last executing test programs: 1m49.57196839s ago: executing program 1 (id=77): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x40000039, r2, 0x0) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000010000002003e00cd000000c9030000000000004000000000000000ea0200000000000000000100050038000f"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m48.992257876s ago: executing program 1 (id=82): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x1, 0x2af, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x800, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4e1f00000000000000beaeafc22a5a08a1a70024a159dbd9fd46d32db66594de164160662b44fa88fb14c2cf8bb55768f2d9304cb839c6ba63892e325902aaf67a7163"], 0x1, 0x2c3, &(0x7f0000000180)="$eJzs3cFqE1EUxvFjU5s0pU0EERTUg250M7TxATRIC2JAqY2oC2FqJxoyJmUmVCJisxG3Pkdx6U5QX6AbcePeXREEN12II52ZtJM2bdM2TWL7/0GZO3Pux71N0nISSLLy4N3zUsE1CmZVBhIqAyJ1WRVJr41CJ8LjgD8ekqi6XB35/f38vYePbmdzuclp1anszLWMqo5d/PTi1ftLX6oj9z+MfYzLcvrxyq/Mj+Wh5bMrf2eeFV0tulquVNXU2Uqlas7als4V3ZKhete2TNfSYtm1nKZ6wa7Mz9fULM+NJucdy3XVLNe0ZNW0WtGqU1PzqVksq2EYOpqU422wjTn5pelpM7tt2Yt1dEc4dMOtLjpOtt66mF/qwp4AAECf2bn/D3r97fr/je5wL/3/md37f5Fo/58IF6H/74B609ku/T+OBMfJmsnw77cZ/T8AAAAAAAAAAAAAAAAAAAAAAP+DVc9LeZ6XWjuGl/zzuIgkgreA++c93iYOSfT+9yI/6/d/eL4pdr1H20WHRd64lxCx3y7kF/LBMahnC1IUWywZl5T88R8PoWA8dSs3Oa6+tHy2F8P84kI+JvFGviHdKn/h1ESQ1+b8SUlG189ISk63Xj/TMj8kVy5H8oak5OsTqYgtc/7jeiP/ekL15p3cpvywPw8AAAAAgKPA0HVbnr/7dX9CQrbWg3zk9QHP8xZ3en1g0/PrQTnXzkdUAgAAAACAA3NrL0umbVvOPgZxETlAvPMDzxPp/TZi0h+3RvPghoj0wTa6NUiISHBF9xP/uR5vK+W1MWcw/AaO/rh9dh/0+j8TAAAAgE7baPr3EPr25hB3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8dPu54E15m8pNQo7xCPLxbr+CwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB95F8AAAD//6loFW8=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x193) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1m48.602248735s ago: executing program 1 (id=86): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000000c0)=0x402) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m48.360577302s ago: executing program 1 (id=89): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0) 1m47.351066908s ago: executing program 1 (id=92): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1m46.325341825s ago: executing program 1 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2810000, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 1m31.055775802s ago: executing program 32 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2810000, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 1m3.936038077s ago: executing program 0 (id=324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) 1m3.405640021s ago: executing program 0 (id=325): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000d6000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x46e62b7f, &(0x7f0000000080)={0x0}) 1m3.012532811s ago: executing program 0 (id=328): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000a31000)={0x20080522}, 0x0) ioctl$FIBMAP(r0, 0x1261, 0x0) 1m2.442304086s ago: executing program 0 (id=332): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000019c0), 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f00000005c0)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 1m1.776471323s ago: executing program 0 (id=336): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0xca, 0xb08, 0x3ffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x6, r1, 0x0, &(0x7f00004f9000/0x4000)=nil, 0x4000, 0x7fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r1, 0x0, &(0x7f00004f9000/0x2000)=nil, 0x2000, 0x14c2}) 59.864357943s ago: executing program 0 (id=351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9}, {0x9, 0x4, 0x2, 0x6, 0x3, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xa4}, {0x5, 0xfffffffd, 0x4, 0x3, 0x6, 0x1}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) 59.450547064s ago: executing program 33 (id=351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9}, {0x9, 0x4, 0x2, 0x6, 0x3, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xa4}, {0x5, 0xfffffffd, 0x4, 0x3, 0x6, 0x1}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) 44.065529984s ago: executing program 3 (id=425): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x8, {0x0, 0x3, 0x0, '\x00', {0x7ff, 0x0, 0xae3, 0x10, r2, 0xffffffffffffffff, 0x6000, '\x00', 0x6, 0x81, 0x1000000000001, 0x4, {0x1, 0x5}, {0x4000000000009, 0x42}, {0x2000005, 0xd}, {0x1, 0xa00}, 0x2, 0x6, 0x81, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x2810901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) 43.531983247s ago: executing program 3 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000000040)=""/62, 0x3e, 0xf2, 0x0, 0x0) 42.935613363s ago: executing program 3 (id=432): socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) unshare(0x40400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000240)=0x4}) 42.347268289s ago: executing program 3 (id=446): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="adbac500", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007440)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001780)=""/4089, 0xff9}], 0x1}, 0x100) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x1, 0x0, 0x0, 0x0) 42.112047415s ago: executing program 3 (id=441): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 41.031716653s ago: executing program 3 (id=444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r0, &(0x7f0000000080)=""/78, 0x4e, 0x10100, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 25.859457337s ago: executing program 34 (id=444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r0, &(0x7f0000000080)=""/78, 0x4e, 0x10100, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 7.68184819s ago: executing program 5 (id=545): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x20000020064e, 0xe, 0x200000, 0x3, 0x5, 0x9}) 6.401114844s ago: executing program 5 (id=546): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5ed5, &(0x7f0000011ac0)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.676072638s ago: executing program 5 (id=551): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_pts(0xffffffffffffffff, 0x80140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.857167235s ago: executing program 5 (id=560): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) 2.782777767s ago: executing program 6 (id=561): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0xebc0, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x2006, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x4, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x0, 0x0, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 2.383827518s ago: executing program 6 (id=564): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) timer_delete(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.234482632s ago: executing program 2 (id=565): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000600)={0x28, 0x2, r1, 0x0, &(0x7f0000000540)="fc", 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r1, 0x0, &(0x7f0000002500)="94", 0x1, 0x852}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x1440, 0x280000000}) 2.188188943s ago: executing program 6 (id=566): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x1004001, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r2) 1.996474228s ago: executing program 4 (id=567): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000580)={0xa0002008}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10}) 1.996256718s ago: executing program 2 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 1.874721841s ago: executing program 2 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000380)=@filename='./bus\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.847886042s ago: executing program 5 (id=570): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000300)={0x1, 0x1, [{r1, 0x0, 0x8000, 0x1000}]}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x4, 0x4000, 0x1000000}) 1.709374605s ago: executing program 4 (id=571): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x1, @empty}}, 0x1, 0x2}, &(0x7f0000000300)=0x90) 1.52951575s ago: executing program 5 (id=572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="dbbbb30835b2"], 0x0) syz_open_dev$usbmon(0x0, 0x8002, 0xa2000) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 1.52823929s ago: executing program 2 (id=580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0x9f, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.464311632s ago: executing program 4 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x2, 0x7, 0x0, 0x6, 0x8, 0x4, {0x6, 0x8000, 0x100000000, 0x0, 0x203, 0x55d, 0xfffffffa, 0x0, 0x80010000, 0x2000, 0x1002, 0x0, r2, 0xb4f3, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x2d, 0x3, 0x400, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x101040, 0x32) 1.110359581s ago: executing program 4 (id=574): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) timer_delete(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.110213791s ago: executing program 6 (id=575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="2e0f21ea66b83f008ed80f00975c0000002e0f01c40f5f950000000066baf80cb8f2c6c084ef66bafc0cec0fc71bf20f48a000a000000f01c3b805000000b9090000000f01d9", 0x46}], 0x1, 0x48, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 671.581902ms ago: executing program 6 (id=576): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000e500000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11ff092112"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 668.540573ms ago: executing program 4 (id=585): syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 296.492072ms ago: executing program 2 (id=577): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_STATX(r3, &(0x7f00000014c0)={0x130, 0x0, 0x0, {0xfffffffffffffffb, 0x1, 0x0, '\x00', {0x8, 0xe, 0x4, 0x1, 0x0, 0x0, 0x2000, '\x00', 0x8, 0x7, 0x6, 0x81, {0x3, 0x1}, {0x7, 0x6}, {0x6}, {0x2, 0x8}, 0x9, 0x7, 0x6, 0x9205}}}, 0x130) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x40) splice(r2, 0x0, r1, 0x0, 0x3ffffffffd, 0x3) 153.655235ms ago: executing program 2 (id=578): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/43, 0x2b}, {0x0}], 0x2}, 0x1) 109.031167ms ago: executing program 6 (id=579): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0], 0xfe, 0x698, &(0x7f0000003680)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 0s ago: executing program 4 (id=581): timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x800001c) kernel console output (not intermixed with test programs): T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.496707][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.517134][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.524728][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.540740][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.549607][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.559460][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.579216][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.587656][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.595662][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.609248][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.617892][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.626137][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.634751][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.643189][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.650813][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.130729][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 93.212865][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 93.254630][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 93.349369][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 93.375260][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.383816][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.393238][ T5778] bridge_slave_0: entered allmulticast mode [ 93.400656][ T5778] bridge_slave_0: entered promiscuous mode [ 93.415831][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.423115][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.430703][ T5778] bridge_slave_1: entered allmulticast mode [ 93.438029][ T5778] bridge_slave_1: entered promiscuous mode [ 93.514071][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.560418][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.569851][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.577066][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.584666][ T5785] bridge_slave_0: entered allmulticast mode [ 93.592162][ T5785] bridge_slave_0: entered promiscuous mode [ 93.641261][ T5778] team0: Port device team_slave_0 added [ 93.647781][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.656856][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.666300][ T5785] bridge_slave_1: entered allmulticast mode [ 93.674522][ T5785] bridge_slave_1: entered promiscuous mode [ 93.699157][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.706647][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.714000][ T5782] bridge_slave_0: entered allmulticast mode [ 93.722106][ T5782] bridge_slave_0: entered promiscuous mode [ 93.733299][ T5778] team0: Port device team_slave_1 added [ 93.739458][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.746769][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.754618][ T5782] bridge_slave_1: entered allmulticast mode [ 93.762244][ T5782] bridge_slave_1: entered promiscuous mode [ 93.833184][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.857071][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.867302][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.874582][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.900926][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.914729][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.922527][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.948830][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.974753][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.997695][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.035562][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.046783][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.054953][ T5786] bridge_slave_0: entered allmulticast mode [ 94.063030][ T5786] bridge_slave_0: entered promiscuous mode [ 94.086041][ T5785] team0: Port device team_slave_0 added [ 94.103054][ T5782] team0: Port device team_slave_0 added [ 94.112764][ T5782] team0: Port device team_slave_1 added [ 94.144164][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.151563][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.158777][ T5786] bridge_slave_1: entered allmulticast mode [ 94.166853][ T5786] bridge_slave_1: entered promiscuous mode [ 94.176143][ T5785] team0: Port device team_slave_1 added [ 94.196181][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.204024][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.230380][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.243496][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.256674][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.282727][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.338819][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.378874][ T5778] hsr_slave_0: entered promiscuous mode [ 94.385597][ T5778] hsr_slave_1: entered promiscuous mode [ 94.396649][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.419604][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.426719][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.453295][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.487386][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.494922][ T5787] Bluetooth: hci0: command tx timeout [ 94.494919][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.511184][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.573587][ T5782] hsr_slave_0: entered promiscuous mode [ 94.580488][ T5782] hsr_slave_1: entered promiscuous mode [ 94.586912][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.595598][ T5782] Cannot create hsr debugfs directory [ 94.625361][ T5786] team0: Port device team_slave_0 added [ 94.652235][ T5787] Bluetooth: hci2: command tx timeout [ 94.657994][ T5787] Bluetooth: hci1: command tx timeout [ 94.668952][ T5785] hsr_slave_0: entered promiscuous mode [ 94.675645][ T5785] hsr_slave_1: entered promiscuous mode [ 94.684138][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.692373][ T5785] Cannot create hsr debugfs directory [ 94.709116][ T5786] team0: Port device team_slave_1 added [ 94.731195][ T5787] Bluetooth: hci3: command tx timeout [ 94.797488][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.805529][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.832152][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.879402][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.886538][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.915805][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.082633][ T5786] hsr_slave_0: entered promiscuous mode [ 95.089312][ T5786] hsr_slave_1: entered promiscuous mode [ 95.096302][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.104190][ T5786] Cannot create hsr debugfs directory [ 95.283765][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.310539][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.329117][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.355014][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.472958][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.490620][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.504966][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.531153][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.624391][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.648128][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.673801][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.685549][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.759526][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.781571][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.797548][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.809420][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.821991][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.906725][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.945047][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.952518][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.989142][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.996594][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.014274][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.040246][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.095453][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.102711][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.152434][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.194682][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.202474][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.235736][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.248689][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.298123][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.358716][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.366255][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.382803][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.390052][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.412188][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.454174][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.461440][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.472253][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.479473][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.571305][ T5787] Bluetooth: hci0: command tx timeout [ 96.730393][ T5787] Bluetooth: hci1: command tx timeout [ 96.730426][ T5789] Bluetooth: hci2: command tx timeout [ 96.805412][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.812564][ T5789] Bluetooth: hci3: command tx timeout [ 96.977633][ T5782] veth0_vlan: entered promiscuous mode [ 97.021613][ T5782] veth1_vlan: entered promiscuous mode [ 97.108400][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.144639][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.179540][ T5782] veth0_macvtap: entered promiscuous mode [ 97.213238][ T5782] veth1_macvtap: entered promiscuous mode [ 97.253031][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.265915][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.282523][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.312593][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.322367][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.332102][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.340966][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.365084][ T5778] veth0_vlan: entered promiscuous mode [ 97.462309][ T5778] veth1_vlan: entered promiscuous mode [ 97.502278][ T5786] veth0_vlan: entered promiscuous mode [ 97.534698][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.552649][ T1191] cfg80211: failed to load regulatory.db [ 97.566738][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.587322][ T5786] veth1_vlan: entered promiscuous mode [ 97.620025][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.627925][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.674972][ T5778] veth0_macvtap: entered promiscuous mode [ 97.687039][ T5785] veth0_vlan: entered promiscuous mode [ 97.717056][ T5785] veth1_vlan: entered promiscuous mode [ 97.744974][ T5778] veth1_macvtap: entered promiscuous mode [ 97.813895][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.826493][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.838737][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.868327][ T5786] veth0_macvtap: entered promiscuous mode [ 97.895742][ T5785] veth0_macvtap: entered promiscuous mode [ 97.916140][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.927610][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.943157][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.957620][ T5785] veth1_macvtap: entered promiscuous mode [ 97.973271][ T5786] veth1_macvtap: entered promiscuous mode [ 97.996076][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.007001][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.021379][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.031112][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.073851][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.086433][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.097526][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.108535][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.135887][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.151916][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.170761][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.181465][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.192753][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.204486][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.215721][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.231394][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.273662][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.288115][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.300310][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.311060][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.323761][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.336813][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.353712][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.364597][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.375369][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.386506][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.397632][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.415597][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.478754][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.507224][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.519725][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.528995][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.544449][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.562726][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.572807][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.582017][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.650994][ T5789] Bluetooth: hci0: command tx timeout [ 98.665960][ T5847] syz.1.7[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 98.681600][ T5847] loop1: detected capacity change from 0 to 128 [ 98.702549][ T5847] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 98.810429][ T5789] Bluetooth: hci2: command tx timeout [ 98.813694][ T5787] Bluetooth: hci1: command tx timeout [ 98.824468][ T5847] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 98.845872][ T5847] FAT-fs (loop1): Filesystem has been set read-only [ 98.891238][ T5787] Bluetooth: hci3: command tx timeout [ 98.905368][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.913700][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.977941][ T5782] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 99.010000][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.017987][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.090281][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.098464][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.166592][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.175054][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.229543][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.258038][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.305816][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 99.323025][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.371725][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.626725][ T5857] loop2: detected capacity change from 0 to 16 [ 99.634028][ T5855] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.679171][ T5857] erofs: (device loop2): mounted with root inode @ nid 36. [ 99.693469][ T5853] loop0: detected capacity change from 0 to 4096 [ 99.725249][ T5853] ======================================================= [ 99.725249][ T5853] WARNING: The mand mount option has been deprecated and [ 99.725249][ T5853] and is ignored by this kernel. Remove the mand [ 99.725249][ T5853] option from the mount to silence this warning. [ 99.725249][ T5853] ======================================================= [ 99.862241][ T5862] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.181729][ T5868] overlayfs: upper fs does not support tmpfile. [ 100.297467][ T5868] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.344326][ T5868] overlayfs: failed to set xattr on upper [ 100.356812][ T5872] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 100.386624][ T5868] overlayfs: ...falling back to redirect_dir=nofollow. [ 100.422986][ T5868] overlayfs: ...falling back to index=off. [ 100.536967][ T5868] overlayfs: ...falling back to uuid=null. [ 100.622998][ T5876] loop2: detected capacity change from 0 to 128 [ 100.723330][ T5818] Process accounting resumed [ 100.729101][ T5818] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 100.737271][ T5787] Bluetooth: hci0: command tx timeout [ 100.754048][ T5818] FAT-fs (loop2): Filesystem has been set read-only [ 100.914488][ T5787] Bluetooth: hci1: command tx timeout [ 100.914513][ T5789] Bluetooth: hci2: command tx timeout [ 100.970531][ T5789] Bluetooth: hci3: command tx timeout [ 102.378792][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 102.401114][ T5904] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.443825][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 103.160275][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.371177][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 103.409456][ T27] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 103.425430][ T27] usb 1-1: config 0 has no interface number 0 [ 103.441996][ T27] usb 1-1: config 0 interface 184 has no altsetting 0 [ 103.456481][ T27] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 103.479738][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.498075][ T27] usb 1-1: Product: syz [ 103.510168][ T27] usb 1-1: Manufacturer: syz [ 103.515187][ T27] usb 1-1: SerialNumber: syz [ 103.580459][ T27] usb 1-1: config 0 descriptor?? [ 103.613103][ T27] smsc75xx v1.0.0 [ 104.052899][ T5954] loop2: detected capacity change from 0 to 16 [ 104.073382][ T5954] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.132209][ T5954] capability: warning: `syz.2.48' uses deprecated v2 capabilities in a way that may be insecure [ 104.227622][ T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 104.272921][ T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 104.302971][ T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 104.316676][ T27] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 104.367990][ T27] usb 1-1: USB disconnect, device number 2 [ 104.742562][ T5952] loop1: detected capacity change from 0 to 32768 [ 104.780680][ T5952] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.46 (5952) [ 104.880204][ T5952] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.905966][ T5952] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 104.931421][ T5952] BTRFS info (device loop1): enabling auto defrag [ 104.963297][ T5952] BTRFS info (device loop1): force clearing of disk cache [ 104.997319][ T5952] BTRFS info (device loop1): max_inline at 485 [ 105.017522][ T5952] BTRFS info (device loop1): disabling free space tree [ 105.221444][ T5952] BTRFS info (device loop1): enabling ssd optimizations [ 105.234270][ T5959] loop3: detected capacity change from 0 to 32768 [ 105.259984][ T5952] BTRFS info (device loop1): auto enabling async discard [ 105.300494][ T5952] BTRFS info (device loop1): rebuilding free space tree [ 105.307279][ T5959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.50 (5959) [ 105.419024][ T5959] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.440119][ T5952] BTRFS info (device loop1): disabling free space tree [ 105.463465][ T5952] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.475013][ T5959] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 105.509826][ T5959] BTRFS info (device loop3): force clearing of disk cache [ 105.517344][ T5952] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.530609][ T5959] BTRFS info (device loop3): metadata ratio 0 [ 105.538672][ T5959] BTRFS info (device loop3): enabling ssd optimizations [ 105.557844][ T5959] BTRFS info (device loop3): using spread ssd allocation scheme [ 105.589829][ T5959] BTRFS info (device loop3): using free space tree [ 105.864735][ T5959] BTRFS info (device loop3): auto enabling async discard [ 105.914636][ T5959] BTRFS info (device loop3): rebuilding free space tree [ 106.011874][ T5782] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.383598][ T1120] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 106.538346][ T5785] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.710063][ T5818] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.920090][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 106.953888][ T5818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 106.984437][ T5818] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 107.019857][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 107.058039][ T5818] usb 1-1: Product: syz [ 107.064001][ T5818] usb 1-1: Manufacturer: syz [ 107.073343][ T5818] usb 1-1: SerialNumber: syz [ 107.104440][ T5818] usb 1-1: config 0 descriptor?? [ 107.122956][ T6009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.147455][ T5818] hub 1-1:0.0: bad descriptor, ignoring hub [ 107.169788][ T5818] hub: probe of 1-1:0.0 failed with error -5 [ 107.606077][ T5818] usb 1-1: USB disconnect, device number 3 [ 107.684793][ T6023] netlink: 44 bytes leftover after parsing attributes in process `syz.2.60'. [ 108.120972][ T6017] loop1: detected capacity change from 0 to 32768 [ 108.205290][ T5779] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.644421][ T6033] block device autoloading is deprecated and will be removed. [ 108.966484][ T6012] loop1: detected capacity change from 0 to 512 [ 109.046219][ T6012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.159821][ T6012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.252099][ T6012] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.55: bad orphan inode 131083 [ 109.302747][ T6012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.554789][ T5789] block nbd3: Receive control failed (result -107) [ 109.576713][ T6047] nbd3: detected capacity change from 0 to 8589934592 [ 109.592856][ T55] block nbd3: Dead connection, failed to find a fallback [ 109.603466][ T55] block nbd3: shutting down sockets [ 109.609134][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.618979][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 109.621555][ T6050] loop0: detected capacity change from 0 to 128 [ 109.635697][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.648054][ T6048] I/O error, dev nbd3, sector 104 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 109.659002][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 109.683211][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.696829][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 109.709199][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.719909][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 109.727937][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.738093][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 109.746663][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.756222][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 109.764496][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.773761][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 109.783728][ T6050] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.797508][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.806938][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 109.814975][ T5783] ldm_validate_partition_table(): Disk read failed. [ 109.822369][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 109.830431][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 109.838592][ T5783] Dev nbd3: unable to read RDB block 0 [ 109.844959][ T5783] nbd3: unable to read partition table [ 109.846288][ T6050] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.887276][ T5783] ldm_validate_partition_table(): Disk read failed. [ 109.895172][ T5783] Dev nbd3: unable to read RDB block 0 [ 109.901691][ T5783] nbd3: unable to read partition table [ 109.997004][ T6050] syz.0.69 (pid 6050) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 110.160682][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.444816][ T6050] fscrypt (loop0, inode 12): Missing crypto API support for AES-128-CTS-CBC (API name: "cts(cbc(aes))") [ 110.524054][ T6050] fscrypt (loop0, inode 12): Missing crypto API support for AES-128-CTS-CBC (API name: "cts(cbc(aes))") [ 110.731553][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.743571][ T6045] loop2: detected capacity change from 0 to 32768 [ 110.784690][ T6045] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.67 (6045) [ 110.869314][ T6045] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.897575][ T6045] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 110.974237][ T6045] BTRFS info (device loop2): force clearing of disk cache [ 110.981968][ T6045] BTRFS info (device loop2): metadata ratio 0 [ 110.988460][ T6045] BTRFS info (device loop2): enabling ssd optimizations [ 111.002886][ T6045] BTRFS info (device loop2): using spread ssd allocation scheme [ 111.016010][ T6078] loop0: detected capacity change from 0 to 128 [ 111.031874][ T6045] BTRFS info (device loop2): using free space tree [ 111.040590][ T6078] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 111.190777][ T6078] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 111.209810][ T6045] BTRFS info (device loop2): auto enabling async discard [ 111.246312][ T6045] BTRFS info (device loop2): rebuilding free space tree [ 111.538147][ T6099] BTRFS warning (device loop2): qgroup rescan is already in progress [ 111.627810][ T2937] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 111.784913][ T5786] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.909355][ T6104] process 'syz.1.77' launched '/dev/fd/6' with NULL argv: empty string added [ 112.058813][ T6110] syz.2.78 uses obsolete (PF_INET,SOCK_PACKET) [ 112.470969][ T6115] loop1: detected capacity change from 0 to 512 [ 113.035552][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.062852][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.216471][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.429976][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 113.448262][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.480035][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.488820][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.518795][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.533513][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.559581][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.590231][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.614247][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.630441][ T6132] loop0: detected capacity change from 0 to 32768 [ 113.657417][ T6132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.87 (6132) [ 113.662787][ T9] usb 3-1: config 0 descriptor?? [ 113.697579][ T6132] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.742040][ T6132] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 113.776014][ T6132] BTRFS info (device loop0): force clearing of disk cache [ 113.794690][ T6132] BTRFS info (device loop0): metadata ratio 0 [ 113.808729][ T6132] BTRFS info (device loop0): enabling ssd optimizations [ 113.828599][ T6132] BTRFS info (device loop0): using spread ssd allocation scheme [ 113.841974][ T6132] BTRFS info (device loop0): using free space tree [ 114.024845][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.045653][ T6132] BTRFS info (device loop0): auto enabling async discard [ 114.062360][ T6132] BTRFS info (device loop0): rebuilding free space tree [ 114.094809][ T9] usb 3-1: USB disconnect, device number 2 [ 114.131512][ T9] usblp0: removed [ 114.262695][ T6132] BTRFS warning (device loop0): qgroup rescan is already in progress [ 114.352831][ T42] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 114.413252][ T5778] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.660330][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.839543][ T6166] loop3: detected capacity change from 0 to 4096 [ 114.880265][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 114.890454][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.916017][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.943533][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.979165][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.992291][ T6166] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 115.008742][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.049477][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.073638][ T6166] ntfs3: loop3: Failed to load $Extend (-22). [ 115.091125][ T6166] ntfs3: loop3: Failed to initialize $Extend. [ 115.097633][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.114774][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.169863][ T9] usb 3-1: config 0 descriptor?? [ 115.301290][ T6166] loop3: detected capacity change from 4096 to 0 [ 115.306798][ T6170] syz.3.95: attempt to access beyond end of device [ 115.306798][ T6170] loop3: rw=0, sector=2130, nr_sectors = 2 limit=0 [ 115.341103][ T6170] ntfs3: loop3: failed to read block 429 [ 115.410803][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.667146][ T5848] usb 3-1: USB disconnect, device number 3 [ 115.679162][ T5848] usblp0: removed [ 116.466110][ T6183] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 116.515061][ T6183] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 116.637350][ T6183] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 116.670054][ T6183] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 116.695867][ T6183] overlayfs: d_ino too big (28, ino=9223372036854775982, xinobits=3) [ 116.720392][ T6183] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 116.745339][ T6183] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 116.770842][ T6183] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 116.796955][ T6183] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 116.822930][ T6183] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 116.850261][ T6183] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3) [ 116.871792][ T6183] overlayfs: d_ino too big (kernel, ino=4611686018427389232, xinobits=3) [ 117.713836][ T6190] loop3: detected capacity change from 0 to 64 [ 118.004074][ T6185] loop2: detected capacity change from 0 to 32768 [ 118.076975][ T6185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.103 (6185) [ 118.178597][ T6185] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.210439][ T6185] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 118.228578][ T6185] BTRFS info (device loop2): force clearing of disk cache [ 118.245154][ T6185] BTRFS info (device loop2): metadata ratio 0 [ 118.274292][ T6185] BTRFS info (device loop2): enabling ssd optimizations [ 118.296570][ T6185] BTRFS info (device loop2): using spread ssd allocation scheme [ 118.316621][ T6185] BTRFS info (device loop2): using free space tree [ 118.407945][ T6185] BTRFS info (device loop2): auto enabling async discard [ 118.425553][ T6185] BTRFS info (device loop2): rebuilding free space tree [ 118.799857][ T6185] BTRFS warning (device loop2): qgroup rescan is already in progress [ 118.871695][ T2937] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 118.994349][ T5786] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.386382][ T6233] loop0: detected capacity change from 0 to 512 [ 120.433556][ T6233] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 120.484343][ T6233] Zero length message leads to an empty skb [ 120.759858][ T5818] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 120.954053][ T5818] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 120.975772][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.996945][ T5818] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.006739][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 121.033755][ T5818] usb 3-1: Product: syz [ 121.038000][ T5818] usb 3-1: Manufacturer: syz [ 121.043301][ T5818] usb 3-1: SerialNumber: syz [ 121.065604][ T5818] usb 3-1: config 0 descriptor?? [ 121.083227][ T6235] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.117669][ T5818] usb 3-1: selecting invalid altsetting 0 [ 121.392846][ T6235] usb 3-1: BOGUS urb xfer, pipe 0 != type 1 [ 121.521423][ T5818] usb 3-1: USB disconnect, device number 4 [ 121.540968][ T6235] usb 3-1: cannot submit urb 0, error -19: no device [ 121.548172][ T6235] usb 3-1: cannot submit urb 0, error -19: no device [ 122.093011][ T6237] loop3: detected capacity change from 0 to 32768 [ 122.169813][ T6237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.118 (6237) [ 122.312107][ T6237] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.343464][ T6237] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 122.414927][ T6237] BTRFS info (device loop3): force clearing of disk cache [ 122.424035][ T6237] BTRFS info (device loop3): metadata ratio 0 [ 122.477227][ T6237] BTRFS info (device loop3): enabling ssd optimizations [ 122.524605][ T6237] BTRFS info (device loop3): using spread ssd allocation scheme [ 122.609733][ T6237] BTRFS info (device loop3): using free space tree [ 122.891817][ T6278] loop2: detected capacity change from 0 to 512 [ 122.926001][ T6278] EXT4-fs: Ignoring removed i_version option [ 122.979835][ T6237] BTRFS info (device loop3): auto enabling async discard [ 122.990880][ T6278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.017399][ T6281] loop0: detected capacity change from 0 to 256 [ 123.032347][ T6237] BTRFS info (device loop3): rebuilding free space tree [ 123.139252][ T6278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.205663][ T6278] ext4 filesystem being mounted at /36/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.350081][ T6278] EXT4-fs error (device loop2): ext4_dx_csum_verify:502: inode #2: comm syz.2.127: dir seems corrupt? Run e2fsck -D. [ 123.431042][ T6278] EXT4-fs (loop2): Remounting filesystem read-only [ 123.568435][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.798955][ T12] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 123.961762][ T5785] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.200150][ T6298] loop2: detected capacity change from 0 to 256 [ 124.233594][ T6298] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.023277][ T6303] loop2: detected capacity change from 0 to 2048 [ 125.163849][ T6303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.435786][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.890437][ T173] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.980220][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.109766][ T173] usb 3-1: Using ep0 maxpacket: 8 [ 126.137463][ T173] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 126.161330][ T173] usb 3-1: config 179 has no interface number 0 [ 126.167770][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 126.180777][ T173] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 126.194308][ T173] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 126.207244][ T8] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 126.216531][ T8] usb 4-1: config 0 has no interface number 0 [ 126.222994][ T8] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.233264][ T173] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.245981][ T8] usb 4-1: config 0 interface 89 has no altsetting 0 [ 126.256753][ T173] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 126.275975][ T173] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 126.296800][ T173] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 126.306921][ T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.315326][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 126.325596][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.341843][ T8] usb 4-1: Product: syz [ 126.346247][ T8] usb 4-1: Manufacturer: syz [ 126.365227][ T8] usb 4-1: SerialNumber: syz [ 126.376084][ T6313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 126.402613][ T8] usb 4-1: config 0 descriptor?? [ 126.416515][ T8] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 126.471921][ T8] em28xx 4-1:0.89: Video interface 89 found: [ 126.682888][ T5848] usb 3-1: USB disconnect, device number 5 [ 126.682894][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 126.697374][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 127.054117][ T8] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 127.177733][ T6330] loop0: detected capacity change from 0 to 256 [ 127.195252][ T6330] exfat: Deprecated parameter 'namecase' [ 127.244892][ T6330] exfat: Deprecated parameter 'namecase' [ 127.333704][ T6330] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 127.401013][ T6330] syz.0.143: attempt to access beyond end of device [ 127.401013][ T6330] loop0: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 127.427421][ T6330] syz.0.143: attempt to access beyond end of device [ 127.427421][ T6330] loop0: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 127.449145][ T28] audit: type=1800 audit(1785765128.330:2): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.143" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 127.500365][ T8] em28xx 4-1:0.89: AC97 command still being executed: not handled properly! [ 127.547422][ T6330] exFAT-fs (loop0): hint_cluster is invalid (4278190089), rewind to the first cluster [ 127.564077][ T6330] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805e9407e0 iblock : 8, err : -5) [ 127.582834][ T6330] exFAT-fs (loop0): error, invalid access to FAT (entry 0xff000008) [ 127.595436][ T6330] syz.0.143: attempt to access beyond end of device [ 127.595436][ T6330] loop0: rw=2049, sector=34225520825, nr_sectors = 1 limit=256 [ 127.620369][ T6330] buffer_io_error: 23 callbacks suppressed [ 127.620384][ T6330] Buffer I/O error on dev loop0, logical block 34225520825, lost async page write [ 127.636549][ T6330] syz.0.143: attempt to access beyond end of device [ 127.636549][ T6330] loop0: rw=2049, sector=34225520826, nr_sectors = 1 limit=256 [ 127.655896][ T6330] Buffer I/O error on dev loop0, logical block 34225520826, lost async page write [ 127.660333][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.669946][ T6330] syz.0.143: attempt to access beyond end of device [ 127.669946][ T6330] loop0: rw=2049, sector=34225520827, nr_sectors = 1 limit=256 [ 127.707163][ T6330] Buffer I/O error on dev loop0, logical block 34225520827, lost async page write [ 127.726445][ T6330] syz.0.143: attempt to access beyond end of device [ 127.726445][ T6330] loop0: rw=2049, sector=34225520828, nr_sectors = 1 limit=256 [ 127.735903][ T8] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 127.752413][ T6330] Buffer I/O error on dev loop0, logical block 34225520828, lost async page write [ 127.764297][ T8] em28xx 4-1:0.89: board has no eeprom [ 127.775516][ T6330] syz.0.143: attempt to access beyond end of device [ 127.775516][ T6330] loop0: rw=2049, sector=34225520829, nr_sectors = 1 limit=256 [ 127.795081][ T6330] Buffer I/O error on dev loop0, logical block 34225520829, lost async page write [ 127.805341][ T6330] syz.0.143: attempt to access beyond end of device [ 127.805341][ T6330] loop0: rw=2049, sector=34225520830, nr_sectors = 1 limit=256 [ 127.826851][ T6330] Buffer I/O error on dev loop0, logical block 34225520830, lost async page write [ 127.836814][ T6330] syz.0.143: attempt to access beyond end of device [ 127.836814][ T6330] loop0: rw=2049, sector=34225520831, nr_sectors = 1 limit=256 [ 127.856172][ T6330] Buffer I/O error on dev loop0, logical block 34225520831, lost async page write [ 127.860831][ T8] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 127.891652][ T8] em28xx 4-1:0.89: analog set to bulk mode. [ 127.898013][ T173] em28xx 4-1:0.89: Registering V4L2 extension [ 127.919745][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 127.931025][ T8] usb 4-1: USB disconnect, device number 2 [ 127.937920][ T8] em28xx 4-1:0.89: Disconnecting em28xx [ 127.962159][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.971897][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.999912][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.026969][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 128.040957][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.049050][ T9] usb 3-1: Product: syz [ 128.079768][ T9] usb 3-1: Manufacturer: syz [ 128.084545][ T9] usb 3-1: SerialNumber: syz [ 128.103597][ T173] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 128.153644][ T173] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 128.168236][ T173] em28xx 4-1:0.89: No AC97 audio processor [ 128.191961][ T173] usb 4-1: Decoder not found [ 128.196687][ T173] em28xx 4-1:0.89: failed to create media graph [ 128.204913][ T173] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 128.232151][ T173] em28xx 4-1:0.89: Registering snapshot button... [ 128.258854][ T173] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input5 [ 128.295164][ T173] em28xx 4-1:0.89: Remote control support is not available for this card. [ 128.322020][ T8] em28xx 4-1:0.89: Closing input extension [ 128.341488][ T8] em28xx 4-1:0.89: Deregistering snapshot button [ 128.445895][ T8] em28xx 4-1:0.89: Freeing device [ 128.553630][ T9] usb 3-1: cannot find UAC_HEADER [ 128.666036][ T9] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 128.777624][ T9] usb 3-1: USB disconnect, device number 6 [ 128.810599][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.680707][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 130.691196][ T6356] loop3: detected capacity change from 0 to 4096 [ 130.826666][ T6356] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 130.916651][ T6356] ntfs3: loop3: Failed to load $Extend (-22). [ 130.933694][ T6356] ntfs3: loop3: Failed to initialize $Extend. [ 131.274674][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.285190][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.298866][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.311735][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.321544][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 131.329574][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.806198][ T5782] syz-executor (5782) used greatest stack depth: 20936 bytes left [ 131.985342][ T2937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.151102][ T2937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.161708][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.218560][ T6367] chnl_net:caif_netlink_parms(): no params data found [ 132.289373][ T2937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.369740][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 132.376928][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.398590][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.419021][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 132.439516][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.462280][ T9] usb 3-1: config 0 descriptor?? [ 132.481409][ T2937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.707950][ T6367] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.738255][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.745167][ T6387] loop3: detected capacity change from 0 to 32768 [ 132.767881][ T6367] bridge_slave_0: entered allmulticast mode [ 132.787162][ T6367] bridge_slave_0: entered promiscuous mode [ 132.803345][ T6396] netlink: 27 bytes leftover after parsing attributes in process `syz.0.169'. [ 132.841101][ T6387] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 132.882528][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.922046][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.944928][ T9] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 132.959825][ T6367] bridge_slave_1: entered allmulticast mode [ 133.004851][ T6367] bridge_slave_1: entered promiscuous mode [ 133.059889][ T6387] XFS (loop3): Ending clean mount [ 133.167070][ T6367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.204247][ T6367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.385828][ T27] usb 3-1: USB disconnect, device number 7 [ 133.400660][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.408321][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.427569][ T6367] team0: Port device team_slave_0 added [ 133.465335][ T6367] team0: Port device team_slave_1 added [ 133.530071][ T5789] Bluetooth: hci4: command tx timeout [ 133.812368][ T6367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.819420][ T6367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.861363][ T6367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.878686][ T6367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.886178][ T6367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.919337][ T6367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.121074][ T6387] syz.3.166 (6387) used greatest stack depth: 20656 bytes left [ 134.203231][ T5785] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.381597][ T6367] hsr_slave_0: entered promiscuous mode [ 134.400939][ T6367] hsr_slave_1: entered promiscuous mode [ 134.416804][ T6367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.429733][ T6367] Cannot create hsr debugfs directory [ 134.626200][ T6439] loop2: detected capacity change from 0 to 256 [ 135.158469][ T6445] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 135.609792][ T5789] Bluetooth: hci4: command tx timeout [ 136.206578][ T2937] hsr_slave_0: left promiscuous mode [ 136.230764][ T2937] hsr_slave_1: left promiscuous mode [ 136.250735][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.279850][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.331810][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.339303][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.401712][ T6485] loop0: detected capacity change from 0 to 16 [ 136.440722][ T2937] bridge_slave_1: left allmulticast mode [ 136.466919][ T6485] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.474804][ T2937] bridge_slave_1: left promiscuous mode [ 136.492025][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.536453][ T2937] bridge_slave_0: left allmulticast mode [ 136.563246][ T2937] bridge_slave_0: left promiscuous mode [ 136.600164][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.753613][ T2937] veth1_macvtap: left promiscuous mode [ 136.784211][ T2937] veth0_macvtap: left promiscuous mode [ 136.814373][ T2937] veth1_vlan: left promiscuous mode [ 136.862131][ T2937] veth0_vlan: left promiscuous mode [ 136.922179][ T6500] loop0: detected capacity change from 0 to 1024 [ 136.971094][ T6500] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.004279][ T6500] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.028832][ T6500] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 137.049569][ T6500] EXT4-fs (loop0): orphan cleanup on readonly fs [ 137.070616][ T6500] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.192: Freeing blocks not in datazone - block = 0, count = 4096 [ 137.111354][ T6500] EXT4-fs (loop0): 1 orphan inode deleted [ 137.140913][ T6500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.316421][ T6500] EXT4-fs error (device loop0): ext4_get_group_desc:279: comm syz.0.192: block_group >= groups_count - block_group = 1, groups_count = 1 [ 137.344577][ T6500] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4620: inode #40: comm syz.0.192: unable to read itable block [ 137.470155][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.689921][ T5789] Bluetooth: hci4: command tx timeout [ 138.288674][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 138.351915][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 138.406074][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.461923][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.863344][ T2937] bond0 (unregistering): Released all slaves [ 138.989226][ T6367] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.008810][ T6367] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.089533][ T6508] tipc: Enabling of bearer rejected, failed to enable media [ 139.110467][ T6367] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.139992][ T6367] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.607444][ T6367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.724417][ T6367] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.757362][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.764663][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.772803][ T5789] Bluetooth: hci4: command tx timeout [ 139.809282][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.816584][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.164327][ T6539] loop3: detected capacity change from 0 to 512 [ 140.262158][ T6539] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.203: bg 0: block 5: invalid block bitmap [ 140.309534][ T6539] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 140.390920][ T6539] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.203: invalid indirect mapped block 3 (level 2) [ 140.419729][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.444890][ T6539] EXT4-fs (loop3): 1 orphan inode deleted [ 140.469800][ T6539] EXT4-fs (loop3): 1 truncate cleaned up [ 140.476911][ T6539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.623758][ T6539] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 140.647715][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.658800][ T6539] overlayfs: failed to verify upper root origin [ 140.704036][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.724240][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 140.749269][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.789272][ T9] usb 1-1: config 0 descriptor?? [ 140.806081][ T6367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.836561][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.692175][ T6367] veth0_vlan: entered promiscuous mode [ 141.718089][ T6367] veth1_vlan: entered promiscuous mode [ 141.774036][ T6367] veth0_macvtap: entered promiscuous mode [ 141.805847][ T6367] veth1_macvtap: entered promiscuous mode [ 141.848587][ T6367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.897042][ T6367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.939745][ T6367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.963531][ T6367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.984583][ T6367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.009691][ T6367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.047207][ T6367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.068025][ T9] uclogic 0003:256C:006D.0003: v1 frame probing failed: -71 [ 142.093355][ T6367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.102936][ T9] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 142.133150][ T9] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 142.150541][ T6367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.168407][ T9] usb 1-1: USB disconnect, device number 4 [ 142.179677][ T6367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.219579][ T6367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.239737][ T6367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.289936][ T6367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.324940][ T6367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.381795][ T6367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.393449][ T6367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.402800][ T6367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.413485][ T6367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.627955][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.647114][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.734353][ T6593] input: syz1 as /devices/virtual/input/input6 [ 142.801658][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.809562][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.948640][ T6580] loop2: detected capacity change from 0 to 32768 [ 143.116131][ T6580] JBD2: Ignoring recovery information on journal [ 143.423343][ T6580] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 143.802930][ T6615] (syz.2.210,6615,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 144.077366][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 144.743254][ T6641] batadv_slave_1: entered promiscuous mode [ 144.764374][ T6640] batadv_slave_1: left promiscuous mode [ 144.970064][ T6652] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.392910][ T9] kernel write not supported for file /vcsa (pid: 9 comm: kworker/0:1) [ 147.214203][ T6719] loop3: detected capacity change from 0 to 512 [ 147.242014][ T6719] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.265930][ T6719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 147.274884][ T6719] System zones: 1-12 [ 147.283901][ T6719] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.250: bad orphan inode 131072 [ 147.297885][ T6719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.374355][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.444025][ T6716] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.064511][ T1191] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.284036][ T1191] usb 3-1: Using ep0 maxpacket: 32 [ 148.309762][ T1191] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 148.332192][ T1191] usb 3-1: config 0 has no interface number 0 [ 148.371311][ T1191] usb 3-1: config 0 interface 184 has no altsetting 0 [ 148.390676][ T1191] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 148.415889][ T1191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.436132][ T1191] usb 3-1: Product: syz [ 148.451944][ T1191] usb 3-1: Manufacturer: syz [ 148.467021][ T1191] usb 3-1: SerialNumber: syz [ 148.491797][ T1191] usb 3-1: config 0 descriptor?? [ 148.508101][ T1191] smsc75xx v1.0.0 [ 149.146542][ T1191] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 149.177055][ T1191] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 149.762207][ T6788] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 149.818769][ T1191] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 149.862005][ T1191] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 149.929191][ T1191] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 149.984097][ T1191] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 150.031890][ T1191] usb 3-1: USB disconnect, device number 8 [ 151.032585][ T6815] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 151.142073][ T6820] gretap1: entered allmulticast mode [ 151.152389][ T6820] bond1: (slave gretap1): making interface the new active one [ 151.164191][ T6820] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 151.322278][ T6824] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.411457][ T6820] syz.2.271 (6820) used greatest stack depth: 20056 bytes left [ 151.761340][ T6837] vivid-000: disconnect [ 151.790821][ T6836] vivid-000: reconnect [ 152.098838][ T6847] Illegal XDP return value 4294967274 on prog (id 25) dev syz_tun, expect packet loss! [ 152.229830][ T1191] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 152.408172][ T6859] loop4: detected capacity change from 0 to 512 [ 152.439742][ T1191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.455845][ T6859] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.467367][ T1191] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 152.486624][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.504322][ T6859] EXT4-fs (loop4): 1 truncate cleaned up [ 152.517471][ T6859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.531141][ T1191] usb 3-1: config 0 descriptor?? [ 152.729296][ T6367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.752263][ T1191] usbhid 3-1:0.0: can't add hid device: -71 [ 152.775409][ T1191] usbhid: probe of 3-1:0.0 failed with error -71 [ 152.797931][ T1191] usb 3-1: USB disconnect, device number 9 [ 153.332813][ T6884] loop3: detected capacity change from 0 to 1024 [ 153.409757][ T1191] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 153.610071][ T1191] usb 3-1: Using ep0 maxpacket: 32 [ 153.649888][ T1191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.669781][ T1191] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 153.689693][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.703786][ T1191] usb 3-1: config 0 descriptor?? [ 153.724250][ T1191] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 153.746372][ T1191] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 154.240831][ T27] usb 3-1: USB disconnect, device number 10 [ 154.270913][ T27] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 154.659017][ T6901] loop4: detected capacity change from 0 to 512 [ 154.744329][ T6901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.820026][ T6901] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.166901][ T6367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.394737][ T6956] block2mtd: error: cannot open device [ 156.920528][ T6970] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 157.025317][ T6950] loop4: detected capacity change from 0 to 32768 [ 157.170532][ T6950] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.170564][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.507380][ T6950] XFS (loop4): Ending clean mount [ 157.564397][ T6950] XFS (loop4): Quotacheck needed: Please wait. [ 157.748560][ T6950] XFS (loop4): Quotacheck: Done. [ 157.769808][ T5848] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.971031][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 158.000929][ T5848] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 158.021050][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.040963][ T5848] usb 3-1: Product: syz [ 158.045355][ T5848] usb 3-1: Manufacturer: syz [ 158.058430][ T5848] usb 3-1: SerialNumber: syz [ 158.074287][ T5848] usb 3-1: config 0 descriptor?? [ 158.078438][ T6367] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.122111][ T5848] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 158.410415][ T5789] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 158.948422][ T7023] loop0: detected capacity change from 0 to 512 [ 158.999881][ T7023] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.138903][ T7023] EXT4-fs (loop0): 1 truncate cleaned up [ 159.169103][ T7023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.245616][ T28] audit: type=1800 audit(1785765160.110:3): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.332" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 159.397496][ T5848] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 159.490297][ T5778] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 159.540812][ T5778] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 159.607934][ T5778] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 159.630368][ T7038] gadgetfs: bound to dummy_udc driver [ 159.641214][ T5778] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 159.694594][ T5848] usb 3-1: USB disconnect, device number 11 [ 159.701280][ T5778] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 159.730633][ T5848] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 159.761715][ T5848] ssu100 3-1:0.0: device disconnected [ 159.777320][ T5778] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 159.861855][ T5778] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 159.898805][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.337'. [ 159.908516][ T5778] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 159.966081][ T5778] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 159.994297][ T5778] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 160.402075][ T7056] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 160.803585][ T7069] loop2: detected capacity change from 0 to 1024 [ 160.864166][ T7069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.068777][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.653337][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.673635][ T28] audit: type=1326 audit(1785765162.560:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.4.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1890f9e019 code=0x7fc00000 [ 161.815700][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.879161][ T7095] bond_slave_0: entered promiscuous mode [ 161.885446][ T7095] bond_slave_1: entered promiscuous mode [ 161.896364][ T7095] macvlan2: entered promiscuous mode [ 161.920379][ T7095] bond0: entered promiscuous mode [ 161.927669][ T7095] macvlan2: entered allmulticast mode [ 161.944072][ T7095] bond0: entered allmulticast mode [ 161.960399][ T7095] bond_slave_0: entered allmulticast mode [ 161.968981][ T7095] bond_slave_1: entered allmulticast mode [ 161.997219][ T7095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.018275][ T7095] bond0: left allmulticast mode [ 162.036794][ T7095] bond_slave_0: left allmulticast mode [ 162.054503][ T7095] bond_slave_1: left allmulticast mode [ 162.079935][ T7095] bond0: left promiscuous mode [ 162.095700][ T7095] bond_slave_0: left promiscuous mode [ 162.101253][ T7095] bond_slave_1: left promiscuous mode [ 162.266189][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.428596][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.497374][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.510081][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.518628][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.542799][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.562277][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.580184][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.593449][ T7112] loop4: detected capacity change from 0 to 256 [ 164.016262][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.056177][ T7108] chnl_net:caif_netlink_parms(): no params data found [ 164.650187][ T5787] Bluetooth: hci0: command tx timeout [ 164.977075][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.006081][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.034067][ T7108] bridge_slave_0: entered allmulticast mode [ 165.056213][ T7108] bridge_slave_0: entered promiscuous mode [ 165.226549][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.250192][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.257531][ T7108] bridge_slave_1: entered allmulticast mode [ 165.312716][ T7108] bridge_slave_1: entered promiscuous mode [ 165.581588][ T7108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.591876][ T5818] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.688688][ T7108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.787134][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 165.804017][ T5818] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 165.824224][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 165.834729][ T5818] usb 5-1: Product: syz [ 165.838978][ T5818] usb 5-1: Manufacturer: syz [ 165.844210][ T5818] usb 5-1: SerialNumber: syz [ 165.854354][ T5818] usb 5-1: config 0 descriptor?? [ 165.864337][ T7108] team0: Port device team_slave_0 added [ 165.880836][ T5818] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 165.891705][ T7108] team0: Port device team_slave_1 added [ 165.969876][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 166.030083][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.047489][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.096762][ T7208] loop2: detected capacity change from 0 to 32768 [ 166.119690][ T7108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.134954][ T7208] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.383 (7208) [ 166.190805][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 166.208220][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.222901][ T7208] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.238680][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.254145][ T42] hsr_slave_0: left promiscuous mode [ 166.259882][ T7208] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 166.266778][ T9] usb 4-1: Product: syz [ 166.280981][ T42] hsr_slave_1: left promiscuous mode [ 166.287252][ T9] usb 4-1: Manufacturer: syz [ 166.294346][ T7208] BTRFS info (device loop2): turning on sync discard [ 166.305860][ T9] usb 4-1: SerialNumber: syz [ 166.310640][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.310769][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.310983][ T7208] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 166.311092][ T7208] BTRFS info (device loop2): use zstd compression, level 3 [ 166.347972][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.359806][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.375042][ T7208] BTRFS info (device loop2): turning on async discard [ 166.383612][ T9] usb 4-1: config 0 descriptor?? [ 166.390411][ T42] bridge_slave_1: left allmulticast mode [ 166.396130][ T42] bridge_slave_1: left promiscuous mode [ 166.415666][ T7208] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 166.440058][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.448235][ T7208] BTRFS info (device loop2): trying to use backup root at mount time [ 166.463982][ T7208] BTRFS info (device loop2): enabling auto defrag [ 166.478287][ T42] bridge_slave_0: left allmulticast mode [ 166.489909][ T42] bridge_slave_0: left promiscuous mode [ 166.496386][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.507581][ T7208] BTRFS info (device loop2): using free space tree [ 166.606972][ T42] veth1_macvtap: left promiscuous mode [ 166.620652][ T42] veth0_macvtap: left promiscuous mode [ 166.644135][ T42] veth1_vlan: left promiscuous mode [ 166.649585][ T42] veth0_vlan: left promiscuous mode [ 166.670026][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 166.740043][ T5787] Bluetooth: hci0: command tx timeout [ 166.747142][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 166.832940][ T7208] BTRFS error (device loop2): failed to load root extent [ 166.871228][ T7208] BTRFS warning (device loop2): try to load backup roots slot 1 [ 166.905914][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 166.955258][ T7208] BTRFS warning (device loop2): couldn't read tree root [ 166.990146][ T7208] BTRFS warning (device loop2): try to load backup roots slot 2 [ 167.013084][ T59] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 167.055223][ T7208] BTRFS warning (device loop2): couldn't read tree root [ 167.080330][ T7208] BTRFS warning (device loop2): try to load backup roots slot 3 [ 167.149927][ T7208] BTRFS info (device loop2): enabling ssd optimizations [ 167.204929][ T7208] BTRFS info (device loop2): rebuilding free space tree [ 167.273416][ T7208] BTRFS info (device loop2): checking UUID tree [ 167.378371][ T5818] gspca_ov534_9: reg_r err -71 [ 167.553369][ T5786] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.656831][ T9] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 167.674152][ T9] usb 4-1: USB disconnect, device number 3 [ 167.736541][ T5818] gspca_ov534_9: Unknown sensor 0000 [ 167.736643][ T5818] ov534_9: probe of 5-1:0.0 failed with error -22 [ 167.762672][ T5818] usb 5-1: USB disconnect, device number 2 [ 167.950682][ T42] bond1 (unregistering): Released all slaves [ 168.761516][ T7252] loop2: detected capacity change from 0 to 32768 [ 168.819683][ T5787] Bluetooth: hci0: command tx timeout [ 169.512152][ T42] team0 (unregistering): Port device team_slave_1 removed [ 169.663806][ T42] team0 (unregistering): Port device team_slave_0 removed [ 169.792075][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.909068][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.125920][ T7275] gadgetfs: bound to dummy_udc driver [ 170.685852][ T42] bond0 (unregistering): Released all slaves [ 170.816823][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.824326][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.852450][ T7108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.900912][ T5787] Bluetooth: hci0: command tx timeout [ 170.925384][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 171.211134][ T7108] hsr_slave_0: entered promiscuous mode [ 171.249902][ T7108] hsr_slave_1: entered promiscuous mode [ 171.533645][ T7296] loop2: detected capacity change from 0 to 128 [ 171.588368][ T7296] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 171.656617][ T7296] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 171.690283][ T7296] FAT-fs (loop2): Filesystem has been set read-only [ 171.813152][ T5786] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 172.120710][ T7108] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.143436][ T7108] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.158503][ T7288] loop3: detected capacity change from 0 to 32768 [ 172.180624][ T7108] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.192291][ T7108] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.473078][ T7108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.541549][ T7108] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.585478][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.592764][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.670062][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.677290][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.793470][ T7310] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 173.442667][ T7108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.119791][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 174.316338][ T7108] veth0_vlan: entered promiscuous mode [ 174.349766][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 174.362236][ T27] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 174.371446][ T7108] veth1_vlan: entered promiscuous mode [ 174.383066][ T27] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 174.409756][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 174.418837][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.485642][ T7108] veth0_macvtap: entered promiscuous mode [ 174.495576][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.519958][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.527967][ T7108] veth1_macvtap: entered promiscuous mode [ 174.554185][ T27] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.589801][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.624271][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.635631][ T27] usb 4-1: config 0 descriptor?? [ 174.672928][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.688317][ T7369] loop4: detected capacity change from 0 to 128 [ 174.709458][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.731983][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.757528][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.779382][ T7369] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 174.798047][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.814945][ T7108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.845532][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.882794][ T7369] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.894976][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.934438][ T27] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.959972][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.027096][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.053815][ T27] usb 4-1: USB disconnect, device number 4 [ 175.077549][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.091420][ T27] usblp0: removed [ 175.127755][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.154082][ T7369] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Out of memory [ 175.178131][ T7108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.214538][ T7369] EXT4-fs error (device loop4): ext4_dirty_inode:6144: inode #12: comm syz.4.423: mark_inode_dirty error [ 175.235011][ T7108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.254235][ T7108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.265467][ T7369] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Out of memory [ 175.265540][ T7108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.292488][ T7108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.311864][ T7369] EXT4-fs error (device loop4): ext4_dirty_inode:6144: inode #12: comm syz.4.423: mark_inode_dirty error [ 175.358985][ T7369] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Out of memory [ 175.406445][ T7369] EXT4-fs error (device loop4): ext4_dirty_inode:6144: inode #12: comm syz.4.423: mark_inode_dirty error [ 175.474100][ T7369] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Out of memory [ 175.494668][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.530043][ T7369] EXT4-fs error (device loop4): ext4_ext_truncate:4535: inode #12: comm syz.4.423: mark_inode_dirty error [ 175.531446][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.559247][ T7369] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Out of memory [ 175.589784][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 175.630680][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.644417][ T7369] EXT4-fs error (device loop4): ext4_truncate:4302: inode #12: comm syz.4.423: mark_inode_dirty error [ 175.669901][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.692134][ T5789] Bluetooth: hci0: command tx timeout [ 175.789779][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 175.802764][ T27] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 175.835721][ T27] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 175.870183][ T6367] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.894522][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 175.943577][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.962912][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.005998][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 176.073167][ T27] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.115827][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.159233][ T27] usb 4-1: config 0 descriptor?? [ 176.400288][ T27] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 176.668146][ T8] usb 4-1: USB disconnect, device number 5 [ 176.690746][ T8] usblp0: removed [ 177.718520][ T7434] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 177.898385][ T7434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.982668][ T7442] loop2: detected capacity change from 0 to 4096 [ 178.053156][ T7438] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.095571][ T7442] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 178.119392][ T7438] bond2: (slave team0): Enslaving as a backup interface with an up link [ 178.173410][ T7442] ntfs3: loop2: Failed to load $Extend (-22). [ 178.190286][ T7442] ntfs3: loop2: Failed to initialize $Extend. [ 178.290427][ T7442] loop2: detected capacity change from 4096 to 0 [ 178.318403][ T7442] syz.2.430: attempt to access beyond end of device [ 178.318403][ T7442] loop2: rw=0, sector=2130, nr_sectors = 2 limit=0 [ 178.359471][ T7442] ntfs3: loop2: failed to read block 429 [ 179.799806][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 180.073618][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 180.138650][ T8] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 180.180122][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 180.188312][ T8] usb 3-1: Product: syz [ 180.273146][ T8] usb 3-1: Manufacturer: syz [ 180.307303][ T8] usb 3-1: SerialNumber: syz [ 180.435735][ T8] usb 3-1: config 0 descriptor?? [ 180.493340][ T8] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 180.559621][ C1] sched: RT throttling activated [ 180.805560][ T7490] loop4: detected capacity change from 0 to 131072 [ 180.836935][ T7495] loop5: detected capacity change from 0 to 4096 [ 180.861164][ T7490] F2FS-fs (loop4): invalid crc value [ 180.907050][ T7490] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.990128][ T7490] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 181.395960][ T7495] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 181.533705][ T7495] ntfs3: loop5: Failed to load $Extend (-22). [ 181.564783][ T7495] ntfs3: loop5: Failed to initialize $Extend. [ 181.935655][ T7495] loop5: detected capacity change from 4096 to 0 [ 181.963662][ T8] gspca_ov534_9: reg_r err -71 [ 181.967748][ T7512] syz.5.443: attempt to access beyond end of device [ 181.967748][ T7512] loop5: rw=0, sector=2130, nr_sectors = 2 limit=0 [ 182.067026][ T7512] ntfs3: loop5: failed to read block 429 [ 182.319740][ T8] gspca_ov534_9: Unknown sensor 0000 [ 182.319835][ T8] ov534_9: probe of 3-1:0.0 failed with error -22 [ 182.370882][ T8] usb 3-1: USB disconnect, device number 12 [ 186.450104][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 186.680213][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 186.701845][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 186.762858][ T8] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 186.786443][ T8] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 186.813086][ T8] usb 3-1: Product: syz [ 186.823724][ T8] usb 3-1: Manufacturer: syz [ 186.831334][ T7598] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 186.838993][ T8] usb 3-1: SerialNumber: syz [ 186.925211][ T8] usb 3-1: config 0 descriptor?? [ 186.940506][ T7584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.955822][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 186.979962][ T8] hub: probe of 3-1:0.0 failed with error -5 [ 187.364599][ T5818] usb 3-1: USB disconnect, device number 13 [ 187.486015][ T7608] netlink: 44 bytes leftover after parsing attributes in process `syz.4.463'. [ 187.551950][ T7610] loop5: detected capacity change from 0 to 2048 [ 187.721686][ T7610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.992343][ T7108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.812096][ T5789] block nbd2: Receive control failed (result -107) [ 188.828011][ T7643] nbd2: detected capacity change from 0 to 8589934592 [ 188.880505][ T55] block nbd2: Dead connection, failed to find a fallback [ 188.888365][ T55] block nbd2: shutting down sockets [ 188.896126][ T55] blk_print_req_error: 26 callbacks suppressed [ 188.896144][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.918959][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 188.936733][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.946201][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 188.959964][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.964150][ T7643] I/O error, dev nbd2, sector 104 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 188.969058][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 188.969300][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.969329][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 188.969474][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.013139][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 189.106409][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.115844][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 189.124654][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.134103][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 189.142398][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.153224][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 189.161309][ T5779] ldm_validate_partition_table(): Disk read failed. [ 189.168264][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.177722][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 189.280452][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 189.288865][ T5779] Dev nbd2: unable to read RDB block 0 [ 189.295572][ T5779] nbd2: unable to read partition table [ 189.312795][ T5779] ldm_validate_partition_table(): Disk read failed. [ 189.321408][ T5779] Dev nbd2: unable to read RDB block 0 [ 189.329087][ T5779] nbd2: unable to read partition table [ 190.149576][ T7670] netlink: 44 bytes leftover after parsing attributes in process `syz.5.475'. [ 190.408442][ T5818] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 190.609747][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 190.617391][ T5818] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 190.633130][ T5818] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 190.650382][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 190.658643][ T5818] usb 5-1: Product: syz [ 190.679821][ T5818] usb 5-1: Manufacturer: syz [ 190.684519][ T5818] usb 5-1: SerialNumber: syz [ 190.701785][ T5818] usb 5-1: config 0 descriptor?? [ 190.707676][ T7671] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.730165][ T5818] hub 5-1:0.0: bad descriptor, ignoring hub [ 190.736166][ T5818] hub: probe of 5-1:0.0 failed with error -5 [ 191.094293][ T8] usb 5-1: USB disconnect, device number 3 [ 191.913387][ T7702] loop4: detected capacity change from 0 to 2048 [ 192.024991][ T7702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.307254][ T6367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.885214][ T5789] block nbd4: Receive control failed (result -107) [ 192.914622][ T7726] nbd4: detected capacity change from 0 to 8589934592 [ 192.921760][ T96] block nbd4: Dead connection, failed to find a fallback [ 192.928931][ T96] block nbd4: shutting down sockets [ 192.935724][ T5779] ldm_validate_partition_table(): Disk read failed. [ 192.943776][ T5779] Dev nbd4: unable to read RDB block 0 [ 192.950565][ T5779] nbd4: unable to read partition table [ 193.012580][ T5779] ldm_validate_partition_table(): Disk read failed. [ 193.019991][ T5779] Dev nbd4: unable to read RDB block 0 [ 193.026160][ T5779] nbd4: unable to read partition table [ 193.052558][ T7718] loop5: detected capacity change from 0 to 32768 [ 193.080145][ T7718] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.481 (7718) [ 193.113760][ T7718] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.150866][ T7718] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 193.170092][ T7718] BTRFS info (device loop5): enabling auto defrag [ 193.176625][ T7718] BTRFS info (device loop5): force clearing of disk cache [ 193.200179][ T7718] BTRFS info (device loop5): max_inline at 485 [ 193.207311][ T7718] BTRFS info (device loop5): disabling free space tree [ 193.287260][ T7718] BTRFS info (device loop5): enabling ssd optimizations [ 193.310860][ T7718] BTRFS info (device loop5): auto enabling async discard [ 193.339468][ T7718] BTRFS info (device loop5): rebuilding free space tree [ 193.380089][ T7718] BTRFS info (device loop5): disabling free space tree [ 193.387112][ T7718] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.418891][ T7718] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.682745][ T7108] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 194.659934][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.814187][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.821379][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.880927][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 194.901937][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 194.923632][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 194.939774][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 194.948026][ T9] usb 6-1: Product: syz [ 194.973406][ T9] usb 6-1: Manufacturer: syz [ 194.978099][ T9] usb 6-1: SerialNumber: syz [ 195.002856][ T9] usb 6-1: config 0 descriptor?? [ 195.008695][ T7755] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 195.053995][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 195.073842][ T9] hub: probe of 6-1:0.0 failed with error -5 [ 195.450573][ T8] usb 6-1: USB disconnect, device number 2 [ 195.819806][ T3062] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 196.001153][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.010741][ T3062] usb 3-1: Using ep0 maxpacket: 32 [ 196.017044][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.026599][ T3062] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 196.035501][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.049803][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.060399][ T3062] usb 3-1: config 0 has no interface number 0 [ 196.067463][ T3062] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.067473][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 196.101666][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.117190][ T3062] usb 3-1: config 0 interface 89 has no altsetting 0 [ 196.193583][ T3062] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 196.209911][ T3062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.218600][ T3062] usb 3-1: Product: syz [ 196.223277][ T3062] usb 3-1: Manufacturer: syz [ 196.227937][ T3062] usb 3-1: SerialNumber: syz [ 196.251522][ T3062] usb 3-1: config 0 descriptor?? [ 196.267364][ T3062] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 196.291983][ T3062] em28xx 3-1:0.89: Video interface 89 found: [ 196.415672][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.692022][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.937717][ T3062] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 196.969347][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.100741][ T7774] loop4: detected capacity change from 0 to 32768 [ 197.147985][ T7774] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.496 (7774) [ 197.258007][ T7774] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 197.269803][ T7774] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 197.278615][ T7774] BTRFS info (device loop4): enabling auto defrag [ 197.285365][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.309742][ T7774] BTRFS info (device loop4): force clearing of disk cache [ 197.317117][ T7774] BTRFS info (device loop4): max_inline at 485 [ 197.336193][ T7774] BTRFS info (device loop4): disabling free space tree [ 197.390459][ T3062] em28xx 3-1:0.89: AC97 command still being executed: not handled properly! [ 197.491536][ T7774] BTRFS info (device loop4): enabling ssd optimizations [ 197.498632][ T7774] BTRFS info (device loop4): auto enabling async discard [ 197.515753][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 197.536120][ T7774] BTRFS info (device loop4): rebuilding free space tree [ 197.576926][ T3062] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 197.611724][ T7774] BTRFS info (device loop4): disabling free space tree [ 197.626118][ T7774] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 197.630083][ T3062] em28xx 3-1:0.89: board has no eeprom [ 197.652834][ T7774] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 197.761432][ T3062] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 197.768743][ T3062] em28xx 3-1:0.89: analog set to bulk mode. [ 197.802126][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.809449][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.819566][ T27] em28xx 3-1:0.89: Registering V4L2 extension [ 197.833228][ T3062] usb 3-1: USB disconnect, device number 14 [ 197.863289][ T3062] em28xx 3-1:0.89: Disconnecting em28xx [ 197.869540][ T7770] bridge_slave_0: entered allmulticast mode [ 197.887443][ T7770] bridge_slave_0: entered promiscuous mode [ 197.907469][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.915791][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.932371][ T7770] bridge_slave_1: entered allmulticast mode [ 197.951692][ T7770] bridge_slave_1: entered promiscuous mode [ 198.032585][ T6367] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 198.106622][ T27] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 198.114252][ T27] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 198.122647][ T27] em28xx 3-1:0.89: No AC97 audio processor [ 198.136607][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.164613][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.176602][ T5789] Bluetooth: hci1: command tx timeout [ 198.193602][ T27] usb 3-1: Decoder not found [ 198.199361][ T27] em28xx 3-1:0.89: failed to create media graph [ 198.215738][ T27] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 198.231202][ T27] em28xx 3-1:0.89: Registering snapshot button... [ 198.251308][ T27] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input8 [ 198.271334][ T27] em28xx 3-1:0.89: Remote control support is not available for this card. [ 198.301848][ T3062] em28xx 3-1:0.89: Closing input extension [ 198.307769][ T3062] em28xx 3-1:0.89: Deregistering snapshot button [ 198.354658][ T3062] em28xx 3-1:0.89: Freeing device [ 198.436344][ T5783] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 13 /dev/loop4 scanned by udevd (5783) [ 198.575873][ T7770] team0: Port device team_slave_0 added [ 198.659186][ T7770] team0: Port device team_slave_1 added [ 198.833500][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.845075][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.878835][ T7770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.902033][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.909058][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.945731][ T7770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.177021][ T7770] hsr_slave_0: entered promiscuous mode [ 199.184071][ T7770] hsr_slave_1: entered promiscuous mode [ 199.197363][ T7770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.205408][ T7770] Cannot create hsr debugfs directory [ 199.677094][ T7770] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.708929][ T7770] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.733167][ T7770] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.756551][ T7770] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.864586][ T11] hsr_slave_0: left promiscuous mode [ 199.871125][ T11] hsr_slave_1: left promiscuous mode [ 199.877160][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.885781][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.894984][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.902690][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.912203][ T11] bridge_slave_1: left allmulticast mode [ 199.917882][ T11] bridge_slave_1: left promiscuous mode [ 199.926023][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.938467][ T11] bridge_slave_0: left allmulticast mode [ 199.945728][ T11] bridge_slave_0: left promiscuous mode [ 199.951816][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.980771][ T11] veth1_macvtap: left promiscuous mode [ 199.986350][ T11] veth0_macvtap: left promiscuous mode [ 199.992547][ T11] veth1_vlan: left promiscuous mode [ 199.997938][ T11] veth0_vlan: left promiscuous mode [ 200.256250][ T5789] Bluetooth: hci1: command tx timeout [ 200.788613][ T11] team0 (unregistering): Port device team_slave_1 removed [ 200.861164][ T11] team0 (unregistering): Port device team_slave_0 removed [ 200.916230][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.979477][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.433003][ T11] bond0 (unregistering): Released all slaves [ 201.624980][ T7770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.666586][ T7770] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.702280][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.709474][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.733364][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.740663][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.873789][ T7770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.228718][ T7770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.331201][ T5789] Bluetooth: hci1: command tx timeout [ 202.656785][ T7770] veth0_vlan: entered promiscuous mode [ 202.677644][ T7770] veth1_vlan: entered promiscuous mode [ 202.726069][ T7770] veth0_macvtap: entered promiscuous mode [ 202.746600][ T7770] veth1_macvtap: entered promiscuous mode [ 202.772277][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.783697][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.798034][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.809017][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.820165][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.831693][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.844368][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.863508][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.880441][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.908011][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.919040][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.934206][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.945064][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.957485][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.993654][ T7770] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.002584][ T7770] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.016282][ T7770] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.025471][ T7770] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.146846][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.178793][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.238720][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.246694][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.410251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 204.819692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 205.086925][ T7884] loop2: detected capacity change from 0 to 131072 [ 205.114984][ T5789] Bluetooth: hci1: command tx timeout [ 205.183060][ T7884] F2FS-fs (loop2): invalid crc value [ 205.248944][ T7884] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.333461][ T7884] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 205.916144][ T7868] loop5: detected capacity change from 0 to 40427 [ 206.025254][ T7868] F2FS-fs (loop5): Found nat_bits in checkpoint [ 206.078027][ T7908] loop4: detected capacity change from 0 to 1024 [ 206.171036][ T7908] EXT4-fs: Invalid want_extra_isize 5 [ 206.300218][ T7868] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 206.992401][ T7923] loop4: detected capacity change from 0 to 32768 [ 207.084483][ T7923] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 207.135727][ T7939] loop6: detected capacity change from 0 to 256 [ 207.157547][ T7939] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.227018][ T7923] XFS (loop4): Ending clean mount [ 207.753963][ T6367] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 210.426743][ T8008] loop2: detected capacity change from 0 to 512 [ 210.432257][ T8004] loop4: detected capacity change from 0 to 256 [ 210.447011][ T8004] exfat: Deprecated parameter 'namecase' [ 210.496831][ T8004] exfat: Deprecated parameter 'namecase' [ 210.618603][ T8004] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 210.740909][ T8004] syz.4.522: attempt to access beyond end of device [ 210.740909][ T8004] loop4: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 210.776070][ T8004] syz.4.522: attempt to access beyond end of device [ 210.776070][ T8004] loop4: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 210.848941][ T28] audit: type=1800 audit(1785765211.720:5): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.522" name="file1" dev="loop4" ino=1048620 res=0 errno=0 [ 211.122473][ T8004] exFAT-fs (loop4): hint_cluster is invalid (4278190089), rewind to the first cluster [ 211.161589][ T8017] loop2: detected capacity change from 0 to 16 [ 211.175882][ T8004] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cf587e0 iblock : 8, err : -5) [ 211.199420][ T8017] erofs: (device loop2): mounted with root inode @ nid 36. [ 211.237638][ T8004] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 211.276888][ T8004] syz.4.522: attempt to access beyond end of device [ 211.276888][ T8004] loop4: rw=2049, sector=34225520825, nr_sectors = 1 limit=256 [ 211.316387][ T8004] buffer_io_error: 56 callbacks suppressed [ 211.316405][ T8004] Buffer I/O error on dev loop4, logical block 34225520825, lost async page write [ 211.347816][ T8004] syz.4.522: attempt to access beyond end of device [ 211.347816][ T8004] loop4: rw=2049, sector=34225520826, nr_sectors = 1 limit=256 [ 211.425547][ T8004] Buffer I/O error on dev loop4, logical block 34225520826, lost async page write [ 211.452523][ T8004] syz.4.522: attempt to access beyond end of device [ 211.452523][ T8004] loop4: rw=2049, sector=34225520827, nr_sectors = 1 limit=256 [ 211.472369][ T8004] Buffer I/O error on dev loop4, logical block 34225520827, lost async page write [ 211.485485][ T8004] syz.4.522: attempt to access beyond end of device [ 211.485485][ T8004] loop4: rw=2049, sector=34225520828, nr_sectors = 1 limit=256 [ 211.508285][ T8004] Buffer I/O error on dev loop4, logical block 34225520828, lost async page write [ 211.582401][ T8004] syz.4.522: attempt to access beyond end of device [ 211.582401][ T8004] loop4: rw=2049, sector=34225520829, nr_sectors = 1 limit=256 [ 211.649644][ T8004] Buffer I/O error on dev loop4, logical block 34225520829, lost async page write [ 211.659022][ T8004] syz.4.522: attempt to access beyond end of device [ 211.659022][ T8004] loop4: rw=2049, sector=34225520830, nr_sectors = 1 limit=256 [ 211.710137][ T8004] Buffer I/O error on dev loop4, logical block 34225520830, lost async page write [ 211.726710][ T8004] syz.4.522: attempt to access beyond end of device [ 211.726710][ T8004] loop4: rw=2049, sector=34225520831, nr_sectors = 1 limit=256 [ 211.753506][ T8004] Buffer I/O error on dev loop4, logical block 34225520831, lost async page write [ 215.039277][ T8100] bridge_slave_0: default FDB implementation only supports local addresses [ 215.073671][ T8100] bridge_slave_0: default FDB implementation only supports local addresses [ 215.229121][ T8084] loop2: detected capacity change from 0 to 32768 [ 215.269139][ T8084] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 215.364033][ T5783] blk_print_req_error: 60 callbacks suppressed [ 215.364051][ T5783] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.701105][ T5817] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 215.919930][ T5817] usb 7-1: Using ep0 maxpacket: 16 [ 215.944005][ T5817] usb 7-1: unable to get BOS descriptor or descriptor too short [ 215.959391][ T5817] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.983825][ T5817] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.038539][ T5817] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 216.060106][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.099421][ T5817] usb 7-1: Product: syz [ 216.114699][ T5817] usb 7-1: Manufacturer: syz [ 216.119406][ T5817] usb 7-1: SerialNumber: syz [ 216.191038][ T8101] loop5: detected capacity change from 0 to 32768 [ 216.587393][ T5817] usb 7-1: cannot find UAC_HEADER [ 216.675725][ T5817] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 216.775601][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.936224][ T5817] usb 7-1: USB disconnect, device number 2 [ 217.111116][ T8133] loop4: detected capacity change from 0 to 512 [ 217.122716][ T8133] EXT4-fs: Ignoring removed i_version option [ 217.166118][ T8133] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.263219][ T8133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.359793][ T8133] ext4 filesystem being mounted at /93/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.379734][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 217.594687][ T8133] EXT4-fs error (device loop4): ext4_dx_csum_verify:502: inode #2: comm syz.4.552: dir seems corrupt? Run e2fsck -D. [ 217.642672][ T8133] EXT4-fs (loop4): Remounting filesystem read-only [ 217.677560][ T8146] loop6: detected capacity change from 0 to 512 [ 217.738923][ T8146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.769919][ T8146] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.812542][ T6367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.177387][ T7770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.657561][ T8173] input: syz1 as /devices/virtual/input/input9 [ 218.991508][ T8185] bridge_slave_0: default FDB implementation only supports local addresses [ 219.003531][ T8185] bridge_slave_0: default FDB implementation only supports local addresses [ 219.528624][ T8200] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 220.199842][ T5848] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 220.393076][ T5848] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 220.428238][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 220.438488][ T5848] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.448239][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.458783][ T5848] usb 6-1: Product: syz [ 220.491627][ T5848] usb 6-1: Manufacturer: syz [ 220.496335][ T5848] usb 6-1: SerialNumber: syz [ 220.535421][ T5848] usb 6-1: config 0 descriptor?? [ 220.547677][ T8210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 220.573609][ T5848] usb 6-1: selecting invalid altsetting 0 [ 220.750804][ T8236] loop4: detected capacity change from 0 to 512 [ 220.843284][ T8236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.921001][ T8236] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.119523][ T27] usb 6-1: USB disconnect, device number 3 [ 221.314926][ T6367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.351838][ T8249] loop6: detected capacity change from 0 to 1024 [ 221.562025][ T8249] [ 221.564438][ T8249] ====================================================== [ 221.571492][ T8249] WARNING: possible circular locking dependency detected [ 221.578567][ T8249] syzkaller #0 Not tainted [ 221.583026][ T8249] ------------------------------------------------------ [ 221.590080][ T8249] syz.6.579/8249 is trying to acquire lock: [ 221.596013][ T8249] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1d9/0x4a0 [ 221.605157][ T8249] [ 221.605157][ T8249] but task is already holding lock: [ 221.612567][ T8249] ffff888148e1acd0 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 221.622640][ T8249] [ 221.622640][ T8249] which lock already depends on the new lock. [ 221.622640][ T8249] [ 221.633611][ T8249] [ 221.633611][ T8249] the existing dependency chain (in reverse order) is: [ 221.642660][ T8249] [ 221.642660][ T8249] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 221.651042][ T8249] down_write+0x97/0x200 [ 221.655970][ T8249] set_blocksize+0x247/0x4b0 [ 221.661114][ T8249] sb_min_blocksize+0xbe/0x190 [ 221.666684][ T8249] ext4_fill_super+0x6e7/0x6870 [ 221.672095][ T8249] get_tree_bdev+0x3e5/0x520 [ 221.677234][ T8249] vfs_get_tree+0x8c/0x280 [ 221.682237][ T8249] do_new_mount+0x24a/0xa40 [ 221.687316][ T8249] init_mount+0xde/0x130 [ 221.692107][ T8249] do_mount_root+0x97/0x230 [ 221.697168][ T8249] mount_root_generic+0x1a6/0x3e0 [ 221.702743][ T8249] prepare_namespace+0xc2/0x100 [ 221.708171][ T8249] kernel_init_freeable+0x41a/0x560 [ 221.713922][ T8249] kernel_init+0x1d/0x1c0 [ 221.718824][ T8249] ret_from_fork+0x48/0x80 [ 221.723909][ T8249] ret_from_fork_asm+0x11/0x20 [ 221.729247][ T8249] [ 221.729247][ T8249] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 221.737923][ T8249] down_write+0x97/0x200 [ 221.742775][ T8249] set_blocksize+0x1ff/0x4b0 [ 221.747938][ T8249] sb_min_blocksize+0xbe/0x190 [ 221.753245][ T8249] ext4_fill_super+0x6e7/0x6870 [ 221.758731][ T8249] get_tree_bdev+0x3e5/0x520 [ 221.763878][ T8249] vfs_get_tree+0x8c/0x280 [ 221.768847][ T8249] do_new_mount+0x24a/0xa40 [ 221.773893][ T8249] init_mount+0xde/0x130 [ 221.778675][ T8249] do_mount_root+0x97/0x230 [ 221.783736][ T8249] mount_root_generic+0x1a6/0x3e0 [ 221.789316][ T8249] prepare_namespace+0xc2/0x100 [ 221.794730][ T8249] kernel_init_freeable+0x41a/0x560 [ 221.800485][ T8249] kernel_init+0x1d/0x1c0 [ 221.805453][ T8249] ret_from_fork+0x48/0x80 [ 221.810422][ T8249] ret_from_fork_asm+0x11/0x20 [ 221.816055][ T8249] [ 221.816055][ T8249] -> #2 (&type->s_umount_key#31){++++}-{3:3}: [ 221.825665][ T8249] down_read+0x46/0x2e0 [ 221.830565][ T8249] super_lock+0x189/0x390 [ 221.835797][ T8249] fs_bdev_sync+0xa4/0x170 [ 221.840851][ T8249] blkdev_common_ioctl+0x8a9/0x2580 [ 221.846598][ T8249] blkdev_ioctl+0x512/0x730 [ 221.851823][ T8249] __se_sys_ioctl+0xfd/0x170 [ 221.857142][ T8249] do_syscall_64+0x55/0xb0 [ 221.862113][ T8249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.868555][ T8249] [ 221.868555][ T8249] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 221.876830][ T8249] __mutex_lock+0x135/0xc80 [ 221.882327][ T8249] bd_finish_claiming+0x229/0x3f0 [ 221.887898][ T8249] blkdev_get_by_dev+0x469/0x610 [ 221.893551][ T8249] bdev_open_by_dev+0x77/0x100 [ 221.899480][ T8249] setup_bdev_super+0x59/0x660 [ 221.904793][ T8249] mount_bdev+0x1ce/0x2c0 [ 221.909700][ T8249] legacy_get_tree+0xea/0x180 [ 221.915388][ T8249] vfs_get_tree+0x8c/0x280 [ 221.920356][ T8249] do_new_mount+0x24a/0xa40 [ 221.925502][ T8249] init_mount+0xde/0x130 [ 221.930308][ T8249] do_mount_root+0x97/0x230 [ 221.935454][ T8249] mount_root_generic+0x1a6/0x3e0 [ 221.941488][ T8249] prepare_namespace+0xc2/0x100 [ 221.946977][ T8249] kernel_init_freeable+0x41a/0x560 [ 221.952725][ T8249] kernel_init+0x1d/0x1c0 [ 221.958013][ T8249] ret_from_fork+0x48/0x80 [ 221.963003][ T8249] ret_from_fork_asm+0x11/0x20 [ 221.968425][ T8249] [ 221.968425][ T8249] -> #0 (bdev_lock){+.+.}-{3:3}: [ 221.975752][ T8249] __lock_acquire+0x37ef/0x7d80 [ 221.981154][ T8249] lock_acquire+0x19e/0x420 [ 221.986290][ T8249] __mutex_lock+0x135/0xc80 [ 221.991693][ T8249] bd_prepare_to_claim+0x1d9/0x4a0 [ 221.997348][ T8249] truncate_bdev_range+0x4e/0x260 [ 222.002911][ T8249] blkdev_fallocate+0x428/0x6a0 [ 222.008369][ T8249] vfs_fallocate+0x585/0x6f0 [ 222.013553][ T8249] do_madvise+0x166b/0x3790 [ 222.018799][ T8249] __x64_sys_madvise+0xa6/0xc0 [ 222.024290][ T8249] do_syscall_64+0x55/0xb0 [ 222.029257][ T8249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.035817][ T8249] [ 222.035817][ T8249] other info that might help us debug this: [ 222.035817][ T8249] [ 222.046152][ T8249] Chain exists of: [ 222.046152][ T8249] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 222.046152][ T8249] [ 222.060648][ T8249] Possible unsafe locking scenario: [ 222.060648][ T8249] [ 222.068119][ T8249] CPU0 CPU1 [ 222.073501][ T8249] ---- ---- [ 222.078886][ T8249] lock(mapping.invalidate_lock); [ 222.084110][ T8249] lock(&sb->s_type->i_mutex_key#8); [ 222.092035][ T8249] lock(mapping.invalidate_lock); [ 222.099696][ T8249] lock(bdev_lock); [ 222.103644][ T8249] [ 222.103644][ T8249] *** DEADLOCK *** [ 222.103644][ T8249] [ 222.111805][ T8249] 2 locks held by syz.6.579/8249: [ 222.116844][ T8249] #0: ffff888148e1ab40 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_fallocate+0x205/0x6a0 [ 222.127682][ T8249] #1: ffff888148e1acd0 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 222.138166][ T8249] [ 222.138166][ T8249] stack backtrace: [ 222.144192][ T8249] CPU: 0 PID: 8249 Comm: syz.6.579 Not tainted syzkaller #0 [ 222.151521][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 222.162042][ T8249] Call Trace: [ 222.165456][ T8249] [ 222.168438][ T8249] dump_stack_lvl+0x18c/0x250 [ 222.173176][ T8249] ? load_image+0x420/0x420 [ 222.177714][ T8249] ? show_regs_print_info+0x20/0x20 [ 222.182945][ T8249] ? print_circular_bug+0x12b/0x1a0 [ 222.188204][ T8249] check_noncircular+0x2fc/0x400 [ 222.193265][ T8249] ? print_deadlock_bug+0x5d0/0x5d0 [ 222.198503][ T8249] ? lockdep_lock+0xf5/0x230 [ 222.203129][ T8249] ? reclaim_folio_list+0x321/0x3a0 [ 222.208392][ T8249] ? _find_first_zero_bit+0xd6/0x100 [ 222.213715][ T8249] __lock_acquire+0x37ef/0x7d80 [ 222.218604][ T8249] ? __bfs+0x27a/0x560 [ 222.222706][ T8249] ? verify_lock_unused+0x140/0x140 [ 222.227931][ T8249] ? check_noncircular+0x18a/0x400 [ 222.233088][ T8249] ? print_deadlock_bug+0x5d0/0x5d0 [ 222.238337][ T8249] ? lockdep_lock+0xf5/0x230 [ 222.243040][ T8249] ? lockdep_unlock+0x146/0x2e0 [ 222.247916][ T8249] ? lockdep_lock+0x230/0x230 [ 222.252626][ T8249] lock_acquire+0x19e/0x420 [ 222.257158][ T8249] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 222.262471][ T8249] ? __might_sleep+0xe0/0xe0 [ 222.267178][ T8249] ? read_lock_is_recursive+0x20/0x20 [ 222.272580][ T8249] __mutex_lock+0x135/0xc80 [ 222.277110][ T8249] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 222.282429][ T8249] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 222.287736][ T8249] ? mutex_lock_nested+0x20/0x20 [ 222.292707][ T8249] ? __lock_acquire+0x7d80/0x7d80 [ 222.297768][ T8249] bd_prepare_to_claim+0x1d9/0x4a0 [ 222.303547][ T8249] ? invalidate_bdev+0xc0/0xc0 [ 222.308360][ T8249] ? truncate_bdev_range+0x260/0x260 [ 222.313695][ T8249] ? down_write+0x16e/0x200 [ 222.318250][ T8249] ? down_read_killable+0x340/0x340 [ 222.323521][ T8249] truncate_bdev_range+0x4e/0x260 [ 222.328594][ T8249] blkdev_fallocate+0x428/0x6a0 [ 222.333481][ T8249] vfs_fallocate+0x585/0x6f0 [ 222.338099][ T8249] do_madvise+0x166b/0x3790 [ 222.342646][ T8249] ? madvise_set_anon_name+0x440/0x440 [ 222.348135][ T8249] ? schedule+0xc7/0x170 [ 222.352401][ T8249] ? futex_wait_queue+0x27/0x1b0 [ 222.357364][ T8249] ? futex_wait_queue+0x138/0x1b0 [ 222.362427][ T8249] ? futex_unqueue+0xcb/0xf0 [ 222.367041][ T8249] ? futex_wait+0x4a7/0x5c0 [ 222.371575][ T8249] ? futex_wait_setup+0x270/0x270 [ 222.376636][ T8249] ? do_futex+0x2ff/0x3e0 [ 222.380987][ T8249] ? __ia32_sys_get_robust_list+0x110/0x110 [ 222.386908][ T8249] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 222.393004][ T8249] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.398298][ T8249] ? lock_chain_count+0x20/0x20 [ 222.403196][ T8249] __x64_sys_madvise+0xa6/0xc0 [ 222.408025][ T8249] do_syscall_64+0x55/0xb0 [ 222.412485][ T8249] ? clear_bhb_loop+0x40/0x90 [ 222.417202][ T8249] ? clear_bhb_loop+0x40/0x90 [ 222.421918][ T8249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.427867][ T8249] RIP: 0033:0x7f271e19e019 [ 222.432345][ T8249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.452209][ T8249] RSP: 002b:00007f271f0c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 222.460659][ T8249] RAX: ffffffffffffffda RBX: 00007f271e425fa0 RCX: 00007f271e19e019 [ 222.468655][ T8249] RDX: 0000000000000009 RSI: 0000000000600003 RDI: 0000200000000000 [ 222.476650][ T8249] RBP: 00007f271e23500c R08: 0000000000000000 R09: 0000000000000000 [ 222.484640][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.492637][ T8249] R13: 00007f271e426038 R14: 00007f271e425fa0 R15: 00007fff9519df38 [ 222.500666][ T8249]