last executing test programs: 21.28814382s ago: executing program 5 (id=705): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e6661578"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) write(r2, &(0x7f0000000040)="05000000010000", 0x7) 20.770946969s ago: executing program 5 (id=707): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x6, 0x0, 0xacb}, 0x10) 20.315775397s ago: executing program 5 (id=710): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "2dbe0000000000e0f7d6a4ae6dddebd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b58c66ee677df701905bbaafab4afbaf755a3f6a004", "cba3d627780820d1cbf7db00000000aa37a0ef8da65697e4298d1e02dce0eb8c6b105d9600fdff0000000000438ea359866cfe1a00", "be1d0000ae9ef30bea2a004000010000000000008000", [0x800]}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000140)={0x4, 0x0, 0x2, 0x10000, &(0x7f0000000340)}) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x40000) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 19.654743566s ago: executing program 5 (id=711): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[], 0x1, 0xb0d, &(0x7f0000000d80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='.\x00') pivot_root(&(0x7f0000001f80)='./file0/../file0/../file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') 18.047452835s ago: executing program 5 (id=718): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14.855735168s ago: executing program 0 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 13.834081087s ago: executing program 5 (id=730): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'poly1305-simd\x00'}}) 12.015928049s ago: executing program 32 (id=730): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'poly1305-simd\x00'}}) 12.009632759s ago: executing program 0 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) epoll_create1(0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x5) 12.008036225s ago: executing program 2 (id=734): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) read$FUSE(r3, &(0x7f0000000fc0)={0x2020}, 0x2020) 11.410164458s ago: executing program 3 (id=736): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 10.008425478s ago: executing program 3 (id=737): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000b80)={[{@discard}, {@check_int_data}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@treelog}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb"], 0xcc}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xf0ff, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 9.258737891s ago: executing program 4 (id=742): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 8.828008617s ago: executing program 4 (id=743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000800)='contention_end\x00', r0}, 0x18) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000000)=""/158, 0x9e) ioctl$TCSETS(r2, 0x5402, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x2, 0x0, "f937267f0f7ba57603a6a12e3f0a7f64c64c56"}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 8.280429004s ago: executing program 4 (id=745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 7.82664011s ago: executing program 1 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndpcmp(0x0, 0xc07, 0x200400) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x74}}, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) write$P9_RSTATu(r8, &(0x7f00000016c0)=ANY=[], 0x233) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f00000006c0)={{r4}, 0x0, 0x2, @unused=[0xd1bb, 0x1, 0x8, 0x800], @subvolid=0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 6.844136653s ago: executing program 2 (id=747): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) sendfile(r1, r0, 0x0, 0x100000000) 6.00616792s ago: executing program 1 (id=748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x44}}, 0x4000000) 5.79996643s ago: executing program 3 (id=749): r0 = semget$private(0x0, 0x5, 0x3c0) semtimedop(r0, &(0x7f0000000380)=[{0x3, 0xccf0, 0x1000}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2, @ANYRES32=r1, @ANYRES64=r0], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(r2, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r7) semop(0x0, &(0x7f0000000000)=[{0x4, 0x1, 0x1000}], 0x1) 5.513557761s ago: executing program 4 (id=750): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008a1f, &(0x7f0000000300), 0x1, 0x4cc, &(0x7f0000000f00)="$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") r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xffff, 0x3, 0x59cc, 0x200, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x2, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 3.735853731s ago: executing program 1 (id=751): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x9, 0xc, 0x4, 0x6, 0x5d0bef1f, 0x400, 0x5, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x7, 0xdd64, 0x1, 0x8, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x267, 0x1, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x8, 0x7ff, 0x44, 0x2, 0x9, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x2, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x111, 0x7, 0x5c20, 0x7b, 0x0, 0xe, 0x4, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90a, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x0, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0xd, 0x4, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0xe56d, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x10000, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x3, 0x603c, 0x80000004, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x4, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x4, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0xa2, 0x81, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x20002, 0x5, 0x1, 0x2, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0xfff, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb}, 0x6, 0x3}}]}]}}]}, 0x478}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.704498538s ago: executing program 4 (id=752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 3.697366927s ago: executing program 2 (id=753): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f00000000c0)) memfd_create(0x0, 0x3) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04300380c9"], 0x6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.476024371s ago: executing program 0 (id=754): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.47565284s ago: executing program 2 (id=755): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 3.470784265s ago: executing program 3 (id=756): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0x10, 0x80000, 0x3) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f00", 0x18) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x40086602, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) rt_sigaction(0x3, &(0x7f0000000080)={0x0, 0xc0000006, 0x0, {[0x4]}}, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x40810) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r4, &(0x7f0000002980), 0x400000000000239, 0x0) 3.390060225s ago: executing program 1 (id=757): shutdown(0xffffffffffffffff, 0x0) eventfd(0xffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="04"], 0x7) 3.171877737s ago: executing program 3 (id=758): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) memfd_create(&(0x7f0000000180)='\x00', 0x4) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002900)={r5, r4}, 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)}], 0x1}, 0x40880) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @multicast}}, 0x1e) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, 0x0) 3.022407683s ago: executing program 1 (id=759): unshare(0x22020400) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, 0x0) 2.957553131s ago: executing program 2 (id=760): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4008000, 0x0, 0x0) 2.867990003s ago: executing program 0 (id=761): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r2}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setfsuid(0xee01) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) 1.134969301s ago: executing program 4 (id=762): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 515.927267ms ago: executing program 0 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) 316.12657ms ago: executing program 2 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r2, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 277.321872ms ago: executing program 1 (id=765): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 208.228823ms ago: executing program 3 (id=766): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x20000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000000)=0xc92b) 0s ago: executing program 0 (id=767): r0 = semget$private(0x0, 0x5, 0x3c0) semtimedop(r0, &(0x7f0000000380)=[{0x3, 0xccf0, 0x1000}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2, @ANYRES32=r1, @ANYRES64=r0], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(r2, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r7) semop(0x0, &(0x7f0000000000)=[{0x4, 0x1, 0x1000}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 83.195435][ T5822] cgroup: Unknown subsys name 'net' [ 83.314868][ T5822] cgroup: Unknown subsys name 'cpuset' [ 83.323951][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.831890][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.194398][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.202391][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.210300][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.218533][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.226245][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.381009][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.388946][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.396681][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.404762][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.412595][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.502663][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.519713][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.527408][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.535505][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.543333][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.563915][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.613982][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.621441][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.630997][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.638559][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.650918][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.658815][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.660388][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.674479][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.680680][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.695028][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.713385][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.727626][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.750298][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.767610][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.967282][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 90.307077][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.314351][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.322580][ T5834] bridge_slave_0: entered allmulticast mode [ 90.330404][ T5834] bridge_slave_0: entered promiscuous mode [ 90.364150][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.371378][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.378491][ T5834] bridge_slave_1: entered allmulticast mode [ 90.386293][ T5834] bridge_slave_1: entered promiscuous mode [ 90.523032][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.627301][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.705833][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.773076][ T5834] team0: Port device team_slave_0 added [ 90.788597][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.824263][ T5834] team0: Port device team_slave_1 added [ 90.951623][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.979873][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.986819][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.012836][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.065532][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.092998][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.102449][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.129630][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.208860][ T3405] cfg80211: failed to load regulatory.db [ 91.261428][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.268687][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.275987][ T5846] bridge_slave_0: entered allmulticast mode [ 91.284212][ T5846] bridge_slave_0: entered promiscuous mode [ 91.290634][ T5146] Bluetooth: hci0: command tx timeout [ 91.293059][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.303268][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.310526][ T5846] bridge_slave_1: entered allmulticast mode [ 91.317902][ T5846] bridge_slave_1: entered promiscuous mode [ 91.376435][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 91.432699][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.441961][ T5146] Bluetooth: hci1: command tx timeout [ 91.448637][ T5834] hsr_slave_0: entered promiscuous mode [ 91.455309][ T5834] hsr_slave_1: entered promiscuous mode [ 91.508496][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.617981][ T5846] team0: Port device team_slave_0 added [ 91.627129][ T5846] team0: Port device team_slave_1 added [ 91.633949][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.641802][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.648935][ T5839] bridge_slave_0: entered allmulticast mode [ 91.656521][ T5839] bridge_slave_0: entered promiscuous mode [ 91.689671][ T5146] Bluetooth: hci2: command tx timeout [ 91.709261][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.716830][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.724366][ T5843] bridge_slave_0: entered allmulticast mode [ 91.732822][ T5843] bridge_slave_0: entered promiscuous mode [ 91.741563][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.748684][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.755903][ T5843] bridge_slave_1: entered allmulticast mode [ 91.759744][ T5146] Bluetooth: hci4: command tx timeout [ 91.766606][ T5843] bridge_slave_1: entered promiscuous mode [ 91.788704][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.796061][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.803368][ T5839] bridge_slave_1: entered allmulticast mode [ 91.811238][ T5839] bridge_slave_1: entered promiscuous mode [ 91.839730][ T5146] Bluetooth: hci3: command tx timeout [ 91.839783][ T5850] Bluetooth: hci5: command tx timeout [ 91.850910][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.858035][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.866037][ T5841] bridge_slave_0: entered allmulticast mode [ 91.873954][ T5841] bridge_slave_0: entered promiscuous mode [ 91.967064][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.974598][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.982519][ T5841] bridge_slave_1: entered allmulticast mode [ 91.990783][ T5841] bridge_slave_1: entered promiscuous mode [ 92.021630][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.031536][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.038483][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.064807][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.133540][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.158997][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.166281][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.192763][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.206735][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.216184][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.223867][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.231440][ T5852] bridge_slave_0: entered allmulticast mode [ 92.238819][ T5852] bridge_slave_0: entered promiscuous mode [ 92.292429][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.317689][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.325225][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.332924][ T5852] bridge_slave_1: entered allmulticast mode [ 92.342035][ T5852] bridge_slave_1: entered promiscuous mode [ 92.352155][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.370871][ T5843] team0: Port device team_slave_0 added [ 92.411484][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.445212][ T5843] team0: Port device team_slave_1 added [ 92.486248][ T5839] team0: Port device team_slave_0 added [ 92.526824][ T5841] team0: Port device team_slave_0 added [ 92.571545][ T5839] team0: Port device team_slave_1 added [ 92.581714][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.593214][ T5841] team0: Port device team_slave_1 added [ 92.613973][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.621677][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.648051][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.666491][ T5846] hsr_slave_0: entered promiscuous mode [ 92.673061][ T5846] hsr_slave_1: entered promiscuous mode [ 92.680662][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.688353][ T5846] Cannot create hsr debugfs directory [ 92.710929][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.775835][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.783181][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.810043][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.850257][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.857216][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.883910][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.932172][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.939128][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.966067][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.981250][ T5852] team0: Port device team_slave_0 added [ 92.987908][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.995246][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.021546][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.079841][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.086811][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.113674][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.127820][ T5852] team0: Port device team_slave_1 added [ 93.256363][ T5843] hsr_slave_0: entered promiscuous mode [ 93.264445][ T5843] hsr_slave_1: entered promiscuous mode [ 93.270817][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.278373][ T5843] Cannot create hsr debugfs directory [ 93.291250][ T5841] hsr_slave_0: entered promiscuous mode [ 93.297774][ T5841] hsr_slave_1: entered promiscuous mode [ 93.304039][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.311617][ T5841] Cannot create hsr debugfs directory [ 93.342651][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.349950][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.375961][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.380236][ T5850] Bluetooth: hci0: command tx timeout [ 93.388878][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.399017][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.425444][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.519677][ T5850] Bluetooth: hci1: command tx timeout [ 93.646627][ T5839] hsr_slave_0: entered promiscuous mode [ 93.653090][ T5839] hsr_slave_1: entered promiscuous mode [ 93.659256][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.666878][ T5839] Cannot create hsr debugfs directory [ 93.759655][ T5850] Bluetooth: hci2: command tx timeout [ 93.759770][ T5852] hsr_slave_0: entered promiscuous mode [ 93.771681][ T5852] hsr_slave_1: entered promiscuous mode [ 93.777926][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.785557][ T5852] Cannot create hsr debugfs directory [ 93.813379][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.827012][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.840065][ T5850] Bluetooth: hci4: command tx timeout [ 93.901747][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.912969][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.920015][ T5850] Bluetooth: hci3: command tx timeout [ 93.925050][ T5146] Bluetooth: hci5: command tx timeout [ 94.247744][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.268705][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.318594][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.345687][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.428201][ T5841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.448813][ T5841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.461058][ T5841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.472535][ T5841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.586940][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.597872][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.622111][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.645821][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.658418][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.754768][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.802842][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.815520][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.830944][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.838138][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.865721][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.883063][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.890218][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.921393][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.008665][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.023870][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.037263][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.066650][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.083322][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.105363][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.197477][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.233713][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.251151][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.263819][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.270957][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.303835][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.311021][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.333783][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.340952][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.376303][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.383474][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.418671][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.444565][ T5146] Bluetooth: hci0: command tx timeout [ 95.553227][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.587312][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.600668][ T5146] Bluetooth: hci1: command tx timeout [ 95.615841][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.627991][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.635133][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.648283][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.655433][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.726843][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.768776][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.842540][ T5146] Bluetooth: hci2: command tx timeout [ 95.875766][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.925345][ T5146] Bluetooth: hci4: command tx timeout [ 95.934822][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.942005][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.960561][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.967749][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.007141][ T5146] Bluetooth: hci5: command tx timeout [ 96.007152][ T5850] Bluetooth: hci3: command tx timeout [ 96.027864][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.203091][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.235608][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.282953][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.290253][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.376588][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.383812][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.534593][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.566656][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.603565][ T5846] veth0_vlan: entered promiscuous mode [ 96.625811][ T5834] veth0_vlan: entered promiscuous mode [ 96.657867][ T5846] veth1_vlan: entered promiscuous mode [ 96.756794][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.776285][ T5834] veth1_vlan: entered promiscuous mode [ 96.900283][ T5843] veth0_vlan: entered promiscuous mode [ 96.945858][ T5843] veth1_vlan: entered promiscuous mode [ 96.982270][ T5834] veth0_macvtap: entered promiscuous mode [ 96.997377][ T5846] veth0_macvtap: entered promiscuous mode [ 97.023384][ T5834] veth1_macvtap: entered promiscuous mode [ 97.071150][ T5846] veth1_macvtap: entered promiscuous mode [ 97.087289][ T5852] veth0_vlan: entered promiscuous mode [ 97.106255][ T5843] veth0_macvtap: entered promiscuous mode [ 97.118970][ T5852] veth1_vlan: entered promiscuous mode [ 97.145016][ T5843] veth1_macvtap: entered promiscuous mode [ 97.188279][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.210623][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.221727][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.235144][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.257013][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.269145][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.279024][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.290348][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.303292][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.317820][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.331089][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.340111][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.348811][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.361147][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.379093][ T5841] veth0_vlan: entered promiscuous mode [ 97.386620][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.397481][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.408847][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.444851][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.454041][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.462992][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.472230][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.496356][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.514449][ T5841] veth1_vlan: entered promiscuous mode [ 97.520982][ T5146] Bluetooth: hci0: command tx timeout [ 97.533620][ T5852] veth0_macvtap: entered promiscuous mode [ 97.542446][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.553544][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.563625][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.574084][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.587826][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.609807][ T5852] veth1_macvtap: entered promiscuous mode [ 97.666803][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.676209][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.679734][ T5146] Bluetooth: hci1: command tx timeout [ 97.690856][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.701173][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.735965][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.749374][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.759347][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.770277][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.780452][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.790907][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.802672][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.849161][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.862248][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.872118][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.882710][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.892579][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.903032][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.914399][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.921716][ T5146] Bluetooth: hci2: command tx timeout [ 97.935125][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.948500][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.987366][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.997004][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.009647][ T5146] Bluetooth: hci4: command tx timeout [ 98.011878][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.023837][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.048035][ T5841] veth0_macvtap: entered promiscuous mode [ 98.080231][ T5850] Bluetooth: hci5: command tx timeout [ 98.084617][ T5841] veth1_macvtap: entered promiscuous mode [ 98.085654][ T5146] Bluetooth: hci3: command tx timeout [ 98.100008][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.113622][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.147652][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.162927][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.202259][ T5839] veth0_vlan: entered promiscuous mode [ 98.234531][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.241258][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.254505][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.258272][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.266428][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.285647][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.295509][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.306007][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.315850][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.326608][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.340368][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.382832][ T5839] veth1_vlan: entered promiscuous mode [ 98.411583][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.438606][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.455618][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.466857][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.477167][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.488058][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.498336][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.511128][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.524856][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.547608][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.549287][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.567482][ T5841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.584273][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.593191][ T5841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.610452][ T5841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.619171][ T5841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.803089][ T5935] loop4: detected capacity change from 0 to 2048 [ 98.814958][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.847589][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.861531][ T5937] loop0: detected capacity change from 0 to 1024 [ 98.868633][ T5937] ======================================================= [ 98.868633][ T5937] WARNING: The mand mount option has been deprecated and [ 98.868633][ T5937] and is ignored by this kernel. Remove the mand [ 98.868633][ T5937] option from the mount to silence this warning. [ 98.868633][ T5937] ======================================================= [ 99.083527][ T5937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.095890][ T5937] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.110128][ T5839] veth0_macvtap: entered promiscuous mode [ 99.876547][ T5839] veth1_macvtap: entered promiscuous mode [ 99.967724][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.991871][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.003951][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.015791][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.026189][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.042332][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.055276][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.131623][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.159202][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.997662][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.045125][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.045143][ T5940] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 101.064228][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.329791][ T5937] syz.0.1 (5937) used greatest stack depth: 19216 bytes left [ 101.347578][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.361822][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.528556][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.555824][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.577486][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.592603][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.604720][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.778675][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.829358][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.841511][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.856333][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.867009][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.877872][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.892747][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.903717][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.914511][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.925297][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.939454][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 101.959046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.989595][ T36] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.989595][ T36] [ 101.991144][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.033235][ T36] EXT4-fs (loop0): Total free blocks count 0 [ 102.046635][ T36] EXT4-fs (loop0): Free/Dirty block details [ 102.267499][ T36] EXT4-fs (loop0): free_blocks=0 [ 102.329477][ T36] EXT4-fs (loop0): dirty_blocks=16 [ 102.339236][ T36] EXT4-fs (loop0): Block reservation details [ 102.419407][ T36] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 102.532965][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.561943][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.583440][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.620838][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.641626][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.680120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.140090][ T3405] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.309706][ T3405] usb 5-1: Using ep0 maxpacket: 8 [ 103.348050][ T3405] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 103.390345][ T5891] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.392087][ T3405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.455955][ T3405] usb 5-1: Product: syz [ 103.465645][ T3405] usb 5-1: Manufacturer: syz [ 103.471531][ T3405] usb 5-1: SerialNumber: syz [ 103.494190][ T3405] usb 5-1: config 0 descriptor?? [ 103.513023][ T3405] usb 5-1: selecting invalid altsetting 3 [ 103.518877][ T3405] comedi comedi0: could not set alternate setting 3 in high speed [ 103.541341][ T3405] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 103.594972][ T3405] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 103.632618][ T5968] loop0: detected capacity change from 0 to 2048 [ 103.795465][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.593674][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 104.724937][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.736867][ T5891] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 104.748300][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.749824][ T48] usb 5-1: USB disconnect, device number 2 [ 104.756625][ T5891] usb 3-1: Product: syz [ 104.766401][ T5891] usb 3-1: Manufacturer: syz [ 104.771545][ T5891] usb 3-1: SerialNumber: syz [ 104.779683][ T5891] usb 3-1: config 0 descriptor?? [ 105.881948][ T5891] usb 3-1: selecting invalid altsetting 3 [ 105.887698][ T5891] comedi comedi0: could not set alternate setting 3 in high speed [ 105.899658][ T5891] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 105.911168][ T5891] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 105.937578][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.945475][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.990034][ T5981] netlink: zone id is out of range [ 106.084494][ T5981] netlink: set zone limit has 4 unknown bytes [ 106.153657][ T5891] usb 3-1: USB disconnect, device number 2 [ 106.439880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.959892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.477382][ T5996] FAULT_INJECTION: forcing a failure. [ 107.477382][ T5996] name failslab, interval 1, probability 0, space 0, times 1 [ 107.548204][ T5996] CPU: 1 UID: 0 PID: 5996 Comm: syz.0.12 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 107.548237][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.548252][ T5996] Call Trace: [ 107.548262][ T5996] [ 107.548272][ T5996] dump_stack_lvl+0x241/0x360 [ 107.548316][ T5996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.548355][ T5996] ? __pfx__printk+0x10/0x10 [ 107.548398][ T5996] ? __pfx___might_resched+0x10/0x10 [ 107.548438][ T5996] should_fail_ex+0x424/0x570 [ 107.548471][ T5996] should_failslab+0xac/0x100 [ 107.548510][ T5996] kmem_cache_alloc_noprof+0x78/0x390 [ 107.548545][ T5996] ? getname_flags+0xb6/0x530 [ 107.548590][ T5996] getname_flags+0xb6/0x530 [ 107.548634][ T5996] __x64_sys_rename+0x5d/0x90 [ 107.548671][ T5996] do_syscall_64+0xf3/0x230 [ 107.548711][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.548735][ T5996] RIP: 0033:0x7f8e4f78d169 [ 107.548756][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.548775][ T5996] RSP: 002b:00007f8e50630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 107.548801][ T5996] RAX: ffffffffffffffda RBX: 00007f8e4f9a5fa0 RCX: 00007f8e4f78d169 [ 107.548820][ T5996] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000200000000400 [ 107.548838][ T5996] RBP: 00007f8e50630090 R08: 0000000000000000 R09: 0000000000000000 [ 107.548854][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.548869][ T5996] R13: 0000000000000000 R14: 00007f8e4f9a5fa0 R15: 00007ffdd8d147d8 [ 107.548905][ T5996] [ 112.058941][ T6124] loop0: detected capacity change from 0 to 2048 [ 112.340207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.360645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.386379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.388058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.490318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 112.569866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.598776][ T6139] loop5: detected capacity change from 0 to 8 [ 113.767774][ T48] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.322365][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 115.461060][ T48] usb 2-1: device descriptor read/all, error -71 [ 116.530549][ T30] audit: type=1326 audit(1744536372.869:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 116.878278][ T30] audit: type=1326 audit(1744536372.909:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 117.127926][ T30] audit: type=1326 audit(1744536373.009:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 117.169704][ T6170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.177175][ T6170] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.203413][ T30] audit: type=1326 audit(1744536373.009:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 117.226559][ T30] audit: type=1326 audit(1744536373.019:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 117.248643][ T30] audit: type=1326 audit(1744536373.039:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 117.270763][ T30] audit: type=1326 audit(1744536373.039:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3f1929359 code=0x7ffc0000 [ 117.292900][ T30] audit: type=1326 audit(1744536373.089:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3f1929359 code=0x7ffc0000 [ 117.317539][ T30] audit: type=1326 audit(1744536373.119:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3f1929359 code=0x7ffc0000 [ 117.345423][ T30] audit: type=1326 audit(1744536373.119:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3f1929359 code=0x7ffc0000 [ 117.418147][ T6170] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.513354][ T6170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.539172][ T6170] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.624621][ T6170] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.734230][ T6179] Bluetooth: MGMT ver 1.23 [ 117.761039][ T6170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.768328][ T6170] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.846679][ T6156] loop0: detected capacity change from 0 to 32768 [ 117.900274][ T6156] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.84 (6156) [ 117.942646][ T6170] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.994945][ T6156] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 118.015562][ T6156] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 118.050052][ T6156] BTRFS info (device loop0): using free-space-tree [ 118.096109][ T6170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.137068][ T6170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.267810][ T6170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.350666][ T6170] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.356623][ T6170] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 118.433457][ T6170] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 119.249052][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.258006][ T5146] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.422219][ T6170] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 119.432199][ T5843] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 119.433017][ T6170] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 119.470376][ T6170] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 119.609627][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.899609][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.222765][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.400402][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.777365][ T6224] loop4: detected capacity change from 0 to 256 [ 120.886895][ T6224] vfat: Unknown parameter 'ro¡äÏÒiocharstf8' [ 121.086454][ T6224] sg_write: data in/out 3171656/14 bytes for SCSI command 0x0-- guessing data in; [ 121.086454][ T6224] program syz.4.102 not setting count and/or reply_len properly [ 121.225154][ T5827] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.288184][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.449604][ T5146] Bluetooth: hci5: command 0x0c1a tx timeout [ 121.693474][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.923325][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.251180][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.413872][ T5827] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.458731][ T5827] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 122.480744][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.490060][ T5827] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.499112][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.603127][ T6237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.655108][ T6237] bond0: (slave rose0): Enslaving as an active interface with an up link [ 122.678184][ T6222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.745650][ T5827] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.989733][ T971] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.360768][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.367257][ T5827] usb 2-1: USB disconnect, device number 4 [ 123.375025][ T971] usb 6-1: Using ep0 maxpacket: 8 [ 123.560311][ T5146] Bluetooth: hci5: command 0x0c1a tx timeout [ 123.769581][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.009640][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.140344][ T971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.151329][ T971] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.205483][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.277909][ T971] usb 6-1: config 0 descriptor?? [ 124.329568][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.558724][ T6269] loop4: detected capacity change from 0 to 16 [ 124.589241][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 124.638556][ T6268] loop0: detected capacity change from 0 to 512 [ 124.906712][ T971] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 124.931870][ T6269] erofs (device loop4): dirblkbits 1 isn't supported [ 124.977356][ T6273] loop2: detected capacity change from 0 to 64 [ 124.978996][ T6166] udevd[6166]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.037967][ T6268] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.112: casefold flag without casefold feature [ 125.052495][ T6278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.114'. [ 125.096481][ T6275] netlink: 60 bytes leftover after parsing attributes in process `syz.3.114'. [ 125.111352][ T971] usb 6-1: USB disconnect, device number 2 [ 125.220157][ T6268] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.112: couldn't read orphan inode 15 (err -117) [ 125.362566][ T6268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.445436][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.645773][ T5146] Bluetooth: hci5: command 0x0c1a tx timeout [ 125.836578][ T6289] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 127.592282][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.634689][ T6279] delete_channel: no stack [ 128.137043][ T6310] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 129.086233][ T6320] loop2: detected capacity change from 0 to 128 [ 130.893447][ T6336] loop4: detected capacity change from 0 to 256 [ 131.384675][ T6330] syz.3.123 (6330) used greatest stack depth: 18888 bytes left [ 131.949580][ T5879] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.949558][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 132.958954][ T5879] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 133.509414][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.626777][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.652033][ T6354] loop4: detected capacity change from 0 to 256 [ 133.696115][ T5879] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.746230][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.769978][ T6361] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.780018][ T5879] usb 2-1: Product: syz [ 133.810901][ T5879] usb 2-1: Manufacturer: syz [ 133.974144][ T6362] Zero length message leads to an empty skb [ 134.297400][ T5879] usb 2-1: SerialNumber: syz [ 134.314132][ T6354] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 134.427619][ T5879] usb 2-1: can't set config #1, error -71 [ 134.464347][ T5879] usb 2-1: USB disconnect, device number 5 [ 134.619339][ T6368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.134'. [ 134.704536][ T6370] sg_write: data in/out 2031668/25 bytes for SCSI command 0x26-- guessing data in; [ 134.704536][ T6370] program syz.4.131 not setting count and/or reply_len properly [ 137.300903][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.307334][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.922384][ T30] kauditd_printk_skb: 566 callbacks suppressed [ 138.922406][ T30] audit: type=1804 audit(1744536395.269:578): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.145" name="/newroot/19/file0/bus" dev="overlay" ino=132 res=1 errno=0 [ 139.134184][ T30] audit: type=1804 audit(1744536395.269:579): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.145" name="/newroot/19/file0/bus" dev="overlay" ino=132 res=1 errno=0 [ 139.160381][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 139.184322][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 139.867809][ T6427] loop0: detected capacity change from 0 to 256 [ 139.960544][ T6427] vfat: Unknown parameter 'u' [ 140.523706][ T6433] loop3: detected capacity change from 0 to 40427 [ 141.047044][ T6433] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 141.057349][ T6433] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 141.109102][ T6433] F2FS-fs (loop3): invalid crc value [ 141.197662][ T6433] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 141.205869][ T6433] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.033809][ T5850] Bluetooth: hci6: command 0x1003 tx timeout [ 142.070030][ T5146] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 142.159410][ T6443] loop1: detected capacity change from 0 to 2048 [ 142.317642][ T6443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.608289][ T6461] loop1: detected capacity change from 0 to 64 [ 144.100606][ T5897] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 144.295072][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.359779][ T5897] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.407277][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.571146][ T5897] usb 6-1: config 0 descriptor?? [ 144.631360][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 144.857813][ T6458] loop4: detected capacity change from 0 to 32768 [ 145.060170][ T6458] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.158 (6458) [ 145.215006][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 145.406482][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 146.147514][ T6458] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.202208][ T5897] pwc: recv_control_msg error -32 req 02 val 2c00 [ 146.269207][ T6458] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 146.360769][ T6458] BTRFS info (device loop4): using free-space-tree [ 146.447983][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 146.473820][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 146.582196][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 146.661040][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 146.680624][ T6471] loop1: detected capacity change from 0 to 32768 [ 146.715408][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 146.743056][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 146.850187][ T6471] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 146.850187][ T6471] [ 146.891377][ T6471] ERROR: (device loop1): remounting filesystem as read-only [ 146.900391][ T6471] xtLookup: xtSearch returned -5 [ 146.906695][ T6471] read_mapping_page failed! [ 146.911583][ T6471] jfs_mount: diMount(ipaimap2) failed, rc = -5 [ 146.920621][ T6471] Mount JFS Failure: -5 [ 146.924853][ T6471] jfs_mount failed w/return code = -5 [ 146.961123][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 146.978078][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 147.081742][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 147.149043][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 147.244036][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 147.327805][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 147.361165][ T6476] loop0: detected capacity change from 0 to 256 [ 147.430723][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 147.445980][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 147.793666][ T6458] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 148.134922][ T6458] BTRFS error (device loop4): open_ctree failed: -12 [ 149.416486][ T5897] pwc: recv_control_msg error -71 req 04 val 1400 [ 149.425352][ T5897] pwc: recv_control_msg error -71 req 02 val 2000 [ 149.480630][ T5897] pwc: recv_control_msg error -71 req 02 val 2100 [ 149.639594][ T971] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.469222][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 150.476555][ T5897] pwc: recv_control_msg error -71 req 04 val 1500 [ 150.488169][ T5897] pwc: recv_control_msg error -71 req 02 val 2500 [ 150.500420][ T5897] pwc: recv_control_msg error -71 req 02 val 2400 [ 150.507795][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 150.515383][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 150.529625][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 150.536883][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 150.587456][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 150.691048][ T971] usb 4-1: device descriptor read/64, error -32 [ 150.894497][ T6505] loop1: detected capacity change from 0 to 1024 [ 150.924653][ T6503] input: syz1 as /devices/virtual/input/input5 [ 150.975946][ T5897] pwc: Registered as video103. [ 151.027546][ T971] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.080572][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.167'. [ 151.089697][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 151.186968][ T5897] usb 6-1: USB disconnect, device number 3 [ 151.290733][ T971] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.349680][ T971] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 151.409621][ T971] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.523587][ T971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 151.726509][ T971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 152.309620][ T971] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.363293][ T6505] EXT4-fs: Ignoring removed orlov option [ 152.369702][ T6505] EXT4-fs (loop1): Test dummy encryption mode enabled [ 152.379668][ T6505] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 152.389390][ T6505] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 152.409546][ T971] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.417552][ T971] usb 4-1: Product: syz [ 152.438684][ T971] usb 4-1: Manufacturer: syz [ 153.265365][ T971] usb 4-1: can't set config #1, error -71 [ 153.302560][ T971] usb 4-1: USB disconnect, device number 3 [ 154.679919][ T6541] syz.2.179 uses obsolete (PF_INET,SOCK_PACKET) [ 154.699659][ T971] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.913689][ T971] usb 4-1: config 0 has no interfaces? [ 154.949606][ T971] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.055354][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.117185][ T971] usb 4-1: config 0 descriptor?? [ 155.398932][ T3405] usb 4-1: USB disconnect, device number 4 [ 155.811544][ T6561] netlink: 'syz.5.184': attribute type 9 has an invalid length. [ 155.892588][ T6568] 9pnet_fd: Insufficient options for proto=fd [ 155.940202][ T6568] tipc: Started in network mode [ 155.975811][ T6568] tipc: Node identity 6, cluster identity 4711 [ 156.027269][ T6568] tipc: Node number set to 6 [ 156.636655][ T6559] delete_channel: no stack [ 156.843354][ T6586] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.187912][ T6590] loop0: detected capacity change from 0 to 256 [ 158.355862][ T6590] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 161.341740][ T5146] Bluetooth: hci0: unexpected event for opcode 0x2023 [ 161.485170][ T6616] rdma_op ffff888027dbd9f0 conn xmit_rdma 0000000000000000 [ 161.985375][ T6615] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 163.292054][ T6636] warning: `syz.4.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 164.512187][ T6639] loop3: detected capacity change from 0 to 512 [ 164.521150][ T6639] EXT4-fs (loop3): Test dummy encryption mode enabled [ 164.527959][ T6639] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 164.541179][ T6639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.604650][ T6639] EXT4-fs (loop3): 1 truncate cleaned up [ 164.613263][ T6639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.647267][ T6648] loop4: detected capacity change from 0 to 128 [ 164.719154][ T6648] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 164.854650][ T6648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.953801][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.144794][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 165.597278][ T6662] netlink: 132 bytes leftover after parsing attributes in process `syz.3.214'. [ 167.617922][ T6674] loop2: detected capacity change from 0 to 1024 [ 167.753303][ T6678] netlink: 72 bytes leftover after parsing attributes in process `syz.1.219'. [ 167.947133][ T5965] hfsplus: b-tree write err: -5, ino 4 [ 170.491622][ T6699] loop5: detected capacity change from 0 to 1024 [ 170.623773][ T6699] EXT4-fs: Ignoring removed bh option [ 170.727436][ T6699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.758221][ T6690] loop1: detected capacity change from 0 to 4096 [ 171.900949][ T6690] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 173.001285][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.265103][ T6690] ntfs3(loop1): Failed to read $UpCase (-4). [ 174.405502][ T5146] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 174.564972][ T6739] netlink: 'syz.2.241': attribute type 10 has an invalid length. [ 174.886347][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.895730][ T6746] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 174.902359][ T6746] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.931327][ T6749] 9pnet_fd: Insufficient options for proto=fd [ 175.015455][ T6739] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 175.174842][ T6739] team0: Failed to send options change via netlink (err -105) [ 175.269703][ T6746] vhci_hcd vhci_hcd.0: Device attached [ 175.878128][ T6739] team0: Port device batadv0 added [ 175.909807][ T6747] vhci_hcd: connection closed [ 175.918378][ T1340] vhci_hcd: stop threads [ 175.939899][ T1340] vhci_hcd: release socket [ 175.944356][ T1340] vhci_hcd: disconnect device [ 175.983240][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'. [ 178.077469][ T6787] loop2: detected capacity change from 0 to 4096 [ 180.266863][ T6810] loop2: detected capacity change from 0 to 1024 [ 180.324513][ T6810] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.490339][ T6810] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.255: Invalid block bitmap block 0 in block_group 0 [ 180.663202][ T6810] Quota error (device loop2): write_blk: dquota write failed [ 180.735637][ T6810] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 180.796129][ T6810] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.255: Failed to acquire dquot type 0 [ 180.979191][ T6810] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.255: Freeing blocks not in datazone - block = 0, count = 4096 [ 181.132921][ T6829] loop0: detected capacity change from 0 to 256 [ 181.147445][ T6829] exfat: Deprecated parameter 'utf8' [ 181.153391][ T6829] exfat: Deprecated parameter 'utf8' [ 181.376886][ T6829] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 181.714842][ T6810] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.255: Invalid inode bitmap blk 0 in block_group 0 [ 181.739761][ T82] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 181.748830][ T82] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 181.761840][ T6828] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 181.831422][ T6810] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 181.922538][ T6810] EXT4-fs (loop2): 1 orphan inode deleted [ 181.977256][ T6810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.046219][ T30] audit: type=1326 audit(1744536438.369:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f78d169 code=0x0 [ 182.266286][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.841086][ T6843] loop2: detected capacity change from 0 to 256 [ 183.458035][ T6843] MINIX-fs: mounting file system with errors, running fsck is recommended [ 184.705855][ T6838] loop3: detected capacity change from 0 to 32768 [ 184.725118][ T6838] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.263 (6838) [ 185.329841][ T6838] BTRFS error (device loop3): open_ctree failed: -4 [ 187.220355][ T6882] loop3: detected capacity change from 0 to 256 [ 188.816338][ T6893] xt_SECMARK: invalid mode: 2 [ 189.601417][ T5146] Bluetooth: hci4: unexpected event for opcode 0x080f [ 189.609372][ T5146] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 190.252573][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 190.782930][ T6928] loop0: detected capacity change from 0 to 512 [ 190.830210][ T6928] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 190.963307][ T6928] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2840e02c, mo2=0002] [ 191.604950][ T6928] System zones: 1-12 [ 191.622341][ T6928] EXT4-fs (loop0): orphan cleanup on readonly fs [ 191.630390][ T6928] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.292: invalid indirect mapped block 12 (level 1) [ 191.666283][ T6928] EXT4-fs (loop0): Remounting filesystem read-only [ 191.674009][ T6928] EXT4-fs (loop0): 1 truncate cleaned up [ 191.682004][ T6928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 192.288302][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.298'. [ 193.305744][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 193.700490][ T5146] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 193.724427][ T5146] Bluetooth: hci4: Injecting HCI hardware error event [ 193.732423][ T5146] Bluetooth: hci4: hardware error 0x00 [ 194.599730][ T3405] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 194.705982][ T6966] process 'syz.2.304' launched './file1' with NULL argv: empty string added [ 194.913340][ T3405] usb 1-1: Using ep0 maxpacket: 16 [ 195.040287][ T3405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.197828][ T3405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.367914][ T3405] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 195.424446][ T3405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.463428][ T6970] bridge_slave_0: left allmulticast mode [ 195.488434][ T3405] usb 1-1: config 0 descriptor?? [ 195.513009][ T6970] bridge_slave_0: left promiscuous mode [ 195.555069][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.630583][ T6970] bridge_slave_1: left allmulticast mode [ 195.647892][ T6970] bridge_slave_1: left promiscuous mode [ 195.657007][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.753709][ T6970] bond0: (slave bond_slave_0): Releasing backup interface [ 195.783842][ T5146] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 195.803741][ T6970] bond0: (slave bond_slave_1): Releasing backup interface [ 195.841485][ T6970] team0: Port device team_slave_0 removed [ 195.866829][ T6970] team0: Port device team_slave_1 removed [ 195.883773][ T6970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.891870][ T6970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.908690][ T6970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.917185][ T6970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.927275][ T3405] letsketch 0003:6161:4D15.0001: Device info: 豧ਞ [ 197.155425][ T3405] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 197.188162][ T3405] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -71 [ 197.240328][ T3405] usb 1-1: USB disconnect, device number 2 [ 197.817555][ T7010] netlink: 88 bytes leftover after parsing attributes in process `syz.0.322'. [ 197.857386][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 197.869754][ T7005] loop5: detected capacity change from 0 to 4096 [ 198.725026][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.731444][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.933669][ T7031] loop5: detected capacity change from 0 to 2048 [ 200.065745][ T7031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.759792][ T7038] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 202.109539][ T5897] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 202.320535][ T30] audit: type=1800 audit(1744536714.379:581): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.328" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 202.478229][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 202.657521][ T5897] usb 3-1: config 0 has no interfaces? [ 202.684013][ T5897] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 202.727034][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.844039][ T5897] usb 3-1: Product: syz [ 203.479568][ T5897] usb 3-1: Manufacturer: syz [ 203.494406][ T5897] usb 3-1: SerialNumber: syz [ 203.526961][ T5897] usb 3-1: config 0 descriptor?? [ 203.998397][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.013811][ T7110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.357'. [ 206.087821][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 210.634161][ T5988] usb 3-1: USB disconnect, device number 3 [ 212.375436][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.378'. [ 212.448954][ T7168] dummy0: entered promiscuous mode [ 212.484603][ T7168] macsec1: entered promiscuous mode [ 212.504501][ T7168] macsec1: entered allmulticast mode [ 212.515485][ T7176] xt_hashlimit: size too large, truncated to 1048576 [ 212.529378][ T7168] dummy0: entered allmulticast mode [ 213.796809][ T7188] ipvlan2: entered promiscuous mode [ 213.823388][ T7188] bridge0: port 3(ipvlan2) entered blocking state [ 213.848660][ T7188] bridge0: port 3(ipvlan2) entered disabled state [ 213.891235][ T7188] ipvlan2: entered allmulticast mode [ 213.914548][ T7188] bridge0: entered allmulticast mode [ 213.956652][ T7188] ipvlan2: left allmulticast mode [ 214.060181][ T7188] bridge0: left allmulticast mode [ 214.378039][ T7201] loop1: detected capacity change from 0 to 32768 [ 214.440558][ T7201] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.513904][ T7201] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 214.608310][ T7201] XFS (loop1): Starting recovery (logdev: internal) [ 214.660152][ T7201] XFS (loop1): Ending recovery (logdev: internal) [ 215.478990][ T5846] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.099679][ T5897] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 217.339648][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 217.389658][ T5897] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 217.451461][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.475808][ T5897] usb 4-1: Product: syz [ 217.491741][ T5897] usb 4-1: Manufacturer: syz [ 217.515780][ T5897] usb 4-1: SerialNumber: syz [ 217.575310][ T5897] usb 4-1: config 0 descriptor?? [ 217.602532][ T5897] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 218.134702][ T5897] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 218.235654][ T5897] usb 4-1: USB disconnect, device number 5 [ 218.402063][ T7245] loop2: detected capacity change from 0 to 512 [ 218.462487][ T7245] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #15: comm syz.2.400: casefold flag without casefold feature [ 218.512555][ T7245] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.400: couldn't read orphan inode 15 (err -117) [ 218.747447][ T7245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.198049][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.557190][ T7265] loop2: detected capacity change from 0 to 128 [ 221.916175][ T7263] netlink: 96 bytes leftover after parsing attributes in process `syz.3.403'. [ 224.913545][ T7293] bridge_slave_0: left allmulticast mode [ 224.919235][ T7293] bridge_slave_0: left promiscuous mode [ 224.947188][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.092529][ T7305] loop5: detected capacity change from 0 to 64 [ 225.363300][ T7293] bridge_slave_1: left allmulticast mode [ 225.368993][ T7293] bridge_slave_1: left promiscuous mode [ 225.380852][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.408704][ T7293] bond0: (slave bond_slave_0): Releasing backup interface [ 225.585845][ T7308] befs: (nullb0): No write support. Marking filesystem read-only [ 225.596974][ T7308] befs: (nullb0): invalid magic header [ 226.197730][ T7293] bond0: (slave bond_slave_1): Releasing backup interface [ 226.283316][ T7293] team0: Port device team_slave_0 removed [ 226.548825][ T7293] team0: Port device team_slave_1 removed [ 226.754777][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.817371][ T7293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.886699][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.901918][ T7293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.457788][ T7316] ptrace attach of "./syz-executor exec"[7319] was attempted by "./syz-executor exec"[7316] [ 228.814132][ T30] audit: type=1326 audit(1744536741.159:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f78d169 code=0x7ffc0000 [ 228.943585][ T30] audit: type=1326 audit(1744536741.159:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f78d169 code=0x7ffc0000 [ 229.960400][ T30] audit: type=1326 audit(1744536741.189:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8e4f78d169 code=0x7ffc0000 [ 229.982704][ T30] audit: type=1326 audit(1744536741.189:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f78d169 code=0x7ffc0000 [ 230.009180][ T30] audit: type=1326 audit(1744536741.189:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f78d169 code=0x7ffc0000 [ 230.108016][ T30] audit: type=1326 audit(1744536741.189:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8e4f78d169 code=0x7ffc0000 [ 230.195245][ T7345] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.382649][ T30] audit: type=1326 audit(1744536741.189:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f78d169 code=0x7ffc0000 [ 230.502352][ T7345] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.509529][ T30] audit: type=1326 audit(1744536741.189:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e4f729359 code=0x7ffc0000 [ 230.672804][ T30] audit: type=1326 audit(1744536741.189:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f78d169 code=0x7ffc0000 [ 230.823367][ T7345] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.832686][ T30] audit: type=1326 audit(1744536741.189:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e4f729359 code=0x7ffc0000 [ 231.451987][ T7345] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.591226][ T7345] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.610217][ T7345] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.647955][ T7345] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.671870][ T7345] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.170939][ T7420] loop0: detected capacity change from 0 to 128 [ 235.211712][ T7420] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 235.248988][ T7420] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 235.275330][ T7424] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 235.667477][ T7397] loop3: detected capacity change from 0 to 32768 [ 235.795561][ T7411] loop1: detected capacity change from 0 to 32768 [ 235.869051][ T7397] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 235.920965][ T7411] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.044916][ T7397] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 236.106891][ T7397] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 236.119254][ T7397] OCFS2: File system is now read-only. [ 236.124938][ T7397] (syz.3.445,7397,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 236.135648][ T7397] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 236.737659][ T7451] xt_nat: multiple ranges no longer supported [ 236.817418][ T7397] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 236.829858][ T7397] (syz.3.445,7397,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 236.837700][ T7397] (syz.3.445,7397,1):ocfs2_mknod:502 ERROR: status = -30 [ 236.860320][ T7452] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 236.866927][ T7452] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 236.874669][ T7452] vhci_hcd vhci_hcd.0: Device attached [ 236.880389][ T7454] vhci_hcd: connection closed [ 236.883279][ T82] vhci_hcd: stop threads [ 237.270159][ T7397] (syz.3.445,7397,0):ocfs2_create:675 ERROR: status = -30 [ 237.309879][ T82] vhci_hcd: release socket [ 237.339532][ T82] vhci_hcd: disconnect device [ 237.390687][ T7447] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 237.469203][ T7411] XFS (loop1): Ending clean mount [ 237.499843][ T7411] XFS (loop1): Quotacheck needed: Please wait. [ 237.538572][ T7447] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 237.600301][ T7447] (syz.3.445,7447,0):ocfs2_find_leaf:1948 ERROR: status = -30 [ 237.670749][ T7447] (syz.3.445,7447,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 237.684402][ T7411] XFS (loop1): Quotacheck: Done. [ 238.524873][ T7447] (syz.3.445,7447,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 238.689895][ T7447] (syz.3.445,7447,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 238.716610][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.764937][ T7447] (syz.3.445,7447,0):ocfs2_read_virt_blocks:997 ERROR: status = -30 [ 238.807432][ T7447] (syz.3.445,7447,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 239.071219][ T5839] ocfs2: Unmounting device (7,3) on (node local) [ 240.298605][ T7487] dvmrp1: entered allmulticast mode [ 240.913651][ T7490] netlink: 88 bytes leftover after parsing attributes in process `syz.5.473'. [ 241.042224][ T7494] loop1: detected capacity change from 0 to 128 [ 241.110418][ T7494] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 241.368866][ T7494] FAT-fs (loop1): FAT read failed (blocknr 128) [ 241.657317][ T82] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 244.159923][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 244.526051][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.485'. [ 246.516629][ T7546] netlink: 88 bytes leftover after parsing attributes in process `syz.1.490'. [ 248.960156][ T7568] pimreg: entered allmulticast mode [ 249.005285][ T7569] pimreg: left allmulticast mode [ 250.609087][ T7580] loop1: detected capacity change from 0 to 512 [ 250.681194][ T7580] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz.1.499: inode #0: comm syz.1.499: iget: illegal inode # [ 250.706332][ T7580] EXT4-fs (loop1): get orphan inode failed [ 250.717498][ T7580] EXT4-fs (loop1): mount failed [ 250.771499][ T7581] vlan2: entered allmulticast mode [ 250.776784][ T7581] bond0: entered allmulticast mode [ 250.858156][ T7580] loop1: detected capacity change from 0 to 1024 [ 250.886821][ T7580] EXT4-fs: Ignoring removed orlov option [ 250.921215][ T7580] EXT4-fs (loop1): Test dummy encryption mode enabled [ 250.952831][ T7580] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 250.983511][ T7580] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 251.370739][ T7603] netlink: 64 bytes leftover after parsing attributes in process `syz.3.505'. [ 251.421569][ T5850] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 251.426088][ T7605] vlan2: entered allmulticast mode [ 251.460236][ T7605] bond0: entered allmulticast mode [ 252.327027][ T7615] loop0: detected capacity change from 0 to 512 [ 253.272958][ T7632] loop5: detected capacity change from 0 to 64 [ 253.284966][ T7633] capability: warning: `syz.4.518' uses 32-bit capabilities (legacy support in use) [ 253.529944][ T7615] EXT4-fs (loop0): 1 orphan inode deleted [ 253.549844][ T6404] __quota_error: 34 callbacks suppressed [ 253.549861][ T6404] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 253.567384][ T7615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.619619][ T6404] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 253.632142][ T7615] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.161342][ T30] audit: type=1800 audit(1744536766.469:626): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.512" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 254.664027][ T7648] loop5: detected capacity change from 0 to 256 [ 254.789017][ T7648] FAT-fs (loop5): Directory bread(block 64) failed [ 254.803905][ T7652] loop3: detected capacity change from 0 to 2048 [ 254.829572][ T7648] FAT-fs (loop5): Directory bread(block 65) failed [ 254.856537][ T7648] FAT-fs (loop5): Directory bread(block 66) failed [ 254.967223][ T7648] FAT-fs (loop5): Directory bread(block 67) failed [ 254.987541][ T7652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.001936][ T7652] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.005504][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.031289][ T13] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 255.049645][ T7648] FAT-fs (loop5): Directory bread(block 68) failed [ 255.069563][ T7648] FAT-fs (loop5): Directory bread(block 69) failed [ 255.076184][ T7648] FAT-fs (loop5): Directory bread(block 70) failed [ 255.096188][ T13] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 255.176902][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.189861][ T7648] FAT-fs (loop5): Directory bread(block 71) failed [ 255.227728][ T7648] FAT-fs (loop5): Directory bread(block 72) failed [ 255.259627][ T7648] FAT-fs (loop5): Directory bread(block 73) failed [ 256.636196][ T5146] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 258.243721][ T5988] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 258.254823][ T7705] loop3: detected capacity change from 0 to 32768 [ 258.346826][ T7705] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 258.450243][ T5988] usb 6-1: Using ep0 maxpacket: 8 [ 258.450920][ T7705] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 258.490200][ T5988] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.506195][ T5988] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.515796][ T7705] XFS (loop3): Starting recovery (logdev: internal) [ 258.540823][ T7705] XFS (loop3): Ending recovery (logdev: internal) [ 258.788145][ T5988] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.926120][ T5988] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.977894][ T5988] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.980991][ T7723] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 259.794071][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.040395][ T5988] usb 6-1: GET_CAPABILITIES returned 0 [ 260.045955][ T5988] usbtmc 6-1:16.0: can't read capabilities [ 260.069651][ T5839] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 260.164322][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.179781][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.295179][ T5879] usb 6-1: USB disconnect, device number 4 [ 260.500393][ T5988] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 260.874361][ T5988] usb 2-1: config 0 has no interfaces? [ 261.168914][ T5988] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 261.185428][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.215296][ T5988] usb 2-1: Product: syz [ 261.239576][ T5988] usb 2-1: Manufacturer: syz [ 261.254758][ T5988] usb 2-1: SerialNumber: syz [ 261.303477][ T5988] usb 2-1: config 0 descriptor?? [ 261.439657][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 261.609623][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 261.630842][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.665629][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.705950][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 261.748477][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.910792][ T9] usb 6-1: config 0 descriptor?? [ 261.920575][ T9] hub 6-1:0.0: USB hub found [ 262.249625][ T9] hub 6-1:0.0: 1 port detected [ 262.635192][ T7744] loop2: detected capacity change from 0 to 512 [ 262.654586][ T7744] EXT4-fs: Ignoring removed orlov option [ 262.695728][ T7744] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.553: corrupted in-inode xattr: invalid ea_ino [ 262.734640][ T7744] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.553: couldn't read orphan inode 15 (err -117) [ 262.822845][ T9] hub 6-1:0.0: activate --> -90 [ 262.937265][ T7744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.100406][ T7744] EXT4-fs (loop2): shut down requested (1) [ 263.233817][ T5988] usb 6-1: USB disconnect, device number 5 [ 263.365400][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.545536][ T7763] netlink: 88 bytes leftover after parsing attributes in process `syz.3.555'. [ 265.758459][ T5988] usb 2-1: USB disconnect, device number 6 [ 265.937055][ T7788] loop5: detected capacity change from 0 to 4096 [ 271.355022][ T7855] loop3: detected capacity change from 0 to 32768 [ 271.370115][ T7855] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.581 (7855) [ 271.437366][ T7855] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 271.448367][ T7855] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 271.457055][ T7855] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 271.560592][ T7855] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 271.587977][ T7865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.583'. [ 271.648421][ T7855] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 271.661457][ T7855] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 271.679325][ T7855] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 271.685065][ T7865] team0: entered promiscuous mode [ 271.737161][ T7855] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 271.753669][ T7855] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 271.849347][ T7865] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.970118][ T7855] BTRFS info (device loop3): rebuilding free space tree [ 272.002468][ T7865] team0: left promiscuous mode [ 272.049902][ T7855] BTRFS info (device loop3): disabling free space tree [ 272.056890][ T7855] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 272.066778][ T7855] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 272.246234][ T7889] mmap: syz.4.587 (7889) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 272.295331][ T5839] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 272.982064][ T7908] lo speed is unknown, defaulting to 1000 [ 273.490925][ T7908] lo speed is unknown, defaulting to 1000 [ 273.685468][ T7908] lo speed is unknown, defaulting to 1000 [ 273.884833][ T7908] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 274.303572][ T7918] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 274.982798][ T7908] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.265187][ T7928] netlink: 88 bytes leftover after parsing attributes in process `syz.4.597'. [ 275.308844][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 275.332974][ T7908] lo speed is unknown, defaulting to 1000 [ 275.531184][ T7908] lo speed is unknown, defaulting to 1000 [ 276.400443][ T7908] lo speed is unknown, defaulting to 1000 [ 276.407565][ T7908] lo speed is unknown, defaulting to 1000 [ 276.515282][ T7908] lo speed is unknown, defaulting to 1000 [ 276.553573][ T7908] lo speed is unknown, defaulting to 1000 [ 277.918640][ T7940] loop2: detected capacity change from 0 to 32768 [ 278.049800][ T7940] (syz.2.598,7940,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.163511][ T7970] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 278.170058][ T7970] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 278.177930][ T7970] vhci_hcd vhci_hcd.0: Device attached [ 278.193982][ T7971] usbip_core: unknown command [ 278.248608][ T7971] vhci_hcd: unknown pdu 0 [ 278.258952][ T7940] (syz.2.598,7940,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.382748][ T7971] usbip_core: unknown command [ 278.524760][ T36] vhci_hcd: stop threads [ 278.550010][ T5827] usb 44-1: SetAddress Request (2) to port 0 [ 278.674024][ T36] vhci_hcd: release socket [ 278.679867][ T36] vhci_hcd: disconnect device [ 278.700259][ T5827] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 278.747685][ T7940] JBD2: Ignoring recovery information on journal [ 278.779617][ T5827] usb 44-1: enqueue for inactive port 0 [ 278.827279][ T7936] loop3: detected capacity change from 0 to 32768 [ 278.840097][ T7978] netlink: 44 bytes leftover after parsing attributes in process `syz.4.609'. [ 278.889168][ T7940] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 278.912900][ T7936] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 279.000412][ T7936] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.228382][ T5827] usb usb44-port1: attempt power cycle [ 279.433122][ T5852] ocfs2: Unmounting device (7,2) on (node local) [ 279.715303][ T8003] No control pipe specified [ 279.796570][ T8003] loop5: detected capacity change from 0 to 1024 [ 280.396628][ T5951] hfsplus: b-tree write err: -5, ino 4 [ 280.479360][ T7936] XFS (loop3): Ending clean mount [ 280.537356][ T7936] XFS (loop3): Quotacheck needed: Please wait. [ 280.600937][ T5827] usb usb44-port1: unable to enumerate USB device [ 280.714585][ T7936] XFS (loop3): Quotacheck: Done. [ 282.042112][ T5839] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 283.045006][ T5146] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 284.651181][ T8035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.670337][ T8035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.269684][ T8035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.275799][ T8035] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 286.329619][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.517555][ T5850] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 286.611740][ T8064] loop0: detected capacity change from 0 to 64 [ 286.720800][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 287.360521][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.366902][ T5850] Bluetooth: hci5: command 0x0c1a tx timeout [ 287.915892][ T8080] siw: device registration error -23 [ 289.705090][ T30] audit: type=1326 audit(1744536802.049:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 289.996788][ T8093] loop0: detected capacity change from 0 to 40427 [ 290.051184][ T30] audit: type=1326 audit(1744536802.079:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 290.086981][ T8096] dvmrp1: entered allmulticast mode [ 290.130076][ T30] audit: type=1326 audit(1744536802.079:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 290.212923][ T8093] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 290.220772][ T8093] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 290.237821][ T8088] sctp: failed to load transform for md5: -2 [ 290.265509][ T8093] F2FS-fs (loop0): invalid crc value [ 290.268336][ T30] audit: type=1326 audit(1744536802.079:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 290.404862][ T8098] loop2: detected capacity change from 0 to 128 [ 290.429806][ T8093] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 290.438038][ T8093] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 290.632427][ T30] audit: type=1326 audit(1744536802.079:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 290.679717][ T30] audit: type=1326 audit(1744536802.079:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 291.619575][ T30] audit: type=1326 audit(1744536802.079:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 291.840772][ T30] audit: type=1326 audit(1744536802.079:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 291.869903][ T30] audit: type=1326 audit(1744536802.079:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f198d169 code=0x7ffc0000 [ 292.022018][ T30] audit: type=1326 audit(1744536802.079:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff3f198b9d7 code=0x7ffc0000 [ 292.179786][ T8111] syz.2.642 (8111) used greatest stack depth: 18512 bytes left [ 293.334414][ T8116] loop2: detected capacity change from 0 to 1024 [ 293.420458][ T8116] EXT4-fs: Ignoring removed nobh option [ 293.426020][ T8116] EXT4-fs: Ignoring removed bh option [ 293.490531][ T8116] EXT4-fs: Mount option(s) incompatible with ext2 [ 295.504717][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 295.504739][ T30] audit: type=1326 audit(1744536807.849:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895498d169 code=0x7ffc0000 [ 295.585074][ T30] audit: type=1326 audit(1744536807.849:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895498d169 code=0x7ffc0000 [ 295.674569][ T30] audit: type=1326 audit(1744536807.849:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f895498d169 code=0x7ffc0000 [ 295.768567][ T30] audit: type=1326 audit(1744536807.849:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895498d169 code=0x7ffc0000 [ 295.861965][ T30] audit: type=1326 audit(1744536807.849:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895498d169 code=0x7ffc0000 [ 295.959604][ T30] audit: type=1326 audit(1744536807.849:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f895498d169 code=0x7ffc0000 [ 296.074996][ T8151] loop5: detected capacity change from 0 to 1024 [ 296.109827][ T30] audit: type=1326 audit(1744536807.849:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8954929359 code=0x7ffc0000 [ 296.187392][ T8151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.923243][ T30] audit: type=1326 audit(1744536807.849:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8954929359 code=0x7ffc0000 [ 296.945447][ T30] audit: type=1326 audit(1744536807.859:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8954929359 code=0x7ffc0000 [ 296.967807][ T30] audit: type=1326 audit(1744536807.859:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8954929359 code=0x7ffc0000 [ 299.108409][ T5879] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 299.151397][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 299.269941][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 299.328260][ T8175] ceph: No mds server is up or the cluster is laggy [ 299.336335][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 299.386405][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.407820][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 299.417733][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.448362][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.686974][ T5879] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.697585][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.504484][ T5879] usb 6-1: config 0 descriptor?? [ 300.987075][ T5879] usbhid 6-1:0.0: can't add hid device: -71 [ 300.999682][ T5879] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 301.097553][ T5879] usb 6-1: USB disconnect, device number 6 [ 302.275294][ T8211] loop3: detected capacity change from 0 to 512 [ 304.836390][ T8234] virtio-fs: tag <(null)> not found [ 304.962552][ T8239] loop2: detected capacity change from 0 to 128 [ 304.996322][ T8239] FAT-fs (loop2): Directory bread(block 162) failed [ 305.012822][ T8239] FAT-fs (loop2): Directory bread(block 163) failed [ 305.050194][ T8239] FAT-fs (loop2): Directory bread(block 164) failed [ 305.083825][ T8239] FAT-fs (loop2): Directory bread(block 165) failed [ 305.145873][ T8239] FAT-fs (loop2): Directory bread(block 166) failed [ 305.189509][ T8239] FAT-fs (loop2): Directory bread(block 167) failed [ 305.196146][ T8239] FAT-fs (loop2): Directory bread(block 168) failed [ 305.280005][ T8239] FAT-fs (loop2): Directory bread(block 169) failed [ 305.689394][ T8250] FAT-fs (loop2): Directory bread(block 162) failed [ 305.696572][ T8250] FAT-fs (loop2): Directory bread(block 163) failed [ 305.714943][ T8250] syz.2.684: attempt to access beyond end of device [ 305.714943][ T8250] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 305.728947][ T8250] syz.2.684: attempt to access beyond end of device [ 305.728947][ T8250] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 306.782531][ T8259] loop0: detected capacity change from 0 to 2048 [ 307.019631][ T8259] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 307.048545][ T8261] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.054033][ T8296] syz.3.699: attempt to access beyond end of device [ 311.054033][ T8296] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 311.069030][ T8296] syz.3.699: attempt to access beyond end of device [ 311.069030][ T8296] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 311.771947][ T8303] netlink: 88 bytes leftover after parsing attributes in process `syz.3.702'. [ 311.782424][ T8304] erofs (device nbd2): cannot find valid erofs superblock [ 311.900084][ T8300] nbd2: detected capacity change from 0 to 67108884 [ 311.932095][ T8297] block nbd2: shutting down sockets [ 311.938212][ T971] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 312.022934][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.032897][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 312.050577][ T6280] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.082693][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 312.089732][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 312.105925][ T6280] Buffer I/O error on dev nbd2, logical block 0, async page read [ 312.170457][ T6280] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.170532][ T6280] Buffer I/O error on dev nbd2, logical block 0, async page read [ 312.170707][ T6280] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.170737][ T6280] Buffer I/O error on dev nbd2, logical block 0, async page read [ 312.170918][ T6280] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.170974][ T6280] Buffer I/O error on dev nbd2, logical block 0, async page read [ 312.171283][ T6280] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.171314][ T6280] Buffer I/O error on dev nbd2, logical block 0, async page read [ 312.171536][ T6280] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.171566][ T6280] Buffer I/O error on dev nbd2, logical block 0, async page read [ 312.171741][ T6280] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.171770][ T6280] Buffer I/O error on dev nbd2, logical block 0, async page read [ 312.171891][ T6280] ldm_validate_partition_table(): Disk read failed. [ 312.171994][ T6280] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.172024][ T6280] Buffer I/O error on dev nbd2, logical block 0, async page read [ 312.172213][ T6280] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.172268][ T6280] Buffer I/O error on dev nbd2, logical block 0, async page read [ 312.173363][ T6280] Dev nbd2: unable to read RDB block 0 [ 312.173506][ T971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.173533][ T971] usb 1-1: config 0 has no interfaces? [ 312.173568][ T971] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 312.173596][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.176955][ T6280] nbd2: unable to read partition table [ 312.178000][ T971] usb 1-1: config 0 descriptor?? [ 312.203321][ T6280] ldm_validate_partition_table(): Disk read failed. [ 312.204066][ T6280] Dev nbd2: unable to read RDB block 0 [ 312.289725][ T6280] nbd2: unable to read partition table [ 312.332600][ T8311] ceph: No mds server is up or the cluster is laggy [ 312.405968][ T971] libceph: connect (1)[c::]:6789 error -101 [ 312.406127][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 312.438794][ T971] usb 1-1: USB disconnect, device number 3 [ 314.628347][ T8340] loop5: detected capacity change from 0 to 2048 [ 314.765554][ T8349] loop2: detected capacity change from 0 to 512 [ 314.811971][ T8351] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.834177][ T8349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.957247][ T8315] tty tty27: ldisc open failed (-12), clearing slot 26 [ 315.146388][ T5841] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 15 [ 315.380883][ T5841] Remounting filesystem read-only [ 315.472064][ T5841] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 15 [ 316.014024][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 316.060062][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.154488][ T8369] loop0: detected capacity change from 0 to 4096 [ 316.826064][ T8369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.247796][ T30] kauditd_printk_skb: 453 callbacks suppressed [ 317.247817][ T30] audit: type=1800 audit(1744536829.589:1115): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.720" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 317.420283][ T8381] netlink: 104 bytes leftover after parsing attributes in process `syz.1.725'. [ 318.209116][ T8365] bridge_slave_1: left allmulticast mode [ 318.215092][ T8365] bridge_slave_1: left promiscuous mode [ 318.221218][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.233442][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.292900][ T8365] bridge_slave_0: left allmulticast mode [ 318.298914][ T8365] bridge_slave_0: left promiscuous mode [ 318.389659][ T5841] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 318.509814][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.576994][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.698933][ T8401] veth0_macvtap: left promiscuous mode [ 320.706270][ T8401] macvtap0: entered promiscuous mode [ 320.752178][ T8401] veth0_macvtap: entered promiscuous mode [ 320.786573][ T8401] team0: Device macvtap0 failed to register rx_handler [ 320.816062][ T8401] veth0_macvtap: left promiscuous mode [ 320.950352][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.091088][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.428588][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.602867][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.609289][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.921080][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.940687][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.948890][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.959109][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.979898][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.876247][ T8427] loop3: detected capacity change from 0 to 32768 [ 324.903189][ T8427] btrfs: Unknown parameter 'check_int_data' [ 326.079893][ T5146] Bluetooth: hci2: command tx timeout [ 326.289793][ T8469] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.409079][ T12] bond0 (unregistering): Released all slaves [ 328.161118][ T5146] Bluetooth: hci2: command tx timeout [ 329.118487][ T8439] lo speed is unknown, defaulting to 1000 [ 329.752394][ T8494] loop2: detected capacity change from 0 to 7 [ 329.806591][ T8494] Dev loop2: unable to read RDB block 7 [ 329.821405][ T8494] loop2: unable to read partition table [ 329.905595][ T8494] loop2: partition table beyond EOD, truncated [ 330.007901][ T8494] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 331.515136][ T5146] Bluetooth: hci2: command tx timeout [ 332.075770][ T8527] block device autoloading is deprecated and will be removed. [ 332.954303][ T12] hsr_slave_0: left promiscuous mode [ 333.164523][ T12] hsr_slave_1: left promiscuous mode [ 333.284273][ T12] [ 333.286636][ T12] ============================================ [ 333.292771][ T12] WARNING: possible recursive locking detected [ 333.298911][ T12] 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 Not tainted [ 333.306005][ T12] -------------------------------------------- [ 333.312137][ T12] kworker/u8:0/12 is trying to acquire lock: [ 333.318119][ T12] ffff88804b738d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 333.328239][ T12] [ 333.328239][ T12] but task is already holding lock: [ 333.335585][ T12] ffff88804b738d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 333.347187][ T12] and the lock comparison function returns 0: [ 333.353238][ T12] [ 333.353238][ T12] other info that might help us debug this: [ 333.361283][ T12] Possible unsafe locking scenario: [ 333.361283][ T12] [ 333.368717][ T12] CPU0 [ 333.371981][ T12] ---- [ 333.375245][ T12] lock(&dev_instance_lock_key#3); [ 333.380453][ T12] lock(&dev_instance_lock_key#3); [ 333.385748][ T12] [ 333.385748][ T12] *** DEADLOCK *** [ 333.385748][ T12] [ 333.393883][ T12] May be due to missing lock nesting notation [ 333.393883][ T12] [ 333.402188][ T12] 5 locks held by kworker/u8:0/12: [ 333.407282][ T12] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 333.418186][ T12] #1: ffffc90000117c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 333.428739][ T12] #2: ffffffff900f0950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 333.438169][ T12] #3: ffffffff900fd488 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 333.448209][ T12] #4: ffff88804b738d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 333.460253][ T12] [ 333.460253][ T12] stack backtrace: [ 333.466126][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 333.466152][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.466167][ T12] Workqueue: netns cleanup_net [ 333.466201][ T12] Call Trace: [ 333.466209][ T12] [ 333.466218][ T12] dump_stack_lvl+0x241/0x360 [ 333.466255][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.466288][ T12] ? __pfx__printk+0x10/0x10 [ 333.466319][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.466345][ T12] ? print_lock+0x171/0x1a0 [ 333.466374][ T12] print_deadlock_bug+0x2be/0x2d0 [ 333.466404][ T12] validate_chain+0x928/0x24e0 [ 333.466437][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.466462][ T12] ? stack_trace_save+0x11a/0x1d0 [ 333.466497][ T12] ? preempt_schedule_irq+0xfe/0x1c0 [ 333.466527][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.466556][ T12] __lock_acquire+0xad5/0xd80 [ 333.466584][ T12] lock_acquire+0x116/0x2f0 [ 333.466605][ T12] ? dev_set_allmulti+0x11c/0x270 [ 333.466627][ T12] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 333.466657][ T12] __mutex_lock+0x1a5/0x10c0 [ 333.466685][ T12] ? dev_set_allmulti+0x11c/0x270 [ 333.466710][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.466737][ T12] ? dev_set_allmulti+0x11c/0x270 [ 333.466757][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 333.466788][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.466815][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.466840][ T12] ? __local_bh_enable_ip+0x168/0x200 [ 333.466863][ T12] ? macsec_dev_stop+0x264/0x440 [ 333.466885][ T12] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 333.466909][ T12] dev_set_allmulti+0x11c/0x270 [ 333.466932][ T12] macsec_dev_stop+0x2b8/0x440 [ 333.466955][ T12] ? __pfx_macsec_dev_stop+0x10/0x10 [ 333.466974][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.467006][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.467031][ T12] ? dev_deactivate_many+0xc09/0xca0 [ 333.467069][ T12] ? __pfx_dev_deactivate_many+0x10/0x10 [ 333.467103][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.467128][ T12] ? notifier_call_chain+0x3cc/0x3f0 [ 333.467157][ T12] ? __pfx_macsec_dev_stop+0x10/0x10 [ 333.467179][ T12] __dev_close_many+0x3d9/0x760 [ 333.467215][ T12] ? __pfx___dev_close_many+0x10/0x10 [ 333.467253][ T12] dev_close_many+0x250/0x4c0 [ 333.467288][ T12] ? __pfx_dev_close_many+0x10/0x10 [ 333.467318][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.467343][ T12] ? __lock_acquire+0xad5/0xd80 [ 333.467370][ T12] unregister_netdevice_many_notify+0x628/0x2510 [ 333.467404][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.467430][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.467455][ T12] ? __local_bh_enable_ip+0x168/0x200 [ 333.467481][ T12] ? batadv_tt_local_remove+0x119/0x230 [ 333.467504][ T12] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 333.467526][ T12] ? batadv_tt_local_remove+0x119/0x230 [ 333.467548][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 333.467584][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.467609][ T12] ? unregister_netdevice_queue+0x2c4/0x400 [ 333.467640][ T12] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 333.467672][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.467700][ T12] default_device_exit_batch+0x7ff/0x880 [ 333.467741][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 333.467777][ T12] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 333.467810][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.467835][ T12] ? cfg802154_pernet_exit+0xc3/0xe0 [ 333.467855][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 333.467892][ T12] cleanup_net+0x8b1/0xd60 [ 333.467930][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 333.467965][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.467996][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 333.468021][ T12] process_scheduled_works+0xac5/0x18e0 [ 333.468063][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.468093][ T12] ? assign_work+0x367/0x3d0 [ 333.468120][ T12] worker_thread+0x870/0xd50 [ 333.468155][ T12] ? __kthread_parkme+0x1a8/0x200 [ 333.468185][ T12] ? __pfx_worker_thread+0x10/0x10 [ 333.468211][ T12] kthread+0x7b9/0x940 [ 333.468244][ T12] ? __pfx_worker_thread+0x10/0x10 [ 333.468271][ T12] ? __pfx_kthread+0x10/0x10 [ 333.468301][ T12] ? __pfx_kthread+0x10/0x10 [ 333.468332][ T12] ? __pfx_kthread+0x10/0x10 [ 333.468362][ T12] ? __pfx_kthread+0x10/0x10 [ 333.468393][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.468418][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.468444][ T12] ? __pfx_kthread+0x10/0x10 [ 333.468479][ T12] ret_from_fork+0x4d/0x80 [ 333.468503][ T12] ? __pfx_kthread+0x10/0x10 [ 333.468534][ T12] ret_from_fork_asm+0x1a/0x30 [ 333.468564][ T12] [ 334.471015][ T5146] Bluetooth: hci2: command tx timeout