last executing test programs: 28.187028322s ago: executing program 0 (id=2629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r1, 0xf2a10f80ab597717}, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) linkat(r3, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x1000) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x79}, @hci_ev_le_phy_update_complete={{}, {0x0, 0xc9, 0x89, 0x7}}}}, 0x9) flock(r3, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f00000006c0)=""/210, 0xd2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0x86, 0x0, {}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000bc0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000440)=""/154, 0x9a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 16.571130078s ago: executing program 3 (id=2664): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x3ffe, r2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200580, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 16.359306186s ago: executing program 3 (id=2666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r3) close_range(r6, 0xffffffffffffffff, 0x0) 15.363959238s ago: executing program 3 (id=2667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x22) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000000)={'dvmrp1\x00', {0x2, 0x0, @dev}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="040028bd7000ffdbdf253a0000", @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) 13.972960908s ago: executing program 3 (id=2671): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='uid_map\x00') readv(r0, &(0x7f0000000180), 0x0) getpgrp(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ec03010000000000000000000000000a14000000fa030100ee"], 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) sync() ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000480)={0x1000000}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) 11.647553608s ago: executing program 3 (id=2677): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) 8.198424405s ago: executing program 0 (id=2659): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b7050000080000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0xc, &(0x7f0000000040)={0x3, 0x2}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "be12c945519c8f1709445776e1f6859b0bbc345082cd40e1239e9de67e8a5fec0681f1a523e3b81a9ac4ac39580c18f2a6a2caa3eab63cfcee20f4b5537b128304a235cf7918abd6aaf297b695adee12800e7c30277de9c4570103ed3bbada94232d46f984b59260cccf81967870b2af7863b8d1c0584bf5a164f2f9dd3771b0f8ad6238ad113b01fcca86606c6f59b9d1f9c6efb4c17a8d9a58b1b2ef91a90761ad83975a88c4a2d59fcdb0c407e09b44cdbb9dbd7f5b359bbe00064bc82ef443a79f844f6175b1685ff7d54f684bf8fdf1d0b70067d1ec4f40c4e9486dad70e40f4372ba08473f68161d7ca57501f5ef21a15585200e98187f9fa56bcb4ecd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x120) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 7.259089841s ago: executing program 0 (id=2690): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x13) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) mount$afs(&(0x7f0000000680)=ANY=[@ANYBLOB='%'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) 6.619448336s ago: executing program 3 (id=2692): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r1, 0xf2a10f80ab597717}, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) linkat(r3, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x1000) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x79}, @hci_ev_le_phy_update_complete={{}, {0x0, 0xc9, 0x89, 0x7}}}}, 0x9) flock(r3, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f00000006c0)=""/210, 0xd2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0x86, 0x0, {}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000bc0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000440)=""/154, 0x9a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6.253249985s ago: executing program 0 (id=2694): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x3ffe, r2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x200580, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 5.673103429s ago: executing program 0 (id=2695): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x68) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000", 0x29}], 0x1, 0x0, 0x0, 0x3000}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 5.551329179s ago: executing program 4 (id=2697): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 5.551077686s ago: executing program 4 (id=2698): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(0x3) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001b00)=""/4096, 0xff7}], 0x4e}}], 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'}) close(r1) 5.274423435s ago: executing program 1 (id=2700): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b7050000080000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0xc, &(0x7f0000000040)={0x3, 0x2}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x120) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 4.61532379s ago: executing program 4 (id=2701): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x13) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800400120005001600020000"], 0x54}}, 0x0) 4.070725799s ago: executing program 1 (id=2703): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x10, 0xffffffff, 0x0, 0x515f3157, 0x0, "7de114100985a79874342a70e113fe49a5f51f"}) getdents64(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) io_setup(0x2868b0, &(0x7f0000000240)) ioprio_set$uid(0x3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 3.694969551s ago: executing program 1 (id=2704): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}, {&(0x7f0000000380)=""/150, 0x7fffdff8}], 0x2, 0x7, 0x0) syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f0000005600)='./file1\x00', 0x800002, &(0x7f0000000180)={[{@barrier}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@max_inline={'max_inline', 0x3d, [0x36, 0x70, 0x70, 0x5f, 0x36, 0x78]}}, {@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x1, 0x559e, &(0x7f0000005680)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1) write$sndseq(r2, &(0x7f0000000280)=[{0x9, 0xa, 0x9, 0x4, @tick=0x1, {0x11, 0x7}, {0x2, 0x7}, @raw32={[0x2, 0x63b, 0x9]}}, {0xb, 0xf3, 0xe, 0x7, @time={0x1, 0x3}, {0x4, 0x2}, {0x7f, 0x1d}, @control={0x0, 0x8, 0x6}}, {0x18, 0xff, 0xff, 0xa4, @tick=0x3, {0x7, 0x7f}, {0xdf, 0x6}, @control={0x8, 0x0, 0x9}}], 0x54) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) 3.654041042s ago: executing program 4 (id=2705): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x3ffe, r2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x200580, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 3.555298254s ago: executing program 0 (id=2706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = eventfd2(0x0, 0x0) poll(0x0, 0x0, 0xda8e) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000100)="dda136dfb293", 0x6}], 0x2) read$eventfd(r1, &(0x7f0000002100), 0x8) 3.511008148s ago: executing program 4 (id=2707): io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="04000000000000000800290000000000080028000000000056ca065a3a178999ae86b110087018f5cbf7d5d7b08665f63201a151cad24942f83ca48fbb4a2c7aa1c6dac21c92"], 0x58}}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000002040)) 3.229794937s ago: executing program 4 (id=2709): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x480d4) socket$netlink(0x10, 0x3, 0x9) dup(r0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000480)={0x1000000}) 2.607806207s ago: executing program 1 (id=2711): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f7, &(0x7f0000000040)={'bridge_slave_0\x00', @random="4f33e363a4b1"}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syslog(0x2, &(0x7f0000001100)=""/4096, 0x1000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x48) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/73}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x2, 0x0, [{0x0, 0x71, &(0x7f0000000b80)=""/113}, {0x0, 0x1000, &(0x7f0000001600)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@llx, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) 1.93171712s ago: executing program 1 (id=2712): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b7050000080000"], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x7, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0xc, &(0x7f0000000040)={0x3, 0x2}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x120) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.667323676s ago: executing program 2 (id=2713): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000300"], 0x3c}}, 0x0) 1.127930799s ago: executing program 2 (id=2714): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x10, 0xffffffff, 0x0, 0x515f3157, 0x0, "7de114100985a79874342a70e113fe49a5f51f"}) getdents64(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) io_setup(0x2868b0, &(0x7f0000000240)) ioprio_set$uid(0x3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 976.776337ms ago: executing program 1 (id=2715): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000804) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) syz_usb_connect(0x0, 0xfffffffffffffffb, 0x0, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x10010, r0, 0x38179000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'pim6reg\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 730.324329ms ago: executing program 2 (id=2716): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x68) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700", 0x2c}], 0x1, 0x0, 0x0, 0x3000}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 522.984826ms ago: executing program 2 (id=2717): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x3ffe, r2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x200580, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 385.941106ms ago: executing program 2 (id=2719): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='ext4_fc_commit_stop\x00', r1, 0x0, 0x9}, 0xfffffffffffffdab) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r9, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = syz_open_procfs(r3, &(0x7f00000144c0)='uid_map\x00') dup3(r10, r11, 0x0) setsockopt$netlink_NETLINK_RX_RING(r11, 0x10e, 0x6, 0x0, 0x0) io_submit(r9, 0x6, &(0x7f00000009c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x8080, 0xffffffffffffffff, &(0x7f0000000400)="2008280c51c06df6776206316dd152e03b1192169731277644059864c28d26ebfd425bda17ce097015d9fe237517eb37392d5def4b3453f10d9e8efa9ebe381b45f7dcdde69dd6610b5d7acaae03dee4bcc672cd06da753138cc0748a774f4980b0d68f97fc15a68d2f8ad78bbe9794461d26cc517753e8c3a880dd8bdd992592aef407fcf4b6d3e45d6d140e80315b90b711d6e66d72499c38f781d05c305919aeab2542f8930ecae38b4662d7c3e5f968092a361db3bd5a8195acede5b3cbe2e1b964d1f05f3", 0xc7, 0x7f00000000, 0x0, 0x4, r0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x7fff, r0, &(0x7f0000000300)="9094e6328061d75d881a5be62efda74a06558f8cfa0920a3cd8a0f061148ffe219cced87e9498a9e5d602571f0d73f3f575485adc3677b91324a254d976b6a63941b23569d6cbb8b2e84d94e13f8b2a0569af8f959558794849b0c3d3251a5d5bfdea25da2e0dbc86ef4961393c3dc6ff8626d2cc8e282b82b525730b03490ae92413af4e2a359c67fc8ec847e91c7", 0x8f, 0x4, 0x0, 0x1}, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f00000007c0)="b1ce48a8377bc11f27d3b13bb594e0c25567bfdf4c04d410632ff16620428b18421541d42570b70bb260998be5860c94762082842b70a538f88fe18ccf1f6497315f97691c074f9cca1470372664427507000c5a38f900241a2a", 0x5a, 0x3, 0x0, 0x2, r0}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xfff8, r6, &(0x7f0000000880)="d9a1ff4dfa7ec3572ed66b2b079cafe0d2e88eb7ee9613f2e4f35355d8da6da0c028d1dd93d6dc1db78e5616966f682ac9d8bff513491d5abca6baf88830057fae08890003c5e54250458a2a8f26a09dab12afb804c85082f279bcb6db61540192683cb8935089fe43dcda5d0ee05bf667afd1e43410fbfda14e429d0cf6691a7a567e07a251fd3c6c8a58c84a089582228aa72097a45b0721ec9fadde55d3aa4f8cbe691c952f78d0edbad3d757bd185ef56dfb6c7a9bbd380d01f1d290761af32b842913122264028a376e4c1bd403e5c64ea699db", 0xd6, 0xe, 0x0, 0x3}]) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 0s ago: executing program 2 (id=2720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) inotify_init1(0x0) kernel console output (not intermixed with test programs): ket: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 499.671942][T17195] netlink: 'syz.2.1942': attribute type 16 has an invalid length. [ 499.679848][T17195] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1942'. [ 500.270623][ T29] audit: type=1326 audit(1728405612.930:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7f7dff9 code=0x7fc00000 [ 500.506250][T17200] loop1: detected capacity change from 0 to 32768 [ 500.513660][T17200] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1944 (17200) [ 500.532761][T17200] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 500.561803][T17200] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 500.574703][T17200] BTRFS info (device loop1): using free-space-tree [ 500.800892][T17200] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 500.852317][T17222] loop1: detected capacity change from 32768 to 0 [ 500.861551][T17200] bio_check_eod: 4 callbacks suppressed [ 500.861566][T17200] syz.1.1944: attempt to access beyond end of device [ 500.861566][T17200] loop1: rw=6145, sector=10456, nr_sectors = 8 limit=0 [ 500.892533][T17200] btrfs_dev_stat_inc_and_print: 4 callbacks suppressed [ 500.892552][T17200] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 500.899050][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 500.900523][T17200] syz.1.1944: attempt to access beyond end of device [ 500.900523][T17200] loop1: rw=6145, sector=10464, nr_sectors = 8 limit=0 [ 500.931219][T17200] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 500.941757][T17200] syz.1.1944: attempt to access beyond end of device [ 500.941757][T17200] loop1: rw=6145, sector=10472, nr_sectors = 8 limit=0 [ 500.958070][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 500.967132][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 500.975954][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 500.983208][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 500.994663][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 501.031381][T17200] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 501.044574][T17200] syz.1.1944: attempt to access beyond end of device [ 501.044574][T17200] loop1: rw=6145, sector=10480, nr_sectors = 8 limit=0 [ 501.059256][T17200] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 501.071754][T17200] syz.1.1944: attempt to access beyond end of device [ 501.071754][T17200] loop1: rw=6145, sector=10488, nr_sectors = 8 limit=0 [ 501.085922][T17200] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 501.097244][T17200] syz.1.1944: attempt to access beyond end of device [ 501.097244][T17200] loop1: rw=6145, sector=10496, nr_sectors = 8 limit=0 [ 501.112245][T17200] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0 [ 501.222523][T17200] syz.1.1944: attempt to access beyond end of device [ 501.222523][T17200] loop1: rw=6145, sector=10504, nr_sectors = 8 limit=0 [ 501.239394][T17200] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 7, rd 0, flush 0, corrupt 0, gen 0 [ 501.268993][T17200] syz.1.1944: attempt to access beyond end of device [ 501.268993][T17200] loop1: rw=6145, sector=10512, nr_sectors = 8 limit=0 [ 501.286576][T17200] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 8, rd 0, flush 0, corrupt 0, gen 0 [ 501.333479][T17200] syz.1.1944: attempt to access beyond end of device [ 501.333479][T17200] loop1: rw=6145, sector=10544, nr_sectors = 8 limit=0 [ 501.356552][T17223] chnl_net:caif_netlink_parms(): no params data found [ 501.383076][T17200] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 9, rd 0, flush 0, corrupt 0, gen 0 [ 501.418614][T17200] syz.1.1944: attempt to access beyond end of device [ 501.418614][T17200] loop1: rw=6145, sector=10576, nr_sectors = 8 limit=0 [ 501.432277][T17200] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 10, rd 0, flush 0, corrupt 0, gen 0 [ 501.443128][ T53] Bluetooth: hci5: command tx timeout [ 501.448853][T17200] BTRFS: error (device loop1) in btrfs_commit_transaction:2524: errno=-5 IO failure (Error while writing out transaction) [ 501.461899][T17200] BTRFS info (device loop1 state E): forced readonly [ 501.468881][T17200] BTRFS warning (device loop1 state E): Skipping commit of aborted transaction. [ 501.478131][T17200] BTRFS error (device loop1 state EA): Transaction aborted (error -5) [ 501.487337][T17200] BTRFS: error (device loop1 state EA) in cleanup_transaction:2017: errno=-5 IO failure [ 501.543926][T17062] BTRFS info (device loop1 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 501.557788][T17223] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.573468][T17223] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.604107][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.611205][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.628980][T17223] bridge_slave_0: entered allmulticast mode [ 501.647341][T17223] bridge_slave_0: entered promiscuous mode [ 501.661268][T17223] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.672511][T17223] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.681024][T17223] bridge_slave_1: entered allmulticast mode [ 501.694549][T17223] bridge_slave_1: entered promiscuous mode [ 501.780225][T17223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.806152][T17223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.866092][T17223] team0: Port device team_slave_0 added [ 501.873173][T17223] team0: Port device team_slave_1 added [ 501.887012][T17223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.894539][T17223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.921876][T17223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.944219][T17223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.951151][T17223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.980156][T17223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.993774][T13996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.036067][T17223] hsr_slave_0: entered promiscuous mode [ 502.052789][T17223] hsr_slave_1: entered promiscuous mode [ 502.061993][T17223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.071376][T17223] Cannot create hsr debugfs directory [ 502.131735][T13996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.189160][T17223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.213647][T13996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.286562][T17223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.324969][T13996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.336354][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 502.343576][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 502.350777][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 502.359272][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 502.366700][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 502.373916][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 502.389049][T17223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.521289][T17223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.583360][T17243] loop4: detected capacity change from 0 to 1024 [ 502.608919][T17243] hfsplus: extend alloc file! (8192,65536,366) [ 502.701215][T13996] bridge_slave_1: left allmulticast mode [ 502.726617][T13996] bridge_slave_1: left promiscuous mode [ 502.752341][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.994940][T13996] bridge_slave_0: left allmulticast mode [ 503.000795][T13996] bridge_slave_0: left promiscuous mode [ 503.009719][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.042261][ T5235] Bluetooth: hci6: command tx timeout [ 503.168875][T13996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.179334][T13996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.189534][T13996] bond0 (unregistering): Released all slaves [ 503.212793][T17247] loop2: detected capacity change from 0 to 32768 [ 503.267541][T17247] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 503.273450][T17223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 503.288415][T17223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 503.318035][T17223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 503.333614][T17247] XFS (loop2): Ending clean mount [ 503.347949][T17247] XFS (loop2): Quotacheck needed: Please wait. [ 503.357712][T17223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 503.371877][T17247] XFS (loop2): Quotacheck: Done. [ 503.417942][T17239] chnl_net:caif_netlink_parms(): no params data found [ 503.462439][T13996] hsr_slave_0: left promiscuous mode [ 503.481106][T13996] hsr_slave_1: left promiscuous mode [ 503.504245][T13996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.515504][T13996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.526400][T13996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.527544][T16467] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 503.534430][T13996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.552555][T13996] veth1_macvtap: left promiscuous mode [ 503.558614][T13996] veth0_macvtap: left promiscuous mode [ 503.564387][T13996] veth1_vlan: left promiscuous mode [ 503.569652][T13996] veth0_vlan: left promiscuous mode [ 503.712822][T13996] team0 (unregistering): Port device team_slave_1 removed [ 503.721356][ T29] audit: type=1326 audit(1728405616.380:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859a37dff9 code=0x7fc00000 [ 503.744041][ T29] audit: type=1326 audit(1728405616.380:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f859a37dff9 code=0x7fc00000 [ 503.767166][ T29] audit: type=1326 audit(1728405616.380:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859a37dff9 code=0x7fc00000 [ 503.790013][ T29] audit: type=1326 audit(1728405616.380:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859a37dff9 code=0x7fc00000 [ 503.876418][ T29] audit: type=1326 audit(1728405616.380:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859a37dff9 code=0x7fc00000 [ 503.878576][T13996] team0 (unregistering): Port device team_slave_0 removed [ 503.898816][ T29] audit: type=1326 audit(1728405616.380:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859a37dff9 code=0x7fc00000 [ 503.898849][ T29] audit: type=1326 audit(1728405616.380:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859a37dff9 code=0x7fc00000 [ 503.898877][ T29] audit: type=1326 audit(1728405616.380:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859a37dff9 code=0x7fc00000 [ 503.898905][ T29] audit: type=1326 audit(1728405616.380:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859a37dff9 code=0x7fc00000 [ 503.898933][ T29] audit: type=1326 audit(1728405616.380:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859a37dff9 code=0x7fc00000 [ 504.123377][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 504.133306][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 504.150855][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 504.159735][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 504.168926][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 504.177020][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 504.296687][T17239] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.304127][T17239] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.311325][T17239] bridge_slave_0: entered allmulticast mode [ 504.318899][T17239] bridge_slave_0: entered promiscuous mode [ 504.344389][T17239] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.351585][T17239] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.360327][T17239] bridge_slave_1: entered allmulticast mode [ 504.367401][T17239] bridge_slave_1: entered promiscuous mode [ 504.403156][ T5235] Bluetooth: hci5: command tx timeout [ 504.415503][T17239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.440889][T17239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.499884][T17239] team0: Port device team_slave_0 added [ 504.515927][T17239] team0: Port device team_slave_1 added [ 504.544387][T17239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.551434][T17239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.578653][T17239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.591418][T17239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.598925][T17239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.626155][T17239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.708385][T13996] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.745051][T17239] hsr_slave_0: entered promiscuous mode [ 504.751138][T17239] hsr_slave_1: entered promiscuous mode [ 504.758691][T17239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.766519][T17239] Cannot create hsr debugfs directory [ 504.776943][T17223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.796117][T13996] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.854998][T13996] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.913856][T17289] chnl_net:caif_netlink_parms(): no params data found [ 504.930943][T17223] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.956022][T13996] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.020295][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.027415][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.132555][ T5235] Bluetooth: hci6: command tx timeout [ 505.204576][T12018] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.211654][T12018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.271758][T17289] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.284809][T17289] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.296121][T17289] bridge_slave_0: entered allmulticast mode [ 505.303757][T17289] bridge_slave_0: entered promiscuous mode [ 505.327115][T13996] bridge_slave_1: left allmulticast mode [ 505.334445][T13996] bridge_slave_1: left promiscuous mode [ 505.340397][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.349428][T13996] bridge_slave_0: left allmulticast mode [ 505.355742][T13996] bridge_slave_0: left promiscuous mode [ 505.361982][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.494050][T13996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.509061][T13996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.524373][T13996] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 505.543835][T13996] bond0 (unregistering): Released all slaves [ 505.575753][T17289] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.585182][T17289] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.593935][T17289] bridge_slave_1: entered allmulticast mode [ 505.600718][T17289] bridge_slave_1: entered promiscuous mode [ 505.671527][T17289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.702559][T17289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.740539][T17289] team0: Port device team_slave_0 added [ 505.786897][T17289] team0: Port device team_slave_1 added [ 505.876439][T17289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.887156][T17289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.921726][T17289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.941021][T17289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.948077][T17289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.978524][T17289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.010453][T13996] hsr_slave_0: left promiscuous mode [ 506.018003][T13996] hsr_slave_1: left promiscuous mode [ 506.023903][T13996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.043039][T13996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.052012][T13996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.059495][T13996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.069060][T13996] veth1_macvtap: left promiscuous mode [ 506.074600][T13996] veth0_macvtap: left promiscuous mode [ 506.080145][T13996] veth1_vlan: left promiscuous mode [ 506.086900][T13996] veth0_vlan: left promiscuous mode [ 506.205936][T13996] team0 (unregistering): Port device team_slave_1 removed [ 506.221107][T13996] team0 (unregistering): Port device team_slave_0 removed [ 506.242423][ T5235] Bluetooth: hci7: command tx timeout [ 506.380908][T17223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.394975][T17289] hsr_slave_0: entered promiscuous mode [ 506.401363][T17289] hsr_slave_1: entered promiscuous mode [ 506.407756][T17289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.415456][T17289] Cannot create hsr debugfs directory [ 506.456075][T17239] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 506.475238][T17239] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 506.489802][T17239] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.496905][ T5235] Bluetooth: hci5: command tx timeout [ 506.516950][T17239] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.555239][T17223] veth0_vlan: entered promiscuous mode [ 506.577703][T17223] veth1_vlan: entered promiscuous mode [ 506.630867][T17223] veth0_macvtap: entered promiscuous mode [ 506.657557][T17223] veth1_macvtap: entered promiscuous mode [ 506.716097][T17239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.725155][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.738300][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.748908][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.761437][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.774067][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.785512][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.798226][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.809754][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.842790][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.874730][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.902815][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.921531][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.936794][T17223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.966831][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.987056][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.003999][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.015298][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.027614][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.039317][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.059945][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.070465][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.080461][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.091182][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.101227][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.111982][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.125660][T17223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.136206][T17223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.145899][T17223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.158721][T17223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.177283][T17223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.203506][ T5235] Bluetooth: hci6: command tx timeout [ 507.428612][T17239] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.524125][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.531255][T13996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.554433][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.561534][T13996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.774980][T17289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 507.793999][T17239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.806177][T17364] loop4: detected capacity change from 0 to 32768 [ 507.813642][T17239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.865002][T17364] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 508.002922][T17289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.151030][T17289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 508.235560][T17364] XFS (loop4): Ending clean mount [ 508.267242][T17364] XFS (loop4): Quotacheck needed: Please wait. [ 508.291792][T17289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 508.301734][T12018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.314719][T12018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.331070][T17364] XFS (loop4): Quotacheck: Done. [ 508.332396][ T5235] Bluetooth: hci7: command tx timeout [ 508.375366][T12018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.420266][T12018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.515111][T15771] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 508.537412][T17289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.556804][T17289] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.594321][ T5235] Bluetooth: hci5: command tx timeout [ 508.683530][T17289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 508.694362][T17289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 508.714423][T13983] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.721540][T13983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.779013][T13983] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.786183][T13983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.958936][T17239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.137977][T17289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.164417][T17239] veth0_vlan: entered promiscuous mode [ 509.227732][T17239] veth1_vlan: entered promiscuous mode [ 509.283627][ T5235] Bluetooth: hci6: command tx timeout [ 509.376765][T17289] veth0_vlan: entered promiscuous mode [ 509.392981][T17239] veth0_macvtap: entered promiscuous mode [ 509.432915][T17289] veth1_vlan: entered promiscuous mode [ 509.456730][T17239] veth1_macvtap: entered promiscuous mode [ 509.507991][T17289] veth0_macvtap: entered promiscuous mode [ 509.547848][T17289] veth1_macvtap: entered promiscuous mode [ 509.566620][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.605768][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.635429][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.664172][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.696675][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.727602][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.782093][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.826097][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.851482][T17445] loop4: detected capacity change from 0 to 764 [ 509.858897][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.871042][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.964601][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.057277][T17448] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 510.312815][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.403995][ T5235] Bluetooth: hci7: command tx timeout [ 510.444054][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.454586][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.473615][T17239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.487816][T17451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.497917][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.508737][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.531969][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.545569][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.555700][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.568580][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.588572][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.601285][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.614437][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.628176][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.642371][ T5235] Bluetooth: hci5: command tx timeout [ 510.649425][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.663954][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.675364][T17239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.696114][T17239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.716738][T17451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.717566][T17239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.748919][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.761099][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.770955][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.781479][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.798935][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.818000][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.844319][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.882472][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.895467][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.905974][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.921419][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.932827][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.942685][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.953317][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.964179][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.979373][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.003231][T17289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.020777][T17239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.046461][T17239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.066550][T17239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.076479][T17239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.103785][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.114987][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.128955][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.171875][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.222926][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.254989][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.337308][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.427517][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.491685][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.524006][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.555274][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.582213][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.602343][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.604644][T17466] loop2: detected capacity change from 0 to 32768 [ 511.625920][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.651152][T17466] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 511.655407][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.680698][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.705987][T17466] XFS (loop2): Ending clean mount [ 511.716774][T17466] XFS (loop2): Quotacheck needed: Please wait. [ 511.722031][T17289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.778484][T17289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.787611][T17466] XFS (loop2): Quotacheck: Done. [ 511.838568][T17289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.856408][T17289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.865909][T17289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.936116][T16467] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 512.306313][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.336594][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.374242][T12018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.385611][T12018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.432160][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.440085][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.454236][T13983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.463923][T13983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.523358][ T5235] Bluetooth: hci7: command tx timeout [ 513.149113][T17539] loop4: detected capacity change from 0 to 764 [ 513.218433][T17546] autofs: Unknown parameter '0x0000000000000000' [ 513.381959][T17552] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 513.876160][T17555] netlink: 644 bytes leftover after parsing attributes in process `syz.2.1983'. [ 513.951194][T17557] netlink: 'syz.3.1984': attribute type 10 has an invalid length. [ 514.032612][T17557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.065562][T17557] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 515.065805][T17586] autofs: Unknown parameter '0x0000000000000000' [ 515.096833][T17591] macvlan0: entered allmulticast mode [ 515.118133][T17591] veth1_vlan: entered allmulticast mode [ 515.240716][T17594] loop4: detected capacity change from 0 to 764 [ 515.701790][T17603] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 517.216671][T17625] autofs: Unknown parameter '0x0000000000000000' [ 518.036180][T17640] loop0: detected capacity change from 0 to 764 [ 518.267677][T17650] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 519.123449][T17659] autofs: Unknown parameter '0x0000000000000000' [ 519.199255][T17664] loop2: detected capacity change from 0 to 128 [ 519.228514][T17664] EXT4-fs (loop2): Test dummy encryption mode enabled [ 519.259055][T17664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 519.282209][T17664] System zones: 1-3, 19-19, 35-36 [ 519.372744][T17664] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 519.405464][T17664] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.263607][T17664] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 520.275176][T17680] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 520.345967][T16467] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.397662][T17698] 9pnet_fd: Insufficient options for proto=fd [ 521.133173][T17711] loop0: detected capacity change from 0 to 764 [ 521.163886][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 521.163904][ T29] audit: type=1326 audit(1728405633.830:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.3.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5677dff9 code=0x7fc00000 [ 521.347099][T17699] loop2: detected capacity change from 0 to 32768 [ 521.407155][T17699] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2026 (17699) [ 521.651230][T17720] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 522.006540][T17699] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 522.032840][T17699] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 522.041833][T17699] BTRFS info (device loop2): using free-space-tree [ 522.046519][T17731] loop1: detected capacity change from 0 to 128 [ 522.068804][T17731] EXT4-fs (loop1): Test dummy encryption mode enabled [ 522.079258][T17729] autofs: Unknown parameter '0x0000000000000000' [ 522.127127][T17731] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 522.153036][T17731] System zones: 1-3, 19-19, 35-36 [ 522.190763][T17731] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 522.204977][ T29] audit: type=1800 audit(1728405634.870:365): pid=17699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2026" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 522.239049][T17731] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.268078][ T29] audit: type=1800 audit(1728405634.930:366): pid=17699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2026" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 522.313412][T17731] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 522.501262][ T1054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.515496][ T1054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.323498][ T29] audit: type=1800 audit(1728405635.990:367): pid=17731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2036" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 524.231793][T16467] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 524.371903][ T1054] bond0 (unregistering): Released all slaves [ 524.533975][T17239] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 524.701496][ T1054] hsr_slave_0: left promiscuous mode [ 524.717524][T17787] autofs: Bad value for 'fd' [ 524.828068][ T1054] hsr_slave_1: left promiscuous mode [ 524.849925][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.878909][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.930941][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.958455][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.975807][ T1054] batman_adv: batadv0: Removing interface: ipvlan1 [ 525.333722][ T1054] veth1_macvtap: left promiscuous mode [ 525.403841][ T1054] veth0_macvtap: left promiscuous mode [ 525.409429][ T1054] veth1_vlan: left promiscuous mode [ 525.422148][ T1054] veth0_vlan: left promiscuous mode [ 525.681180][T17782] loop2: detected capacity change from 0 to 32768 [ 525.696427][T17792] loop3: detected capacity change from 0 to 32768 [ 525.888758][T17792] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2050 (17792) [ 526.129870][T17782] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 526.139455][T17807] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 526.154989][T17792] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 526.182249][T17792] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 526.197080][T17792] BTRFS info (device loop3): using free-space-tree [ 526.241186][T17782] XFS (loop2): Ending clean mount [ 526.261781][T17782] XFS (loop2): Quotacheck needed: Please wait. [ 526.275448][ T1054] team0 (unregistering): Port device team_slave_1 removed [ 526.310468][ T1054] team0 (unregistering): Port device team_slave_0 removed [ 526.331686][T17782] XFS (loop2): Quotacheck: Done. [ 526.386522][ T29] audit: type=1800 audit(1728405639.050:368): pid=17792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2050" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 526.468775][ T29] audit: type=1800 audit(1728405639.130:369): pid=17839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2050" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 526.554174][T17289] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 526.644739][T16467] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 526.888091][T17851] autofs: Bad value for 'fd' [ 526.984206][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 527.807315][T17879] netlink: 'syz.4.2067': attribute type 10 has an invalid length. [ 527.833687][T17879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.846468][T17879] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 527.956978][T17885] loop3: detected capacity change from 0 to 1024 [ 528.025548][T17885] hfsplus: extend alloc file! (8192,65536,366) [ 528.540256][T17876] loop2: detected capacity change from 0 to 32768 [ 528.562181][T17876] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2066 (17876) [ 528.616707][T17876] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 528.637427][T17876] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 528.682208][T17876] BTRFS info (device loop2): using free-space-tree [ 528.749658][T17873] loop0: detected capacity change from 0 to 32768 [ 528.799287][T17906] autofs: Bad value for 'fd' [ 528.821077][T17873] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 529.277611][ T29] audit: type=1800 audit(1728405641.940:370): pid=17876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2066" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 529.310043][T17873] XFS (loop0): Ending clean mount [ 529.316949][T17873] XFS (loop0): Quotacheck needed: Please wait. [ 529.355514][ T29] audit: type=1800 audit(1728405641.990:371): pid=17876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2066" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 529.399387][T17873] XFS (loop0): Quotacheck: Done. [ 529.409589][T16467] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 529.511575][T17223] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 529.741456][T17936] loop1: detected capacity change from 0 to 32768 [ 529.761224][T17936] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2079 (17936) [ 529.867178][T17936] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 529.902193][T17936] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 529.911596][T17936] BTRFS info (device loop1): using free-space-tree [ 530.017009][T17967] autofs: Unknown parameter '0x0000000000000000' [ 530.033609][ T29] audit: type=1800 audit(1728405642.690:372): pid=17936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2079" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 530.058754][T17951] loop0: detected capacity change from 0 to 1024 [ 530.128478][T17974] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2088'. [ 530.199206][T17951] hfsplus: extend alloc file! (8192,65536,366) [ 530.199259][T17239] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 531.088387][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 531.255358][T17976] loop2: detected capacity change from 0 to 32768 [ 531.305307][T17976] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2089 (17976) [ 531.439864][T17981] loop3: detected capacity change from 0 to 32768 [ 531.446510][T17976] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 531.446587][T17976] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 531.446654][T17976] BTRFS info (device loop2): using free-space-tree [ 531.621879][T17981] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 531.645933][ T29] audit: type=1800 audit(1728405644.300:373): pid=17976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2089" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 531.695698][ T29] audit: type=1800 audit(1728405644.350:374): pid=17976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2089" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 531.795333][T17981] XFS (loop3): Ending clean mount [ 531.809698][T17981] XFS (loop3): Quotacheck needed: Please wait. [ 531.865142][T16467] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 531.944288][T17981] XFS (loop3): Quotacheck: Done. [ 532.064405][T18028] loop4: detected capacity change from 0 to 32768 [ 532.075654][T18028] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2098 (18028) [ 532.090620][T18028] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 532.108161][T18035] loop0: detected capacity change from 0 to 1024 [ 532.119091][T18035] hfsplus: extend alloc file! (8192,65536,366) [ 532.129745][T18028] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 532.154294][T18028] BTRFS info (device loop4): using free-space-tree [ 532.733074][T17289] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 533.058531][T18058] autofs: Unknown parameter '0x0000000000000000' [ 533.242779][ T29] audit: type=1800 audit(1728405645.880:375): pid=18028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2098" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 533.368034][T15771] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 533.568741][T18069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.634899][T18069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.741520][T18069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.799132][T18069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.843441][T18091] loop4: detected capacity change from 0 to 128 [ 533.854864][T18091] EXT4-fs (loop4): Test dummy encryption mode enabled [ 533.926621][T18091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 533.943078][T18091] System zones: 1-3, 19-19, 35-36 [ 533.970245][T18069] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.982797][T18091] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 533.999204][T18091] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.005993][T18069] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.070030][ T29] audit: type=1800 audit(1728405646.730:376): pid=18091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2110" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 534.074702][T18069] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.102498][T18069] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.644146][T18106] autofs: Unknown parameter '0x0000000000000000' [ 535.277241][T15771] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.498014][T18118] netlink: 'syz.3.2123': attribute type 10 has an invalid length. [ 535.550070][T18118] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 535.602949][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.617041][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.624864][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.637621][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.645307][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.652901][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.662103][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.671045][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.766560][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.850004][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.904191][T18134] autofs: Unknown parameter '0x0000000000000000' [ 535.915146][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.938506][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.951672][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 535.960001][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.006824][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.013631][T18142] loop2: detected capacity change from 0 to 128 [ 536.019471][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.029670][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.054746][T18142] EXT4-fs (loop2): Test dummy encryption mode enabled [ 536.061584][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.070410][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.081468][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.089360][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.097076][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.108629][T18142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 536.117066][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.129756][T18142] System zones: 1-3, 19-19, 35-36 [ 536.144314][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.172478][T18142] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 536.180614][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.192369][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.199770][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.207220][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.214661][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.222677][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.230068][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.237949][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.245402][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.252845][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.260230][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.267655][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.275080][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.282517][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.289904][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.297353][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.304943][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.312575][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.319963][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.328258][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.336404][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.344076][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.348684][T18142] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.351447][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.369575][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.377254][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.384671][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.392096][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.399491][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.406943][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.414373][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.416662][ T29] audit: type=1800 audit(1728405649.080:377): pid=18142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2131" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 536.421742][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.450656][ T5273] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 536.563624][ T5273] hid-generic 0001:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 536.671449][T18155] loop0: detected capacity change from 0 to 1024 [ 536.693529][T18155] hfsplus: extend alloc file! (8192,65536,366) [ 537.158666][T16467] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 538.571950][T18176] autofs: Unknown parameter '0x0000000000000000' [ 538.695060][T18158] loop3: detected capacity change from 0 to 32768 [ 538.725752][T18158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2134 (18158) [ 538.749668][T18158] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 538.760896][T18158] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 538.795771][T18158] BTRFS info (device loop3): using free-space-tree [ 538.802471][T18184] loop1: detected capacity change from 0 to 128 [ 538.832230][T18184] EXT4-fs (loop1): Test dummy encryption mode enabled [ 538.852206][T18184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 538.889905][T18184] System zones: 1-3, 19-19, 35-36 [ 538.908632][T18184] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 538.922295][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 538.933375][T18184] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.042380][ T29] audit: type=1800 audit(1728405651.640:378): pid=18184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2145" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 539.083061][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 539.094327][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.111444][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.121574][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 539.149875][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.170369][T18158] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 539.207029][T18208] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2146'. [ 539.386879][ T25] usb 3-1: config 0 descriptor?? [ 539.393560][ T25] hub 3-1:0.0: USB hub found [ 539.422546][T18211] loop3: detected capacity change from 32768 to 0 [ 539.516080][T17289] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 539.609764][ T25] hub 3-1:0.0: 1 port detected [ 539.654855][T17239] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 540.242638][ T25] hub 3-1:0.0: activate --> -90 [ 540.450620][ T25] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 540.776082][T18229] loop0: detected capacity change from 0 to 32768 [ 541.027573][T18229] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 541.066246][T18229] XFS (loop0): Ending clean mount [ 541.075827][T18229] XFS (loop0): Quotacheck needed: Please wait. [ 541.086235][T18229] XFS (loop0): Quotacheck: Done. [ 541.169676][T17223] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 541.183525][T18258] loop1: detected capacity change from 0 to 128 [ 541.190853][T18258] EXT4-fs (loop1): Test dummy encryption mode enabled [ 541.214524][T18258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 541.250560][T18258] System zones: 1-3, 19-19, 35-36 [ 541.268366][T18258] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 541.321590][T18258] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.389485][ T29] audit: type=1800 audit(1728405654.050:379): pid=18258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2161" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 541.850034][ T1165] usb 3-1: USB disconnect, device number 18 [ 542.050848][T17239] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 542.784541][T18274] loop2: detected capacity change from 0 to 32768 [ 542.804916][T18274] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2164 (18274) [ 542.855242][T18274] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 542.885744][T18274] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 542.926737][T18274] BTRFS info (device loop2): using free-space-tree [ 543.076694][T18282] loop0: detected capacity change from 0 to 32768 [ 543.095247][T18282] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2167 (18282) [ 543.193376][ T29] audit: type=1800 audit(1728405655.860:380): pid=18274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2164" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 543.248205][T18282] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 543.272887][T16467] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 543.287622][T18282] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 543.309842][T18282] BTRFS info (device loop0): using free-space-tree [ 543.374647][T18319] netlink: 'syz.2.2174': attribute type 10 has an invalid length. [ 543.412116][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 543.510050][T18296] loop1: detected capacity change from 0 to 32768 [ 543.554856][T18296] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 543.564265][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 543.570558][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.581525][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.591370][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 543.602013][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.611093][ T25] usb 4-1: config 0 descriptor?? [ 543.617636][ T25] hub 4-1:0.0: USB hub found [ 543.636568][T18296] XFS (loop1): Ending clean mount [ 543.645276][ T29] audit: type=1800 audit(1728405656.310:381): pid=18282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2167" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 543.662895][T18296] XFS (loop1): Quotacheck needed: Please wait. [ 543.666131][ T29] audit: type=1800 audit(1728405656.310:382): pid=18282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2167" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 543.689932][T18296] XFS (loop1): Quotacheck: Done. [ 543.709394][T17223] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 543.757393][T17239] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 543.906206][ T25] hub 4-1:0.0: 1 port detected [ 544.534730][ T80] hub 4-1:0.0: activate --> -90 [ 544.734985][ T80] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 545.515734][T18384] loop1: detected capacity change from 0 to 32768 [ 545.578482][T18401] netlink: 'syz.4.2193': attribute type 10 has an invalid length. [ 545.590988][T18384] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 545.644469][T18384] XFS (loop1): Ending clean mount [ 545.653662][T18384] XFS (loop1): Quotacheck needed: Please wait. [ 545.670729][T18384] XFS (loop1): Quotacheck: Done. [ 545.699141][T17239] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 546.305667][ T9] usb 4-1: USB disconnect, device number 9 [ 546.727001][T18444] netlink: 'syz.0.2205': attribute type 10 has an invalid length. [ 546.820069][T18444] team0: Port device geneve1 added [ 546.983382][T18435] loop3: detected capacity change from 0 to 32768 [ 547.008956][T18435] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 547.080801][T18435] XFS (loop3): Ending clean mount [ 547.089654][T18435] XFS (loop3): Quotacheck needed: Please wait. [ 547.105255][T18435] XFS (loop3): Quotacheck: Done. [ 547.144358][T17289] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 547.527213][T18466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.556816][T18466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.246884][T18484] loop2: detected capacity change from 0 to 32768 [ 548.347923][T18484] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 548.390990][T18484] XFS (loop2): Ending clean mount [ 548.400575][T18484] XFS (loop2): Quotacheck needed: Please wait. [ 548.438366][T18484] XFS (loop2): Quotacheck: Done. [ 548.542929][T16467] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 549.789479][T18542] loop0: detected capacity change from 0 to 32768 [ 549.813004][T18542] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 549.847038][T18542] XFS (loop0): Ending clean mount [ 549.860514][T18542] XFS (loop0): Quotacheck needed: Please wait. [ 549.884769][T18542] XFS (loop0): Quotacheck: Done. [ 550.021055][T17223] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 550.321907][T18548] loop3: detected capacity change from 0 to 32768 [ 550.342235][T18548] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2241 (18548) [ 550.369349][T18548] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 550.379709][T18548] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 550.388553][T18548] BTRFS info (device loop3): using free-space-tree [ 550.531509][ T29] audit: type=1800 audit(1728405663.150:383): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2241" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 550.555328][ T29] audit: type=1800 audit(1728405663.180:384): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2241" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 550.591425][T17289] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 550.983705][T18600] input: syz0 as /devices/virtual/input/input22 [ 551.098945][T18603] netlink: 'syz.3.2251': attribute type 16 has an invalid length. [ 551.172717][T18603] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2251'. [ 551.286032][T18605] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 551.415547][T18605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.448410][T18605] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 552.314528][ C0] Unknown status report in ack skb [ 552.628674][T18639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2264'. [ 553.170909][T18644] input: syz0 as /devices/virtual/input/input23 [ 553.927732][T18657] loop3: detected capacity change from 0 to 1024 [ 554.003539][T18657] hfsplus: extend alloc file! (8192,65536,366) [ 554.815104][T18677] dccp_xmit_packet: Payload too large (65475) for featneg. [ 554.905491][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 555.683428][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 555.839788][T18715] input: syz0 as /devices/virtual/input/input24 [ 557.157695][T18754] bond0: entered promiscuous mode [ 557.162908][T18754] bond_slave_0: entered promiscuous mode [ 557.168714][T18754] bond_slave_1: entered promiscuous mode [ 557.175558][T18754] batadv0: entered promiscuous mode [ 557.180925][T18754] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 557.990866][T18753] bond0: left promiscuous mode [ 558.396213][T18753] bond_slave_0: left promiscuous mode [ 558.408231][T18753] bond_slave_1: left promiscuous mode [ 558.414199][T18753] batadv0: left promiscuous mode [ 558.419409][T18753] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 560.003104][ T53] Bluetooth: hci0: command 0x0405 tx timeout [ 560.448294][T18822] Process accounting resumed [ 560.932129][ T80] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 561.192721][ T80] usb 4-1: Using ep0 maxpacket: 32 [ 561.199220][ T80] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.211936][ T80] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.233085][ T80] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 561.252277][ T80] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.283261][ T80] usb 4-1: config 0 descriptor?? [ 561.304109][ T80] hub 4-1:0.0: USB hub found [ 561.525285][ T80] hub 4-1:0.0: 1 port detected [ 561.672671][T18827] loop2: detected capacity change from 0 to 32768 [ 561.709235][T18827] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2323 (18827) [ 561.739134][T18827] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 561.751439][T18827] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 561.763885][T18827] BTRFS info (device loop2): using free-space-tree [ 561.933832][T18827] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 561.993577][T18827] loop2: detected capacity change from 32768 to 0 [ 562.226683][T12018] bio_check_eod: 1 callbacks suppressed [ 562.226701][T12018] kworker/u8:11: attempt to access beyond end of device [ 562.226701][T12018] loop2: rw=67108865, sector=10512, nr_sectors = 8 limit=0 [ 562.361284][ T80] hub 4-1:0.0: activate --> -90 [ 562.395533][T12018] btrfs_dev_stat_inc_and_print: 1 callbacks suppressed [ 562.395548][T12018] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 562.415430][T18860] syz.2.2323: attempt to access beyond end of device [ 562.415430][T18860] loop2: rw=2049, sector=10512, nr_sectors = 8 limit=0 [ 562.429359][T18860] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 562.501139][T13983] kworker/u8:13: attempt to access beyond end of device [ 562.501139][T13983] loop2: rw=67112961, sector=10480, nr_sectors = 8 limit=0 [ 562.518311][T13983] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 562.539925][T13983] kworker/u8:13: attempt to access beyond end of device [ 562.539925][T13983] loop2: rw=67112961, sector=10496, nr_sectors = 8 limit=0 [ 562.564389][ T80] hub 4-1:0.0: hub_ext_port_status failed (err = 3) [ 562.568604][T13983] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 562.585199][T13983] kworker/u8:13: attempt to access beyond end of device [ 562.585199][T13983] loop2: rw=67112961, sector=10504, nr_sectors = 8 limit=0 [ 562.600293][T13983] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 562.622005][T16467] BTRFS error (device loop2 state A): Transaction aborted (error -5) [ 562.631485][T16467] BTRFS: error (device loop2 state A) in __btrfs_free_extent:3226: errno=-5 IO failure [ 562.654590][T16467] BTRFS info (device loop2 state EA): forced readonly [ 562.664603][T16467] BTRFS error (device loop2 state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5 [ 562.687980][T16467] BTRFS: error (device loop2 state EA) in btrfs_run_delayed_refs:2215: errno=-5 IO failure [ 562.701355][T16467] BTRFS info (device loop2 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 563.048441][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.077474][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.396566][T18887] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2334'. [ 563.952582][ T80] usb 4-1: USB disconnect, device number 10 [ 564.214188][T18895] loop1: detected capacity change from 0 to 32768 [ 564.395052][T18895] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2337 (18895) [ 564.444560][T18895] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 564.458264][T18895] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 564.496629][T18895] BTRFS info (device loop1): using free-space-tree [ 564.575356][T18922] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2346'. [ 564.946058][T18939] netlink: 'syz.4.2349': attribute type 1 has an invalid length. [ 564.954129][T18939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2349'. [ 565.108899][ T29] audit: type=1800 audit(1728405677.770:385): pid=18895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2337" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 565.164347][ T29] audit: type=1800 audit(1728405677.770:386): pid=18895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2337" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 565.208089][T17239] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 565.525507][T18964] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2357'. [ 565.990243][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2361'. [ 566.952245][T18987] loop0: detected capacity change from 0 to 32768 [ 566.990297][T18987] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2364 (18987) [ 567.055277][T18987] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 567.074232][T18987] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 567.101176][T18987] BTRFS info (device loop0): using free-space-tree [ 567.274960][T19012] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2368'. [ 567.422198][ T29] audit: type=1800 audit(1728405680.060:387): pid=18987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2364" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 567.444804][ T29] audit: type=1800 audit(1728405680.070:388): pid=18987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2364" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 567.487026][T17223] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 569.648458][T19038] loop0: detected capacity change from 0 to 32768 [ 569.751560][T19038] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 570.038092][T19038] XFS (loop0): Ending clean mount [ 570.045150][T19038] XFS (loop0): Quotacheck needed: Please wait. [ 570.061345][T19038] XFS (loop0): Quotacheck: Done. [ 570.257118][T19093] netlink: 'syz.2.2395': attribute type 10 has an invalid length. [ 570.288696][T17223] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 570.311694][T19096] overlayfs: failed to resolve './file1': -2 [ 571.169124][T19108] Process accounting resumed [ 571.340168][T19125] overlayfs: failed to resolve './file1': -2 [ 572.197726][T19118] loop3: detected capacity change from 0 to 32768 [ 572.216295][T19134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2409'. [ 572.328535][T19118] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 572.479023][T19118] XFS (loop3): Ending clean mount [ 572.490167][T19118] XFS (loop3): Quotacheck needed: Please wait. [ 572.504268][T19156] Process accounting resumed [ 572.554408][T19118] XFS (loop3): Quotacheck: Done. [ 573.046540][T19171] overlayfs: failed to resolve './file1': -2 [ 573.139965][T17289] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 573.164394][T19180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.043263][T19207] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2431'. [ 574.498013][T19206] loop1: detected capacity change from 0 to 32768 [ 574.556989][T19206] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 574.641687][T19206] XFS (loop1): Ending clean mount [ 574.668296][T19206] XFS (loop1): Quotacheck needed: Please wait. [ 574.694824][T19206] XFS (loop1): Quotacheck: Done. [ 576.336475][T19243] loop3: detected capacity change from 0 to 1024 [ 576.372956][T19243] hfsplus: extend alloc file! (8192,65536,366) [ 576.383622][T17239] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 576.825796][T19252] loop0: detected capacity change from 0 to 764 [ 577.032659][T19261] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 577.700890][T19269] netlink: 'syz.0.2451': attribute type 10 has an invalid length. [ 577.775832][T19259] loop1: detected capacity change from 0 to 32768 [ 577.803311][T19269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.811399][T19269] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 577.854648][T19259] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2447 (19259) [ 577.900711][T19267] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2450'. [ 577.942891][T19259] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 578.012373][T19259] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 578.028954][T19259] BTRFS info (device loop1): using free-space-tree [ 578.205953][ T29] audit: type=1800 audit(1728405690.870:389): pid=19259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2447" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 578.309288][T17239] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 578.620625][T19298] loop0: detected capacity change from 0 to 32768 [ 578.649910][T19298] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 578.677430][T19319] netlink: 'syz.2.2461': attribute type 25 has an invalid length. [ 578.685481][T19319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2461'. [ 579.126020][T19298] XFS (loop0): Ending clean mount [ 579.134691][T19298] XFS (loop0): Quotacheck needed: Please wait. [ 579.187044][T19298] XFS (loop0): Quotacheck: Done. [ 579.464574][T17223] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 580.187903][T19347] loop2: detected capacity change from 0 to 32768 [ 580.196300][T19347] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2470 (19347) [ 580.358409][T19347] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 580.405188][T19347] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 580.435077][T19347] BTRFS info (device loop2): using free-space-tree [ 580.547859][ T29] audit: type=1800 audit(1728405693.200:390): pid=19347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2470" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 580.647326][T16467] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 580.674283][ T29] audit: type=1800 audit(1728405693.200:391): pid=19347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2470" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 581.652329][T19417] Process accounting resumed [ 581.683862][T19425] netlink: 'syz.1.2490': attribute type 10 has an invalid length. [ 583.668015][T19423] loop0: detected capacity change from 0 to 32768 [ 583.691752][T19469] Process accounting resumed [ 583.724567][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2503'. [ 583.747713][T19423] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2488 (19423) [ 583.839737][T19423] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 583.850956][T19423] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 583.880133][T19423] BTRFS info (device loop0): using free-space-tree [ 584.192598][ T29] audit: type=1800 audit(1728405696.860:392): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2488" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 584.359472][ T29] audit: type=1800 audit(1728405696.980:393): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2488" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 584.361556][T17223] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 585.520464][T19527] Process accounting resumed [ 585.863458][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 586.179162][T19551] netlink: 'syz.2.2526': attribute type 10 has an invalid length. [ 586.385749][T19555] loop2: detected capacity change from 0 to 128 [ 586.415534][T19555] EXT4-fs (loop2): Test dummy encryption mode enabled [ 586.461046][T19555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 586.474924][T19555] System zones: 1-3, 19-19, 35-36 [ 586.562786][T19555] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 587.134857][T19567] Process accounting resumed [ 588.074602][T19555] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.265612][ T29] audit: type=1800 audit(1728405700.930:394): pid=19555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2529" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 588.439405][T19545] loop1: detected capacity change from 0 to 32768 [ 588.459741][T19545] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2524 (19545) [ 588.513103][T19545] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 588.530074][T16467] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 588.540258][T19545] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 588.603436][T19545] BTRFS info (device loop1): using free-space-tree [ 588.750858][T19596] netlink: 'syz.3.2539': attribute type 10 has an invalid length. [ 588.877810][T19608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.910759][ T29] audit: type=1800 audit(1728405701.570:395): pid=19545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2524" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 589.013385][ T29] audit: type=1800 audit(1728405701.660:396): pid=19615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2524" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 590.060362][T19608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.155078][T17239] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 590.291145][T19608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.380190][T19633] Process accounting resumed [ 590.722090][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 590.770837][T19638] loop2: detected capacity change from 0 to 128 [ 590.827773][T19638] EXT4-fs (loop2): Test dummy encryption mode enabled [ 590.847642][T19608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.016428][T19638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 591.024519][T19638] System zones: 1-3, 19-19, 35-36 [ 591.084797][T19638] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 591.126446][T19638] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.183446][T19648] overlayfs: missing 'lowerdir' [ 591.228976][ T29] audit: type=1800 audit(1728405703.890:397): pid=19638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2549" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 591.288524][T19608] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.336822][T19608] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.396310][T19608] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.437726][T19608] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.575926][T16467] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 591.654969][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2555'. [ 591.711114][T19626] loop0: detected capacity change from 0 to 32768 [ 591.780877][T19626] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2548 (19626) [ 591.904112][T19654] loop1: detected capacity change from 0 to 32768 [ 591.957992][T19626] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 591.970934][T19654] BTRFS: device /dev/loop1 (7:1) using temp-fsid 737c813d-7678-4cf1-bc96-e07b508253ea [ 591.989411][T19626] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 591.998555][T19654] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2554 (19654) [ 592.021448][T19626] BTRFS info (device loop0): using free-space-tree [ 592.509359][T19654] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 592.572255][T19654] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 592.580927][T19654] BTRFS info (device loop1): using free-space-tree [ 592.794382][T19702] loop3: detected capacity change from 0 to 128 [ 592.812377][T19702] EXT4-fs (loop3): Test dummy encryption mode enabled [ 592.829369][T19706] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.840885][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 592.854140][T19702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 592.864350][T19702] System zones: 1-3, 19-19, 35-36 [ 592.871086][T19702] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 592.884779][T19706] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.894170][T19702] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.909421][ T29] audit: type=1800 audit(1728405705.570:398): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2554" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 592.937893][ T29] audit: type=1800 audit(1728405705.600:399): pid=19702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2566" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 592.978748][ T29] audit: type=1800 audit(1728405705.640:400): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2554" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 593.008049][ T29] audit: type=1800 audit(1728405705.640:401): pid=19626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2548" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 593.037055][T19706] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.067629][T17239] BTRFS info (device loop1): last unmount of filesystem 737c813d-7678-4cf1-bc96-e07b508253ea [ 593.084255][T19729] netlink: 'syz.2.2568': attribute type 16 has an invalid length. [ 593.092161][T19729] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2568'. [ 593.117448][ T29] audit: type=1800 audit(1728405705.720:402): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2548" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 593.157100][T19706] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.184969][T17223] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 593.612331][T19690] dccp_close: ABORT with 32 bytes unread [ 593.646637][T17289] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.900770][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2580'. [ 594.955427][T19767] netlink: 'syz.0.2581': attribute type 16 has an invalid length. [ 594.963326][T19767] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2581'. [ 595.109632][T19760] loop1: detected capacity change from 0 to 32768 [ 595.121584][T19772] loop0: detected capacity change from 0 to 1024 [ 595.129745][T19760] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2579 (19760) [ 595.195438][T19772] hfsplus: extend alloc file! (8192,65536,366) [ 595.205967][T19760] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 595.247428][T19760] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 595.433022][T19760] BTRFS info (device loop1): using free-space-tree [ 595.680446][ T29] audit: type=1800 audit(1728405708.320:403): pid=19760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2579" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 595.701304][ T29] audit: type=1800 audit(1728405708.350:404): pid=19760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2579" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 595.747682][T17239] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 595.763068][T19800] autofs: Unknown parameter '0x0000000000000000' [ 595.876153][T19811] loop2: detected capacity change from 0 to 128 [ 595.933441][T19811] EXT4-fs (loop2): Test dummy encryption mode enabled [ 595.951816][T19811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 595.981751][T19811] System zones: 1-3, 19-19, 35-36 [ 596.057396][T19706] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.062793][T19811] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 596.070245][T19706] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.101779][T19811] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.107230][T19706] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.130627][T19706] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.169026][ T29] audit: type=1800 audit(1728405708.800:405): pid=19811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2589" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 597.327719][T19838] netlink: 'syz.3.2595': attribute type 16 has an invalid length. [ 597.335675][T19838] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2595'. [ 597.813284][T16467] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 598.001025][T19851] loop2: detected capacity change from 0 to 1024 [ 598.144096][T19851] hfsplus: extend alloc file! (8192,65536,366) [ 598.367968][T19848] loop3: detected capacity change from 0 to 32768 [ 598.379726][T19848] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2598 (19848) [ 598.399281][T19848] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 598.415147][T19848] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 598.427691][T19848] BTRFS info (device loop3): using free-space-tree [ 598.446783][T19857] autofs: Unknown parameter '0x0000000000000000' [ 598.663899][ T29] audit: type=1800 audit(1728405711.330:406): pid=19848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2598" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 598.691333][ T29] audit: type=1800 audit(1728405711.350:407): pid=19848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2598" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 598.806866][T17289] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 600.652602][T19914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.147679][T19914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.828585][T19914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.000261][T19914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.956619][T19914] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.038884][T19914] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.087172][T19943] autofs: Unknown parameter '0x0000000000000000' [ 603.113840][T19914] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.442086][T19914] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.168809][T19959] loop3: detected capacity change from 0 to 764 [ 604.426347][T19963] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 606.559692][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 607.240696][T20010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.384975][T20010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.713806][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2631'. [ 607.777682][T20001] loop1: detected capacity change from 0 to 32768 [ 607.789881][T20001] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2627 (20001) [ 607.817899][T20001] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 607.828659][T20001] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 607.840365][T20001] BTRFS info (device loop1): using free-space-tree [ 607.965952][T17239] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 607.979901][ T29] audit: type=1800 audit(1728405720.570:408): pid=20001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2627" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 608.876783][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 608.884282][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 610.793249][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 610.862157][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 610.887791][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 610.895501][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.173661][T20056] netlink: 'syz.3.2639': attribute type 16 has an invalid length. [ 611.182620][T20056] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2639'. [ 612.190645][ T9953] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.308479][ T9953] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.389277][ T9953] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.436369][ T9953] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.450467][T20042] chnl_net:caif_netlink_parms(): no params data found [ 613.062288][ T5235] Bluetooth: hci3: command tx timeout [ 613.152355][T20042] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.164688][T20042] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.172245][T20042] bridge_slave_0: entered allmulticast mode [ 613.178945][T20042] bridge_slave_0: entered promiscuous mode [ 613.187973][ T9953] bridge_slave_1: left allmulticast mode [ 613.208328][ T9953] bridge_slave_1: left promiscuous mode [ 613.220503][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.290852][ T9953] bridge_slave_0: left allmulticast mode [ 613.298128][ T9953] bridge_slave_0: left promiscuous mode [ 613.304062][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.336714][T20074] loop1: detected capacity change from 0 to 32768 [ 613.444730][T20074] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2644 (20074) [ 613.479054][T20074] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 613.515280][T20074] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 613.552072][T20074] BTRFS info (device loop1): using free-space-tree [ 614.157036][ T29] audit: type=1800 audit(1728405726.820:409): pid=20074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2644" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 614.207545][ T9953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.260284][ T9953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.278434][T17239] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 614.291058][ T9953] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 614.309547][ T9953] bond0 (unregistering): Released all slaves [ 614.327584][T20042] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.335693][T20042] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.343702][T20042] bridge_slave_1: entered allmulticast mode [ 614.350398][T20042] bridge_slave_1: entered promiscuous mode [ 614.399697][T20105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2645'. [ 614.594362][T20042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.743166][T20042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.766066][T20042] team0: Port device team_slave_0 added [ 614.776478][T20042] team0: Port device team_slave_1 added [ 615.122155][ T5235] Bluetooth: hci3: command tx timeout [ 615.262954][T20042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.272608][T20042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.299480][T20042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.353318][T20042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.366745][T20042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.400616][T20042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.447551][ T9953] hsr_slave_0: left promiscuous mode [ 615.477108][ T9953] hsr_slave_1: left promiscuous mode [ 615.497699][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.505561][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.513650][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.525529][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.545029][ T9953] veth1_macvtap: left promiscuous mode [ 615.560691][ T9953] veth0_macvtap: left promiscuous mode [ 615.566946][ T9953] veth1_vlan: left promiscuous mode [ 615.582207][ T9953] veth0_vlan: left promiscuous mode [ 615.863874][ T9953] team0 (unregistering): Port device team_slave_1 removed [ 615.907647][ T9953] team0 (unregistering): Port device team_slave_0 removed [ 616.344718][T20042] hsr_slave_0: entered promiscuous mode [ 616.351085][T20042] hsr_slave_1: entered promiscuous mode [ 616.362646][T20042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.370576][T20042] Cannot create hsr debugfs directory [ 616.872431][T20042] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 616.893135][T20042] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 616.917209][T20042] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 616.938969][T20042] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 616.982357][T20172] loop3: detected capacity change from 0 to 32768 [ 617.003755][T20172] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2658 (20172) [ 617.047336][T20172] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 617.072431][T20172] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 617.091030][T20042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.098859][T20172] BTRFS info (device loop3): using free-space-tree [ 617.126207][T20042] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.141342][ T9953] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.148479][ T9953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.198343][ T9953] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.205487][ T9953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.218167][ T5235] Bluetooth: hci3: command tx timeout [ 617.267782][ T29] audit: type=1800 audit(1728405729.930:410): pid=20172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2658" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 617.306101][T20042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.323899][T20042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.391920][T17289] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 617.596612][T20042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.672671][T20042] veth0_vlan: entered promiscuous mode [ 617.728421][T20042] veth1_vlan: entered promiscuous mode [ 617.820765][T20233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2660'. [ 617.946286][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 617.980051][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 618.040092][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 618.062686][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 618.070095][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 618.083749][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 618.114692][T20042] veth0_macvtap: entered promiscuous mode [ 618.126467][T20042] veth1_macvtap: entered promiscuous mode [ 618.699602][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.710256][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.728942][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.740092][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.749944][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.761077][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.770936][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.781445][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.819311][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.859835][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.869892][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.880493][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.890453][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.900935][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.911940][T20042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.921063][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.931519][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.938879][T20258] input: syz0 as /devices/virtual/input/input25 [ 618.941359][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.958133][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.968666][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.979846][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.990138][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.000603][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.010600][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.021222][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.031262][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.041899][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.041916][T20042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.041931][T20042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.043733][T20042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.162817][T20236] chnl_net:caif_netlink_parms(): no params data found [ 619.176744][T20042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.176778][T20042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.176802][T20042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.176825][T20042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.685728][ T5231] Bluetooth: hci3: command tx timeout [ 620.116358][T20236] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.162121][ T5231] Bluetooth: hci4: command tx timeout [ 620.171966][T20236] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.217809][T20236] bridge_slave_0: entered allmulticast mode [ 620.251660][T20236] bridge_slave_0: entered promiscuous mode [ 620.274686][T20236] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.294578][T20236] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.322374][T20236] bridge_slave_1: entered allmulticast mode [ 620.344768][T20236] bridge_slave_1: entered promiscuous mode [ 620.458884][ T9953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.481573][ T9953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.579528][T20297] netlink: 'syz.1.2668': attribute type 16 has an invalid length. [ 620.587575][T20297] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2668'. [ 621.031763][T20236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.119125][T20236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.278853][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.298235][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.323543][T20236] team0: Port device team_slave_0 added [ 621.343534][T20236] team0: Port device team_slave_1 added [ 621.404287][T20236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.417080][T20236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.490656][T20236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.588646][T20236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.595753][T20236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.621816][T20236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.103417][T20317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2672'. [ 622.125352][T20236] hsr_slave_0: entered promiscuous mode [ 622.134252][T20236] hsr_slave_1: entered promiscuous mode [ 622.141338][T20236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.149195][T20236] Cannot create hsr debugfs directory [ 622.295903][ T5231] Bluetooth: hci4: command tx timeout [ 622.409328][T20236] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.509726][T20236] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.663405][T20236] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.733592][T20236] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.441060][T20236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 623.461381][T20236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 623.531418][T20236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 623.543193][T20236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 623.630009][T20346] input: syz0 as /devices/virtual/input/input26 [ 623.787477][T20236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.810434][T20236] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.827864][ T9953] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.835052][ T9953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.029845][ T9953] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.036959][ T9953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.323538][ T5231] Bluetooth: hci4: command tx timeout [ 624.393565][T20354] netlink: 'syz.4.2679': attribute type 16 has an invalid length. [ 624.401552][T20354] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2679'. [ 624.493240][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.287619][T20236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.347017][T20236] veth0_vlan: entered promiscuous mode [ 625.367889][T20236] veth1_vlan: entered promiscuous mode [ 625.528203][T20236] veth0_macvtap: entered promiscuous mode [ 625.563741][T20236] veth1_macvtap: entered promiscuous mode [ 625.973631][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.990129][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.068476][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.080070][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.092323][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.111415][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.142746][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.169999][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.189816][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.236549][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.284545][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.295501][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.309809][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.322107][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.331944][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.342656][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.353427][T20236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.362886][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.373358][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.383281][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.393792][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.403729][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.414224][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.424134][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.432076][T20357] Bluetooth: hci4: command tx timeout [ 626.434618][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.450545][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.461063][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.470986][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.481692][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.492252][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.502757][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.512650][T20236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.523128][T20236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.542782][T20236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.553658][T20236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.562686][T20236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.572447][T20236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.581445][T20236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.723651][ T9953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.739906][ T9953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.788697][T20380] loop2: detected capacity change from 0 to 32768 [ 626.802430][ T5235] Bluetooth: hci6: command 0x0406 tx timeout [ 626.808791][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 626.814892][T20243] Bluetooth: hci7: command 0x0406 tx timeout [ 626.817005][T20380] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2685 (20380) [ 626.866863][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.874849][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.904935][T20380] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 626.915421][T20380] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 626.926690][T20380] BTRFS info (device loop2): using free-space-tree [ 627.744257][ T29] audit: type=1800 audit(1728405740.410:411): pid=20380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2685" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 627.786734][T20415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.853756][T20415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.873400][T20042] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 628.039650][T20418] input: syz0 as /devices/virtual/input/input27 [ 628.206313][T20420] loop2: detected capacity change from 0 to 1024 [ 628.359714][T20420] hfsplus: extend alloc file! (8192,65536,366) [ 629.055646][T20435] netlink: 'syz.2.2693': attribute type 16 has an invalid length. [ 629.063591][T20435] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2693'. [ 629.501188][ T5273] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 629.672623][ T5273] usb 4-1: Using ep0 maxpacket: 32 [ 629.679268][ T5273] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 629.692202][ T5273] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 629.711753][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 629.721261][ T5273] usb 4-1: Product: syz [ 629.734657][ T5273] usb 4-1: Manufacturer: syz [ 629.739326][ T5273] usb 4-1: SerialNumber: syz [ 629.745383][ T5273] usb 4-1: config 0 descriptor?? [ 629.754220][T20429] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 631.057885][T20459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2701'. [ 631.196481][T20464] netlink: 'syz.1.2703': attribute type 16 has an invalid length. [ 631.218912][T20464] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2703'. [ 631.592841][T12018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.767680][T12018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.887745][T12018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.026719][T12018] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.058059][T20468] loop1: detected capacity change from 0 to 32768 [ 632.089956][T20468] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2704 (20468) [ 632.151546][T20468] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 632.205521][T20468] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 632.227039][T12018] bridge_slave_1: left allmulticast mode [ 632.252461][T20468] BTRFS info (device loop1): using free-space-tree [ 632.259377][T12018] bridge_slave_1: left promiscuous mode [ 632.274025][T12018] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.295334][T20243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 632.302856][T20243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 632.310291][T20243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 632.317882][T12018] bridge_slave_0: left allmulticast mode [ 632.325823][T20243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 632.333268][T20243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 632.341008][T20243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 632.350365][T12018] bridge_slave_0: left promiscuous mode [ 632.376577][T12018] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.443004][ T29] audit: type=1800 audit(1728405745.110:412): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2704" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 632.473847][T20243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 632.483583][T20243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 632.491611][T20243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 632.507340][T20243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 632.508675][ T29] audit: type=1800 audit(1728405745.150:413): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2704" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 632.538793][T20243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 632.556149][T20243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 632.590163][T17239] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 632.725840][T12018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.755237][T12018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.777212][T12018] bond0 (unregistering): Released all slaves [ 633.091117][T12018] hsr_slave_0: left promiscuous mode [ 633.108838][T12018] hsr_slave_1: left promiscuous mode [ 633.150500][T12018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.172106][T12018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.206501][T12018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.227444][T12018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.264360][T12018] veth1_macvtap: left promiscuous mode [ 633.269882][T12018] veth0_macvtap: left promiscuous mode [ 633.293180][T12018] veth1_vlan: left promiscuous mode [ 633.305409][T12018] veth0_vlan: left promiscuous mode [ 633.957429][T12018] team0 (unregistering): Port device team_slave_1 removed [ 633.969933][T12018] team0 (unregistering): Port device team_slave_0 removed [ 634.188271][T20498] chnl_net:caif_netlink_parms(): no params data found [ 634.204146][T20544] netlink: 'syz.2.2714': attribute type 16 has an invalid length. [ 634.232179][T20544] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2714'. [ 634.288233][T20481] chnl_net:caif_netlink_parms(): no params data found [ 634.412406][T20243] Bluetooth: hci0: command tx timeout [ 634.617379][T20498] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.638386][T20498] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.646955][T20243] Bluetooth: hci4: command tx timeout [ 634.706158][T20498] bridge_slave_0: entered allmulticast mode [ 634.774016][T20498] bridge_slave_0: entered promiscuous mode [ 634.806200][T20498] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.817080][T20498] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.825257][T20498] bridge_slave_1: entered allmulticast mode [ 634.841825][T20498] bridge_slave_1: entered promiscuous mode [ 634.918875][T20481] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.930774][T20481] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.940591][T20481] bridge_slave_0: entered allmulticast mode [ 634.955651][T20481] bridge_slave_0: entered promiscuous mode [ 635.003281][T20481] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.011525][T20481] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.027752][T20481] bridge_slave_1: entered allmulticast mode [ 635.044304][T20481] bridge_slave_1: entered promiscuous mode [ 635.085859][T20498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.106626][T12018] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.150576][T20498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.165910][T20481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.185515][T12018] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.228747][T20481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.294456][T12018] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.331366][T20498] team0: Port device team_slave_0 added [ 635.361916][T20498] team0: Port device team_slave_1 added [ 635.368593][ T30] INFO: task syz.0.1808:16577 blocked for more than 143 seconds. [ 635.379511][ T30] Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 635.401396][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 635.410149][ T30] task:syz.0.1808 state:D stack:26832 pid:16577 tgid:16574 ppid:15614 flags:0x00004006 [ 635.420937][ T30] Call Trace: [ 635.424713][ T30] [ 635.440454][ T30] __schedule+0x1895/0x4b30 [ 635.448087][ T30] ? schedule+0x90/0x320 [ 635.493144][ T30] ? lock_release+0xbf/0xa30 [ 635.497787][ T30] ? __pfx___schedule+0x10/0x10 [ 635.512166][ T30] ? __pfx_lock_release+0x10/0x10 [ 635.517222][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 635.527336][ T30] ? schedule+0x90/0x320 [ 635.531601][ T30] schedule+0x14b/0x320 [ 635.536137][ T30] schedule_preempt_disabled+0x13/0x30 [ 635.541606][ T30] __mutex_lock+0x6a7/0xd70 [ 635.546509][ T30] ? __mutex_lock+0x52a/0xd70 [ 635.552464][ T30] ? chaoskey_release+0x169/0x2f0 [ 635.557497][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 635.562836][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 635.568311][ T30] chaoskey_release+0x169/0x2f0 [ 635.573241][ T30] ? __pfx_chaoskey_release+0x10/0x10 [ 635.578620][ T30] __fput+0x23f/0x880 [ 635.582650][ T30] task_work_run+0x24f/0x310 [ 635.587248][ T30] ? __pfx_task_work_run+0x10/0x10 [ 635.592752][ T30] ? switch_task_namespaces+0xe4/0x110 [ 635.598230][ T30] do_exit+0xa2f/0x28e0 [ 635.602677][ T30] ? rcu_is_watching+0x15/0xb0 [ 635.607453][ T30] ? __pfx_do_exit+0x10/0x10 [ 635.612109][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 635.617489][ T30] ? __pfx_lock_release+0x10/0x10 [ 635.622581][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 635.628917][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 635.634074][ T30] do_group_exit+0x207/0x2c0 [ 635.638668][ T30] get_signal+0x16a3/0x1740 [ 635.643252][ T30] ? __pfx_get_signal+0x10/0x10 [ 635.648108][ T30] ? snd_seq_ioctl+0x29d/0x400 [ 635.653471][ T30] arch_do_signal_or_restart+0x96/0x860 [ 635.659032][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 635.665277][ T30] ? rcu_is_watching+0x15/0xb0 [ 635.670048][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 635.675807][ T30] do_syscall_64+0x100/0x230 [ 635.680410][ T30] ? clear_bhb_loop+0x35/0x90 [ 635.685422][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.691330][ T30] RIP: 0033:0x7f3e1e57dff9 [ 635.695778][ T30] RSP: 002b:00007f3e1f342038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.704255][ T30] RAX: ffffffffffffffea RBX: 00007f3e1e736130 RCX: 00007f3e1e57dff9 [ 635.712307][ T30] RDX: 0000000020000bc0 RSI: 00000000404c534a RDI: 0000000000000005 [ 635.720291][ T30] RBP: 00007f3e1e5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 635.728338][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.736418][ T30] R13: 0000000000000000 R14: 00007f3e1e736130 R15: 00007ffcf13e4b18 [ 635.744709][ T30] [ 635.747763][ T30] INFO: task syz.1.1866:16786 blocked for more than 143 seconds. [ 635.756536][ T30] Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 635.763951][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.772642][ T30] task:syz.1.1866 state:D stack:26768 pid:16786 tgid:16779 ppid:15671 flags:0x00000004 [ 635.782926][ T30] Call Trace: [ 635.786213][ T30] [ 635.789145][ T30] __schedule+0x1895/0x4b30 [ 635.793696][ T30] ? __pfx___schedule+0x10/0x10 [ 635.798565][ T30] ? __pfx_lock_release+0x10/0x10 [ 635.803647][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 635.809115][ T30] ? schedule+0x90/0x320 [ 635.813404][ T30] schedule+0x14b/0x320 [ 635.817555][ T30] schedule_preempt_disabled+0x13/0x30 [ 635.824473][ T30] __mutex_lock+0x6a7/0xd70 [ 635.828993][ T30] ? __mutex_lock+0x52a/0xd70 [ 635.833701][ T30] ? chaoskey_open+0xb8/0x210 [ 635.838390][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 635.843455][ T30] ? usb_find_interface+0xf7/0x160 [ 635.848575][ T30] ? __pfx_usb_find_interface+0x10/0x10 [ 635.854165][ T30] ? __pfx_lock_release+0x10/0x10 [ 635.860226][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 635.865931][ T30] chaoskey_open+0xb8/0x210 [ 635.870438][ T30] ? __pfx_chaoskey_open+0x10/0x10 [ 635.875575][ T30] usb_open+0x14b/0x1d0 [ 635.879738][ T30] chrdev_open+0x521/0x600 [ 635.884196][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 635.889747][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 635.894721][ T30] ? security_file_open+0x513/0x990 [ 635.899923][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 635.904901][ T30] do_dentry_open+0x978/0x1460 [ 635.909677][ T30] vfs_open+0x3e/0x330 [ 635.913778][ T30] path_openat+0x2c84/0x3590 [ 635.918374][ T30] ? getname_flags+0xb7/0x540 [ 635.923137][ T30] ? __pfx_path_openat+0x10/0x10 [ 635.928077][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.934346][ T30] do_filp_open+0x235/0x490 [ 635.938864][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 635.944041][ T30] ? _raw_spin_unlock+0x28/0x50 [ 635.948903][ T30] ? alloc_fd+0x5a1/0x640 [ 635.953392][ T30] do_sys_openat2+0x13e/0x1d0 [ 635.958078][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 635.963978][ T30] __x64_sys_openat+0x247/0x2a0 [ 635.968844][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 635.974325][ T30] ? rcu_is_watching+0x15/0xb0 [ 635.979096][ T30] ? rcu_is_watching+0x15/0xb0 [ 635.983892][ T30] ? rcu_is_watching+0x15/0xb0 [ 635.988762][ T30] do_syscall_64+0xf3/0x230 [ 635.993371][ T30] ? clear_bhb_loop+0x35/0x90 [ 635.998056][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.004144][ T30] RIP: 0033:0x7fc93137c990 [ 636.008566][ T30] RSP: 002b:00007fc930dfeb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 636.017689][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc93137c990 [ 636.025743][ T30] RDX: 0000000000000002 RSI: 00007fc930dfec10 RDI: 00000000ffffff9c [ 636.033756][ T30] RBP: 00007fc930dfec10 R08: 0000000000000000 R09: 00007fc930dfe987 [ 636.041726][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 636.050012][ T30] R13: 0000000000000000 R14: 00007fc931536058 R15: 00007ffd07757948 [ 636.058613][ T30] [ 636.063056][ T30] INFO: lockdep is turned off. [ 636.067845][ T30] NMI backtrace for cpu 1 [ 636.072176][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 636.082158][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.092216][ T30] Call Trace: [ 636.095500][ T30] [ 636.098440][ T30] dump_stack_lvl+0x241/0x360 [ 636.103130][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.108332][ T30] ? __pfx__printk+0x10/0x10 [ 636.112907][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 636.119827][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 636.124761][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 636.130219][ T30] ? _printk+0xd5/0x120 [ 636.134371][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 636.140337][ T30] ? __pfx__printk+0x10/0x10 [ 636.144909][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 636.150870][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 636.156832][ T30] watchdog+0xff4/0x1040 [ 636.161057][ T30] ? watchdog+0x1ea/0x1040 [ 636.165462][ T30] ? __pfx_watchdog+0x10/0x10 [ 636.170145][ T30] kthread+0x2f0/0x390 [ 636.174195][ T30] ? __pfx_watchdog+0x10/0x10 [ 636.178870][ T30] ? __pfx_kthread+0x10/0x10 [ 636.183443][ T30] ret_from_fork+0x4b/0x80 [ 636.187842][ T30] ? __pfx_kthread+0x10/0x10 [ 636.192412][ T30] ret_from_fork_asm+0x1a/0x30 [ 636.197164][ T30] [ 636.200720][ T30] Sending NMI from CPU 1 to CPUs 0: [ 636.206317][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 636.221120][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 636.227984][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 636.237971][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.248027][ T30] Call Trace: [ 636.251293][ T30] [ 636.254214][ T30] dump_stack_lvl+0x241/0x360 [ 636.258886][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.264073][ T30] ? __pfx__printk+0x10/0x10 [ 636.268657][ T30] ? vscnprintf+0x5d/0x90 [ 636.272987][ T30] panic+0x349/0x880 [ 636.276870][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 636.283016][ T30] ? __pfx_panic+0x10/0x10 [ 636.287420][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 636.292781][ T30] ? __irq_work_queue_local+0x137/0x410 [ 636.298320][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 636.303683][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 636.309826][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 636.315972][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 636.322120][ T30] watchdog+0x1033/0x1040 [ 636.326454][ T30] ? watchdog+0x1ea/0x1040 [ 636.330863][ T30] ? __pfx_watchdog+0x10/0x10 [ 636.335533][ T30] kthread+0x2f0/0x390 [ 636.339590][ T30] ? __pfx_watchdog+0x10/0x10 [ 636.344257][ T30] ? __pfx_kthread+0x10/0x10 [ 636.348833][ T30] ret_from_fork+0x4b/0x80 [ 636.353242][ T30] ? __pfx_kthread+0x10/0x10 [ 636.357817][ T30] ret_from_fork_asm+0x1a/0x30 [ 636.362575][ T30] [ 636.365816][ T30] Kernel Offset: disabled [ 636.370125][ T30] Rebooting in 86400 seconds..