last executing test programs: 41.86470818s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 41.075758402s ago: executing program 4: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r0}, &(0x7f0000001a40), &(0x7f0000001a80)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.987359776s ago: executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r1, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 40.805292364s ago: executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff}, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 37.816637255s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2b, {0x2b, 0x0, "7ddeff220c0837b868d67858420f0fa2ac78caf60bb986971abb95f44914995b4aa6c3679c86271245"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 37.095492626s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)='I', 0x1}], 0x1) 36.348677392s ago: executing program 1: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, 0x0, 0xfffffffffffffffe) 36.315320927s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) 36.256580356s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @remote, @remote, [], "8529baf364d3471a42ef5f74"}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002061b76e890f7970b443330b39ead34a00103000000000008000000000001050001000700000016000300686173683a6e65742c706f72742c6e657400000005000400000000000500040000000000050005000200000014000780050015000400000008"], 0x60}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x0, 0x0, 0x10001, 0x0, 0xe}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x248, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x1}, 0x0, 0xc0, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@icmp={{0x28}, {0x0, "0bfb"}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x80001, 0x84) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14}}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f00000009c0)=[{{&(0x7f0000000580)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_retopts={{0x88, 0x0, 0x7, {[@cipso={0x86, 0x3a, 0x0, [{0x0, 0xf, "705a9519b25e17211968387b40"}, {0x0, 0xe, "e64f348761567e8dfbd72b35"}, {0x0, 0x5, 'i#>'}, {0x0, 0x9, "daa732b1c6909f"}, {0x2, 0x9, "94e41fed84a134"}]}, @timestamp={0x44, 0xc, 0x84, 0x0, 0x1, [0x1f, 0xe3de]}, @noop, @timestamp={0x44, 0x10, 0x7d, 0x0, 0x1, [0x6, 0x5e, 0x46]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x18, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x6}]}, @timestamp={0x44, 0x10, 0xed, 0x0, 0xc, [0x1ff, 0x80000001, 0xa2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x16}}}}], 0xc8}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x2}, 0x8) shutdown(0xffffffffffffffff, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {}, 0x28, {0x2, 0x0, @empty}}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x4c, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40884}, 0x4c040) 36.22588265s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x10000000000001) 36.201730554s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0xab, {0xab, 0x0, "9a76e69c85a99bf24a663725295429ac4c4d6d3750eb0ef4f28740810360214fa87b57baa140c50ef04893897a41b30728908cf649c4877970a610684780f4e25f1bf483cf47f52dae24eebb71c6ffdac79964ca41c6e0c6e9de6e957f8568f3ff90155973247ae98ee1a260c94b288d6fd8d77e80f2fec19eadabd86db4623781a1823d103d70464d111076db2e283ca0c45b27420c15c2b505325bae6be2841039cabe31e2c07a3f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 36.177955788s ago: executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0x1e, 0x9, 0x2, 0xffff, 0x245, r0, 0x3, '\x00', 0x0, r0, 0x800003, 0xffffffff}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000500)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000380)={{}, {0x0, 0x989680}}, &(0x7f0000000180)) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x23) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x144) removexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f0000000680)='./file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)={0x6589}) timer_settime(r3, 0x1, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) timer_settime(r3, 0x0, &(0x7f0000000400), &(0x7f00000004c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) unshare(0x14000000) unshare(0x2a020400) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x108) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000440)="ba4200b056ee27673667f30fa7e0c6f80a0f32660f6b143e66660fc5e8bbbaf80c66b87cc71e8066efbafc0cedbaf80c66b8fa62768766efbafc0ced0f01c866b9800000c00f326635002000000f30", 0x4f}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 36.102984959s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x0, 0x0, 0x5}}]}}]}, 0x44}}, 0x0) 36.041100579s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) 35.885873463s ago: executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}}, 0x0) 35.825111792s ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x6}]}}]}, 0x48}}, 0x0) 35.795936057s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x0, 0x6c}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'rmd160-generic\x00'}}}]}, 0x184}}, 0x0) 35.743780725s ago: executing program 3: r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x1) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) mlock2(&(0x7f000027d000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) 35.693497413s ago: executing program 3: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, 0x0, 0xfffffffffffffffe) 35.657341618s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) 34.136715183s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) 34.080957432s ago: executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@dots}, {@dots}, {@dots}, {}, {@fat=@nfs}, {@fat=@gid}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@dots}, {@dots}, {@fat=@showexec}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@dots}, {@fat=@flush}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000300)={0x0, 0x110000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000340)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004400)={0x2020}, 0xe9c9e6f) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) 33.863394465s ago: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x28800, &(0x7f0000000380)=ANY=[], 0x1, 0x68b, &(0x7f0000001200)="$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") lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) munlockall() syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, &(0x7f00000007c0)="660f388232660f2e3bb8ec008ee80f7577ad0f01cf66670f21da9a00007d00baf80c66b80814298d66efbafc0c66b8173da2d566ef0f01df0f08", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 32.649255943s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @local}, @tipc, @nl=@unspec}) 30.021850997s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x0, 0x0, 0x5}}]}}]}, 0x44}}, 0x0) 6.014617242s ago: executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0x1e, 0x9, 0x2, 0xffff, 0x245, r0, 0x3, '\x00', 0x0, r0, 0x800003, 0xffffffff}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000500)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000380)={{}, {0x0, 0x989680}}, &(0x7f0000000180)) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x23) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x144) removexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="747275737465642e636727973c22eebbcd998b4dba007793e5ec1cf79906e4cf00cbcfaafa7744e354d3d1c2e45d962f4687132f2decd027af608e7bc0b9f4f6ee54013fecadebc4d90f44a1399c5d106fd55243dc68c26dcc3992a84794a0d0d78b43fa2ec6089325a24d62e2542354890ef39410dbfd08066d8cfafff4c152ebd01c13710e9421c7d4a53948eaeab8513b9144c356890d49a7526b85b2388f1382cb01000100794abf50235580c49e99e36bcb4d77f96b9e4d6eac06d3c6bef5f10d84b5dd6301daf519cb36bfe42540274ad019b5543da76bdc4e98457e4cb471012d056435c7bcc960b0c8c0d320f28e77e0b5399e19d2d5db95785da7f4e2c5482b4dd9787c692f1c6aa4aecdb1e6671559a9e24ceab9307e36a7fb61ece4b5afa5ac69f03da2fccf71032cb35693bc19a24e2a4df071d3ee105c01d92b4afaf0ecaa87c5e027046d2107c6bb50e1d2eca007e70b7b58722d76b620e826f108055cef47571af7ab5ff2feb995d309fe32ae053d14f69600bcefcb0b0e378844c47ccafd4be029dce557be34cbc0c6c841bada60dfe19cb087495f2bbc4c41e0dc8a24a60cd00da55298fa8698fb47759916af4e984c97f07b1eaa4c0b30ab191ac10fe5a496226b5c0ca7dbad7c2feafb4001346c11fb7a74"]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f0000000680)='./file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)={0x6589}) timer_settime(r3, 0x1, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) timer_settime(r3, 0x0, &(0x7f0000000400), &(0x7f00000004c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) unshare(0x14000000) unshare(0x2a020400) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x108) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000440)="ba4200b056ee27673667f30fa7e0c6f80a0f32660f6b143e66660fc5e8bbbaf80c66b87cc71e8066efbafc0cedbaf80c66b8fa62768766efbafc0ced0f01c866b9800000c00f326635002000000f30", 0x4f}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.796178926s ago: executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}}, 0x0) 5.633719141s ago: executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0x1e, 0x9, 0x2, 0xffff, 0x245, r0, 0x3, '\x00', 0x0, r0, 0x800003, 0xffffffff}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000500)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000380)={{}, {0x0, 0x989680}}, &(0x7f0000000180)) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x23) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x144) removexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f0000000680)='./file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)={0x6589}) timer_settime(r3, 0x1, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) timer_settime(r3, 0x0, &(0x7f0000000400), &(0x7f00000004c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) unshare(0x14000000) unshare(0x2a020400) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x108) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000440)="ba4200b056ee27673667f30fa7e0c6f80a0f32660f6b143e66660fc5e8bbbaf80c66b87cc71e8066efbafc0cedbaf80c66b8fa62768766efbafc0ced0f01c866b9800000c00f326635002000000f30", 0x4f}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.623406606s ago: executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0x1e, 0x9, 0x2, 0xffff, 0x245, r0, 0x3, '\x00', 0x0, r0, 0x800003, 0xffffffff}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000500)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000380)={{}, {0x0, 0x989680}}, &(0x7f0000000180)) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x23) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x144) removexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f0000000680)='./file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)={0x6589}) timer_settime(r3, 0x1, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) timer_settime(r3, 0x0, &(0x7f0000000400), &(0x7f00000004c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) unshare(0x14000000) unshare(0x2a020400) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x108) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000440)="ba4200b056ee27673667f30fa7e0c6f80a0f32660f6b143e66660fc5e8bbbaf80c66b87cc71e8066efbafc0cedbaf80c66b8fa62768766efbafc0ced0f01c866b9800000c00f326635002000000f30", 0x4f}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x254, &(0x7f0000000840)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): ould solve the problem. [ 159.594324][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.623858][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.637954][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 159.661367][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.736386][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.766400][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.780086][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.854135][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.875854][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.901692][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.923584][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.941757][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.963924][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.987041][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.006238][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.007583][ T4561] cdc_ncm 4-1:1.0: bind() failure [ 160.021694][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.036208][ T5893] loop0: detected capacity change from 0 to 40427 [ 160.049532][ T4561] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 160.066301][ T4561] cdc_ncm 4-1:1.1: bind() failure [ 160.078800][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.101927][ T5845] device hsr_slave_0 entered promiscuous mode [ 160.120601][ T5845] device hsr_slave_1 entered promiscuous mode [ 160.132027][ T5893] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 160.145832][ T5893] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 160.158696][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.174921][ T5845] Cannot create hsr debugfs directory [ 160.212170][ T4561] usb 4-1: USB disconnect, device number 8 [ 160.222895][ T5893] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.305171][ T5906] loop1: detected capacity change from 0 to 4096 [ 160.355602][ T5893] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 160.426919][ T5893] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.428572][ T5906] NILFS (loop1): invalid segment: Checksum error in segment payload [ 160.440117][ T5893] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.453433][ T5906] NILFS (loop1): trying rollback from an earlier position [ 160.500773][ T5845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.511534][ T5906] NILFS (loop1): recovery complete [ 160.541582][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.552664][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.571480][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.619348][ T5845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.677701][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.686685][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.786634][ T5845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.879941][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.886287][ T5918] loop1: detected capacity change from 0 to 1024 [ 160.903060][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.914891][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.944862][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.954423][ T5775] device veth0_vlan entered promiscuous mode [ 161.012640][ T5845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.034846][ T5918] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 161.040824][ T5915] kvm [5913]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x86df [ 161.077424][ T5915] kvm [5913]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x30ef [ 161.132794][ T5775] device veth1_vlan entered promiscuous mode [ 161.171998][ T5918] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 161.223424][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.240211][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.259421][ T5775] device veth0_macvtap entered promiscuous mode [ 161.270050][ T5775] device veth1_macvtap entered promiscuous mode [ 161.292044][ T5925] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 161.392629][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.438407][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.460280][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.497047][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.524694][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.552003][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.567805][ T3639] Bluetooth: hci3: command 0x0419 tx timeout [ 161.596163][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.636761][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.717278][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 161.816426][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.917232][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.925652][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.044390][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.159744][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.270684][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.359538][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.501363][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.633572][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.767045][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.892939][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.953000][ T5936] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 163.018437][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.148725][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.281827][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.369046][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.369788][ T5937] loop3: detected capacity change from 0 to 1024 [ 163.438647][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.453614][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.465351][ T5937] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 163.475607][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.487899][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.501373][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.522038][ T5937] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,quota,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 163.557198][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.596891][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.616299][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.716063][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.799916][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 163.920132][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.040563][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.061474][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.118495][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.141242][ T4175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.169238][ T4175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.170960][ T5942] loop1: detected capacity change from 0 to 32768 [ 164.260384][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.274177][ T5942] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5942) [ 164.316460][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.331726][ T5942] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 164.367325][ T5942] BTRFS info (device loop1): enabling auto defrag [ 164.373806][ T5942] BTRFS info (device loop1): doing ref verification [ 164.422130][ T5942] BTRFS info (device loop1): setting nodatacow, compression disabled [ 164.431339][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.443181][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.462919][ T5942] BTRFS info (device loop1): max_inline at 1398 [ 164.473850][ T5942] BTRFS info (device loop1): disabling auto defrag [ 164.478764][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.531626][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.542252][ T5942] BTRFS info (device loop1): turning off barriers [ 164.548309][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.557173][ T5942] BTRFS info (device loop1): using free space tree [ 164.557208][ T5942] BTRFS info (device loop1): has skinny extents [ 164.609887][ T26] audit: type=1326 audit(1717164086.015:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d81ddaee9 code=0x0 [ 164.615869][ T4561] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.639588][ T4561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.658801][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.675030][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.689120][ T4561] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.696304][ T4561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.727638][ T3701] device hsr_slave_0 left promiscuous mode [ 164.751888][ T3701] device hsr_slave_1 left promiscuous mode [ 164.804579][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.836166][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.885434][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.949611][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.097693][ T3701] device bridge_slave_1 left promiscuous mode [ 165.104184][ T3701] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.169600][ T5971] loop0: detected capacity change from 0 to 32768 [ 165.189766][ T3701] device bridge_slave_0 left promiscuous mode [ 165.211236][ T3701] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.233031][ T5971] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5971) [ 165.277554][ T3701] device veth1_macvtap left promiscuous mode [ 165.295392][ T3701] device veth0_macvtap left promiscuous mode [ 165.304725][ T3701] device veth1_vlan left promiscuous mode [ 165.311032][ T5971] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 165.320391][ T3701] device veth0_vlan left promiscuous mode [ 165.326327][ T5971] BTRFS info (device loop0): enabling auto defrag [ 165.342779][ T5971] BTRFS info (device loop0): doing ref verification [ 165.369317][ T5971] BTRFS info (device loop0): setting nodatacow, compression disabled [ 165.411550][ T5971] BTRFS info (device loop0): max_inline at 1398 [ 165.429815][ T5971] BTRFS info (device loop0): disabling auto defrag [ 165.459220][ T5971] BTRFS info (device loop0): turning off barriers [ 165.480827][ T5971] BTRFS info (device loop0): using free space tree [ 165.501740][ T5971] BTRFS info (device loop0): has skinny extents [ 165.511945][ T5993] loop1: detected capacity change from 0 to 2048 [ 165.836390][ T6015] loop3: detected capacity change from 0 to 2048 [ 165.878025][ T3580] Bluetooth: hci2: command 0x0419 tx timeout [ 166.377364][ T3701] team0 (unregistering): Port device team_slave_1 removed [ 166.411142][ T3701] team0 (unregistering): Port device team_slave_0 removed [ 166.432456][ T3701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.457748][ T3701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.637905][ T3701] bond0 (unregistering): Released all slaves [ 166.718102][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.784540][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.805757][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.816062][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.858773][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.887757][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.904849][ T6049] loop3: detected capacity change from 0 to 2048 [ 166.907576][ T6056] loop2: detected capacity change from 0 to 64 [ 166.913152][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.943738][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.945385][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.968670][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.982063][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.998655][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.021287][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.035454][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.044204][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.081228][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.331605][ T6076] loop0: detected capacity change from 0 to 1024 [ 167.425829][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.437733][ T6077] overlayfs: failed to resolve './file0': -2 [ 167.442032][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.490526][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.711691][ T26] audit: type=1326 audit(1717164089.115:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d81ddaee9 code=0x0 [ 167.828736][ T26] audit: type=1326 audit(1717164089.175:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b88ccee9 code=0x0 [ 168.151309][ T6101] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 168.214744][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.239523][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.341744][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.374040][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.401860][ T5845] device veth0_vlan entered promiscuous mode [ 168.438440][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.446495][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.482134][ T5845] device veth1_vlan entered promiscuous mode [ 168.582476][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.597603][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.606574][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.674405][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.701137][ T5845] device veth0_macvtap entered promiscuous mode [ 168.731403][ T6111] loop1: detected capacity change from 0 to 64 [ 168.740483][ T5845] device veth1_macvtap entered promiscuous mode [ 168.774595][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.852485][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.884746][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.901687][ T6095] loop0: detected capacity change from 0 to 32768 [ 168.917331][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.940207][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.966275][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.997347][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.026227][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.064272][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.092057][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.107530][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.115160][ T6095] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6095) [ 169.146931][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.164975][ T6113] loop1: detected capacity change from 0 to 256 [ 169.173300][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.195978][ T6095] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 169.219892][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.234254][ T6095] BTRFS info (device loop0): using free space tree [ 169.259442][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.274482][ T6095] BTRFS info (device loop0): has skinny extents [ 169.297657][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.330828][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.368660][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.402368][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.431886][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.456191][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.488523][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.497559][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.506592][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.520539][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.530828][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.540582][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.550014][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.559083][ T6095] BTRFS info (device loop0): enabling ssd optimizations [ 169.767929][ T4039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.792277][ T4039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.847241][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 169.855247][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.872059][ T3672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.936923][ T6095] BTRFS info (device loop0): balance: start -d -m -s [ 169.954732][ T3672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.981762][ T6095] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 170.007984][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.040156][ T6095] BTRFS info (device loop0): balance: canceled [ 170.092895][ T6139] loop4: detected capacity change from 0 to 64 [ 170.221142][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.237228][ T6139] hfs: unable to locate alternate MDB [ 170.250816][ T6139] hfs: continuing without an alternate MDB [ 170.257018][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.293445][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 170.325135][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.368399][ T23] usb 2-1: config 0 descriptor?? [ 170.847360][ T23] appletouch 2-1:0.0: Failed to request geyser raw mode [ 170.856383][ T23] appletouch: probe of 2-1:0.0 failed with error -5 [ 170.879864][ T23] usb 2-1: USB disconnect, device number 3 [ 171.060427][ T6155] loop0: detected capacity change from 0 to 2048 [ 171.305839][ T26] audit: type=1326 audit(1717164092.705:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b92a34ee9 code=0x0 [ 171.343275][ T26] audit: type=1326 audit(1717164092.735:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b88ccee9 code=0x0 [ 171.497331][ T6143] loop2: detected capacity change from 0 to 32768 [ 171.512092][ T6169] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.595661][ T6143] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 171.632115][ T6143] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 171.764779][ T6143] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 171.820365][ T4562] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 171.847249][ T4562] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 171.952915][ T4562] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 105ms [ 171.970056][ T4562] gfs2: fsid=syz:syz.0: jid=0: Done [ 171.990653][ T6143] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 172.890966][ T6178] chnl_net:caif_netlink_parms(): no params data found [ 172.982260][ T6193] loop1: detected capacity change from 0 to 2048 [ 173.143346][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.177274][ T4562] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.187996][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.196244][ T6178] device bridge_slave_0 entered promiscuous mode [ 173.229552][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.238188][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.248384][ T6178] device bridge_slave_1 entered promiscuous mode [ 173.361820][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.389114][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.401364][ T6208] loop1: detected capacity change from 0 to 128 [ 173.484187][ T6204] loop0: detected capacity change from 0 to 4096 [ 173.503830][ T6178] team0: Port device team_slave_0 added [ 173.530905][ T6178] team0: Port device team_slave_1 added [ 173.567537][ T4562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.584487][ T6204] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 173.610060][ T4562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.642147][ T4562] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 173.667242][ T4562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.701809][ T4562] usb 3-1: config 0 descriptor?? [ 173.790474][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.822620][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.862547][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.879337][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.887588][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.943407][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.956586][ T4498] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 173.985773][ T4498] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 174.006116][ T4498] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 174.017596][ T6216] loop1: detected capacity change from 0 to 1024 [ 174.034718][ T6218] syz-executor.3 (pid 6218) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 174.064585][ T6178] device hsr_slave_0 entered promiscuous mode [ 174.089410][ T6178] device hsr_slave_1 entered promiscuous mode [ 174.105626][ T6178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.116278][ T6178] Cannot create hsr debugfs directory [ 174.138135][ T6216] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 174.167393][ T4562] appletouch 3-1:0.0: Failed to request geyser raw mode [ 174.174477][ T4562] appletouch: probe of 3-1:0.0 failed with error -5 [ 174.188105][ T4562] usb 3-1: USB disconnect, device number 10 [ 174.357670][ T4592] Bluetooth: hci2: command 0x0409 tx timeout [ 174.426414][ T26] audit: type=1326 audit(1717164095.825:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b92a34ee9 code=0x0 [ 174.479741][ T6218] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 174.579927][ T6178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.692519][ T6178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.742912][ T6249] loop2: detected capacity change from 0 to 128 [ 174.779881][ T6178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.875236][ T6178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.073263][ T6254] loop3: detected capacity change from 0 to 256 [ 175.152607][ T6178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.173412][ T6178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.208744][ T6178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.235666][ T6178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.490476][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.533608][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.545144][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.582630][ T6178] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.631145][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.646891][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.677009][ T4556] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.684248][ T4556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.738133][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.746279][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.798258][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.806993][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.814130][ T4556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.881601][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.955276][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.968352][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.998856][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.018244][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.040851][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.349819][ T6277] loop1: detected capacity change from 0 to 32768 [ 176.373223][ T6178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.384646][ T6178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.405234][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.436686][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.437267][ T4592] Bluetooth: hci2: command 0x041b tx timeout [ 176.457971][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.470779][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.479834][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.494767][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.514224][ T6277] XFS (loop1): Mounting V5 Filesystem [ 176.615871][ T6277] XFS (loop1): Ending clean mount [ 176.624984][ T6277] XFS (loop1): Quotacheck needed: Please wait. [ 176.671269][ T3625] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 176.718775][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.725807][ T3625] XFS (loop1): Unmount and run xfs_repair [ 176.728759][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.732992][ T3625] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 176.767218][ T3625] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 176.776189][ T3625] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 176.781385][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.785544][ T3625] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 176.802276][ T3625] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 176.811277][ T3625] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 176.822520][ T3625] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.864231][ T3625] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.886037][ T3625] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.928447][ T3625] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 176.975491][ T6277] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 177.065451][ T3938] XFS (loop1): Unmounting Filesystem [ 177.297733][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.310501][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.377759][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.392826][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.393342][ T6281] loop2: detected capacity change from 0 to 32768 [ 177.420586][ T6178] device veth0_vlan entered promiscuous mode [ 177.436190][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.448670][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.463273][ T6178] device veth1_vlan entered promiscuous mode [ 177.499909][ T6281] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 177.517516][ T6281] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 177.520520][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.534256][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.539552][ T6281] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 177.543007][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.560192][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.567037][ T4592] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 177.575687][ T4592] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 177.590947][ T6178] device veth0_macvtap entered promiscuous mode [ 177.624621][ T6178] device veth1_macvtap entered promiscuous mode [ 177.653273][ T4592] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 77ms [ 177.661065][ T4592] gfs2: fsid=syz:syz.0: jid=0: Done [ 177.666545][ T3701] device hsr_slave_0 left promiscuous mode [ 177.667666][ T6281] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 177.680039][ T3701] device hsr_slave_1 left promiscuous mode [ 177.690969][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.698817][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.712396][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.727552][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.738324][ T3701] device bridge_slave_1 left promiscuous mode [ 177.744821][ T3701] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.753294][ T3701] device bridge_slave_0 left promiscuous mode [ 177.760212][ T3701] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.773554][ T3701] device veth1_macvtap left promiscuous mode [ 177.779807][ T3701] device veth0_macvtap left promiscuous mode [ 177.785940][ T3701] device veth1_vlan left promiscuous mode [ 177.791920][ T3701] device veth0_vlan left promiscuous mode [ 178.075748][ T3701] team0 (unregistering): Port device team_slave_1 removed [ 178.093128][ T3701] team0 (unregistering): Port device team_slave_0 removed [ 178.108318][ T3701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.124752][ T3701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.204614][ T3701] bond0 (unregistering): Released all slaves [ 178.276674][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.292542][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.316783][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.328100][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.338527][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.349535][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.360041][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.372088][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.383137][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.393897][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.405548][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.416314][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.425661][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.436074][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.447790][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.458552][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.469119][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.481424][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.492596][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.502870][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.513437][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.524704][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.532905][ T3580] Bluetooth: hci2: command 0x040f tx timeout [ 178.534938][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.548712][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.561262][ T6178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.570950][ T6178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.580378][ T6178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.595894][ T6178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.824672][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.851838][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.974548][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.158404][ T3625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.186312][ T3625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.014807][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.102273][ T26] audit: type=1326 audit(1717164101.505:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bd88e3ee9 code=0x0 [ 180.347968][ T6338] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.607384][ T4593] Bluetooth: hci2: command 0x0419 tx timeout [ 180.673506][ T6351] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.702503][ T6354] loop4: detected capacity change from 0 to 256 [ 180.717789][ T6351] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.769309][ T6356] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.776646][ T6354] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 180.808805][ T6354] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 180.818493][ T6351] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.415409][ T6327] loop3: detected capacity change from 0 to 40427 [ 182.536259][ T6327] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.651938][ T6378] loop4: detected capacity change from 0 to 32768 [ 182.759653][ T6327] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 182.793781][ T6378] XFS (loop4): Mounting V5 Filesystem [ 182.798249][ T6395] loop2: detected capacity change from 0 to 256 [ 182.856280][ T6327] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.924405][ T6378] XFS (loop4): Ending clean mount [ 182.935633][ T6378] XFS (loop4): Quotacheck needed: Please wait. [ 182.964012][ T4721] attempt to access beyond end of device [ 182.964012][ T4721] loop3: rw=2049, want=45104, limit=40427 [ 183.021504][ T4593] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 183.045848][ T4593] XFS (loop4): Unmount and run xfs_repair [ 183.051977][ T4593] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 183.061746][ T4593] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 183.070923][ T4593] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 183.080081][ T4593] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 183.089232][ T4593] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 183.099190][ T4593] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 183.108321][ T4593] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.117387][ T4593] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.126467][ T4593] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.135797][ T3702] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 183.173261][ T6378] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 183.310501][ T6178] XFS (loop4): Unmounting Filesystem [ 184.380328][ T6409] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.431249][ T6409] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.471919][ T6409] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.538142][ T6409] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.678049][ T6422] SET target dimension over the limit! [ 184.736335][ T6387] loop0: detected capacity change from 0 to 32768 [ 184.854020][ T6387] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 184.886219][ T6429] loop2: detected capacity change from 0 to 2048 [ 184.889000][ T6427] Cannot find del_set index 0 as target [ 184.898362][ T6387] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 184.952318][ T6387] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 184.996741][ T4556] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 185.003457][ T6429] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.007903][ T4556] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 185.105884][ T6429] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz-executor.2: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 185.202808][ T4556] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 194ms [ 185.212884][ T4556] gfs2: fsid=syz:syz.0: jid=0: Done [ 185.234692][ T6387] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 185.387941][ T6443] Cannot find del_set index 0 as target [ 185.668563][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.697938][ T6461] SET target dimension over the limit! [ 185.707509][ T6462] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 185.913882][ T6466] loop3: detected capacity change from 0 to 2048 [ 186.005360][ T6466] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.048538][ T6473] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.065482][ T6466] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz-executor.3: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 186.143455][ T6473] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.153937][ T6478] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.167576][ T6481] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.958599][ T6487] loop1: detected capacity change from 0 to 131072 [ 187.028631][ T6487] F2FS-fs (loop1): invalid crc value [ 187.079761][ T6487] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.133342][ T6486] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 187.147509][ T6487] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 187.186458][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 187.275130][ T26] audit: type=1804 audit(2000000001.700:65): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1633130129/syzkaller.if9BoX/189/file2/bus" dev="loop1" ino=10 res=1 errno=0 [ 187.455653][ T6509] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 187.517285][ T6506] KVM: debugfs: duplicate directory 6506-5 [ 187.729592][ T6516] Cannot find del_set index 0 as target [ 187.756798][ T6518] loop3: detected capacity change from 0 to 24 [ 188.307575][ T6528] fscrypt (sda1, inode 1951): Direct key flag not allowed with different contents and filenames modes [ 188.636961][ T6513] loop4: detected capacity change from 0 to 32768 [ 189.211278][ T6532] loop3: detected capacity change from 0 to 131072 [ 189.243426][ T6514] loop2: detected capacity change from 0 to 32768 [ 189.266812][ T6532] F2FS-fs (loop3): invalid crc value [ 189.282327][ T6513] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6513) [ 189.318209][ T6532] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.364251][ T6532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 189.373239][ T6514] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (6514) [ 189.378051][ T6513] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 189.400299][ T26] audit: type=1800 audit(2000000003.830:66): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 189.483301][ T6513] BTRFS info (device loop4): using free space tree [ 189.517643][ T6513] BTRFS info (device loop4): has skinny extents [ 189.601248][ T26] audit: type=1804 audit(2000000003.860:67): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2270511316/syzkaller.PEgwrl/115/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 189.741885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 189.746723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 189.751238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #388!!! [ 189.848548][ T6558] loop0: detected capacity change from 0 to 24 [ 189.962604][ T6513] BTRFS info (device loop4): enabling ssd optimizations [ 190.157306][ T4593] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 190.517485][ T4593] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 190.542651][ T4593] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.575784][ T4593] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.604092][ T4593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.620063][ T6581] loop0: detected capacity change from 0 to 8192 [ 190.653565][ T6562] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.684723][ T6581] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 190.716904][ T6581] REISERFS (device loop0): using ordered data mode [ 190.758899][ T6581] reiserfs: using flush barriers [ 190.780283][ T6585] loop3: detected capacity change from 0 to 8192 [ 190.796836][ T6581] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.818062][ T6581] REISERFS (device loop0): checking transaction log (loop0) [ 190.840218][ T6585] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 190.849567][ T6585] REISERFS (device loop3): using ordered data mode [ 190.855290][ T6581] REISERFS (device loop0): Using r5 hash to sort names [ 190.856090][ T6585] reiserfs: using flush barriers [ 190.873771][ T6585] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.894334][ T6585] REISERFS (device loop3): checking transaction log (loop3) [ 190.922290][ T6585] REISERFS (device loop3): Using r5 hash to sort names [ 190.940219][ T6585] reiserfs: enabling write barrier flush mode [ 191.087636][ T6581] reiserfs: enabling write barrier flush mode [ 191.164353][ T6581] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 191.174368][ T6585] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 192.343929][ T6595] loop4: detected capacity change from 0 to 32768 [ 192.415555][ T6595] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6595) [ 192.482606][ T6595] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 192.503742][ T6595] BTRFS info (device loop4): using free space tree [ 192.530165][ T6595] BTRFS info (device loop4): has skinny extents [ 192.764465][ T6595] BTRFS info (device loop4): enabling ssd optimizations [ 193.037794][ T6615] loop2: detected capacity change from 0 to 32768 [ 193.183885][ T6635] loop3: detected capacity change from 0 to 1024 [ 193.247515][ T6615] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6615) [ 193.264840][ T6635] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.346973][ T6615] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 193.390205][ T6615] BTRFS info (device loop2): using free space tree [ 193.405066][ T6615] BTRFS info (device loop2): has skinny extents [ 193.421335][ T6643] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.546925][ T4561] usb 2-1: USB disconnect, device number 4 [ 193.652802][ T6663] loop4: detected capacity change from 0 to 1024 [ 193.716313][ T6615] BTRFS info (device loop2): enabling ssd optimizations [ 193.758206][ T6663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.910656][ T6674] loop0: detected capacity change from 0 to 8192 [ 193.997144][ T3580] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 194.030720][ T6674] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 194.056805][ T6674] REISERFS (device loop0): using ordered data mode [ 194.075721][ T6674] reiserfs: using flush barriers [ 194.092959][ T6674] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.127916][ T6674] REISERFS (device loop0): checking transaction log (loop0) [ 194.199565][ T6674] REISERFS (device loop0): Using r5 hash to sort names [ 194.200018][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.213181][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.225435][ T6674] reiserfs: enabling write barrier flush mode [ 194.254076][ T6674] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 194.389860][ T3580] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 194.409509][ T3580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.414317][ T6681] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.444058][ T3580] usb 4-1: config 0 descriptor?? [ 194.449593][ T6676] loop4: detected capacity change from 0 to 32768 [ 194.494762][ T3580] cp210x 4-1:0.0: cp210x converter detected [ 194.519402][ T6676] XFS (loop4): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 194.752022][ T6693] loop1: detected capacity change from 0 to 1024 [ 194.851322][ T6693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.932425][ T3580] usb 4-1: cp210x converter now attached to ttyUSB0 [ 194.966630][ T6697] loop4: detected capacity change from 0 to 256 [ 195.106382][ T6703] device batadv_slave_1 entered promiscuous mode [ 195.115988][ T6702] device batadv_slave_1 left promiscuous mode [ 195.146968][ T3580] usb 4-1: USB disconnect, device number 9 [ 195.171345][ T3580] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 195.203224][ T3580] cp210x 4-1:0.0: device disconnected [ 195.538680][ T6699] loop1: detected capacity change from 0 to 32768 [ 195.581968][ T6699] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6699) [ 195.647672][ T6699] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 195.652193][ T6713] loop0: detected capacity change from 0 to 8192 [ 195.666466][ T6699] BTRFS info (device loop1): using free space tree [ 195.687202][ T6699] BTRFS info (device loop1): has skinny extents [ 195.720902][ T6713] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 195.743674][ T6713] REISERFS (device loop0): using ordered data mode [ 195.764916][ T6713] reiserfs: using flush barriers [ 195.796677][ T6713] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.827158][ T3867] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 195.866869][ T6699] BTRFS info (device loop1): enabling ssd optimizations [ 195.867764][ T6713] REISERFS (device loop0): checking transaction log (loop0) [ 195.915781][ T6713] REISERFS (device loop0): Using r5 hash to sort names [ 195.980766][ T6713] reiserfs: enabling write barrier flush mode [ 196.011230][ T6711] loop2: detected capacity change from 0 to 32768 [ 196.052856][ T6713] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 196.207206][ T3867] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 196.237440][ T6727] loop3: detected capacity change from 0 to 8192 [ 196.247180][ T3867] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.268629][ T6711] XFS (loop2): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 196.280448][ T3867] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.319101][ T3867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.353077][ T6727] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 196.362836][ T6715] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.407415][ T6727] REISERFS (device loop3): using ordered data mode [ 196.414116][ T6727] reiserfs: using flush barriers [ 196.443166][ T6727] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.467535][ T6727] REISERFS (device loop3): checking transaction log (loop3) [ 196.491170][ T6727] REISERFS (device loop3): Using r5 hash to sort names [ 196.522424][ T6727] reiserfs: enabling write barrier flush mode [ 196.583206][ T6727] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 196.707356][ T6746] loop2: detected capacity change from 0 to 1024 [ 196.884269][ T6746] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 197.739197][ T6746] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,bsddf,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 197.920962][ T6761] device batadv_slave_1 entered promiscuous mode [ 197.950621][ T6760] device batadv_slave_1 left promiscuous mode [ 198.094331][ T6765] loop1: detected capacity change from 0 to 16 [ 198.154078][ T6765] erofs: (device loop1): mounted with root inode @ nid 36. [ 198.195119][ T6765] attempt to access beyond end of device [ 198.195119][ T6765] loop1: rw=0, want=48, limit=16 [ 198.244048][ T6763] loop2: detected capacity change from 0 to 8192 [ 198.271325][ T6765] syz-executor.1 (6765): drop_caches: 2 [ 198.323807][ T6768] attempt to access beyond end of device [ 198.323807][ T6768] loop1: rw=0, want=48, limit=16 [ 199.344085][ T4556] usb 5-1: USB disconnect, device number 5 [ 199.519647][ T6765] syz-executor.1 (6765): drop_caches: 2 [ 199.533556][ T6763] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 199.563780][ T6763] REISERFS (device loop2): using ordered data mode [ 199.583529][ T6763] reiserfs: using flush barriers [ 199.600784][ T6763] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.631025][ T6763] REISERFS (device loop2): checking transaction log (loop2) [ 199.651227][ T6763] REISERFS (device loop2): Using r5 hash to sort names [ 199.694013][ T6791] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.745321][ T6763] reiserfs: enabling write barrier flush mode [ 199.754864][ T6791] unsupported nlmsg_type 40 [ 199.773197][ T6763] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 199.837413][ T4556] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 200.197500][ T4556] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 200.220134][ T4556] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.246687][ T4556] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.270207][ T4556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.307568][ T6781] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.601936][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.407528][ T4595] Bluetooth: hci0: command 0x0406 tx timeout [ 201.602597][ T6815] loop3: detected capacity change from 0 to 16 [ 201.941746][ T4595] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 202.509738][ T6815] erofs: (device loop3): mounted with root inode @ nid 36. [ 202.534397][ T6815] attempt to access beyond end of device [ 202.534397][ T6815] loop3: rw=0, want=48, limit=16 [ 202.552858][ T6816] loop0: detected capacity change from 0 to 8192 [ 202.577806][ T4595] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 202.595271][ T4595] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.609661][ T4595] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.623190][ T6824] attempt to access beyond end of device [ 202.623190][ T6824] loop3: rw=0, want=48, limit=16 [ 202.638559][ T4595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.687949][ T6819] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 202.765951][ T6800] loop1: detected capacity change from 0 to 40427 [ 202.778259][ T6816] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 202.794184][ T6816] REISERFS (device loop0): using ordered data mode [ 202.800863][ T6816] reiserfs: using flush barriers [ 202.811750][ T6816] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.812049][ T6815] syz-executor.3 (6815): drop_caches: 2 [ 202.834656][ T6816] REISERFS (device loop0): checking transaction log (loop0) [ 202.879281][ T6816] REISERFS (device loop0): Using r5 hash to sort names [ 202.888654][ T6800] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.931077][ T6816] reiserfs: enabling write barrier flush mode [ 202.970323][ T6816] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 204.034983][ T4595] usb 5-1: USB disconnect, device number 6 [ 204.321354][ T6845] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.395361][ T6850] loop0: detected capacity change from 0 to 256 [ 205.793056][ T6863] loop1: detected capacity change from 0 to 16 [ 205.862288][ T6863] erofs: (device loop1): mounted with root inode @ nid 36. [ 205.872277][ T6863] attempt to access beyond end of device [ 205.872277][ T6863] loop1: rw=0, want=48, limit=16 [ 205.965459][ T6867] attempt to access beyond end of device [ 205.965459][ T6867] loop1: rw=0, want=48, limit=16 [ 206.412599][ T3570] usb 3-1: USB disconnect, device number 11 [ 206.479734][ T4595] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 206.487561][ T4592] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.523264][ T6874] loop3: detected capacity change from 0 to 8192 [ 206.751574][ T6874] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 206.770011][ T4595] usb 5-1: Using ep0 maxpacket: 8 [ 206.776198][ T6863] syz-executor.1 (6863): drop_caches: 2 [ 206.792570][ T6874] REISERFS (device loop3): using ordered data mode [ 206.808564][ T6874] reiserfs: using flush barriers [ 206.830442][ T6874] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.887567][ T6874] REISERFS (device loop3): checking transaction log (loop3) [ 206.911133][ T6874] REISERFS (device loop3): Using r5 hash to sort names [ 206.918916][ T4592] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 206.922030][ T6878] loop2: detected capacity change from 0 to 32768 [ 206.930304][ T4595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.951988][ T6874] reiserfs: enabling write barrier flush mode [ 206.963774][ T4592] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.975540][ T4595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.987847][ T6874] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 206.991555][ T4592] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.006862][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.025950][ T4595] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 207.035444][ T4592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.050151][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.063901][ T4595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.095790][ T4595] usb 5-1: config 0 descriptor?? [ 207.107796][ T6872] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 207.146802][ T6878] XFS (loop2): Mounting V5 Filesystem [ 207.250449][ T6895] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.284877][ T6878] XFS (loop2): Ending clean mount [ 208.434958][ T4595] hid-led 0003:04D8:F372.0009: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 208.555702][ T5775] XFS (loop2): Unmounting Filesystem [ 208.575176][ T4595] hid-led 0003:04D8:F372.0009: Greynut Luxafor initialized [ 208.576706][ T6914] loop1: detected capacity change from 0 to 2048 [ 208.600323][ T4595] usb 5-1: USB disconnect, device number 7 [ 208.622253][ T4592] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 208.692133][ T6914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.733395][ T3570] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 208.757750][ T3570] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 208.762546][ T6920] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 208.781436][ T4592] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 208.802071][ T4593] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 208.821539][ T4593] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 208.830942][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.845427][ T4593] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 208.878226][ T4592] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 208.886604][ T6920] device wireguard0 entered promiscuous mode [ 208.894344][ T4592] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 208.928817][ T4593] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 208.942235][ T4592] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 208.971212][ T4592] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 209.031323][ T4593] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 209.061239][ T4593] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 209.071260][ T6934] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.074234][ T6929] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.080782][ T6934] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.114568][ T4593] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 209.170602][ T4593] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 209.195991][ T4593] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 209.221221][ T4593] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 209.661906][ T3574] usb 1-1: USB disconnect, device number 6 [ 210.028218][ T6949] loop1: detected capacity change from 0 to 32768 [ 210.071488][ T6949] XFS: attr2 mount option is deprecated. [ 210.092049][ T6949] XFS: ikeep mount option is deprecated. [ 210.112020][ T6949] XFS: noikeep mount option is deprecated. [ 210.117247][ T3574] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 210.170801][ T6947] loop4: detected capacity change from 0 to 32768 [ 210.195112][ T6949] XFS (loop1): Mounting V5 Filesystem [ 210.215018][ T6945] loop3: detected capacity change from 0 to 32768 [ 210.250289][ T6947] XFS: attr2 mount option is deprecated. [ 210.255975][ T6947] XFS: ikeep mount option is deprecated. [ 210.278693][ T6945] XFS: attr2 mount option is deprecated. [ 210.284376][ T6945] XFS: ikeep mount option is deprecated. [ 210.324477][ T6947] XFS: noikeep mount option is deprecated. [ 210.342684][ T6949] XFS (loop1): Ending clean mount [ 210.350542][ T6945] XFS: noikeep mount option is deprecated. [ 210.357212][ T3574] usb 1-1: Using ep0 maxpacket: 8 [ 210.374250][ T6949] XFS (loop1): Quotacheck needed: Please wait. [ 210.414767][ T6945] XFS (loop3): Mounting V5 Filesystem [ 210.464545][ T6947] XFS (loop4): Mounting V5 Filesystem [ 210.477969][ T3574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.487837][ T6953] loop2: detected capacity change from 0 to 32768 [ 210.498897][ T3574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.524066][ T3574] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 210.552305][ T3574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.572343][ T3574] usb 1-1: config 0 descriptor?? [ 210.583797][ T6949] XFS (loop1): Quotacheck: Done. [ 210.604625][ T6945] XFS (loop3): Ending clean mount [ 210.619557][ T6953] XFS (loop2): Mounting V5 Filesystem [ 210.621424][ T6945] XFS (loop3): Quotacheck needed: Please wait. [ 210.669790][ T6947] XFS (loop4): Ending clean mount [ 210.711349][ T6945] XFS (loop3): Quotacheck: Done. [ 210.720546][ T6947] XFS (loop4): Quotacheck needed: Please wait. [ 210.864359][ T6947] XFS (loop4): Quotacheck: Done. [ 210.870607][ T6953] XFS (loop2): Ending clean mount [ 210.938471][ T3938] XFS (loop1): Unmounting Filesystem [ 210.946748][ T4721] XFS (loop3): Unmounting Filesystem [ 211.053103][ T3574] hid-led 0003:04D8:F372.000A: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 211.143629][ T3574] hid-led 0003:04D8:F372.000A: Greynut Luxafor initialized [ 211.246394][ T5775] XFS (loop2): Unmounting Filesystem [ 211.267490][ T3574] usb 1-1: USB disconnect, device number 7 [ 211.279227][ T7] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 211.290739][ T6178] XFS (loop4): Unmounting Filesystem [ 211.291601][ T7] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 211.305098][ T7] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 211.314422][ T7] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 211.323133][ T7] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 211.332789][ T7] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 211.355157][ T7] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 211.367914][ T7] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 211.387212][ T7] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 211.409408][ T7] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 211.437398][ T7] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 211.467401][ T7] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 211.486270][ T7] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 211.530620][ T4561] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 211.544653][ T4556] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 211.570348][ T4561] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 211.586217][ T7] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 211.643171][ T4561] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 211.673444][ T6995] loop1: detected capacity change from 0 to 1024 [ 211.825562][ T6995] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 211.891569][ T6995] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 211.950939][ T7006] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 212.029520][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.047758][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.658564][ T7012] loop4: detected capacity change from 0 to 2048 [ 213.773261][ T7012] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.831966][ T7026] loop3: detected capacity change from 0 to 64 [ 214.042550][ T7029] loop0: detected capacity change from 0 to 2048 [ 214.054917][ T7034] loop4: detected capacity change from 0 to 256 [ 214.108554][ T7029] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.247017][ T7034] FAT-fs (loop4): Directory bread(block 64) failed [ 214.275899][ T7034] FAT-fs (loop4): Directory bread(block 65) failed [ 214.299640][ T7034] FAT-fs (loop4): Directory bread(block 66) failed [ 214.369340][ T7034] FAT-fs (loop4): Directory bread(block 67) failed [ 214.395282][ T7034] FAT-fs (loop4): Directory bread(block 68) failed [ 214.422499][ T7034] FAT-fs (loop4): Directory bread(block 69) failed [ 214.470808][ T7034] FAT-fs (loop4): Directory bread(block 70) failed [ 214.487565][ T7034] FAT-fs (loop4): Directory bread(block 71) failed [ 214.499951][ T7034] FAT-fs (loop4): Directory bread(block 72) failed [ 214.528139][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 214.540852][ T7034] FAT-fs (loop4): Directory bread(block 73) failed [ 215.184291][ T7048] loop2: detected capacity change from 0 to 32768 [ 215.282616][ T7048] add_index: next_index = 0. Resetting! [ 215.293694][ T7049] chnl_net:caif_netlink_parms(): no params data found [ 215.336983][ T7060] loop1: detected capacity change from 0 to 1024 [ 215.351974][ T7048] find_entry called with index >= next_index [ 215.373526][ T7048] find_entry called with index >= next_index [ 215.381226][ T7048] find_entry called with index >= next_index [ 215.446562][ T7048] find_entry called with index >= next_index [ 215.568588][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.577558][ T7059] jfs: Unrecognized mount option "Xcv:Q"CR"'ή_0-%+ t6P'k;/|%T9i(%Z@ͱ\B~KrmF" or missing value [ 215.612934][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.624830][ T7049] device bridge_slave_0 entered promiscuous mode [ 215.632762][ T154] hfsplus: b-tree write err: -5, ino 4 [ 215.654886][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.709960][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.778441][ T7049] device bridge_slave_1 entered promiscuous mode [ 215.836449][ T26] audit: type=1326 audit(2000000030.260:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd88e3ee9 code=0x7ffc0000 [ 215.933546][ T26] audit: type=1326 audit(2000000030.260:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bd88e3ee9 code=0x7ffc0000 [ 215.938729][ T7049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.009783][ T26] audit: type=1326 audit(2000000030.310:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd88e3ee9 code=0x7ffc0000 [ 216.085127][ T7049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.106283][ T26] audit: type=1326 audit(2000000030.320:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bd88e3ee9 code=0x7ffc0000 [ 216.183393][ T26] audit: type=1326 audit(2000000030.340:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd88e3ee9 code=0x7ffc0000 [ 216.242536][ T7049] team0: Port device team_slave_0 added [ 216.273298][ T26] audit: type=1326 audit(2000000030.340:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bd88e1667 code=0x7ffc0000 [ 216.312606][ T7049] team0: Port device team_slave_1 added [ 216.422620][ T26] audit: type=1326 audit(2000000030.340:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bd88a7329 code=0x7ffc0000 [ 216.474594][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.493933][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.526932][ T26] audit: type=1326 audit(2000000030.340:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1bd88e3ee9 code=0x7ffc0000 [ 216.555957][ T7049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.566968][ T7090] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.578272][ T26] audit: type=1326 audit(2000000030.350:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bd88e1667 code=0x7ffc0000 [ 216.627431][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.648335][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.694555][ T26] audit: type=1326 audit(2000000030.360:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bd88a7329 code=0x7ffc0000 [ 216.742781][ T7049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.842835][ T7049] device hsr_slave_0 entered promiscuous mode [ 216.847162][ T4592] Bluetooth: hci1: command 0x0409 tx timeout [ 216.875730][ T7049] device hsr_slave_1 entered promiscuous mode [ 216.900418][ T7049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.943946][ T7049] Cannot create hsr debugfs directory [ 217.158008][ T7077] loop4: detected capacity change from 0 to 32768 [ 217.232467][ T7102] loop1: detected capacity change from 0 to 1024 [ 217.268210][ T7077] XFS: attr2 mount option is deprecated. [ 217.270670][ T7049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.274177][ T7077] XFS: ikeep mount option is deprecated. [ 217.315409][ T7077] XFS: noikeep mount option is deprecated. [ 217.383978][ T7077] XFS (loop4): Mounting V5 Filesystem [ 217.395046][ T7049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.507331][ T7049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.562543][ T7077] XFS (loop4): Ending clean mount [ 217.573946][ T7077] XFS (loop4): Quotacheck needed: Please wait. [ 217.641381][ T7049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.657234][ T7122] loop0: detected capacity change from 0 to 1764 [ 217.662302][ T154] hfsplus: b-tree write err: -5, ino 4 [ 217.712262][ T7077] XFS (loop4): Quotacheck: Done. [ 217.755559][ T7125] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.955724][ T6178] XFS (loop4): Unmounting Filesystem [ 217.967595][ T7049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.094091][ T7049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.170534][ T7049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.194347][ T7049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.070593][ T3570] Bluetooth: hci1: command 0x041b tx timeout [ 219.381229][ T7049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.429663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.438243][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.450823][ T7049] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.472476][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.488574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.507768][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.514478][ T7157] loop1: detected capacity change from 0 to 8 [ 219.514865][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.558301][ T7154] loop2: detected capacity change from 0 to 1764 [ 219.584543][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.596096][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.605193][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.617728][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.624884][ T4556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.631171][ T7157] SQUASHFS error: zlib decompression failed, data probably corrupt [ 219.643184][ T7157] SQUASHFS error: Failed to read block 0x9b: -5 [ 219.654154][ T7157] SQUASHFS error: Unable to read metadata cache entry [99] [ 219.657700][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.661743][ T7157] SQUASHFS error: Unable to read inode 0x127 [ 219.698244][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.715535][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.740934][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.765941][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.778243][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.816818][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.825735][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.854299][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.894968][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.934443][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.950166][ T7049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.136297][ T7170] tmpfs: Bad value for 'mpol' [ 220.211689][ T7164] loop2: detected capacity change from 0 to 8192 [ 221.157395][ T4593] Bluetooth: hci1: command 0x040f tx timeout [ 221.192203][ T7164] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 221.225572][ T7164] REISERFS (device loop2): using ordered data mode [ 221.256961][ T7164] reiserfs: using flush barriers [ 221.300078][ T7164] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.338682][ T7177] loop4: detected capacity change from 0 to 2048 [ 221.396197][ T7164] REISERFS (device loop2): checking transaction log (loop2) [ 221.436596][ T7164] REISERFS (device loop2): Using r5 hash to sort names [ 221.476754][ T7049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.484904][ T7164] REISERFS (device loop2): using 3.5.x disk format [ 221.498977][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.506551][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.523438][ T7164] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 221.537696][ T7177] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.579996][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.606846][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.622470][ T7192] No such timeout policy "syz0" [ 221.736513][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.750319][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.766125][ T7198] loop1: detected capacity change from 0 to 1764 [ 221.775966][ T7049] device veth0_vlan entered promiscuous mode [ 221.823462][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.836407][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.883957][ T7049] device veth1_vlan entered promiscuous mode [ 221.986368][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.013317][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.038843][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.054952][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.100293][ T7049] device veth0_macvtap entered promiscuous mode [ 222.123104][ T7049] device veth1_macvtap entered promiscuous mode [ 222.149665][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.162698][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.210550][ T7211] loop4: detected capacity change from 0 to 512 [ 222.254545][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.160057][ T7219] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 223.160057][ T7219] The task syz-executor.1 (7219) triggered the difference, watch for misbehavior. [ 223.209180][ T7219] loop1: detected capacity change from 0 to 256 [ 223.238627][ T4590] Bluetooth: hci1: command 0x0419 tx timeout [ 223.271248][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.281410][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.291981][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.294436][ T7211] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 16 (err -116) [ 223.301995][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.302019][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.302041][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.302054][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.302074][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.302095][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.303884][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.390276][ T7211] EXT4-fs (loop4): Remounting filesystem read-only [ 223.396987][ T7211] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,nolazytime,journal_path=./file0,resuid=0x0000000000000000,barrier,resuid=0x0000000000000000,nogrpid,. Quota mode: writeback. [ 223.419407][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.427554][ T7211] ext4 filesystem being mounted at /root/syzkaller-testdir1483591727/syzkaller.OqSZL8/43/file1 supports timestamps until 2038 (0x7fffffff) [ 223.427903][ T7219] FAT-fs (loop1): Unrecognized mount option "utfP=0" or missing value [ 223.500005][ T7225] loop0: detected capacity change from 0 to 1024 [ 223.614780][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.638140][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.666437][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.688968][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.694928][ T7230] loop4: detected capacity change from 0 to 8 [ 223.703262][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.737130][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.747786][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.758628][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.777583][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.795955][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.806116][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.816831][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.829002][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.837966][ T6911] hfsplus: b-tree write err: -5, ino 4 [ 223.844697][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.857592][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.889423][ T7230] SQUASHFS error: zlib decompression failed, data probably corrupt [ 223.903814][ T7216] loop2: detected capacity change from 0 to 32768 [ 223.912609][ T7230] SQUASHFS error: Failed to read block 0x9b: -5 [ 223.916319][ T7049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.920080][ T7230] SQUASHFS error: Unable to read metadata cache entry [99] [ 223.935216][ T7230] SQUASHFS error: Unable to read inode 0x127 [ 223.942410][ T7049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.952944][ T7049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.965661][ T7049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.036890][ T7216] XFS (loop2): Mounting V5 Filesystem [ 224.244936][ T7216] XFS (loop2): Ending clean mount [ 224.254211][ T7250] loop4: detected capacity change from 0 to 512 [ 224.266234][ T3672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.293303][ T3672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.345317][ T26] kauditd_printk_skb: 100 callbacks suppressed [ 224.345335][ T26] audit: type=1800 audit(2000000038.770:178): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=9289 res=0 errno=0 [ 224.359138][ T7250] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 16 (err -116) [ 224.372737][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.406708][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.446838][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.456027][ T7250] EXT4-fs (loop4): Remounting filesystem read-only [ 224.463832][ T7250] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,nolazytime,journal_path=./file0,resuid=0x0000000000000000,barrier,resuid=0x0000000000000000,nogrpid,. Quota mode: writeback. [ 224.491679][ T7250] ext4 filesystem being mounted at /root/syzkaller-testdir1483591727/syzkaller.OqSZL8/45/file1 supports timestamps until 2038 (0x7fffffff) [ 224.495781][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.535551][ T3702] device hsr_slave_0 left promiscuous mode [ 224.557432][ T7254] loop1: detected capacity change from 0 to 4096 [ 224.564415][ T3702] device hsr_slave_1 left promiscuous mode [ 224.575310][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.596553][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.609118][ T5775] XFS (loop2): Unmounting Filesystem [ 224.621131][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.634528][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.651347][ T3702] device bridge_slave_1 left promiscuous mode [ 224.658312][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.672340][ T3702] device bridge_slave_0 left promiscuous mode [ 224.679539][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.732976][ T3702] device veth1_macvtap left promiscuous mode [ 224.775474][ T3702] device veth0_macvtap left promiscuous mode [ 224.775582][ T3702] device veth1_vlan left promiscuous mode [ 224.775637][ T3702] device veth0_vlan left promiscuous mode [ 225.291346][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 225.310081][ T7277] loop1: detected capacity change from 0 to 256 [ 225.323743][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 225.339607][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.359234][ T7277] FAT-fs (loop1): Unrecognized mount option "utfP=0" or missing value [ 225.371845][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.506006][ T3702] bond0 (unregistering): Released all slaves [ 225.548023][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.565052][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.694274][ T7288] loop0: detected capacity change from 0 to 8 [ 225.698412][ T7286] tap0: tun_chr_ioctl cmd 1074025677 [ 225.707816][ T7286] tap0: linktype set to 772 [ 225.767789][ T7288] SQUASHFS error: zlib decompression failed, data probably corrupt [ 225.783306][ T7288] SQUASHFS error: Failed to read block 0x9b: -5 [ 225.825502][ T7288] SQUASHFS error: Unable to read metadata cache entry [99] [ 225.833121][ T7288] SQUASHFS error: Unable to read inode 0x127 [ 225.859386][ T7290] loop4: detected capacity change from 0 to 8192 [ 225.951877][ T7290] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 225.977547][ T7290] REISERFS (device loop4): using ordered data mode [ 225.985630][ T7290] reiserfs: using flush barriers [ 225.992485][ T7290] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.011788][ T7290] REISERFS (device loop4): checking transaction log (loop4) [ 226.044844][ T7290] REISERFS (device loop4): Using r5 hash to sort names [ 226.066423][ T7290] REISERFS (device loop4): using 3.5.x disk format [ 226.131041][ T7290] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 226.335723][ T7307] loop0: detected capacity change from 0 to 256 [ 226.399343][ T7307] FAT-fs (loop0): Unrecognized mount option "utfP=0" or missing value [ 226.790478][ T7300] loop1: detected capacity change from 0 to 32768 [ 226.913130][ T7300] XFS (loop1): Mounting V5 Filesystem [ 226.973951][ T7306] loop2: detected capacity change from 0 to 32768 [ 227.007336][ T4561] Bluetooth: hci4: command 0x0406 tx timeout [ 227.068333][ T7300] XFS (loop1): Ending clean mount [ 227.099019][ T7306] XFS (loop2): Mounting V5 Filesystem [ 227.184451][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.221430][ T7335] loop3: detected capacity change from 0 to 4096 [ 227.296674][ T7306] XFS (loop2): Ending clean mount [ 227.361600][ T26] audit: type=1800 audit(2000000041.790:179): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=9289 res=0 errno=0 [ 227.508624][ T3938] XFS (loop1): Unmounting Filesystem [ 227.523691][ T5775] XFS (loop2): Unmounting Filesystem [ 227.856847][ T7352] loop0: detected capacity change from 0 to 4096 [ 227.922773][ T7313] loop4: detected capacity change from 0 to 32768 [ 228.149731][ T7313] XFS (loop4): Mounting V5 Filesystem [ 228.203470][ T7369] loop2: detected capacity change from 0 to 8 [ 228.245933][ T7369] SQUASHFS error: zlib decompression failed, data probably corrupt [ 228.277258][ T7369] SQUASHFS error: Failed to read block 0x9b: -5 [ 228.283824][ T7369] SQUASHFS error: Unable to read metadata cache entry [99] [ 228.291634][ T7369] SQUASHFS error: Unable to read inode 0x127 [ 228.302883][ T7313] XFS (loop4): Ending clean mount [ 228.357019][ T26] audit: type=1800 audit(2000000042.780:180): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=9289 res=0 errno=0 [ 228.497986][ T7373] loop1: detected capacity change from 0 to 8192 [ 228.521699][ T6178] XFS (loop4): Unmounting Filesystem [ 228.526693][ T7379] loop0: detected capacity change from 0 to 128 [ 228.662885][ T7379] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 228.730094][ T7379] ext4 filesystem being mounted at /root/syzkaller-testdir2799365504/syzkaller.aXp0O5/183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 228.956325][ T7391] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.046156][ T7395] Cannot find add_set index 0 as target [ 229.344928][ T7414] loop0: detected capacity change from 0 to 1024 [ 229.543231][ T3579] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 229.691453][ T6911] hfsplus: b-tree write err: -5, ino 4 [ 229.726992][ T3539] Bluetooth: hci5: sending frame failed (-49) [ 229.898352][ T7427] loop0: detected capacity change from 0 to 2048 [ 229.937229][ T3579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.957116][ T3579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.977541][ T3579] usb 4-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 229.986795][ T3579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.002456][ T7427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.014420][ T3579] usb 4-1: config 0 descriptor?? [ 230.059936][ T154] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 230.094306][ T154] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 117 [ 230.115605][ T154] EXT4-fs (loop0): This should not happen!! Data will be lost [ 230.115605][ T154] [ 230.510819][ T3579] wacom 0003:056A:0043.000B: ignoring exceeding usage max [ 230.528529][ T3579] wacom 0003:056A:0043.000B: item fetching failed at offset 5/7 [ 230.536715][ T3579] wacom 0003:056A:0043.000B: parse failed [ 230.563064][ T3579] wacom: probe of 0003:056A:0043.000B failed with error -22 [ 230.563803][ T7446] loop2: detected capacity change from 0 to 4096 [ 230.649106][ T7433] loop1: detected capacity change from 0 to 32768 [ 230.704259][ T7433] XFS (loop1): Mounting V5 Filesystem [ 230.723617][ T4593] usb 4-1: USB disconnect, device number 10 [ 230.806670][ T7433] XFS (loop1): Ending clean mount [ 230.831133][ T26] audit: type=1800 audit(2000000045.260:181): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=9289 res=0 errno=0 [ 230.895385][ T3938] XFS (loop1): Unmounting Filesystem [ 231.410250][ T7471] loop0: detected capacity change from 0 to 2048 [ 231.450976][ T7478] loop2: detected capacity change from 0 to 128 [ 231.525476][ T7478] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 231.540631][ T7478] ext4 filesystem being mounted at /root/syzkaller-testdir1977714109/syzkaller.MCmlv9/90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 231.556378][ T7471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.646642][ T3618] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:5: bg 0: block 234: padding at end of block bitmap is not set [ 231.683889][ T3618] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 117 [ 231.714312][ T3618] EXT4-fs (loop0): This should not happen!! Data will be lost [ 231.714312][ T3618] [ 231.797232][ T4593] Bluetooth: hci5: command 0x1003 tx timeout [ 231.803562][ T3539] Bluetooth: hci5: sending frame failed (-49) [ 231.882680][ T7485] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.946834][ T7489] Cannot find add_set index 0 as target [ 232.366016][ T7496] loop0: detected capacity change from 0 to 4096 [ 232.376884][ T7501] loop3: detected capacity change from 0 to 256 [ 232.400525][ T7503] loop1: detected capacity change from 0 to 256 [ 232.492514][ T7486] loop2: detected capacity change from 0 to 32768 [ 232.623337][ T7486] XFS (loop2): Mounting V5 Filesystem [ 232.725160][ T7486] XFS (loop2): Ending clean mount [ 232.762657][ T26] audit: type=1800 audit(2000000047.190:182): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=9289 res=0 errno=0 [ 232.850505][ T5775] XFS (loop2): Unmounting Filesystem [ 232.887295][ T4595] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 232.999157][ T7522] loop0: detected capacity change from 0 to 256 [ 233.138162][ T7526] loop1: detected capacity change from 0 to 4096 [ 233.247396][ T4595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.269790][ T4595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.286160][ T4595] usb 4-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 233.296024][ T4595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.317608][ T4595] usb 4-1: config 0 descriptor?? [ 233.324999][ T7537] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.389741][ T7537] Cannot find add_set index 0 as target [ 233.523730][ T7543] loop0: detected capacity change from 0 to 8192 [ 233.706375][ T7545] loop0: detected capacity change from 0 to 256 [ 233.802285][ T4595] wacom 0003:056A:0043.000C: ignoring exceeding usage max [ 233.812654][ T4595] wacom 0003:056A:0043.000C: item fetching failed at offset 5/7 [ 233.825133][ T4595] wacom 0003:056A:0043.000C: parse failed [ 233.831218][ T4595] wacom: probe of 0003:056A:0043.000C failed with error -22 [ 233.894687][ T3579] Bluetooth: hci5: command 0x1001 tx timeout [ 233.901593][ T3539] Bluetooth: hci5: sending frame failed (-49) [ 234.024322][ T7557] loop0: detected capacity change from 0 to 256 [ 234.034763][ T4595] usb 4-1: USB disconnect, device number 11 [ 234.163030][ T7566] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 234.235996][ T7572] SET target dimension over the limit! [ 234.567133][ T4593] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 234.600823][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.937260][ T4593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.952986][ T4593] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.978963][ T4593] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.996084][ T4593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.025675][ T4593] usb 1-1: config 0 descriptor?? [ 235.508661][ T4593] plantronics 0003:047F:FFFF.000D: unbalanced delimiter at end of report description [ 235.527574][ T4593] plantronics 0003:047F:FFFF.000D: parse failed [ 235.534023][ T4593] plantronics: probe of 0003:047F:FFFF.000D failed with error -22 [ 235.637493][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.713179][ T3579] usb 1-1: USB disconnect, device number 8 [ 235.957226][ T3579] Bluetooth: hci5: command 0x1009 tx timeout [ 236.345772][ T7600] loop0: detected capacity change from 0 to 256 [ 236.367472][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.602247][ T7603] loop0: detected capacity change from 0 to 1024 [ 236.677524][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.724952][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.359186][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.757777][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.397310][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.798018][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.837883][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.877784][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.447338][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.917781][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.957871][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.999622][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.477407][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.047433][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.077586][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.957829][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.117785][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.517366][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.157807][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.208126][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.247616][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.557415][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.288080][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.327639][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.358387][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.371882][ T3618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.385214][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.398164][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.607568][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.477696][ T4595] net_ratelimit: 3 callbacks suppressed [ 255.477715][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.640437][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.646767][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.517542][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.558735][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.566960][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.584703][ T3618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.596201][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.608572][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.717340][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.597447][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.637524][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.677520][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.787197][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.717620][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.679936][ T3701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.697249][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.708251][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.767546][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.797682][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.805870][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.847555][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.877917][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.837704][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.917609][ T3867] Bluetooth: hci5: command 0x0409 tx timeout [ 266.927475][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.077308][ T4593] Bluetooth: hci7: command 0x0409 tx timeout [ 267.077339][ T3867] Bluetooth: hci6: command 0x0409 tx timeout [ 267.967350][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.997386][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.997873][ T4556] Bluetooth: hci5: command 0x041b tx timeout [ 269.157327][ T4556] Bluetooth: hci6: command 0x041b tx timeout [ 269.163479][ T4556] Bluetooth: hci7: command 0x041b tx timeout [ 269.877346][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.957368][ T4593] Bluetooth: hci8: command 0x0409 tx timeout [ 270.047539][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.077334][ T4593] Bluetooth: hci5: command 0x040f tx timeout [ 271.084337][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.237222][ T4593] Bluetooth: hci7: command 0x040f tx timeout [ 271.248415][ T4593] Bluetooth: hci6: command 0x040f tx timeout [ 272.037369][ T4593] Bluetooth: hci8: command 0x041b tx timeout [ 272.117459][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.286560][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.767220][ T4593] Bluetooth: hci9: command 0x0409 tx timeout [ 272.917455][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.167407][ T4593] Bluetooth: hci5: command 0x0419 tx timeout [ 273.173595][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.327151][ T4593] Bluetooth: hci6: command 0x0419 tx timeout [ 273.347127][ T4593] Bluetooth: hci7: command 0x0419 tx timeout [ 274.117427][ T4595] Bluetooth: hci8: command 0x040f tx timeout [ 274.197663][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.847195][ T4596] Bluetooth: hci9: command 0x041b tx timeout [ 275.237450][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.957399][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.197423][ T4595] Bluetooth: hci8: command 0x0419 tx timeout [ 276.277462][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.917138][ T4593] Bluetooth: hci9: command 0x040f tx timeout [ 277.319490][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.197154][ T4595] Bluetooth: hci3: command 0x0406 tx timeout [ 278.367365][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.997818][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.007178][ T4593] Bluetooth: hci9: command 0x0419 tx timeout [ 279.397405][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.437690][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.477517][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.879718][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.037381][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.527650][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.559480][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.597473][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.085547][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.647523][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.687464][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.717413][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.117507][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.757441][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.797471][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.837542][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.159034][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.480391][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.877539][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.917687][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.967455][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.197478][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.997378][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.047309][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.077408][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.245490][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.117455][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.687109][ T4593] Bluetooth: hci2: command 0x0406 tx timeout [ 299.158849][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.209484][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.277287][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.077465][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.237496][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.287372][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.317464][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.325656][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.359487][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.399385][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.357916][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.437496][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.487748][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.517485][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.407292][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.557683][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.597404][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.677311][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.647469][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.438717][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.677591][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.717468][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.775305][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.479284][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.797759][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.837466][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.091311][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.098172][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.877415][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.517326][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.927411][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.957602][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.277520][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.997430][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.559586][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.037575][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.087450][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.127391][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.597759][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.157518][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.197468][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.237434][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.637300][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.287348][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.317434][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.877323][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.360174][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.678475][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.407355][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.357497][ T4561] Bluetooth: hci10: command 0x0409 tx timeout [ 332.367333][ T4596] Bluetooth: hci11: command 0x0409 tx timeout [ 332.437701][ T4596] Bluetooth: hci12: command 0x0409 tx timeout [ 332.445263][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.487410][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.717332][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.437402][ T4593] Bluetooth: hci11: command 0x041b tx timeout [ 334.446130][ T4593] Bluetooth: hci10: command 0x041b tx timeout [ 334.527307][ T4593] Bluetooth: hci12: command 0x041b tx timeout [ 334.534552][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.077376][ T4593] Bluetooth: hci13: command 0x0409 tx timeout [ 335.567397][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.517388][ T4595] Bluetooth: hci10: command 0x040f tx timeout [ 336.531685][ T4595] Bluetooth: hci11: command 0x040f tx timeout [ 336.597295][ T4595] Bluetooth: hci12: command 0x040f tx timeout [ 336.608098][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.765444][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.157138][ T4595] Bluetooth: hci13: command 0x041b tx timeout [ 337.637450][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.799258][ T4595] Bluetooth: hci14: command 0x0409 tx timeout [ 338.607520][ T4596] Bluetooth: hci11: command 0x0419 tx timeout [ 338.613728][ T4596] Bluetooth: hci10: command 0x0419 tx timeout [ 338.687402][ T4596] Bluetooth: hci12: command 0x0419 tx timeout [ 338.707256][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.237195][ T4596] Bluetooth: hci13: command 0x040f tx timeout [ 339.479881][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.637701][ T4596] Bluetooth: hci1: command 0x0406 tx timeout [ 339.719437][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.797335][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.887304][ T4593] Bluetooth: hci14: command 0x041b tx timeout [ 340.767438][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.317093][ T4596] Bluetooth: hci13: command 0x0419 tx timeout [ 341.797494][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.957499][ T4596] Bluetooth: hci14: command 0x040f tx timeout [ 342.837599][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.845766][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.877436][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.037161][ T3579] Bluetooth: hci14: command 0x0419 tx timeout [ 344.917421][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.879922][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.957504][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.998244][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.037380][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.917352][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.077696][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.087550][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.117492][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.157366][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.957275][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.197416][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.247451][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.277527][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.997290][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.327443][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.367363][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.397434][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.040996][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.447413][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.677348][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.487379][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.517419][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.077345][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.557508][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.597435][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.637374][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.117251][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.677464][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.727447][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.757624][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.157235][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.797460][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.281359][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.839188][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.887432][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.201485][ T4561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.917423][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.957595][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.997413][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.237346][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.037732][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.087369][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.119462][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.285426][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.157359][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.877304][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.885755][ T27] INFO: task kworker/u4:15:6911 blocked for more than 143 seconds. [ 377.893788][ T27] Not tainted 5.15.160-syzkaller #0 [ 377.899561][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.908295][ T27] task:kworker/u4:15 state:D stack:22168 pid: 6911 ppid: 2 flags:0x00004000 [ 377.917599][ T27] Workqueue: netns cleanup_net [ 377.922515][ T27] Call Trace: 2033/05/18 03:36:32 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 377.925808][ T27] [ 377.928840][ T27] __schedule+0x12c4/0x45b0 [ 377.971389][ T27] ? release_firmware_map_entry+0x190/0x190 [ 377.979562][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 377.985071][ T27] ? kthread_data+0x4e/0xc0 [ 377.989673][ T27] ? wq_worker_sleeping+0x5d/0x200 [ 377.994808][ T27] schedule+0x11b/0x1f0 [ 377.999140][ T27] schedule_preempt_disabled+0xf/0x20 [ 378.004536][ T27] __mutex_lock_common+0xe34/0x25a0 [ 378.009852][ T27] ? wg_netns_pre_exit+0x1b/0x1d0 [ 378.014903][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 378.020232][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 378.025453][ T27] ? __local_bh_enable_ip+0x164/0x1f0 [ 378.030909][ T27] ? cleanup_net+0x3b5/0xb60 [ 378.035524][ T27] mutex_lock_nested+0x17/0x20 [ 378.040509][ T27] wg_netns_pre_exit+0x1b/0x1d0 [ 378.045484][ T27] cleanup_net+0x59c/0xb60 [ 378.049989][ T27] ? ops_free_list+0x340/0x340 [ 378.054787][ T27] process_one_work+0x8a1/0x10c0 [ 378.059885][ T27] ? worker_detach_from_pool+0x260/0x260 [ 378.066110][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 378.083021][ T27] ? kthread_data+0x4e/0xc0 [ 378.103010][ T27] ? wq_worker_running+0x97/0x170 [ 378.108140][ T27] worker_thread+0xaca/0x1280 [ 378.112869][ T27] kthread+0x3f6/0x4f0 [ 378.116951][ T27] ? rcu_lock_release+0x20/0x20 [ 378.148668][ T27] ? kthread_blkcg+0xd0/0xd0 [ 378.153287][ T27] ret_from_fork+0x1f/0x30 [ 378.175737][ T27] [ 378.205397][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.213903][ T27] [ 378.213903][ T27] Showing all locks held in the system: [ 378.227876][ T27] 1 lock held by khungtaskd/27: [ 378.232765][ T27] #0: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 378.267134][ T27] 2 locks held by getty/3258: [ 378.271870][ T27] #0: ffff888024a99098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 378.297049][ T27] #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 378.317022][ T27] 3 locks held by kworker/0:10/3867: [ 378.322345][ T27] #0: ffff888011c71938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [