ 88.832204][ T6840] capacity 128 [ 88.832211][ T6840] [ 88.832217][ T6840] reserves: [ 88.832224][ T6840] stripe 60 [ 88.832231][ T6840] normal 58 [ 88.832238][ T6840] copygc 56 [ 88.832245][ T6840] btree 28 [ 88.832252][ T6840] btree_copygc 0 [ 88.832259][ T6840] reclaim 0 [ 88.832266][ T6840] interior_updates 0 [ 88.832273][ T6840] [ 88.832280][ T6840] open buckets 0 [ 88.832287][ T6840] buckets to invalidate 0 [ 88.832294][ T6840] [ 88.832300][ T6840] Copygc debug: [ 88.832307][ T6840] running: 1 [ 88.832313][ T6840] copygc_wait:0 [ 88.832330][ T6840] copygc_wait_at:0 [ 88.832337][ T6840] Currently waiting for:0 B [ 88.832344][ T6840] Currently waiting since:708 KiB [ 88.832351][ T6840] Currently calculated wait:0 B [ 88.832359][ T6840] [ 88.832371][ T6840] Journal debug: [ 88.832378][ T6840] flags: replay_done,running,may_skip_flush [ 88.832386][ T6840] dirty journal entries: 1/32768 [ 88.832394][ T6840] seq: 11 [ 88.832401][ T6840] seq_ondisk: 11 [ 88.832408][ T6840] last_seq: 11 [ 88.832415][ T6840] last_seq_ondisk: 11 [ 88.832422][ T6840] flushed_seq_ondisk: 11 [ 88.832429][ T6840] watermark: stripe [ 88.832436][ T6840] each entry reserved: 321 [ 88.832443][ T6840] nr flush writes: 1 [ 88.832451][ T6840] nr noflush writes: 0 [ 88.832458][ T6840] average write size: 2.13 KiB [ 88.832465][ T6840] nr direct reclaim: 0 [ 88.832472][ T6840] nr background reclaim: 4 [ 88.832479][ T6840] reclaim kicked: 0 [ 88.832486][ T6840] reclaim runs in: 0 ms [ 88.832494][ T6840] blocked: 0 [ 88.832501][ T6840] current entry sectors: 256 [ 88.832508][ T6840] current entry error: ok [ 88.832515][ T6840] current entry: closed [ 88.832522][ T6840] unwritten entries: [ 88.832529][ T6840] last buf closed [ 88.832536][ T6840] space: [ 88.832543][ T6840] discarded 256:1536 [ 88.832550][ T6840] clean ondisk 256:1536 [ 88.832557][ T6840] clean 256:1536 [ 88.832565][ T6840] total 256:2048 [ 88.832572][ T6840] dev 0: [ 88.832579][ T6840] nr 8 [ 88.832586][ T6840] bucket size 256 [ 88.832593][ T6840] available 6:248 [ 88.832600][ T6840] discard_idx 0 [ 88.832607][ T6840] dirty_ondisk 0 (seq 11) [ 88.832614][ T6840] dirty_idx 0 (seq 11) [ 88.832622][ T6840] cur_idx 0 (seq 11) [ 88.832629][ T6840] [ 88.971230][ T7580] loop5: detected capacity change from 0 to 16 [ 89.000494][ T7580] erofs: (device loop5): mounted with root inode @ nid 36. [ 89.358777][ T6844] Allocator stuck? Waited for 30 seconds [ 89.358825][ T6844] Allocator debug: [ 89.358833][ T6844] capacity1536 [ 89.358839][ T6844] reserved 31232 [ 89.358846][ T6844] hidden 0 [ 89.358853][ T6844] btree 0 [ 89.358860][ T6844] data 0 [ 89.358866][ T6844] cached 0 [ 89.358873][ T6844] reserved 0 [ 89.358880][ T6844] online_reserved 1024 [ 89.358887][ T6844] nr_inodes 0 [ 89.358893][ T6844] [ 89.358900][ T6844] freelist_wait waiting [ 89.358906][ T6844] open buckets allocated1 [ 89.358913][ T6844] open buckets total 1024 [ 89.358920][ T6844] open_buckets_wait empty [ 89.358927][ T6844] open_buckets_btree 0 [ 89.358934][ T6844] open_buckets_user 0 [ 89.358940][ T6844] btree reserve cache 0 [ 89.358947][ T6844] [ 89.358953][ T6844] Dev 0: [ 89.358960][ T6844] buckets sectors fragmented [ 89.358968][ T6844] free 0 0 0 [ 89.358976][ T6844] sb 0 0 0 [ 89.358984][ T6844] journal 0 0 0 [ 89.358992][ T6844] btree 0 0 0 [ 89.359000][ T6844] user 0 0 0 [ 89.359009][ T6844] cached 0 0 0 [ 89.359017][ T6844] parity 0 0 0 [ 89.359025][ T6844] stripe 0 0 0 [ 89.359033][ T6844] need_gc_gens 0 0 0 [ 89.359041][ T6844] need_discard 0 0 0 [ 89.359049][ T6844] unstriped 0 0 0 [ 89.359057][ T6844] capacity 128 [ 89.359064][ T6844] [ 89.359070][ T6844] reserves: [ 89.359077][ T6844] stripe 60 [ 89.359084][ T6844] normal 58 [ 89.359091][ T6844] copygc 56 [ 89.359098][ T6844] btree 28 [ 89.359108][ T6844] btree_copygc 0 [ 89.359115][ T6844] reclaim 0 [ 89.359122][ T6844] interior_updates 0 [ 89.359131][ T6844] [ 89.359137][ T6844] open buckets 0 [ 89.359144][ T6844] buckets to invalidate 0 [ 89.359150][ T6844] [ 89.359156][ T6844] Copygc debug: [ 89.359166][ T6844] running: 1 [ 89.359172][ T6844] copygc_wait:0 [ 89.359179][ T6844] copygc_wait_at:0 [ 89.359189][ T6844] Currently waiting for:0 B [ 89.359196][ T6844] Currently waiting since:708 KiB [ 89.359203][ T6844] Currently calculated wait:0 B [ 89.359210][ T6844] [ 89.359218][ T6844] Journal debug: [ 89.359225][ T6844] flags: replay_done,running,may_skip_flush [ 89.359232][ T6844] dirty journal entries: 1/32768 [ 89.359243][ T6844] seq: 11 [ 89.359249][ T6844] seq_ondisk: 11 [ 89.359259][ T6844] last_seq: 11 [ 89.359266][ T6844] last_seq_ondisk: 11 [ 89.359273][ T6844] flushed_seq_ondisk: 11 [ 89.359284][ T6844] watermark: stripe [ 89.359291][ T6844] each entry reserved: 321 [ 89.359298][ T6844] nr flush writes: 1 [ 89.359305][ T6844] nr noflush writes: 0 [ 89.359312][ T6844] average write size: 2.13 KiB [ 89.359325][ T6844] nr direct reclaim: 0 [ 89.359332][ T6844] nr background reclaim: 4 [ 89.359339][ T6844] reclaim kicked: 0 [ 89.359345][ T6844] reclaim runs in: 0 ms [ 89.359352][ T6844] blocked: 0 [ 89.359359][ T6844] current entry sectors: 256 [ 89.359366][ T6844] current entry error: ok [ 89.359376][ T6844] current entry: closed [ 89.359383][ T6844] unwritten entries: [ 89.359389][ T6844] last buf closed [ 89.359396][ T6844] space: [ 89.359404][ T6844] discarded 256:1536 [ 89.359412][ T6844] clean ondisk 256:1536 [ 89.359419][ T6844] clean 256:1536 [ 89.359426][ T6844] total 256:2048 [ 89.359433][ T6844] dev 0: [ 89.359439][ T6844] nr 8 [ 89.359446][ T6844] bucket size 256 [ 89.359453][ T6844] available 6:248 [ 89.359460][ T6844] discard_idx 0 [ 89.359467][ T6844] dirty_ondisk 0 (seq 11) [ 89.359474][ T6844] dirty_idx 0 (seq 11) [ 89.359481][ T6844] cur_idx 0 (seq 11) [ 89.359493][ T6844] [ 89.470026][ T7572] loop4: detected capacity change from 0 to 32768 [ 89.479534][ T7572] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.238 (7572) [ 89.484267][ T7572] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 89.484354][ T7572] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 89.484381][ T7572] BTRFS info (device loop4): using free-space-tree [ 89.676940][ T7606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.677134][ T7606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.678308][ T7572] BTRFS info (device loop4): rebuilding free space tree [ 89.685206][ T7576] loop6: detected capacity change from 0 to 32768 [ 89.695793][ T7576] BTRFS: device /dev/loop6 (7:6) using temp-fsid 830f8383-c3a7-43b6-a8e0-8f60de2c2d1d [ 89.715357][ T43] Allocator stuck? Waited for 30 seconds [ 89.715387][ T43] Allocator debug: [ 89.715395][ T43] capacity1536 [ 89.715402][ T43] reserved 31232 [ 89.715408][ T43] hidden 0 [ 89.715415][ T43] btree 0 [ 89.715422][ T43] data 0 [ 89.715429][ T43] cached 0 [ 89.715436][ T43] reserved 0 [ 89.715443][ T43] online_reserved 1024 [ 89.715450][ T43] nr_inodes 0 [ 89.715457][ T43] [ 89.715463][ T43] freelist_wait waiting [ 89.715470][ T43] open buckets allocated1 [ 89.715477][ T43] open buckets total 1024 [ 89.715484][ T43] open_buckets_wait empty [ 89.715491][ T43] open_buckets_btree 0 [ 89.715498][ T43] open_buckets_user 0 [ 89.715504][ T43] btree reserve cache 0 [ 89.715511][ T43] [ 89.715517][ T43] Dev 0: [ 89.715524][ T43] buckets sectors fragmented [ 89.715532][ T43] free 0 0 0 [ 89.715540][ T43] sb 0 0 0 [ 89.715548][ T43] journal 0 0 0 [ 89.715556][ T43] btree 0 0 0 [ 89.715563][ T43] user 0 0 0 [ 89.715571][ T43] cached 0 0 0 [ 89.715579][ T43] parity 0 0 0 [ 89.715587][ T43] stripe 0 0 0 [ 89.715595][ T43] need_gc_gens 0 0 0 [ 89.715603][ T43] need_discard 0 0 0 [ 89.715611][ T43] unstriped 0 0 0 [ 89.715618][ T43] capacity 128 [ 89.715625][ T43] [ 89.715632][ T43] reserves: [ 89.715638][ T43] stripe 60 [ 89.715645][ T43] normal 58 [ 89.715652][ T43] copygc 56 [ 89.715659][ T43] btree 28 [ 89.715666][ T43] btree_copygc 0 [ 89.715673][ T43] reclaim 0 [ 89.715685][ T43] interior_updates 0 [ 89.715692][ T43] [ 89.715699][ T43] open buckets 0 [ 89.715706][ T43] buckets to invalidate 0 [ 89.715712][ T43] [ 89.715719][ T43] Copygc debug: [ 89.715725][ T43] running: 1 [ 89.715732][ T43] copygc_wait:0 [ 89.715738][ T43] copygc_wait_at:0 [ 89.715745][ T43] Currently waiting for:0 B [ 89.715752][ T43] Currently waiting since:708 KiB [ 89.715759][ T43] Currently calculated wait:0 B [ 89.715766][ T43] [ 89.715772][ T43] Journal debug: [ 89.715779][ T43] flags: replay_done,running,may_skip_flush [ 89.715787][ T43] dirty journal entries: 1/32768 [ 89.715794][ T43] seq: 11 [ 89.715801][ T43] seq_ondisk: 11 [ 89.715808][ T43] last_seq: 11 [ 89.715815][ T43] last_seq_ondisk: 11 [ 89.715822][ T43] flushed_seq_ondisk: 11 [ 89.715829][ T43] watermark: stripe [ 89.715836][ T43] each entry reserved: 321 [ 89.715843][ T43] nr flush writes: 1 [ 89.715850][ T43] nr noflush writes: 0 [ 89.715857][ T43] average write size: 2.13 KiB [ 89.715864][ T43] nr direct reclaim: 0 [ 89.715871][ T43] nr background reclaim: 4 [ 89.715878][ T43] reclaim kicked: 0 [ 89.715885][ T43] reclaim runs in: 0 ms [ 89.715893][ T43] blocked: 0 [ 89.715899][ T43] current entry sectors: 256 [ 89.715907][ T43] current entry error: ok [ 89.715914][ T43] current entry: closed [ 89.715921][ T43] unwritten entries: [ 89.715927][ T43] last buf closed [ 89.715934][ T43] space: [ 89.715940][ T43] discarded 256:1536 [ 89.715948][ T43] clean ondisk 256:1536 [ 89.715955][ T43] clean 256:1536 [ 89.715962][ T43] total 256:2048 [ 89.715969][ T43] dev 0: [ 89.715976][ T43] nr 8 [ 89.715982][ T43] bucket size 256 [ 89.715989][ T43] available 6:248 [ 89.715996][ T43] discard_idx 0 [ 89.716004][ T43] dirty_ondisk 0 (seq 11) [ 89.716011][ T43] dirty_idx 0 (seq 11) [ 89.716018][ T43] cur_idx 0 (seq 11) [ 89.716025][ T43] [ 90.239629][ T30] audit: type=1326 audit(89.820:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7589 comm="syz.5.246" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x0 [ 90.286744][ T7576] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.239 (7576) [ 90.323420][ T7572] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 90.328405][ T7576] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.330803][ T7576] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 90.332657][ T7576] BTRFS info (device loop6): using free-space-tree [ 90.563479][ T6435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.778203][ T7576] BTRFS info (device loop6): rebuilding free space tree [ 91.258885][ T7617] loop3: detected capacity change from 0 to 32768 [ 91.271350][ T7617] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [ 91.399276][ T7193] BTRFS info (device loop6): last unmount of filesystem 830f8383-c3a7-43b6-a8e0-8f60de2c2d1d [ 91.545023][ T7617] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 91.546933][ T7617] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 91.677338][ T7667] loop0: detected capacity change from 0 to 32768 [ 91.686768][ T7667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.262 (7667) [ 91.700680][ T7617] bcachefs: bch2_fs_get_tree() error: EINVAL [ 92.626875][ T7667] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.629092][ T7667] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 92.781201][ T7667] BTRFS info (device loop0): using free-space-tree [ 93.040859][ T7667] BTRFS info (device loop0): rebuilding free space tree [ 93.074334][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.077198][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.716406][ T6430] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.851175][ T7715] loop6: detected capacity change from 0 to 16 [ 93.858781][ T7715] erofs: (device loop6): mounted with root inode @ nid 36. [ 95.780961][ T7750] loop0: detected capacity change from 0 to 16 [ 95.784854][ T7750] erofs: (device loop0): mounted with root inode @ nid 36. [ 95.849371][ T7735] loop3: detected capacity change from 0 to 32768 [ 95.856732][ T7735] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.280 (7735) [ 95.989731][ T7735] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.992192][ T7735] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 95.996200][ T7735] BTRFS info (device loop3): using free-space-tree [ 96.075785][ T7735] BTRFS info (device loop3): rebuilding free space tree [ 96.154700][ T6429] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.530950][ T6432] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 98.585941][ T7821] loop3: detected capacity change from 0 to 16 [ 98.621438][ T7821] erofs: (device loop3): mounted with root inode @ nid 36. [ 98.848663][ T7810] loop5: detected capacity change from 0 to 32768 [ 98.860581][ T7810] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.303 (7810) [ 98.966157][ T6419] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 99.040215][ T30] audit: type=1326 audit(98.940:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7822 comm="syz.4.309" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8274a2a8 code=0x0 [ 99.157530][ T6419] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.161825][ T6419] usb 1-1: not running at top speed; connect to a high speed hub [ 99.164568][ T6419] usb 1-1: config 81 has an invalid interface number: 106 but max is 0 [ 99.166565][ T6419] usb 1-1: config 81 has no interface number 0 [ 99.168332][ T6419] usb 1-1: config 81 interface 106 altsetting 196 has an endpoint descriptor with address 0x99, changing to 0x89 [ 99.175363][ T6419] usb 1-1: config 81 interface 106 has no altsetting 0 [ 99.191724][ T6419] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=30.63 [ 99.194048][ T6419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.195886][ T6419] usb 1-1: Product: syz [ 99.196784][ T6419] usb 1-1: Manufacturer: syz [ 99.204286][ T6419] usb 1-1: SerialNumber: syz [ 99.280132][ C1] hrtimer: interrupt took 37160 ns [ 99.307197][ T7810] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.309935][ T7810] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 99.311909][ T7810] BTRFS info (device loop5): using free-space-tree [ 99.331177][ T7810] BTRFS info (device loop5): rebuilding free space tree [ 99.388781][ T6699] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.453499][ T6419] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 99.462445][ T6419] usb 1-1: selecting invalid altsetting 0 [ 99.469824][ T3173] pvrusb2: Invalid write control endpoint [ 99.505657][ T6419] usb 1-1: USB disconnect, device number 2 [ 99.560747][ T3173] pvrusb2: Invalid write control endpoint [ 99.562237][ T3173] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 99.572417][ T3173] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 99.574237][ T3173] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 99.576426][ T3173] pvrusb2: Device being rendered inoperable [ 99.585377][ T3173] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 99.587015][ T3173] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 99.596688][ T3173] pvrusb2: Attached sub-driver cx25840 [ 99.615862][ T3173] pvrusb2: Attempted to execute control transfer when device not ok [ 99.618306][ T3173] pvrusb2: Attempted to execute control transfer when device not ok [ 99.620057][ T3173] pvrusb2: Attempted to execute control transfer when device not ok [ 99.623565][ T3173] pvrusb2: Attempted to execute control transfer when device not ok [ 99.625236][ T3173] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 99.674268][ T3173] pvrusb2: Attempted to execute control transfer when device not ok [ 99.676288][ T3173] tda9887 1-0043: creating new instance [ 99.677597][ T3173] tda9887 1-0043: tda988[5/6/7] found [ 99.678838][ T3173] pvrusb2: Attempted to execute control transfer when device not ok [ 99.688561][ T3173] tda9887 1-0043: i2c i/o error: rc == -5 (should be 4) [ 99.690091][ T3173] tuner: 1-0043: Tuner 74 found with type(s) Radio TV. [ 99.696405][ T7857] mmap: syz.5.314 (7857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.702564][ T3173] pvrusb2: Attached sub-driver tuner [ 99.703682][ T3173] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 99.706529][ T3173] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 99.848380][ T6419] tda9887 1-0043: destroying instance [ 100.698815][ T6432] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 100.748118][ T7879] loop0: detected capacity change from 0 to 16 [ 100.760565][ T7879] erofs: (device loop0): mounted with root inode @ nid 36. [ 101.425339][ T7877] loop4: detected capacity change from 0 to 32768 [ 101.427724][ T7877] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.321 (7877) [ 101.566160][ T7877] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.581506][ T7877] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 101.607357][ T7877] BTRFS info (device loop4): using free-space-tree [ 101.790602][ T7877] BTRFS info (device loop4): rebuilding free space tree [ 101.930780][ T6435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.749093][ T6432] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 102.787048][ T7929] loop3: detected capacity change from 0 to 16 [ 102.870475][ T7929] erofs: (device loop3): mounted with root inode @ nid 36. [ 104.247764][ T6432] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 104.384005][ T7945] loop0: detected capacity change from 0 to 32768 [ 104.461956][ T7945] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.339 (7945) [ 104.490445][ T7945] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.492875][ T7945] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 104.498571][ T7945] BTRFS info (device loop0): using free-space-tree [ 104.538926][ T7978] loop3: detected capacity change from 0 to 16 [ 104.544014][ T7978] erofs: (device loop3): mounted with root inode @ nid 36. [ 105.237781][ T7945] BTRFS info (device loop0): rebuilding free space tree [ 105.428468][ T6430] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.085275][ T6432] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 107.345047][ T8038] loop4: detected capacity change from 0 to 16 [ 107.357760][ T8038] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.705112][ T6432] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 107.825977][ T8044] loop4: detected capacity change from 0 to 32768 [ 107.846502][ T8044] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.365 (8044) [ 108.024849][ T8044] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.027150][ T8044] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 108.028952][ T8044] BTRFS info (device loop4): using free-space-tree [ 108.633791][ T8044] BTRFS info (device loop4): rebuilding free space tree [ 108.682685][ T6435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.877164][ T8085] loop3: detected capacity change from 0 to 16 [ 108.879456][ T8085] erofs: (device loop3): mounted with root inode @ nid 36. [ 109.659140][ T6432] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 109.945566][ T8120] loop0: detected capacity change from 0 to 16 [ 109.954463][ T8120] erofs: (device loop0): mounted with root inode @ nid 36. [ 110.598225][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.627676][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.631095][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.635014][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.637581][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 110.640071][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.926454][ T8128] chnl_net:caif_netlink_parms(): no params data found [ 111.009535][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.029147][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.039282][ T8128] bridge_slave_0: entered allmulticast mode [ 111.047098][ T8128] bridge_slave_0: entered promiscuous mode [ 111.055111][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.056644][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.058344][ T8128] bridge_slave_1: entered allmulticast mode [ 111.070554][ T8128] bridge_slave_1: entered promiscuous mode [ 111.116733][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.122668][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.158676][ T8128] team0: Port device team_slave_0 added [ 111.163547][ T8128] team0: Port device team_slave_1 added [ 111.182246][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.183840][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.189657][ T8128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.198794][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.201987][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.207612][ T8128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.244070][ T8164] loop0: detected capacity change from 0 to 16 [ 111.254415][ T8164] erofs: (device loop0): mounted with root inode @ nid 36. [ 111.296438][ T8128] hsr_slave_0: entered promiscuous mode [ 111.330588][ T8128] hsr_slave_1: entered promiscuous mode [ 111.361566][ T8128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.366704][ T8128] Cannot create hsr debugfs directory [ 111.469220][ T8128] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 111.474208][ T8128] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 111.477866][ T8128] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 111.487036][ T8128] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 111.508569][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.510272][ T8128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.512113][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.513699][ T8128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.556585][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.576799][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.579655][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.590447][ T6531] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.608975][ T8128] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.616186][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.617938][ T7746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.633691][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.635258][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.671892][ T8128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.750802][ T6531] usb 1-1: Using ep0 maxpacket: 32 [ 111.754819][ T6531] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 111.757952][ T6531] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 111.763545][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.765618][ T6531] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 111.768175][ T6531] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 111.775455][ T6531] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.789179][ T6531] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 111.791377][ T6531] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 111.793310][ T6531] usb 1-1: Product: syz [ 111.794409][ T6531] usb 1-1: Manufacturer: syz [ 111.795372][ T6531] usb 1-1: SerialNumber: syz [ 111.805428][ T6531] usb 1-1: config 0 descriptor?? [ 111.809443][ T6531] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 111.822943][ T6531] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 112.112105][ T8128] veth0_vlan: entered promiscuous mode [ 112.118499][ T8128] veth1_vlan: entered promiscuous mode [ 112.134757][ T8128] veth0_macvtap: entered promiscuous mode [ 112.138178][ T8128] veth1_macvtap: entered promiscuous mode [ 112.145513][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.147922][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.152371][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.155011][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.156981][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.159148][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.161268][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.163347][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.165377][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.167415][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.169528][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.171824][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.174938][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.177753][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.179889][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.182054][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.184202][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.186197][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.188429][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.190645][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.192989][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.195079][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.197130][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.200235][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.202500][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.205899][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.218476][ T8128] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.220481][ T8128] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.222225][ T8128] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.224007][ T8128] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.284296][ T7746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.289373][ T7746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.312424][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.314171][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.496776][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.499715][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.587607][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.592807][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.601603][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 112.601607][ T6484] usb 1-1: USB disconnect, device number 3 [ 112.605299][ T8194] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 112.612541][ T6484] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 112.752042][ T53] Bluetooth: hci5: command tx timeout [ 113.061919][ T8211] loop3: detected capacity change from 0 to 16 [ 113.065247][ T8211] erofs: (device loop3): mounted with root inode @ nid 36. [ 113.263150][ T53] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 114.434378][ T8237] loop3: detected capacity change from 0 to 32768 [ 114.441397][ T8237] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.418 (8237) [ 114.449747][ T8237] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.452269][ T8237] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 114.454169][ T8237] BTRFS info (device loop3): using free-space-tree [ 114.553896][ T8237] BTRFS info (device loop3): rebuilding free space tree [ 114.609456][ T6429] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.820380][ T53] Bluetooth: hci5: command tx timeout [ 115.562826][ T30] audit: type=1326 audit(115.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8265 comm="syz.3.422" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c74a2a8 code=0x0 [ 115.838518][ T8284] loop3: detected capacity change from 0 to 16 [ 115.862896][ T8284] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.828870][ T53] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 116.900259][ T53] Bluetooth: hci5: command tx timeout [ 116.929673][ T8301] loop4: detected capacity change from 0 to 32768 [ 116.943781][ T8301] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.432 (8301) [ 117.070890][ T8301] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.077313][ T8301] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 117.083477][ T8301] BTRFS info (device loop4): using free-space-tree [ 117.134224][ T8301] BTRFS info (device loop4): rebuilding free space tree [ 117.181851][ T6435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.163915][ T8355] loop7: detected capacity change from 0 to 16 [ 118.173879][ T8355] erofs: (device loop7): mounted with root inode @ nid 36. [ 119.060278][ T53] Bluetooth: hci5: command tx timeout [ 119.306481][ T8377] netlink: 20 bytes leftover after parsing attributes in process `syz.7.450'. [ 119.857302][ T8374] loop4: detected capacity change from 0 to 32768 [ 119.860472][ T8374] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.448 (8374) [ 119.867809][ T8374] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.870077][ T8374] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 119.872137][ T8374] BTRFS info (device loop4): using free-space-tree [ 119.988881][ T8374] BTRFS info (device loop4): rebuilding free space tree [ 120.117125][ T6435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.328872][ T8425] loop5: detected capacity change from 0 to 16 [ 120.356196][ T8425] erofs: (device loop5): mounted with root inode @ nid 36. [ 121.621858][ T8448] usb usb1: usbfs: process 8448 (syz.4.467) did not claim interface 0 before use [ 121.809755][ T8452] loop7: detected capacity change from 0 to 32768 [ 121.833310][ T8452] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.469 (8452) [ 121.868430][ T8452] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 121.871034][ T8452] BTRFS info (device loop7): using sha256 (sha256-ce) checksum algorithm [ 121.874153][ T8452] BTRFS info (device loop7): using free-space-tree [ 122.063494][ T8452] BTRFS info (device loop7): rebuilding free space tree [ 122.099941][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.473'. [ 122.117461][ T8483] bond_slave_0: entered promiscuous mode [ 122.118970][ T8483] bond_slave_1: entered promiscuous mode [ 122.146023][ T8483] macvtap1: entered promiscuous mode [ 122.147695][ T8483] bond0: entered promiscuous mode [ 122.149187][ T8483] macvtap1: entered allmulticast mode [ 122.190846][ T8483] bond0: entered allmulticast mode [ 122.192175][ T8483] bond_slave_0: entered allmulticast mode [ 122.193838][ T8483] bond_slave_1: entered allmulticast mode [ 122.195870][ T8483] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 122.198191][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.473'. [ 122.273450][ T8482] bond0: left allmulticast mode [ 122.274704][ T8482] bond_slave_0: left allmulticast mode [ 122.278106][ T8482] bond_slave_1: left allmulticast mode [ 122.279388][ T8482] bond0: left promiscuous mode [ 122.292296][ T8482] bond_slave_0: left promiscuous mode [ 122.293645][ T8482] bond_slave_1: left promiscuous mode [ 122.306225][ T8128] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 122.425180][ T8490] loop3: detected capacity change from 0 to 16 [ 122.437668][ T8490] erofs: (device loop3): mounted with root inode @ nid 36. [ 122.816246][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.818497][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.592135][ T8513] syz.7.484 uses obsolete (PF_INET,SOCK_PACKET) [ 123.996637][ T8517] loop3: detected capacity change from 0 to 32768 [ 124.010283][ T8517] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.486 (8517) [ 124.031185][ T8517] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.033395][ T8517] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 124.040575][ T8517] BTRFS info (device loop3): using free-space-tree [ 124.304801][ T8517] BTRFS info (device loop3): rebuilding free space tree [ 124.378640][ T6429] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.620838][ T8558] loop5: detected capacity change from 0 to 16 [ 124.628220][ T8558] erofs: (device loop5): mounted with root inode @ nid 36. [ 125.896093][ T8578] loop4: detected capacity change from 0 to 32768 [ 125.904527][ T8578] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.505 (8578) [ 125.942345][ T2346] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.943854][ T2346] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.948378][ T8578] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.956935][ T8578] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 125.958643][ T8578] BTRFS info (device loop4): using free-space-tree [ 126.107152][ T8578] BTRFS info (device loop4): rebuilding free space tree [ 126.264660][ T6435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.643934][ T8626] loop3: detected capacity change from 0 to 16 [ 126.651010][ T8626] erofs: (device loop3): mounted with root inode @ nid 36. [ 128.089070][ T30] audit: type=1326 audit(128.060:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8651 comm="syz.4.528" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8274a2a8 code=0x0 [ 128.516989][ T8648] loop7: detected capacity change from 0 to 32768 [ 128.523079][ T8648] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.525 (8648) [ 128.539983][ T8648] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.553792][ T8648] BTRFS info (device loop7): using sha256 (sha256-ce) checksum algorithm [ 128.560467][ T8648] BTRFS info (device loop7): using free-space-tree [ 129.013940][ T8648] BTRFS info (device loop7): rebuilding free space tree [ 129.021053][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.041449][ T8648] BTRFS info (device loop7): setting compat-ro feature flag for VERITY (0x4) [ 129.086148][ T8128] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.741648][ T30] audit: type=1326 audit(130.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8712 comm="syz.0.543" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b4a2a8 code=0x0 [ 131.045810][ T8721] loop4: detected capacity change from 0 to 32768 [ 131.136116][ T8721] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.547 (8721) [ 131.141711][ T8721] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.144038][ T8721] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 131.145934][ T8721] BTRFS info (device loop4): using free-space-tree [ 131.317861][ T8721] BTRFS info (device loop4): rebuilding free space tree [ 131.417674][ T8721] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 131.780833][ T6435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.344860][ T8760] loop5: detected capacity change from 0 to 16 [ 132.347095][ T8760] erofs: (device loop5): mounted with root inode @ nid 36. [ 133.668972][ T30] audit: type=1326 audit(133.640:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.7.558" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f4a2a8 code=0x0 [ 134.002466][ T8783] loop0: detected capacity change from 0 to 32768 [ 134.016665][ T8783] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.563 (8783) [ 134.082754][ T8783] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.085232][ T8783] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 134.087168][ T8783] BTRFS info (device loop0): using free-space-tree [ 134.180637][ T53] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 135.018287][ T8783] BTRFS info (device loop0): rebuilding free space tree [ 135.155231][ T8783] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 135.270734][ T6430] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.010210][ T30] audit: type=1326 audit(135.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8846 comm="syz.5.577" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x0 [ 136.277198][ T8859] loop3: detected capacity change from 0 to 32768 [ 136.279686][ T8859] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.582 (8859) [ 136.287863][ T8859] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.298109][ T8859] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 136.302419][ T8859] BTRFS info (device loop3): using free-space-tree [ 136.357873][ T8859] BTRFS info (device loop3): rebuilding free space tree [ 136.473192][ T6429] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.433034][ T8906] loop4: detected capacity change from 0 to 16 [ 138.498023][ T8906] erofs: (device loop4): mounted with root inode @ nid 36. [ 138.848553][ T30] audit: type=1326 audit(138.820:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8910 comm="syz.0.596" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b4a2a8 code=0x0 [ 138.936018][ T8916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.938487][ T8916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.060047][ T8908] loop5: detected capacity change from 0 to 32768 [ 139.064916][ T8908] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.595 (8908) [ 139.075712][ T8908] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.082378][ T8908] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 139.088206][ T8908] BTRFS info (device loop5): using free-space-tree [ 139.309439][ T8908] BTRFS info (device loop5): rebuilding free space tree [ 139.439509][ T6699] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.463073][ T53] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 141.589076][ T8971] loop5: detected capacity change from 0 to 16 [ 141.660537][ T8971] erofs: (device loop5): mounted with root inode @ nid 36. [ 141.796298][ T6484] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.826470][ T30] audit: type=1326 audit(141.800:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.612" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c74a2a8 code=0x0 [ 141.898653][ T8969] loop4: detected capacity change from 0 to 32768 [ 141.922159][ T8969] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.609 (8969) [ 141.958662][ T8969] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.961114][ T6484] usb 1-1: Using ep0 maxpacket: 16 [ 141.962647][ T8969] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 141.965013][ T8969] BTRFS info (device loop4): using free-space-tree [ 141.967203][ T6484] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 141.969431][ T6484] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.972082][ T6484] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 141.974671][ T6484] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.985586][ T6484] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.987579][ T6484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.989413][ T6484] usb 1-1: Product: syz [ 141.990655][ T6484] usb 1-1: Manufacturer: syz [ 141.991834][ T6484] usb 1-1: SerialNumber: syz [ 142.079343][ T8969] BTRFS info (device loop4): rebuilding free space tree [ 142.133526][ T6435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.332625][ T6484] usb 1-1: 0:2 : does not exist [ 142.359105][ T6484] usb 1-1: USB disconnect, device number 4 [ 144.038162][ T7198] udevd[7198]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.600350][ T30] audit: type=1326 audit(144.550:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9032 comm="syz.5.624" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x0 [ 144.706375][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'. [ 144.937550][ T9045] netlink: 44 bytes leftover after parsing attributes in process `syz.4.629'. [ 144.947166][ T9045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.629'. [ 145.325549][ T9058] process 'syz.7.634' launched './file1' with NULL argv: empty string added [ 146.769143][ T30] audit: type=1326 audit(146.740:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.7.645" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f4a2a8 code=0x0 [ 146.992085][ T9103] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 146.997056][ T9103] pim6reg0: linktype set to 0 [ 147.136631][ T9107] sctp: [Deprecated]: syz.4.652 (pid 9107) Use of int in max_burst socket option. [ 147.136631][ T9107] Use struct sctp_assoc_value instead [ 148.013875][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 148.047013][ T6484] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 148.441298][ T30] audit: type=1326 audit(148.290:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9146 comm="syz.4.669" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8274a2a8 code=0x0 [ 148.469488][ T6484] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.472762][ T6484] usb 1-1: no configurations [ 148.473755][ T6484] usb 1-1: can't read configurations, error -22 [ 150.531193][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.546309][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.112735][ T53] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 152.850976][ T53] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 153.266909][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.715'. [ 153.285723][ T53] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 154.590940][ T53] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 154.670209][ T9312] netlink: 'syz.4.728': attribute type 4 has an invalid length. [ 154.676629][ T9312] netlink: 'syz.4.728': attribute type 4 has an invalid length. [ 154.868787][ T9320] syzkaller1: entered promiscuous mode [ 154.870005][ T9320] syzkaller1: entered allmulticast mode [ 155.555892][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.710284][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 155.717412][ T8] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 155.722655][ T8] usb 1-1: config 0 has no interface number 0 [ 155.730092][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 155.737091][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.739674][ T8] usb 1-1: Product: syz [ 155.747532][ T8] usb 1-1: Manufacturer: syz [ 155.749284][ T8] usb 1-1: SerialNumber: syz [ 155.791492][ T8] usb 1-1: config 0 descriptor?? [ 155.797538][ T8] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 156.014519][ T8] usb 1-1: qt2_attach - failed to power on unit: -71 [ 156.017365][ T8] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 156.031020][ T8] usb 1-1: USB disconnect, device number 7 [ 156.102698][ T9351] loop5: detected capacity change from 0 to 16 [ 156.107863][ T9351] erofs: (device loop5): mounted with root inode @ nid 36. [ 156.328720][ T30] audit: type=1326 audit(156.300:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9357 comm="syz.7.748" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f4a2a8 code=0x0 [ 156.836099][ T9370] netlink: 'syz.0.752': attribute type 8 has an invalid length. [ 156.843166][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 157.258715][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.270297][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.991396][ T9398] loop4: detected capacity change from 0 to 16 [ 158.004553][ T9398] erofs: (device loop4): mounted with root inode @ nid 36. [ 158.165751][ T30] audit: type=1326 audit(158.140:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.7.767" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f4a2a8 code=0x0 [ 158.715896][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.780'. [ 158.717942][ T9435] bridge_slave_1: left allmulticast mode [ 158.719248][ T9435] bridge_slave_1: left promiscuous mode [ 158.721795][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.725867][ T9435] bridge_slave_0: left allmulticast mode [ 158.727083][ T9435] bridge_slave_0: left promiscuous mode [ 158.728319][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.618320][ T9477] bridge0: entered allmulticast mode [ 159.740870][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 161.241948][ T1759] IPVS: starting estimator thread 0... [ 161.330392][ T9542] IPVS: using max 27 ests per chain, 64800 per kthread [ 161.828300][ T9541] tipc: Started in network mode [ 161.829448][ T9541] tipc: Node identity ac1414aa, cluster identity 4711 [ 161.840161][ T9541] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 161.842147][ T9541] tipc: Enabled bearer , priority 10 [ 161.972023][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.110264][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.260233][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.400196][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.550224][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.690188][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.698305][ T30] audit: type=1326 audit(162.670:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.5.839" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4a2a8 code=0x0 [ 162.732045][ T9578] netlink: 32 bytes leftover after parsing attributes in process `syz.7.840'. [ 162.841925][ T25] tipc: Node number set to 2886997162 [ 162.980205][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 163.260202][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 163.790184][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 164.923849][ T9621] tipc: Started in network mode [ 164.925152][ T9621] tipc: Node identity ac1414aa, cluster identity 4711 [ 164.961231][ T9621] tipc: Enabled bearer , priority 10 [ 165.852711][ T53] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 166.080411][ T8] tipc: Node number set to 2886997162 [ 166.884891][ T30] audit: type=1326 audit(166.860:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9709 comm="syz.3.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c74a2a8 code=0x7ffc0000 [ 166.890838][ T30] audit: type=1326 audit(166.860:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9709 comm="syz.3.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c74a2a8 code=0x7ffc0000 [ 166.895385][ T30] audit: type=1326 audit(166.870:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9709 comm="syz.3.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=54 compat=0 ip=0xffff9c74a2a8 code=0x7ffc0000 [ 166.901996][ C1] net_ratelimit: 2 callbacks suppressed [ 166.902012][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 166.949272][ T30] audit: type=1326 audit(166.870:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9709 comm="syz.3.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c74a2a8 code=0x7ffc0000 [ 166.968958][ T30] audit: type=1326 audit(166.870:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9709 comm="syz.3.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c74a2a8 code=0x7ffc0000 [ 167.019263][ T53] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 167.039845][ T6420] IPVS: starting estimator thread 0... [ 167.155679][ T9725] IPVS: using max 27 ests per chain, 64800 per kthread [ 167.396733][ T25] IPVS: starting estimator thread 0... [ 167.403876][ T9752] tipc: Started in network mode [ 167.408317][ T9752] tipc: Node identity ac1414aa, cluster identity 4711 [ 167.414708][ T9752] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.418306][ T9752] tipc: Enabled bearer , priority 10 [ 167.437894][ T9758] netlink: 'syz.7.917': attribute type 10 has an invalid length. [ 167.445602][ T9758] syz_tun: entered promiscuous mode [ 167.452654][ T9758] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 167.530294][ T9753] IPVS: using max 26 ests per chain, 62400 per kthread [ 167.552342][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.690359][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.830235][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.940240][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.970188][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 168.110191][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 168.250201][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 168.400184][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 168.540250][ T25] tipc: Node number set to 2886997162 [ 168.565691][ T9811] sctp: [Deprecated]: syz.4.939 (pid 9811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.565691][ T9811] Use struct sctp_sack_info instead [ 168.695734][ T30] audit: type=1326 audit(168.670:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9821 comm="syz.4.945" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8274a2a8 code=0x0 [ 169.422412][ T30] audit: type=1326 audit(169.400:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.3.949" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c74a2a8 code=0x0 [ 169.863297][ T9856] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 170.801743][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 170.863181][ T9894] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 170.865569][ T9894] tipc: Enabled bearer , priority 10 [ 171.124260][ T6432] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.128195][ T6432] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.131894][ T6432] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.133943][ T6432] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.137063][ T6432] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.138791][ T6432] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.361592][ T9909] chnl_net:caif_netlink_parms(): no params data found [ 171.454379][ T9909] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.455930][ T9909] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.457568][ T9909] bridge_slave_0: entered allmulticast mode [ 171.469733][ T9909] bridge_slave_0: entered promiscuous mode [ 171.473020][ T9909] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.486334][ T9909] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.488151][ T9909] bridge_slave_1: entered allmulticast mode [ 171.489924][ T9909] bridge_slave_1: entered promiscuous mode [ 172.083186][ T9950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.088125][ T9950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.100391][ C1] net_ratelimit: 7 callbacks suppressed [ 172.100410][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.599366][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.999'. [ 173.140341][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.220365][ T53] Bluetooth: hci3: command tx timeout [ 174.104113][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 174.180264][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 174.806620][ T9969] loop7: detected capacity change from 0 to 16 [ 174.808868][ T9969] erofs: (device loop7): mounted with root inode @ nid 36. [ 175.220511][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 175.300387][ T53] Bluetooth: hci3: command tx timeout [ 176.260273][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.300305][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.380340][ T53] Bluetooth: hci3: command tx timeout [ 178.340270][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 179.380277][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 179.460413][ T53] Bluetooth: hci3: command tx timeout [ 180.420289][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 181.460352][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.500278][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 183.540353][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 184.580297][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 185.620317][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 186.660387][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 187.384375][ T2346] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.385753][ T2346] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.700278][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 188.740276][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 189.780290][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 190.820286][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 191.860274][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 192.180104][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz.0.996:9943] [ 192.182248][ C0] Modules linked in: [ 192.183125][ C0] irq event stamp: 6841 [ 192.183989][ C0] hardirqs last enabled at (6840): [] exit_to_kernel_mode+0xdc/0x10c [ 192.186024][ C0] hardirqs last disabled at (6841): [] el1_interrupt+0x24/0x68 [ 192.188049][ C0] softirqs last enabled at (218): [] local_bh_enable+0x10/0x34 [ 192.189849][ C0] softirqs last disabled at (230): [] sock_devmem_dontneed+0x1d8/0x5fc [ 192.191750][ C0] CPU: 0 UID: 0 PID: 9943 Comm: syz.0.996 Not tainted 6.12.0-rc7-syzkaller-g887407160d72 #0 [ 192.193784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.195971][ C0] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 192.197499][ C0] pc : ql_end_io+0x260/0x10094 [ 192.198595][ C0] lr : xas_start+0x68/0x6c4 [ 192.199630][ C0] sp : ffff8000a15a7540 [ 192.200571][ C0] x29: ffff8000a15a7540 x28: 1ffff000142b4ee0 x27: 0000000000000000 [ 192.202334][ C0] x26: dfff800000000000 x25: 1ffff000142b4ee3 x24: dfff800000000000 [ 192.204026][ C0] x23: dfff800000000000 x22: 0000000000000003 x21: ffff8000a15a7718 [ 192.205940][ C0] x20: ffff8000a15a7700 x19: 0000000000000003 x18: ffff8000a15a74a0 [ 192.207716][ C0] x17: 0000000000038413 x16: ffff800080586000 x15: 0000000000000003 [ 192.209542][ C0] x14: 1ffff000142b4ee4 x13: 0000000000000000 x12: 0000000000000000 [ 192.211260][ C0] x11: 0000000000040000 x10: 0000000000ff0100 x9 : 0000000000000002 [ 192.212991][ C0] x8 : ffff0000eb71dac0 x7 : 0000000000000000 x6 : 0000000000000000 [ 192.214952][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000010 [ 192.216471][ C0] x2 : 0000000000000008 x1 : 0000000000000003 x0 : 0000000000000002 [ 192.217866][ C0] Call trace: [ 192.218584][ C0] ql_end_io+0x260/0x10094 (P) [ 192.219845][ C0] xas_start+0x68/0x6c4 (L) [ 192.220780][ C0] xas_load+0x3c/0x50c [ 192.221639][ C0] xas_store+0x94/0x1470 [ 192.222649][ C0] __xa_erase+0x11c/0x1e0 [ 192.223595][ C0] sock_devmem_dontneed+0x2a0/0x5fc [ 192.224753][ C0] sk_setsockopt+0x7b4/0x3150 [ 192.225772][ C0] sock_setsockopt+0x68/0x80 [ 192.226831][ C0] do_sock_setsockopt+0x238/0x4e0 [ 192.228067][ C0] __sys_setsockopt+0x128/0x1a8 [ 192.229149][ C0] __arm64_sys_setsockopt+0xb8/0xd4 [ 192.230313][ C0] invoke_syscall+0x98/0x2b8 [ 192.231317][ C0] el0_svc_common+0x130/0x23c [ 192.232340][ C0] do_el0_svc+0x48/0x58 [ 192.233222][ C0] el0_svc+0x54/0x168 [ 192.234161][ C0] el0t_64_sync_handler+0x84/0x108 [ 192.235213][ C0] el0t_64_sync+0x198/0x19c [ 192.236231][ C0] Sending NMI from CPU 0 to CPUs 1: [ 192.237284][ C1] NMI backtrace for cpu 1 [ 192.238311][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-rc7-syzkaller-g887407160d72 #0 [ 192.240449][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.242627][ C1] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 192.244294][ C1] pc : arch_local_irq_enable+0x8/0xc [ 192.245354][ C1] lr : default_idle_call+0xf8/0x128 [ 192.246476][ C1] sp : ffff800097977d10 [ 192.247472][ C1] x29: ffff800097977d10 x28: dfff800000000000 x27: 1ffff00012f2efb0 [ 192.249265][ C1] x26: ffff80008f80d000 x25: 0000000000000000 x24: 0000000000000002 [ 192.251019][ C1] x23: 1ffff00011f01ab8 x22: ffff80008f80d5c0 x21: 0000000000000000 [ 192.252749][ C1] x20: ffff0000c1b80000 x19: ffff8000802fdd1c x18: 1fffe000366cb476 [ 192.254505][ C1] x17: ffff80008f80d000 x16: ffff8000802fd5e0 x15: 0000000000000001 [ 192.256146][ C1] x14: 1fffe000366cd1d0 x13: 0000000000000000 x12: 0000000000000003 [ 192.257823][ C1] x11: 0000000000000001 x10: 0000000000000003 x9 : 0000000000000000 [ 192.259515][ C1] x8 : 000000000008016b x7 : ffff8000804ab884 x6 : 0000000000000000 [ 192.261173][ C1] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008b4b3790 [ 192.262873][ C1] x2 : 0000000000000000 x1 : ffff80008b624020 x0 : ffff800123efb000 [ 192.264553][ C1] Call trace: [ 192.265315][ C1] arch_local_irq_enable+0x8/0xc (P) [ 192.266574][ C1] default_idle_call+0xf8/0x128 (L) [ 192.267725][ C1] do_idle+0x1f0/0x4e4 [ 192.268597][ C1] cpu_startup_entry+0x5c/0x74 [ 192.269629][ C1] secondary_start_kernel+0x1bc/0x1e4 [ 192.270753][ C1] __secondary_switched+0xc0/0xc4 [ 192.272268][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 192.273689][ C0] CPU: 0 UID: 0 PID: 9943 Comm: syz.0.996 Tainted: G L 6.12.0-rc7-syzkaller-g887407160d72 #0 [ 192.276083][ C0] Tainted: [L]=SOFTLOCKUP [ 192.277036][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.279220][ C0] Call trace: [ 192.279926][ C0] show_stack+0x2c/0x3c (C) [ 192.280937][ C0] dump_stack_lvl+0xe4/0x150 [ 192.281912][ C0] dump_stack+0x1c/0x28 [ 192.282894][ C0] panic+0x300/0x8a0 [ 192.283759][ C0] softlockup_fn+0x0/0x120 [ 192.284791][ C0] __hrtimer_run_queues+0x468/0xce0 [ 192.286053][ C0] hrtimer_interrupt+0x2bc/0xb58 [ 192.287099][ C0] arch_timer_handler_virt+0x74/0x88 [ 192.288348][ C0] handle_percpu_devid_irq+0x174/0x308 [ 192.289595][ C0] generic_handle_domain_irq+0x7c/0xc4 [ 192.290858][ C0] gic_handle_irq+0x6c/0x190 [ 192.291841][ C0] call_on_irq_stack+0x24/0x4c [ 192.292851][ C0] do_interrupt_handler+0xd4/0x138 [ 192.293999][ C0] el1_interrupt+0x34/0x68 [ 192.295005][ C0] el1h_64_irq_handler+0x18/0x24 [ 192.296043][ C0] el1h_64_irq+0x6c/0x70 [ 192.296958][ C0] ql_end_io+0x260/0x10094 (P) [ 192.297997][ C0] xas_start+0x68/0x6c4 (L) [ 192.299030][ C0] xas_load+0x3c/0x50c [ 192.300025][ C0] xas_store+0x94/0x1470 [ 192.300968][ C0] __xa_erase+0x11c/0x1e0 [ 192.301940][ C0] sock_devmem_dontneed+0x2a0/0x5fc [ 192.303047][ C0] sk_setsockopt+0x7b4/0x3150 [ 192.304044][ C0] sock_setsockopt+0x68/0x80 [ 192.305232][ C0] do_sock_setsockopt+0x238/0x4e0 [ 192.306301][ C0] __sys_setsockopt+0x128/0x1a8 [ 192.307519][ C0] __arm64_sys_setsockopt+0xb8/0xd4 [ 192.308637][ C0] invoke_syscall+0x98/0x2b8 [ 192.309668][ C0] el0_svc_common+0x130/0x23c [ 192.310764][ C0] do_el0_svc+0x48/0x58 [ 192.311644][ C0] el0_svc+0x54/0x168 [ 192.312548][ C0] el0t_64_sync_handler+0x84/0x108 [ 192.313629][ C0] el0t_64_sync+0x198/0x19c [ 192.314651][ C0] SMP: stopping secondary CPUs [ 192.315874][ C0] Kernel Offset: disabled [ 192.316857][ C0] CPU features: 0x40,0000081c,00800250,82017203 [ 192.318278][ C0] Memory Limit: none [ 192.344684][ C0] [ 192.345253][ C0] ================================ [ 192.346284][ C0] WARNING: inconsistent lock state [ 192.347297][ C0] 6.12.0-rc7-syzkaller-g887407160d72 #0 Tainted: G L [ 192.348881][ C0] -------------------------------- [ 192.349912][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 192.351394][ C0] syz.0.996/9943 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 192.352743][ C0] ffff80008f84ac58 (efi_rt_lock){?.+.}-{2:2}, at: arch_efi_call_virt_setup+0x24/0x30 [ 192.354828][ C0] {HARDIRQ-ON-W} state was registered at: [ 192.356110][ C0] lock_acquire+0x240/0x728 [ 192.357233][ C0] _raw_spin_lock+0x48/0x60 [ 192.358138][ C0] arch_efi_call_virt_setup+0x24/0x30 [ 192.359300][ C0] efi_call_rts+0x30/0x350 [ 192.360277][ C0] process_one_work+0x7bc/0x1600 [ 192.361322][ C0] worker_thread+0x97c/0xeec [ 192.362337][ C0] kthread+0x288/0x310 [ 192.363241][ C0] ret_from_fork+0x10/0x20 [ 192.364207][ C0] irq event stamp: 6841 [ 192.365106][ C0] hardirqs last enabled at (6840): [] exit_to_kernel_mode+0xdc/0x10c [ 192.367163][ C0] hardirqs last disabled at (6841): [] el1_interrupt+0x24/0x68 [ 192.369117][ C0] softirqs last enabled at (218): [] local_bh_enable+0x10/0x34 [ 192.371147][ C0] softirqs last disabled at (230): [] sock_devmem_dontneed+0x1d8/0x5fc [ 192.373136][ C0] [ 192.373136][ C0] other info that might help us debug this: [ 192.374815][ C0] Possible unsafe locking scenario: [ 192.374815][ C0] [ 192.376354][ C0] CPU0 [ 192.377031][ C0] ---- [ 192.377694][ C0] lock(efi_rt_lock); [ 192.378605][ C0] [ 192.379364][ C0] lock(efi_rt_lock); [ 192.380293][ C0] [ 192.380293][ C0] *** DEADLOCK *** [ 192.380293][ C0] [ 192.381912][ C0] 3 locks held by syz.0.996/9943: [ 192.383033][ C0] #0: ffff0000cfa70518 (&xa->xa_lock#21){+...}-{2:2}, at: sock_devmem_dontneed+0x1d8/0x5fc [ 192.385164][ C0] #1: ffff80008f9efee0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x74 [ 192.387321][ C0] #2: ffff800091f732e8 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x198/0xb80 [ 192.389369][ C0] [ 192.389369][ C0] stack backtrace: [ 192.390661][ C0] CPU: 0 UID: 0 PID: 9943 Comm: syz.0.996 Tainted: G L 6.12.0-rc7-syzkaller-g887407160d72 #0 [ 192.393131][ C0] Tainted: [L]=SOFTLOCKUP [ 192.394091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.396247][ C0] Call trace: [ 192.396909][ C0] show_stack+0x2c/0x3c (C) [ 192.397767][ C0] dump_stack_lvl+0xe4/0x150 [ 192.398737][ C0] dump_stack+0x1c/0x28 [ 192.399628][ C0] print_usage_bug+0x6a4/0x9c0 [ 192.400661][ C0] mark_lock_irq+0x980/0xd2c [ 192.401622][ C0] mark_lock+0x258/0x368 [ 192.402484][ C0] __lock_acquire+0xf14/0x77c8 [ 192.403585][ C0] lock_acquire+0x240/0x728 [ 192.404541][ C0] _raw_spin_lock+0x48/0x60 [ 192.405548][ C0] arch_efi_call_virt_setup+0x24/0x30 [ 192.406662][ C0] virt_efi_set_variable_nb+0x6c/0x15c [ 192.407845][ C0] efivar_set_variable_locked+0x1e4/0x20c [ 192.409028][ C0] efi_pstore_write+0x424/0x63c [ 192.410009][ C0] pstore_dump+0x77c/0xb80 [ 192.411042][ C0] kmsg_dump_desc+0x208/0x330 [ 192.412213][ C0] panic+0x358/0x8a0 [ 192.412999][ C0] softlockup_fn+0x0/0x120 [ 192.414101][ C0] __hrtimer_run_queues+0x468/0xce0 [ 192.415266][ C0] hrtimer_interrupt+0x2bc/0xb58 [ 192.416440][ C0] arch_timer_handler_virt+0x74/0x88 [ 192.417560][ C0] handle_percpu_devid_irq+0x174/0x308 [ 192.418609][ C0] generic_handle_domain_irq+0x7c/0xc4 [ 192.419787][ C0] gic_handle_irq+0x6c/0x190 [ 192.420941][ C0] call_on_irq_stack+0x24/0x4c [ 192.421884][ C0] do_interrupt_handler+0xd4/0x138 [ 192.422964][ C0] el1_interrupt+0x34/0x68 [ 192.423884][ C0] el1h_64_irq_handler+0x18/0x24 [ 192.424854][ C0] el1h_64_irq+0x6c/0x70 [ 192.425849][ C0] ql_end_io+0x260/0x10094 (P) [ 192.426889][ C0] xas_start+0x68/0x6c4 (L) [ 192.427845][ C0] xas_load+0x3c/0x50c [ 192.428727][ C0] xas_store+0x94/0x1470 [ 192.429709][ C0] __xa_erase+0x11c/0x1e0 [ 192.430574][ C0] sock_devmem_dontneed+0x2a0/0x5fc [ 192.431717][ C0] sk_setsockopt+0x7b4/0x3150 [ 192.432691][ C0] sock_setsockopt+0x68/0x80 [ 192.433687][ C0] do_sock_setsockopt+0x238/0x4e0 [ 192.434829][ C0] __sys_setsockopt+0x128/0x1a8 [ 192.435876][ C0] __arm64_sys_setsockopt+0xb8/0xd4 [ 192.436993][ C0] invoke_syscall+0x98/0x2b8 [ 192.438075][ C0] el0_svc_common+0x130/0x23c [ 192.439062][ C0] do_el0_svc+0x48/0x58 [ 192.439946][ C0] el0_svc+0x54/0x168 [ 192.440802][ C0] el0t_64_sync_handler+0x84/0x108 [ 192.441916][ C0] el0t_64_sync+0x198/0x19c [ 192.928656][ C0] Rebooting in 86400 seconds..