last executing test programs: 6m20.041427068s ago: executing program 1 (id=560): socket(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) sendfile(r6, r4, 0x0, 0x10000a007) 6m19.406090703s ago: executing program 1 (id=562): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 6m17.581951478s ago: executing program 1 (id=563): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r6, 0xffffffffffffffff, 0x80000) syz_open_pts(r5, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000600)=0xdfa, 0x4) 6m15.827086342s ago: executing program 1 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r5) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 6m14.514268142s ago: executing program 1 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 6m14.274476425s ago: executing program 1 (id=571): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000ec0)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4891}, 0x0) 5m58.309358914s ago: executing program 32 (id=571): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000ec0)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4891}, 0x0) 2m13.446865142s ago: executing program 4 (id=1291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000740)='syz1\x00', 0x1ff) 2m12.928334196s ago: executing program 4 (id=1294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r4, &(0x7f0000000000)=""/35, 0x23) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2m10.972546759s ago: executing program 4 (id=1299): openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6e6, &(0x7f0000001640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) 2m10.84068917s ago: executing program 4 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace(0x8, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) 2m7.276316093s ago: executing program 4 (id=1310): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f00000002c0)={0xffff, 0x0, 0x100000, 0x7fff, 0xff, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x2d) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000480)='configfs\x00', 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00"}) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000440)={[{@nocheckpoint_merge}, {}, {@acl}, {@inline_xattr}, {@io_bits={'io_bits', 0x3d, 0x20000005}}, {@noflush_merge}, {@quota}, {@nouser_xattr}, {@lazytime}, {@memory_low}, {@fsync_mode_strict}, {@age_extent_cache}, {@discard}, {@data_flush}, {@discard_unit_section}, {@nodiscard}]}, 0x1, 0x5505, &(0x7f00000079c0)="$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") 2m5.567334804s ago: executing program 4 (id=1315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) 1m50.511537323s ago: executing program 33 (id=1315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) 10.965352627s ago: executing program 0 (id=1666): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000080)='./file1\x00', 0x810, &(0x7f00000002c0)={[{@noacl}, {@nodatacow}, {@notreelog}, {@nossd_spread}, {@discard}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@user_subvol_rm}, {@nossd_spread}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xee01, 0x0) 7.59603243s ago: executing program 0 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace(0x8, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) 7.50211192s ago: executing program 0 (id=1687): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) sendfile(r6, r4, 0x0, 0x10000a007) 6.926679524s ago: executing program 0 (id=1689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r3, &(0x7f0000000000)=""/35, 0x23) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) 5.075394816s ago: executing program 5 (id=1695): socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060003000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) 4.936059767s ago: executing program 5 (id=1697): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x80, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 4.030555093s ago: executing program 5 (id=1701): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$unix(0x1, 0x5, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) 3.591857236s ago: executing program 6 (id=1703): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a1d010100"], 0x1d) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4}}, 0x9) 3.548520556s ago: executing program 2 (id=1704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000018000100000000000000000002"], 0x48}}, 0x0) 3.499629677s ago: executing program 6 (id=1705): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) write$binfmt_script(r0, &(0x7f0000000140), 0xfcb8) 3.489953206s ago: executing program 0 (id=1706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') read$FUSE(r3, &(0x7f00000039c0)={0x2020}, 0x205d) 3.424600007s ago: executing program 2 (id=1707): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x9081, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 3.382387457s ago: executing program 2 (id=1709): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x20) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.342419094s ago: executing program 2 (id=1711): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000080)='.\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x1200) 2.341709234s ago: executing program 0 (id=1712): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000002c0)={0x40, 0x15, 0x1a, "7403ab9ef78b462f688bbb1ec5de48fa1fefbcabe3c58d7b10cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.275952215s ago: executing program 3 (id=1713): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigsuspend(0x0, 0x0) 2.271002415s ago: executing program 5 (id=1714): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x80, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.215760215s ago: executing program 2 (id=1715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r3, &(0x7f0000000000)=""/35, 0x23) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) 2.209270005s ago: executing program 6 (id=1716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r10, 0x1200, 0x7, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r7, @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000000080012"], 0x44}, 0x1, 0x0, 0x0, 0x24048080}, 0x0) 2.128502246s ago: executing program 3 (id=1717): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) sendfile(r6, r4, 0x0, 0x10000a007) 2.096079116s ago: executing program 5 (id=1718): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000d01fffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000000002000128008000100677265001400028008000700ac14141708000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 1.909226327s ago: executing program 6 (id=1719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000740)='syz1\x00', 0x1ff) 1.732533078s ago: executing program 3 (id=1720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace(0x8, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) 1.277340021s ago: executing program 2 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r3, &(0x7f0000000000)=""/35, 0x23) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) 859.897894ms ago: executing program 3 (id=1722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB='\x00\x00@'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 787.929865ms ago: executing program 3 (id=1723): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) close(0x3) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 660.062315ms ago: executing program 3 (id=1724): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$unix(0x1, 0x5, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) 516.648866ms ago: executing program 6 (id=1725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 417.059127ms ago: executing program 6 (id=1726): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x92, 0x93, 0xdb, 0x40, 0x2013, 0x246, 0x6074, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0x1f, 0x88, 0x6c}}]}}]}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d2e}]}]}, 0x24}}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) 0s ago: executing program 5 (id=1727): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) kernel console output (not intermixed with test programs): [ 148.606694][ T5319] hfs: request for non-existent node 16777216 in B*Tree [ 148.612001][ T5319] hfs: request for non-existent node 16777216 in B*Tree [ 148.613515][ T5319] hfs: request for non-existent node 16777216 in B*Tree [ 148.693311][ T1614] hfs: request for non-existent node 16777216 in B*Tree [ 148.698947][ T1614] hfs: request for non-existent node 16777216 in B*Tree [ 148.836894][ T5327] udc-core: couldn't find an available UDC or it's busy [ 148.869581][ T5327] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 148.973682][ T5331] loop0: detected capacity change from 0 to 512 [ 149.048400][ T5331] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.395: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 149.057491][ T5331] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.395: couldn't read orphan inode 15 (err -117) [ 149.073098][ T5331] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.106857][ T5331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.395'. [ 152.755150][ T5349] loop2: detected capacity change from 0 to 8192 [ 152.802112][ T5349] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "resize" [ 152.802112][ T5349] [ 152.987271][ T5359] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 154.519882][ T5375] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 154.588906][ T5379] loop1: detected capacity change from 0 to 256 [ 154.686221][ T5379] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.689437][ T5379] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 154.709100][ T5379] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf32de3a7, utbl_chksum : 0xe619d30d) [ 155.809041][ T5392] loop4: detected capacity change from 0 to 256 [ 156.809262][ T5392] ubi0: attaching mtd0 [ 156.810205][ T5392] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 156.820656][ T5397] loop1: detected capacity change from 0 to 64 [ 156.898848][ T5397] attempt to access beyond end of device [ 156.898848][ T5397] loop1: rw=0, want=1026, limit=64 [ 156.901599][ T5397] Buffer I/O error on dev loop1, logical block 512, async page read [ 156.903547][ T5397] attempt to access beyond end of device [ 156.903547][ T5397] loop1: rw=0, want=113154, limit=64 [ 156.937418][ T5397] Buffer I/O error on dev loop1, logical block 56576, async page read [ 157.020356][ T5400] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.022683][ T5400] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.024683][ T5400] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.026744][ T5400] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.059110][ T5400] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 157.493811][ T5413] loop1: detected capacity change from 0 to 16 [ 157.669739][ T5413] erofs: (device loop1): mounted with root inode @ nid 36. [ 159.624987][ T26] audit: type=1326 audit(159.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf76368 code=0x7ffc0000 [ 159.627527][ T5424] udc-core: couldn't find an available UDC or it's busy [ 159.632232][ T5424] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 159.634570][ T26] audit: type=1326 audit(159.590:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9cf74904 code=0x7ffc0000 [ 159.650423][ T26] audit: type=1326 audit(159.590:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9cf75e90 code=0x7ffc0000 [ 159.655302][ T26] audit: type=1326 audit(159.590:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9cf75e90 code=0x7ffc0000 [ 159.707765][ T26] audit: type=1326 audit(159.600:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf76368 code=0x7ffc0000 [ 159.724025][ T26] audit: type=1326 audit(159.600:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf76368 code=0x7ffc0000 [ 160.812122][ T5428] loop0: detected capacity change from 0 to 40427 [ 160.864323][ T5428] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 160.866192][ T5428] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 160.872730][ T5428] F2FS-fs (loop0): invalid crc value [ 160.923120][ T5428] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.941968][ T5428] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 160.954770][ T5428] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.956438][ T5428] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 161.100145][ T4022] attempt to access beyond end of device [ 161.100145][ T4022] loop0: rw=2049, want=40968, limit=40427 [ 161.581319][ T5440] loop3: detected capacity change from 0 to 2048 [ 162.382008][ T5444] loop4: detected capacity change from 0 to 256 [ 162.441390][ T5440] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 162.449509][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 162.839387][ T5458] input: syz0 as /devices/virtual/input/input5 [ 164.783198][ T5466] loop2: detected capacity change from 0 to 256 [ 166.403081][ T5482] loop4: detected capacity change from 0 to 256 [ 166.418124][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.704494][ T5485] loop1: detected capacity change from 0 to 512 [ 166.922919][ T25] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 166.925198][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.483228][ T25] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 167.541312][ T5485] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.552776][ T5485] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.441: bg 0: block 248: padding at end of block bitmap is not set [ 167.580949][ T5485] Quota error (device loop1): write_blk: dquota write failed [ 167.582823][ T5485] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 167.584963][ T5485] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.441: Failed to acquire dquot type 1 [ 167.634291][ T5485] EXT4-fs (loop1): 1 truncate cleaned up [ 167.653697][ T5485] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.702414][ T5485] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 167.777362][ T5485] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 167.802531][ T5499] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 167.813905][ T25] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 167.815758][ T25] usb 1-1: Manufacturer: syz [ 167.820918][ T25] usb 1-1: config 0 descriptor?? [ 167.830061][ T5505] udc-core: couldn't find an available UDC or it's busy [ 167.832058][ T5505] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 167.837896][ T5505] loop2: detected capacity change from 0 to 64 [ 167.858180][ T25] usb 1-1: can't set config #0, error -71 [ 167.861110][ T25] usb 1-1: USB disconnect, device number 10 [ 167.915462][ T5509] input: syz0 as /devices/virtual/input/input6 [ 169.301679][ T4885] Bluetooth: hci0: command 0x0406 tx timeout [ 169.310245][ T4885] Bluetooth: hci2: command 0x0406 tx timeout [ 169.314934][ T4885] Bluetooth: hci3: command 0x0406 tx timeout [ 169.317034][ T4885] Bluetooth: hci4: command 0x0406 tx timeout [ 170.701164][ T5530] loop4: detected capacity change from 0 to 4096 [ 172.920834][ T4031] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 172.930306][ T4031] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 176.057611][ T4103] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 176.126055][ T5571] loop4: detected capacity change from 0 to 256 [ 177.865281][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 178.050764][ T26] audit: type=1326 audit(178.020:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 178.112968][ T26] audit: type=1326 audit(178.080:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=137 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 178.125022][ T26] audit: type=1326 audit(178.090:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 178.210771][ T26] audit: type=1326 audit(178.090:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 178.217290][ T26] audit: type=1326 audit(178.090:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 179.069643][ T5589] sch_fq: defrate 0 ignored. [ 179.141447][ T26] audit: type=1326 audit(178.090:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 179.146440][ T26] audit: type=1326 audit(178.100:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 179.151554][ T26] audit: type=1326 audit(178.100:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 179.161331][ T26] audit: type=1326 audit(179.030:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 179.166533][ T26] audit: type=1326 audit(179.030:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 192.567680][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.569346][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.137577][ T5716] loop1: detected capacity change from 0 to 128 [ 201.784079][ T5756] binder: 5751:5756 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 201.786320][ T5756] binder: 5751:5756 got reply transaction with no transaction stack [ 201.788375][ T5756] binder: 5751:5756 transaction failed 29201/-71, size 0-0 line 2822 [ 203.126035][ T5314] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.727528][ T4185] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 240.372585][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 242.643331][ T148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.462687][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 250.645506][ T4064] Bluetooth: hci5: command 0x0409 tx timeout [ 251.683959][ T4388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.575464][ T4388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.089793][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.092505][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.679306][ T4064] Bluetooth: hci5: command 0x041b tx timeout [ 254.919462][ T4388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.919659][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 255.740424][ T4388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.800457][ T6076] chnl_net:caif_netlink_parms(): no params data found [ 256.929985][ T4898] Bluetooth: hci5: command 0x040f tx timeout [ 257.028162][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.029890][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.032218][ T6076] device bridge_slave_0 entered promiscuous mode [ 257.035411][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.037157][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.039846][ T6076] device bridge_slave_1 entered promiscuous mode [ 257.264292][ T6076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.269778][ T6076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.171839][ T6076] team0: Port device team_slave_0 added [ 258.175230][ T6076] team0: Port device team_slave_1 added [ 258.418413][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.420084][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.421046][ T4064] Bluetooth: hci5: command 0x0419 tx timeout [ 259.438516][ T6076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.762562][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.764118][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.772254][ T6076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.988906][ T6076] device hsr_slave_0 entered promiscuous mode [ 262.030765][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 262.039775][ T6076] device hsr_slave_1 entered promiscuous mode [ 262.098282][ T6076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.100121][ T6076] Cannot create hsr debugfs directory [ 264.987067][ T6076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.040960][ T6076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.191898][ T6076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.164972][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 268.274096][ T6076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.328401][ T6076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.359818][ T6076] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.409344][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.411564][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.413676][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.416022][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.433366][ T4115] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.435170][ T4115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.437420][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.463245][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.465774][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.480496][ T4115] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.482244][ T4115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.494803][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.521562][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.524339][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.528729][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.537068][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.558912][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.567616][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.635910][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.638481][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.641048][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.647587][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.662012][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.970278][ T4388] device hsr_slave_0 left promiscuous mode [ 272.038994][ T4388] device hsr_slave_1 left promiscuous mode [ 272.180122][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.182062][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.255569][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.257615][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.266235][ T4388] device team0 left promiscuous mode [ 272.289047][ T4388] device team_slave_0 left promiscuous mode [ 272.290787][ T4388] device team_slave_1 left promiscuous mode [ 272.293577][ T4388] bridge0: port 3(team0) entered disabled state [ 273.565358][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 274.812557][ T4388] device bridge_slave_1 left promiscuous mode [ 274.814179][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.965435][ T1614] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 275.979453][ T4388] device bridge_slave_0 left promiscuous mode [ 275.980929][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.193929][ T4388] device veth1_macvtap left promiscuous mode [ 276.195800][ T4388] device veth0_macvtap left promiscuous mode [ 276.197398][ T4388] device veth1_vlan left promiscuous mode [ 277.139105][ T4388] device veth0_vlan left promiscuous mode [ 277.938703][ T4388] team0 (unregistering): Port device team_slave_1 removed [ 277.984989][ T4388] team0 (unregistering): Port device team_slave_0 removed [ 278.056258][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.148746][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.611454][ T4388] bond0 (unregistering): Released all slaves [ 282.122603][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.124567][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.185527][ T6076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.754941][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.757574][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.766732][ T6076] device veth0_vlan entered promiscuous mode [ 284.783571][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.786340][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.810048][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.815722][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.844988][ T6076] device veth1_vlan entered promiscuous mode [ 284.998389][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 285.000778][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 285.002928][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.006479][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.022397][ T6076] device veth0_macvtap entered promiscuous mode [ 285.031418][ T6076] device veth1_macvtap entered promiscuous mode [ 285.083122][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.085299][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.137557][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.140799][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.143417][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.145800][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.149269][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.152554][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.155168][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.157447][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.169697][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.195417][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.199455][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.201756][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.204204][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.207075][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.219058][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.024873][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.034239][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.049286][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.056575][ T6076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.084708][ T6076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.129675][ T6076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.131738][ T6076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.178688][ T4101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.180861][ T4101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.256933][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.287043][ T4185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.300136][ T4185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.304782][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.400096][ T6446] loop0: detected capacity change from 0 to 2048 [ 289.565160][ T6446] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 289.654520][ T6452] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.089473][ T6476] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 295.865648][ T6506] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 295.881877][ T6506] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 303.950336][ T6623] loop5: detected capacity change from 0 to 256 [ 304.096812][ T6623] FAT-fs (loop5): Directory bread(block 64) failed [ 304.105020][ T6623] FAT-fs (loop5): Directory bread(block 65) failed [ 304.106622][ T6623] FAT-fs (loop5): Directory bread(block 66) failed [ 304.128085][ T6623] FAT-fs (loop5): Directory bread(block 67) failed [ 304.130082][ T6623] FAT-fs (loop5): Directory bread(block 68) failed [ 304.131522][ T6623] FAT-fs (loop5): Directory bread(block 69) failed [ 304.134489][ T6623] FAT-fs (loop5): Directory bread(block 70) failed [ 305.048081][ T6623] FAT-fs (loop5): Directory bread(block 71) failed [ 305.049819][ T6623] FAT-fs (loop5): Directory bread(block 72) failed [ 305.051334][ T6623] FAT-fs (loop5): Directory bread(block 73) failed [ 305.101503][ T6633] loop3: detected capacity change from 0 to 164 [ 307.415549][ T6642] loop3: detected capacity change from 0 to 32768 [ 307.446985][ T6642] (syz.3.720,6642,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 307.458331][ T6642] (syz.3.720,6642,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 307.490837][ T6642] JBD2: Ignoring recovery information on journal [ 307.554398][ T6642] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 307.704993][ T4026] ocfs2: Unmounting device (7,3) on (node local) [ 307.708636][ T6674] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.710794][ T6674] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.712790][ T6674] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.714767][ T6674] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.729522][ T6674] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 307.947375][ T4388] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.802824][ T6712] loop4: detected capacity change from 0 to 32768 [ 314.161805][ T6712] (syz.4.737,6712,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 314.170691][ T6712] (syz.4.737,6712,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 314.244271][ T6712] JBD2: Ignoring recovery information on journal [ 315.349513][ T6712] JBD2: recovery failed [ 315.350528][ T6712] (syz.4.737,6712,0):ocfs2_journal_load:1083 ERROR: Failed to load journal! [ 315.352534][ T6712] (syz.4.737,6712,0):ocfs2_check_volume:2429 ERROR: ocfs2 journal load failed! -5 [ 315.354727][ T6712] (syz.4.737,6712,0):ocfs2_check_volume:2485 ERROR: status = -5 [ 315.356493][ T6712] (syz.4.737,6712,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 315.425083][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.429898][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.465585][ T6712] (syz.4.737,6712,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 317.722877][ T6782] loop0: detected capacity change from 0 to 128 [ 317.838561][ T6782] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 317.842580][ T6782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.025371][ T6789] loop3: detected capacity change from 0 to 256 [ 318.696446][ T6789] FAT-fs (loop3): Directory bread(block 64) failed [ 318.698715][ T6789] FAT-fs (loop3): Directory bread(block 65) failed [ 318.713634][ T6789] FAT-fs (loop3): Directory bread(block 66) failed [ 318.723741][ T6789] FAT-fs (loop3): Directory bread(block 67) failed [ 318.736192][ T6789] FAT-fs (loop3): Directory bread(block 68) failed [ 318.743352][ T6789] FAT-fs (loop3): Directory bread(block 69) failed [ 318.763204][ T6789] FAT-fs (loop3): Directory bread(block 70) failed [ 318.771709][ T6789] FAT-fs (loop3): Directory bread(block 71) failed [ 318.854603][ T6789] FAT-fs (loop3): Directory bread(block 72) failed [ 318.856224][ T6789] FAT-fs (loop3): Directory bread(block 73) failed [ 321.304119][ T6811] loop4: detected capacity change from 0 to 1764 [ 321.399383][ T6811] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 324.295158][ T6845] overlayfs: missing 'lowerdir' [ 324.561986][ T6848] loop4: detected capacity change from 0 to 4096 [ 324.787047][ T6861] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.843255][ T6869] loop2: detected capacity change from 0 to 256 [ 326.002870][ T6876] loop3: detected capacity change from 0 to 512 [ 326.096044][ T6876] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 327.308698][ T6869] FAT-fs (loop2): Directory bread(block 64) failed [ 327.310442][ T6869] FAT-fs (loop2): Directory bread(block 65) failed [ 327.311975][ T6869] FAT-fs (loop2): Directory bread(block 66) failed [ 327.313415][ T6869] FAT-fs (loop2): Directory bread(block 67) failed [ 327.314943][ T6869] FAT-fs (loop2): Directory bread(block 68) failed [ 327.316864][ T6869] FAT-fs (loop2): Directory bread(block 69) failed [ 327.324766][ T6869] FAT-fs (loop2): Directory bread(block 70) failed [ 327.326273][ T6869] FAT-fs (loop2): Directory bread(block 71) failed [ 327.327807][ T6869] FAT-fs (loop2): Directory bread(block 72) failed [ 327.329543][ T6869] FAT-fs (loop2): Directory bread(block 73) failed [ 328.231185][ T6896] loop3: detected capacity change from 0 to 1024 [ 328.683016][ T6896] hfsplus: found bad thread record in catalog [ 329.089951][ T4101] hfsplus: b-tree write err: -5, ino 4 [ 329.443132][ T6913] loop5: detected capacity change from 0 to 256 [ 330.373388][ T6913] FAT-fs (loop5): unable to read block(4294967296) for building NFS inode [ 331.534390][ T6907] loop3: detected capacity change from 0 to 32768 [ 332.226508][ T6907] (syz.3.778,6907,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 332.230212][ T6907] (syz.3.778,6907,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 332.290601][ T6907] (syz.3.778,6907,1):ocfs2_initialize_super:2310 ERROR: status = -12 [ 332.292580][ T6907] (syz.3.778,6907,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 332.354332][ T6954] loop2: detected capacity change from 0 to 256 [ 332.395726][ T6958] loop0: detected capacity change from 0 to 512 [ 332.512649][ T6958] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 332.524451][ T6954] FAT-fs (loop2): Directory bread(block 64) failed [ 332.526089][ T6954] FAT-fs (loop2): Directory bread(block 65) failed [ 332.527754][ T6954] FAT-fs (loop2): Directory bread(block 66) failed [ 332.530554][ T6954] FAT-fs (loop2): Directory bread(block 67) failed [ 332.532209][ T6954] FAT-fs (loop2): Directory bread(block 68) failed [ 332.533668][ T6954] FAT-fs (loop2): Directory bread(block 69) failed [ 332.535146][ T6954] FAT-fs (loop2): Directory bread(block 70) failed [ 332.536562][ T6954] FAT-fs (loop2): Directory bread(block 71) failed [ 332.608653][ T6954] FAT-fs (loop2): Directory bread(block 72) failed [ 332.610298][ T6954] FAT-fs (loop2): Directory bread(block 73) failed [ 333.598652][ T6968] loop0: detected capacity change from 0 to 1024 [ 334.441471][ T6966] hfsplus: found bad thread record in catalog [ 335.948367][ T6897] hfsplus: b-tree write err: -5, ino 4 [ 336.085820][ T6990] udc-core: couldn't find an available UDC or it's busy [ 336.087410][ T6990] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 336.118563][ T6990] udc-core: couldn't find an available UDC or it's busy [ 336.120293][ T6990] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 337.160044][ T7012] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 337.406730][ T7019] loop3: detected capacity change from 0 to 2048 [ 337.509427][ T7019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.056895][ T7016] loop0: detected capacity change from 0 to 32768 [ 338.103577][ T7016] (syz.0.802,7016,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 338.106966][ T7016] (syz.0.802,7016,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 338.137407][ T7016] JBD2: Ignoring recovery information on journal [ 338.394230][ T7016] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 339.394652][ T4022] ocfs2: Unmounting device (7,0) on (node local) [ 340.103776][ T4388] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 340.721203][ T7055] loop0: detected capacity change from 0 to 512 [ 340.769490][ T7055] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 342.312589][ T7059] loop0: detected capacity change from 0 to 1024 [ 342.787211][ T7058] hfsplus: found bad thread record in catalog [ 343.708735][ T4103] hfsplus: b-tree write err: -5, ino 4 [ 346.012223][ T7080] loop5: detected capacity change from 0 to 256 [ 346.214942][ T7080] FAT-fs (loop5): Directory bread(block 64) failed [ 346.216675][ T7080] FAT-fs (loop5): Directory bread(block 65) failed [ 346.252614][ T7080] FAT-fs (loop5): Directory bread(block 66) failed [ 346.254118][ T7080] FAT-fs (loop5): Directory bread(block 67) failed [ 346.255752][ T7080] FAT-fs (loop5): Directory bread(block 68) failed [ 346.257317][ T7080] FAT-fs (loop5): Directory bread(block 69) failed [ 346.268296][ T7080] FAT-fs (loop5): Directory bread(block 70) failed [ 346.269937][ T7080] FAT-fs (loop5): Directory bread(block 71) failed [ 346.271732][ T7080] FAT-fs (loop5): Directory bread(block 72) failed [ 346.273561][ T7080] FAT-fs (loop5): Directory bread(block 73) failed [ 346.505410][ T7091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.817'. [ 346.526201][ T7087] loop0: detected capacity change from 0 to 256 [ 347.030813][ T7087] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 347.716686][ T7106] loop4: detected capacity change from 0 to 512 [ 347.722662][ T7107] loop3: detected capacity change from 0 to 16 [ 347.835278][ T7106] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 347.837017][ T7107] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 347.862303][ T7081] loop2: detected capacity change from 0 to 32768 [ 348.700440][ T7081] (syz.2.815,7081,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.706347][ T7081] (syz.2.815,7081,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.716812][ T7111] loop5: detected capacity change from 0 to 24 [ 348.908346][ T7114] loop4: detected capacity change from 0 to 1024 [ 349.557405][ T7081] JBD2: Ignoring recovery information on journal [ 349.589930][ T7113] hfsplus: found bad thread record in catalog [ 349.779781][ T136] hfsplus: b-tree write err: -5, ino 4 [ 349.787654][ T7081] JBD2: recovery failed [ 349.789634][ T7081] (syz.2.815,7081,1):ocfs2_journal_load:1083 ERROR: Failed to load journal! [ 349.791725][ T7081] (syz.2.815,7081,1):ocfs2_check_volume:2429 ERROR: ocfs2 journal load failed! -5 [ 349.807538][ T7081] (syz.2.815,7081,1):ocfs2_check_volume:2485 ERROR: status = -5 [ 349.810347][ T7081] (syz.2.815,7081,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 350.695211][ T7081] (syz.2.815,7081,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 350.905140][ T7128] loop3: detected capacity change from 0 to 256 [ 351.026819][ T7128] FAT-fs (loop3): Directory bread(block 64) failed [ 351.036465][ T7128] FAT-fs (loop3): Directory bread(block 65) failed [ 351.046710][ T7128] FAT-fs (loop3): Directory bread(block 66) failed [ 351.056834][ T7128] FAT-fs (loop3): Directory bread(block 67) failed [ 351.058795][ T7128] FAT-fs (loop3): Directory bread(block 68) failed [ 351.060299][ T7128] FAT-fs (loop3): Directory bread(block 69) failed [ 351.061807][ T7128] FAT-fs (loop3): Directory bread(block 70) failed [ 351.063389][ T7128] FAT-fs (loop3): Directory bread(block 71) failed [ 351.065095][ T7128] FAT-fs (loop3): Directory bread(block 72) failed [ 351.066568][ T7128] FAT-fs (loop3): Directory bread(block 73) failed [ 352.114506][ T7146] loop2: detected capacity change from 0 to 40427 [ 352.311762][ T7146] F2FS-fs (loop2): Unrecognized mount option "io_bits=00000000000536870917" or missing value [ 352.656313][ T7156] usb usb8: usbfs: process 7156 (syz.0.835) did not claim interface 0 before use [ 355.525824][ T7176] loop0: detected capacity change from 0 to 2048 [ 355.589902][ T7176] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 355.725466][ T7186] capability: warning: `syz.0.844' uses deprecated v2 capabilities in a way that may be insecure [ 355.774046][ T7168] loop5: detected capacity change from 0 to 32768 [ 355.863586][ T7168] (syz.5.841,7168,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 355.866770][ T7168] (syz.5.841,7168,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 355.891443][ T7176] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.844: bg 0: block 234: padding at end of block bitmap is not set [ 355.908271][ T7176] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 492 with error 28 [ 355.913415][ T7176] EXT4-fs (loop0): This should not happen!! Data will be lost [ 355.913415][ T7176] [ 355.915984][ T7176] EXT4-fs (loop0): Total free blocks count 0 [ 355.917608][ T7176] EXT4-fs (loop0): Free/Dirty block details [ 355.919833][ T7176] EXT4-fs (loop0): free_blocks=0 [ 355.921231][ T7176] EXT4-fs (loop0): dirty_blocks=496 [ 355.922627][ T7176] EXT4-fs (loop0): Block reservation details [ 355.924322][ T7176] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 355.930855][ T7168] JBD2: Ignoring recovery information on journal [ 356.136605][ T7168] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 357.106122][ T6076] ocfs2: Unmounting device (7,5) on (node local) [ 357.125097][ T7201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.851'. [ 361.275609][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.862'. [ 362.858114][ T7239] loop4: detected capacity change from 0 to 32768 [ 363.131712][ T7239] (syz.4.861,7239,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 365.609056][ T7239] (syz.4.861,7239,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 365.674680][ T7239] (syz.4.861,7239,1):ocfs2_initialize_super:2310 ERROR: status = -12 [ 365.676935][ T7239] (syz.4.861,7239,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 366.999383][ T7279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.874'. [ 367.020597][ T7281] loop0: detected capacity change from 0 to 64 [ 370.970527][ T7320] loop3: detected capacity change from 0 to 32768 [ 371.947244][ T7320] XFS (loop3): Mounting V5 Filesystem [ 373.710244][ T4134] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 373.772572][ T7320] XFS (loop3): Ending clean mount [ 373.963602][ T4064] Bluetooth: hci5: command 0x0406 tx timeout [ 373.990642][ T4026] XFS (loop3): Unmounting Filesystem [ 374.439024][ T7392] loop4: detected capacity change from 0 to 2048 [ 374.542019][ T7392] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro,. Quota mode: writeback. [ 374.591305][ T7392] EXT4-fs error (device loop4): ext4_ext_precache:608: inode #2: comm syz.4.909: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 374.623021][ T7392] EXT4-fs (loop4): Remounting filesystem read-only [ 374.806926][ T7397] device syzkaller0 entered promiscuous mode [ 374.854014][ T7402] loop3: detected capacity change from 0 to 16 [ 374.895125][ T7402] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 375.587110][ T7424] loop2: detected capacity change from 0 to 512 [ 375.593128][ T7424] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 375.784610][ T7415] loop3: detected capacity change from 0 to 32768 [ 376.010555][ T7429] loop2: detected capacity change from 0 to 1024 [ 376.367745][ T7429] hfsplus: found bad thread record in catalog [ 376.768485][ T4103] hfsplus: b-tree write err: -5, ino 4 [ 376.850689][ T7439] loop0: detected capacity change from 0 to 24 [ 376.857047][ T7415] XFS (loop3): Mounting V5 Filesystem [ 376.897836][ T7443] ubi0: attaching mtd0 [ 376.903432][ T7443] ubi0: scanning is finished [ 376.950656][ T7443] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 376.952452][ T7443] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 376.954336][ T7443] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 376.956010][ T7443] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 376.957605][ T7443] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 376.966411][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.968015][ T7443] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 376.969698][ T7443] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2474340133 [ 376.971936][ T7443] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 376.974135][ T7445] ubi0: background thread "ubi_bgt0d" started, PID 7445 [ 376.976034][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.018895][ T7443] ubi0: detaching mtd0 [ 377.023296][ T7443] ubi0: mtd0 is detached [ 377.112666][ T7415] XFS (loop3): Ending clean mount [ 377.209677][ T25] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x8 [ 377.212463][ T25] XFS (loop3): Unmount and run xfs_repair [ 377.213689][ T25] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 377.215341][ T25] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 377.220318][ T25] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 377.222346][ T25] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 377.224317][ T25] 00000030: 00 00 00 00 07 00 00 00 00 00 00 00 00 00 00 03 ................ [ 377.226237][ T25] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 377.258752][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.260885][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.262872][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.265256][ T4134] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x8 len 8 error 74 [ 377.269015][ T4134] XFS (loop3): page discard on page 00000000703b1ef1, inode 0x509, offset 0. [ 377.275575][ T25] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x8 [ 377.278376][ T25] XFS (loop3): Unmount and run xfs_repair [ 377.280187][ T25] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 377.282044][ T25] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 377.284195][ T25] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 377.286286][ T25] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 377.288453][ T25] 00000030: 00 00 00 00 07 00 00 00 00 00 00 00 00 00 00 03 ................ [ 377.290583][ T25] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 377.292654][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.294808][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.296972][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.299171][ T4134] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x8 len 8 error 74 [ 377.301894][ T4134] XFS (loop3): page discard on page 0000000098ec3aa1, inode 0x509, offset 4096. [ 377.304593][ T25] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x8 [ 377.307112][ T25] XFS (loop3): Unmount and run xfs_repair [ 377.308630][ T25] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 377.310355][ T25] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 377.312583][ T25] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 377.314700][ T25] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 377.316813][ T25] 00000030: 00 00 00 00 07 00 00 00 00 00 00 00 00 00 00 03 ................ [ 377.326477][ T25] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 377.332012][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.335179][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.340100][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.344409][ T4134] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x8 len 8 error 74 [ 377.347081][ T4134] XFS (loop3): page discard on page 00000000330da2a4, inode 0x509, offset 8192. [ 377.352153][ T25] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x8 [ 377.358115][ T25] XFS (loop3): Unmount and run xfs_repair [ 377.360531][ T25] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 377.364425][ T25] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 377.368721][ T25] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 377.373945][ T25] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 377.378226][ T25] 00000030: 00 00 00 00 07 00 00 00 00 00 00 00 00 00 00 03 ................ [ 377.390249][ T25] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 377.395531][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.400822][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.404015][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.495962][ T7451] loop2: detected capacity change from 0 to 32768 [ 377.550956][ T4134] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x8 len 8 error 74 [ 377.553734][ T4134] XFS (loop3): page discard on page 00000000429bbf5e, inode 0x509, offset 12288. [ 377.557883][ T4068] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x8 [ 377.565003][ T4068] XFS (loop3): Unmount and run xfs_repair [ 377.567494][ T4068] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 377.575960][ T7451] (syz.2.923,7451,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 377.582694][ T7451] (syz.2.923,7451,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 377.586866][ T4068] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 377.594470][ T4068] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 377.598140][ T7451] JBD2: Ignoring recovery information on journal [ 377.600990][ T4068] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 377.634279][ T4068] 00000030: 00 00 00 00 07 00 00 00 00 00 00 00 00 00 00 03 ................ [ 377.655987][ T4068] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 377.670085][ T4068] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.672147][ T4068] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.675129][ T7451] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 377.761307][ T4068] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.763642][ T4134] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x8 len 8 error 74 [ 377.766382][ T4134] XFS (loop3): page discard on page 000000005841a34c, inode 0x509, offset 16384. [ 377.792449][ T4898] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x8 [ 377.795086][ T4898] XFS (loop3): Unmount and run xfs_repair [ 377.796404][ T4898] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 377.808605][ T4898] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 377.814883][ T4898] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 377.831195][ T4898] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 377.837350][ T4898] 00000030: 00 00 00 00 07 00 00 00 00 00 00 00 00 00 00 03 ................ [ 377.852251][ T4898] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 377.866541][ T4898] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.873409][ T4898] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.875435][ T4898] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.886300][ T4134] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x8 len 8 error 74 [ 377.890576][ T4134] XFS (loop3): page discard on page 00000000b3dbe6f8, inode 0x509, offset 20480. [ 377.900846][ T4026] XFS (loop3): Unmounting Filesystem [ 377.959237][ T7460] loop0: detected capacity change from 0 to 32768 [ 377.983449][ T4034] ocfs2: Unmounting device (7,2) on (node local) [ 378.105312][ T7460] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 378.186010][ T7473] loop2: detected capacity change from 0 to 512 [ 378.186839][ T4022] ocfs2: Unmounting device (7,0) on (node local) [ 378.190783][ T7473] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 381.961174][ T7519] loop0: detected capacity change from 0 to 16 [ 382.101402][ T7519] erofs: (device loop0): mounted with root inode @ nid 36. [ 382.888559][ T7524] loop4: detected capacity change from 0 to 512 [ 382.961226][ T7524] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 383.011078][ T7505] loop2: detected capacity change from 0 to 32768 [ 383.238388][ T7528] usb usb1: usbfs: process 7528 (syz.5.951) did not claim interface 0 before use [ 384.400767][ T7505] (syz.2.944,7505,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 384.405547][ T7505] (syz.2.944,7505,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 384.476502][ T7505] (syz.2.944,7505,1):ocfs2_initialize_super:2310 ERROR: status = -12 [ 384.490040][ T7505] (syz.2.944,7505,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 385.298611][ T7548] loop5: detected capacity change from 0 to 40427 [ 385.572239][ T7548] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 385.573960][ T7548] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 385.737387][ T7548] F2FS-fs (loop5): Found nat_bits in checkpoint [ 385.751900][ T7557] loop0: detected capacity change from 0 to 16 [ 386.537563][ T7548] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 386.539698][ T7548] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 386.593633][ T7562] loop4: detected capacity change from 0 to 16 [ 386.595674][ T7562] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 386.650609][ T7557] erofs: (device loop0): mounted with root inode @ nid 36. [ 386.970922][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 386.970934][ T26] audit: type=1326 audit(386.940:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 386.978490][ T26] audit: type=1326 audit(386.940:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 387.015250][ T26] audit: type=1326 audit(386.960:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=104 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 387.036629][ T26] audit: type=1326 audit(386.960:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 387.083022][ T26] audit: type=1326 audit(386.960:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa74ce368 code=0x7ffc0000 [ 387.283769][ T7575] loop3: detected capacity change from 0 to 512 [ 388.144015][ T7575] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 389.364321][ T7592] overlayfs: missing 'lowerdir' [ 389.496648][ T7598] loop3: detected capacity change from 0 to 16 [ 389.591458][ T7598] erofs: (device loop3): mounted with root inode @ nid 36. [ 391.708271][ T7606] netlink: 'syz.2.975': attribute type 4 has an invalid length. [ 391.710132][ T7606] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.975'. [ 392.627176][ T7615] netlink: 40 bytes leftover after parsing attributes in process `syz.2.978'. [ 393.942905][ T7610] loop5: detected capacity change from 0 to 32768 [ 394.232127][ T7632] overlayfs: missing 'lowerdir' [ 394.250937][ T7610] (syz.5.964,7610,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 394.258341][ T7610] (syz.5.964,7610,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 394.322874][ T7610] JBD2: Ignoring recovery information on journal [ 394.635129][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 395.528342][ T7610] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 395.770363][ T6076] ocfs2: Unmounting device (7,5) on (node local) [ 397.072129][ T7665] netlink: 40 bytes leftover after parsing attributes in process `syz.5.990'. [ 397.236120][ T7668] overlayfs: missing 'lowerdir' [ 397.962626][ T7681] loop3: detected capacity change from 0 to 764 [ 398.071691][ T7685] 9pnet: p9_errstr2errno: server reported unknown error FcgKIeB$ [ 398.401397][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 398.482884][ T7696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1008'. [ 398.489783][ T7694] loop4: detected capacity change from 0 to 256 [ 398.515583][ T7683] loop2: detected capacity change from 0 to 32768 [ 398.553025][ T7683] (syz.2.1000,7683,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 398.556348][ T7683] (syz.2.1000,7683,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 398.571668][ T7683] JBD2: Ignoring recovery information on journal [ 398.674080][ T7694] FAT-fs (loop4): Directory bread(block 64) failed [ 398.675864][ T7694] FAT-fs (loop4): Directory bread(block 65) failed [ 398.677334][ T7694] FAT-fs (loop4): Directory bread(block 66) failed [ 398.686027][ T7694] FAT-fs (loop4): Directory bread(block 67) failed [ 398.687632][ T7694] FAT-fs (loop4): Directory bread(block 68) failed [ 398.702333][ T7694] FAT-fs (loop4): Directory bread(block 69) failed [ 398.704094][ T7694] FAT-fs (loop4): Directory bread(block 70) failed [ 398.705684][ T7694] FAT-fs (loop4): Directory bread(block 71) failed [ 398.707318][ T7694] FAT-fs (loop4): Directory bread(block 72) failed [ 398.711608][ T7683] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 398.738602][ T7694] FAT-fs (loop4): Directory bread(block 73) failed [ 398.961175][ T4034] ocfs2: Unmounting device (7,2) on (node local) [ 399.890221][ T7715] udc-core: couldn't find an available UDC or it's busy [ 399.892022][ T7715] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 401.207098][ T7733] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1019'. [ 401.232424][ T7731] loop2: detected capacity change from 0 to 2048 [ 401.279118][ T7731] NILFS (loop2): invalid segment: Magic number mismatch [ 401.281626][ T7731] NILFS (loop2): trying rollback from an earlier position [ 401.312907][ T7731] NILFS (loop2): invalid segment: Checksum error in segment payload [ 401.314783][ T7731] NILFS (loop2): error -22 while searching super root [ 402.902462][ T7752] loop5: detected capacity change from 0 to 256 [ 403.094357][ T7752] FAT-fs (loop5): Directory bread(block 64) failed [ 403.103966][ T7752] FAT-fs (loop5): Directory bread(block 65) failed [ 403.114319][ T7752] FAT-fs (loop5): Directory bread(block 66) failed [ 403.122384][ T7752] FAT-fs (loop5): Directory bread(block 67) failed [ 403.160900][ T7752] FAT-fs (loop5): Directory bread(block 68) failed [ 403.178493][ T7752] FAT-fs (loop5): Directory bread(block 69) failed [ 403.197178][ T7752] FAT-fs (loop5): Directory bread(block 70) failed [ 403.201721][ T7758] loop0: detected capacity change from 0 to 16 [ 403.213007][ T7752] FAT-fs (loop5): Directory bread(block 71) failed [ 403.217757][ T7752] FAT-fs (loop5): Directory bread(block 72) failed [ 403.229270][ T7752] FAT-fs (loop5): Directory bread(block 73) failed [ 403.271722][ T7758] erofs: (device loop0): mounted with root inode @ nid 36. [ 403.555308][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 403.769449][ T7764] loop3: detected capacity change from 0 to 16 [ 403.808704][ T7764] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 403.980639][ T7770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1033'. [ 404.180203][ T7757] loop2: detected capacity change from 0 to 32768 [ 404.429312][ T7757] XFS (loop2): Mounting V5 Filesystem [ 404.717779][ T7757] XFS (loop2): Starting recovery (logdev: internal) [ 404.736657][ T7757] XFS (loop2): Ending recovery (logdev: internal) [ 405.223771][ T4101] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 405.704165][ T7793] overlayfs: missing 'lowerdir' [ 405.848512][ T4034] XFS (loop2): Unmounting Filesystem [ 405.886165][ T7802] loop3: detected capacity change from 0 to 16 [ 405.918832][ T7802] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 405.941547][ T7798] could not allocate digest TFM handle sha1-ssse3 [ 406.025891][ T7809] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1045'. [ 406.099320][ T7813] loop3: detected capacity change from 0 to 2048 [ 406.346443][ T7813] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 406.402822][ T7813] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 406.485454][ T7813] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 406.605512][ T7813] EXT4-fs (loop3): This should not happen!! Data will be lost [ 406.605512][ T7813] [ 406.630541][ T7813] EXT4-fs (loop3): Total free blocks count 0 [ 406.632057][ T7813] EXT4-fs (loop3): Free/Dirty block details [ 406.659708][ T7813] EXT4-fs (loop3): free_blocks=66060288 [ 406.661359][ T7813] EXT4-fs (loop3): dirty_blocks=16 [ 406.676310][ T7813] EXT4-fs (loop3): Block reservation details [ 406.677858][ T7813] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 406.816997][ T4103] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 406.822462][ T4103] EXT4-fs (loop3): This should not happen!! Data will be lost [ 406.822462][ T4103] [ 407.351139][ T7836] loop4: detected capacity change from 0 to 128 [ 408.702200][ T7850] loop2: detected capacity change from 0 to 16 [ 408.738533][ T7850] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 408.761660][ T7852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1058'. [ 409.437193][ T7868] udc-core: couldn't find an available UDC or it's busy [ 409.441326][ T7868] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 409.501735][ T7849] loop4: detected capacity change from 0 to 32768 [ 409.558919][ T7856] loop2: detected capacity change from 0 to 32768 [ 409.646734][ T7856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1059 (7856) [ 409.693545][ T7849] XFS (loop4): Mounting V5 Filesystem [ 409.695297][ T7856] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 409.698103][ T7856] BTRFS info (device loop2): using free space tree [ 409.699672][ T7856] BTRFS info (device loop2): has skinny extents [ 409.783860][ T7856] BTRFS info (device loop2): enabling ssd optimizations [ 409.792454][ T7849] XFS (loop4): Ending clean mount [ 409.844247][ T7849] XFS (loop4): Quotacheck needed: Please wait. [ 409.967887][ T7849] XFS (loop4): Quotacheck: Done. [ 410.070688][ T4031] XFS (loop4): Unmounting Filesystem [ 410.125893][ T4103] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 412.014785][ T7937] loop4: detected capacity change from 0 to 16 [ 412.039726][ T7934] loop2: detected capacity change from 0 to 4096 [ 412.070097][ T7937] erofs: (device loop4): mounted with root inode @ nid 36. [ 412.097396][ T7934] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 412.121474][ T7934] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 413.263113][ T4034] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 414.317705][ T7973] loop0: detected capacity change from 0 to 24 [ 414.571252][ T7945] loop4: detected capacity change from 0 to 65536 [ 415.455224][ T7994] loop5: detected capacity change from 0 to 164 [ 415.846236][ T8009] loop5: detected capacity change from 0 to 256 [ 416.657408][ T8010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1101'. [ 416.726520][ T8012] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1102'. [ 416.761192][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1102'. [ 416.810861][ T8018] binder: 8017:8018 ioctl c0306201 0 returned -14 [ 417.303854][ T8003] loop4: detected capacity change from 0 to 32768 [ 417.377721][ T8003] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.1093 (8003) [ 417.555335][ T8003] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 417.557604][ T8003] BTRFS info (device loop4): enabling ssd optimizations [ 417.559959][ T8003] BTRFS info (device loop4): not using ssd optimizations [ 417.561676][ T8003] BTRFS info (device loop4): turning off barriers [ 417.569910][ T8003] BTRFS info (device loop4): using free space tree [ 417.571629][ T8003] BTRFS info (device loop4): has skinny extents [ 418.136930][ T8061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1115'. [ 418.149680][ T4347] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop4 scanned by udevd (4347) [ 418.166695][ T8061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1115'. [ 422.878698][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1126'. [ 422.901699][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1126'. [ 423.024899][ T8106] loop5: detected capacity change from 0 to 24 [ 423.173609][ T8109] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 423.175894][ T8109] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 423.259387][ T8112] 9pnet: p9_errstr2errno: server reported unknown error FcgKIeB$ [ 424.828990][ T8134] loop3: detected capacity change from 0 to 16 [ 424.888151][ T8136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1139'. [ 424.894483][ T8138] loop0: detected capacity change from 0 to 24 [ 424.897497][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1139'. [ 425.188796][ T8134] erofs: (device loop3): mounted with root inode @ nid 36. [ 426.152265][ T8158] loop3: detected capacity change from 0 to 2048 [ 426.177157][ T8158] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 426.245413][ T4347] udevd[4347]: incorrect nilfs2 checksum on /dev/loop3 [ 426.258551][ T8163] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 427.605295][ T8182] loop3: detected capacity change from 0 to 16 [ 427.643844][ T8186] loop2: detected capacity change from 0 to 256 [ 427.678727][ T8182] erofs: (device loop3): mounted with root inode @ nid 36. [ 427.841451][ T8186] FAT-fs (loop2): Directory bread(block 64) failed [ 427.842930][ T8186] FAT-fs (loop2): Directory bread(block 65) failed [ 427.844381][ T8197] qrtr: Invalid version 48 [ 427.856382][ T8186] FAT-fs (loop2): Directory bread(block 66) failed [ 427.868338][ T8186] FAT-fs (loop2): Directory bread(block 67) failed [ 427.871685][ T8186] FAT-fs (loop2): Directory bread(block 68) failed [ 427.881760][ T8186] FAT-fs (loop2): Directory bread(block 69) failed [ 427.894357][ T8186] FAT-fs (loop2): Directory bread(block 70) failed [ 427.904463][ T8186] FAT-fs (loop2): Directory bread(block 71) failed [ 427.912624][ T8186] FAT-fs (loop2): Directory bread(block 72) failed [ 427.921884][ T8186] FAT-fs (loop2): Directory bread(block 73) failed [ 429.412710][ T8213] loop5: detected capacity change from 0 to 16 [ 429.608899][ T8213] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 429.624315][ T8217] loop4: detected capacity change from 0 to 16 [ 430.480017][ T8217] erofs: (device loop4): mounted with root inode @ nid 36. [ 430.496395][ T8213] 9pnet: Insufficient options for proto=fd [ 433.037244][ T8245] loop2: detected capacity change from 0 to 256 [ 433.193140][ T8245] FAT-fs (loop2): Directory bread(block 64) failed [ 433.194949][ T8245] FAT-fs (loop2): Directory bread(block 65) failed [ 433.197690][ T8245] FAT-fs (loop2): Directory bread(block 66) failed [ 433.203171][ T8245] FAT-fs (loop2): Directory bread(block 67) failed [ 433.204854][ T8245] FAT-fs (loop2): Directory bread(block 68) failed [ 433.215132][ T8245] FAT-fs (loop2): Directory bread(block 69) failed [ 433.216851][ T8245] FAT-fs (loop2): Directory bread(block 70) failed [ 433.227188][ T8245] FAT-fs (loop2): Directory bread(block 71) failed [ 433.236268][ T8245] FAT-fs (loop2): Directory bread(block 72) failed [ 433.288494][ T8245] FAT-fs (loop2): Directory bread(block 73) failed [ 434.177058][ T8255] loop4: detected capacity change from 0 to 16 [ 434.178955][ T8255] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 434.191787][ T8255] 9pnet: Insufficient options for proto=fd [ 434.242419][ T8257] loop5: detected capacity change from 0 to 16 [ 434.783305][ T8257] erofs: (device loop5): mounted with root inode @ nid 36. [ 434.866175][ T8264] UHID_CREATE from different security context by process 801 (syz.4.1186), this is not allowed. [ 435.158382][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 435.232804][ T26] audit: type=1326 audit(435.200:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.2.1190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9bd0368 code=0x7ffc0000 [ 435.267118][ T26] audit: type=1326 audit(435.230:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.2.1190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=284 compat=0 ip=0xffffa9bd0368 code=0x7ffc0000 [ 435.284448][ T26] audit: type=1326 audit(435.250:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.2.1190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9bd0368 code=0x7ffc0000 [ 435.303045][ T26] audit: type=1326 audit(435.260:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.2.1190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9bd0368 code=0x7ffc0000 [ 436.264403][ T8279] udc-core: couldn't find an available UDC or it's busy [ 436.266136][ T8279] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 436.331576][ T8281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1192'. [ 436.550190][ T8256] loop0: detected capacity change from 0 to 32768 [ 436.636997][ T8256] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1184 (8256) [ 436.971852][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.546306][ T8256] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 437.549691][ T8256] BTRFS info (device loop0): using free space tree [ 437.551360][ T8256] BTRFS info (device loop0): has skinny extents [ 437.593893][ T8298] loop4: detected capacity change from 0 to 512 [ 437.653181][ T8298] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 437.877852][ T8256] BTRFS error (device loop0): open_ctree failed [ 438.108390][ T8298] loop4: detected capacity change from 0 to 1024 [ 438.165399][ T8298] hfsplus: found bad thread record in catalog [ 438.234510][ T9] hfsplus: b-tree write err: -5, ino 4 [ 438.269620][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.271274][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.636714][ T8336] loop4: detected capacity change from 0 to 24 [ 443.401703][ T8353] loop3: detected capacity change from 0 to 512 [ 443.407341][ T8353] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 447.033963][ T8388] loop4: detected capacity change from 0 to 24 [ 448.682894][ T8401] loop4: detected capacity change from 0 to 512 [ 448.791533][ T8401] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 450.186197][ T8401] loop4: detected capacity change from 0 to 1024 [ 450.258660][ T8400] hfsplus: found bad thread record in catalog [ 450.618594][ T136] hfsplus: b-tree write err: -5, ino 4 [ 452.322141][ T8427] loop3: detected capacity change from 0 to 16 [ 452.368762][ T8427] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 452.455029][ T8427] 9pnet: Insufficient options for proto=fd [ 452.977659][ T8429] loop5: detected capacity change from 0 to 32768 [ 452.993363][ T8440] loop0: detected capacity change from 0 to 16 [ 453.051930][ T8429] (syz.5.1234,8429,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 453.056309][ T8429] (syz.5.1234,8429,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 453.073788][ T8440] erofs: (device loop0): mounted with root inode @ nid 36. [ 453.103159][ T8429] JBD2: Ignoring recovery information on journal [ 453.253198][ T8429] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 453.462483][ T6076] ocfs2: Unmounting device (7,5) on (node local) [ 453.566790][ T8453] loop0: detected capacity change from 0 to 256 [ 453.645442][ T8453] FAT-fs (loop0): Directory bread(block 64) failed [ 453.656852][ T8453] FAT-fs (loop0): Directory bread(block 65) failed [ 453.678237][ T8453] FAT-fs (loop0): Directory bread(block 66) failed [ 453.679830][ T8453] FAT-fs (loop0): Directory bread(block 67) failed [ 453.681469][ T8453] FAT-fs (loop0): Directory bread(block 68) failed [ 453.683037][ T8453] FAT-fs (loop0): Directory bread(block 69) failed [ 453.684565][ T8453] FAT-fs (loop0): Directory bread(block 70) failed [ 453.685957][ T8453] FAT-fs (loop0): Directory bread(block 71) failed [ 453.687440][ T8453] FAT-fs (loop0): Directory bread(block 72) failed [ 453.703956][ T8453] FAT-fs (loop0): Directory bread(block 73) failed [ 453.751602][ T8456] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1242'. [ 456.839076][ T8485] loop0: detected capacity change from 0 to 32768 [ 456.889303][ T8485] (syz.0.1252,8485,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 456.894058][ T8485] (syz.0.1252,8485,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 456.940550][ T8492] loop2: detected capacity change from 0 to 512 [ 456.945324][ T8485] JBD2: Ignoring recovery information on journal [ 456.983355][ T8492] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 456.992443][ T8485] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 457.086852][ T4022] ocfs2: Unmounting device (7,0) on (node local) [ 457.149682][ T8492] loop2: detected capacity change from 0 to 1024 [ 457.174790][ T8492] hfsplus: found bad thread record in catalog [ 457.314556][ T4134] hfsplus: b-tree write err: -5, ino 4 [ 457.423391][ T8507] loop5: detected capacity change from 0 to 256 [ 457.488822][ T8507] FAT-fs (loop5): Directory bread(block 64) failed [ 457.490413][ T8507] FAT-fs (loop5): Directory bread(block 65) failed [ 457.492036][ T8507] FAT-fs (loop5): Directory bread(block 66) failed [ 457.493506][ T8507] FAT-fs (loop5): Directory bread(block 67) failed [ 457.495100][ T8507] FAT-fs (loop5): Directory bread(block 68) failed [ 457.496528][ T8507] FAT-fs (loop5): Directory bread(block 69) failed [ 457.537586][ T8507] FAT-fs (loop5): Directory bread(block 70) failed [ 457.539300][ T8507] FAT-fs (loop5): Directory bread(block 71) failed [ 457.540829][ T8507] FAT-fs (loop5): Directory bread(block 72) failed [ 457.542333][ T8507] FAT-fs (loop5): Directory bread(block 73) failed [ 461.025547][ T8538] loop4: detected capacity change from 0 to 512 [ 461.161899][ T8538] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 461.537632][ T8536] loop5: detected capacity change from 0 to 32768 [ 461.633262][ T8536] (syz.5.1269,8536,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 461.636736][ T8536] (syz.5.1269,8536,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 461.677403][ T8538] loop4: detected capacity change from 0 to 1024 [ 461.749898][ T8538] hfsplus: found bad thread record in catalog [ 461.921537][ T8536] JBD2: Ignoring recovery information on journal [ 462.414662][ T4103] hfsplus: b-tree write err: -5, ino 4 [ 462.779204][ T8536] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 463.808335][ T6076] ocfs2: Unmounting device (7,5) on (node local) [ 464.980938][ T8570] loop5: detected capacity change from 0 to 256 [ 465.190303][ T8570] FAT-fs (loop5): Directory bread(block 64) failed [ 465.191849][ T8570] FAT-fs (loop5): Directory bread(block 65) failed [ 465.201384][ T8570] FAT-fs (loop5): Directory bread(block 66) failed [ 465.202873][ T8570] FAT-fs (loop5): Directory bread(block 67) failed [ 465.204479][ T8570] FAT-fs (loop5): Directory bread(block 68) failed [ 465.205975][ T8570] FAT-fs (loop5): Directory bread(block 69) failed [ 465.207523][ T8570] FAT-fs (loop5): Directory bread(block 70) failed [ 465.228519][ T8570] FAT-fs (loop5): Directory bread(block 71) failed [ 465.255005][ T8570] FAT-fs (loop5): Directory bread(block 72) failed [ 465.256514][ T8570] FAT-fs (loop5): Directory bread(block 73) failed [ 465.489540][ T8581] loop3: detected capacity change from 0 to 1024 [ 466.447981][ T8579] hfsplus: found bad thread record in catalog [ 466.549672][ T136] hfsplus: b-tree write err: -5, ino 4 [ 468.495177][ T4611] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 468.636468][ T8601] loop5: detected capacity change from 0 to 32768 [ 468.692509][ T8601] (syz.5.1288,8601,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 468.698108][ T8601] (syz.5.1288,8601,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 468.723677][ T8601] JBD2: Ignoring recovery information on journal [ 468.769750][ T8601] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 468.863313][ T6076] ocfs2: Unmounting device (7,5) on (node local) [ 470.255604][ T8625] loop5: detected capacity change from 0 to 256 [ 470.304627][ T8625] FAT-fs (loop5): Directory bread(block 64) failed [ 470.310844][ T8625] FAT-fs (loop5): Directory bread(block 65) failed [ 470.315955][ T8625] FAT-fs (loop5): Directory bread(block 66) failed [ 470.322046][ T8625] FAT-fs (loop5): Directory bread(block 67) failed [ 470.334349][ T8625] FAT-fs (loop5): Directory bread(block 68) failed [ 470.339295][ T8625] FAT-fs (loop5): Directory bread(block 69) failed [ 470.344353][ T8625] FAT-fs (loop5): Directory bread(block 70) failed [ 470.368110][ T8625] FAT-fs (loop5): Directory bread(block 71) failed [ 470.369695][ T8625] FAT-fs (loop5): Directory bread(block 72) failed [ 470.371215][ T8625] FAT-fs (loop5): Directory bread(block 73) failed [ 471.282849][ T8638] loop4: detected capacity change from 0 to 1024 [ 471.301897][ T8638] hfsplus: found bad thread record in catalog [ 471.378312][ T136] hfsplus: b-tree write err: -5, ino 4 [ 473.596291][ T8655] loop0: detected capacity change from 0 to 32768 [ 473.685586][ T8655] (syz.0.1304,8655,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 473.696416][ T8655] (syz.0.1304,8655,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 473.755037][ T8655] JBD2: Ignoring recovery information on journal [ 473.837180][ T8655] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 473.997514][ T4022] ocfs2: Unmounting device (7,0) on (node local) [ 474.558939][ T8670] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1306'. [ 474.561546][ T8670] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1306'. [ 474.563724][ T8670] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1306'. [ 474.566035][ T8670] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1306'. [ 474.615247][ T8670] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1306'. [ 474.643179][ T8670] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1306'. [ 474.658322][ T8670] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1306'. [ 474.701339][ T8670] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1306'. [ 474.717484][ T8670] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1306'. [ 474.732983][ T8670] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1306'. [ 475.205127][ T8682] loop3: detected capacity change from 0 to 1024 [ 476.367393][ T8683] loop4: detected capacity change from 0 to 40427 [ 476.398880][ T8683] F2FS-fs (loop4): Unrecognized mount option "io_bits=00000000000536870917" or missing value [ 476.413586][ T8682] hfsplus: found bad thread record in catalog [ 476.500095][ T4185] hfsplus: b-tree write err: -5, ino 4 [ 479.126105][ T8704] loop3: detected capacity change from 0 to 32768 [ 479.198912][ T8704] (syz.3.1317,8704,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 479.207860][ T8704] (syz.3.1317,8704,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 479.253389][ T8704] JBD2: Ignoring recovery information on journal [ 479.440700][ T8704] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 479.511510][ T8712] loop0: detected capacity change from 0 to 256 [ 479.529722][ T4026] ocfs2: Unmounting device (7,3) on (node local) [ 479.597017][ T8712] FAT-fs (loop0): Directory bread(block 64) failed [ 479.598781][ T8712] FAT-fs (loop0): Directory bread(block 65) failed [ 479.600431][ T8712] FAT-fs (loop0): Directory bread(block 66) failed [ 479.601939][ T8712] FAT-fs (loop0): Directory bread(block 67) failed [ 479.603460][ T8712] FAT-fs (loop0): Directory bread(block 68) failed [ 479.604869][ T8712] FAT-fs (loop0): Directory bread(block 69) failed [ 479.606696][ T8712] FAT-fs (loop0): Directory bread(block 70) failed [ 479.608769][ T8712] FAT-fs (loop0): Directory bread(block 71) failed [ 479.626948][ T8712] FAT-fs (loop0): Directory bread(block 72) failed [ 479.647188][ T8712] FAT-fs (loop0): Directory bread(block 73) failed [ 480.995255][ T8729] loop5: detected capacity change from 0 to 1024 [ 481.053377][ T8729] hfsplus: found bad thread record in catalog [ 481.085304][ T6048] hfsplus: b-tree write err: -5, ino 4 [ 482.140541][ T8741] loop5: detected capacity change from 0 to 16 [ 482.142728][ T8741] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 484.660679][ T8768] loop3: detected capacity change from 0 to 1024 [ 484.714684][ T8768] hfsplus: found bad thread record in catalog [ 484.788769][ T6048] hfsplus: b-tree write err: -5, ino 4 [ 484.871671][ T8771] __nla_validate_parse: 421 callbacks suppressed [ 484.871686][ T8771] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1336'. [ 484.875740][ T8771] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1336'. [ 484.905013][ T8771] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1336'. [ 484.932249][ T8771] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1336'. [ 484.938326][ T8771] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1336'. [ 484.940951][ T8771] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1336'. [ 484.951457][ T8771] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1336'. [ 484.954019][ T8771] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1336'. [ 484.964866][ T8771] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1336'. [ 484.975011][ T8771] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.1336'. [ 485.479107][ T8779] loop2: detected capacity change from 0 to 256 [ 486.455323][ T8779] FAT-fs (loop2): Directory bread(block 64) failed [ 486.475461][ T8779] FAT-fs (loop2): Directory bread(block 65) failed [ 486.477095][ T8779] FAT-fs (loop2): Directory bread(block 66) failed [ 486.543307][ T8782] loop3: detected capacity change from 0 to 16 [ 486.546931][ T8782] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 486.549233][ T8779] FAT-fs (loop2): Directory bread(block 67) failed [ 486.550837][ T8779] FAT-fs (loop2): Directory bread(block 68) failed [ 486.552194][ T8779] FAT-fs (loop2): Directory bread(block 69) failed [ 486.553687][ T8779] FAT-fs (loop2): Directory bread(block 70) failed [ 486.555122][ T8779] FAT-fs (loop2): Directory bread(block 71) failed [ 486.556702][ T8779] FAT-fs (loop2): Directory bread(block 72) failed [ 486.558649][ T8779] FAT-fs (loop2): Directory bread(block 73) failed [ 489.613510][ T8808] loop3: detected capacity change from 0 to 1024 [ 489.748250][ T4185] hfsplus: b-tree write err: -5, ino 4 [ 490.963415][ T8819] netlink: 'syz.3.1352': attribute type 10 has an invalid length. [ 490.976967][ T8819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.986701][ T8819] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 491.038446][ T8821] loop2: detected capacity change from 0 to 16 [ 491.040453][ T8821] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 492.113873][ T8843] loop0: detected capacity change from 0 to 1024 [ 492.120627][ T8840] loop3: detected capacity change from 0 to 4096 [ 492.158589][ T8840] NILFS (loop3): couldn't find nilfs on the device [ 492.193920][ T4101] hfsplus: b-tree write err: -5, ino 4 [ 492.281650][ T8850] loop5: detected capacity change from 0 to 256 [ 492.356842][ T8855] loop3: detected capacity change from 0 to 16 [ 492.371631][ T8850] FAT-fs (loop5): Directory bread(block 64) failed [ 492.373279][ T8850] FAT-fs (loop5): Directory bread(block 65) failed [ 492.374790][ T8850] FAT-fs (loop5): Directory bread(block 66) failed [ 492.396560][ T8850] FAT-fs (loop5): Directory bread(block 67) failed [ 492.398740][ T8850] FAT-fs (loop5): Directory bread(block 68) failed [ 492.400510][ T8850] FAT-fs (loop5): Directory bread(block 69) failed [ 492.402083][ T8850] FAT-fs (loop5): Directory bread(block 70) failed [ 492.403593][ T8850] FAT-fs (loop5): Directory bread(block 71) failed [ 492.405153][ T8850] FAT-fs (loop5): Directory bread(block 72) failed [ 492.408922][ T8855] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 492.422673][ T8850] FAT-fs (loop5): Directory bread(block 73) failed [ 492.668295][ T8072] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 492.726580][ T8836] chnl_net:caif_netlink_parms(): no params data found [ 492.908126][ T8072] usb 1-1: Using ep0 maxpacket: 8 [ 492.926268][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.936171][ T8836] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.940492][ T8836] device bridge_slave_0 entered promiscuous mode [ 493.015573][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.026064][ T8836] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.028361][ T8072] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.030820][ T8072] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 493.033118][ T8072] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 493.039681][ T8072] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 493.048599][ T8072] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 493.056367][ T8072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.139181][ T8836] device bridge_slave_1 entered promiscuous mode [ 493.189704][ T8072] hub 1-1:1.0: bad descriptor, ignoring hub [ 493.191042][ T8072] hub: probe of 1-1:1.0 failed with error -5 [ 493.195724][ T8072] cdc_wdm 1-1:1.0: skipping garbage [ 493.197021][ T8072] cdc_wdm 1-1:1.0: skipping garbage [ 493.660043][ T8072] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 493.661487][ T8072] cdc_wdm 1-1:1.0: Unknown control protocol [ 493.691415][ T8836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.695566][ T8836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.769677][ T8836] team0: Port device team_slave_0 added [ 493.773384][ T8836] team0: Port device team_slave_1 added [ 493.845736][ T8836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.847287][ T8836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.873108][ T8836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.877482][ T8836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.882347][ T8072] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 493.897305][ T8836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.914564][ T8836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.999781][ T8874] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 494.010542][ T8836] device hsr_slave_0 entered promiscuous mode [ 494.058545][ T8836] device hsr_slave_1 entered promiscuous mode [ 494.109386][ T4886] Bluetooth: hci2: command 0x0409 tx timeout [ 494.110930][ T8836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.112616][ T8836] Cannot create hsr debugfs directory [ 494.116295][ T8874] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 494.130198][ T8875] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 494.132476][ T8876] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 494.146601][ T8876] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 494.165408][ T8876] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 494.167720][ T8876] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 494.176167][ T8876] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 494.179098][ T8876] netlink: 'syz.3.1369': attribute type 29 has an invalid length. [ 494.412225][ T8836] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 494.458824][ T8072] usb 1-1: USB disconnect, device number 11 [ 494.474206][ T8836] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 494.529753][ T8836] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 494.593714][ T8836] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 494.633299][ T8885] loop2: detected capacity change from 0 to 1024 [ 494.732443][ T4185] hfsplus: b-tree write err: -5, ino 4 [ 494.829887][ T8836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.852597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 494.854856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.864718][ T8836] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.882518][ T8891] udc-core: couldn't find an available UDC or it's busy [ 494.884154][ T8891] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 494.899706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 494.902242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.904482][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.906553][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.922171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 494.924627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 494.929226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 494.934480][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.936113][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.960019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 494.966855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 494.985594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 494.992533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 495.002607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 495.007260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 495.011266][ T8893] loop0: detected capacity change from 0 to 16 [ 495.023796][ T8836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.026200][ T8836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.034466][ T8893] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 495.041855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 495.044358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 495.046748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 495.054049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 495.062999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.074729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.334987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 495.337633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.363053][ T8836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.369953][ T4068] Bluetooth: hci2: command 0x041b tx timeout [ 496.457080][ T8913] loop2: detected capacity change from 0 to 256 [ 496.503241][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 496.511668][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 496.678258][ T8913] FAT-fs (loop2): Directory bread(block 64) failed [ 496.680008][ T8913] FAT-fs (loop2): Directory bread(block 65) failed [ 496.681486][ T8913] FAT-fs (loop2): Directory bread(block 66) failed [ 496.682982][ T8913] FAT-fs (loop2): Directory bread(block 67) failed [ 496.684523][ T8913] FAT-fs (loop2): Directory bread(block 68) failed [ 496.710491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.713008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.715554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.616179][ T8913] FAT-fs (loop2): Directory bread(block 69) failed [ 497.617854][ T8913] FAT-fs (loop2): Directory bread(block 70) failed [ 497.630769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.635268][ T8836] device veth0_vlan entered promiscuous mode [ 497.648208][ T8913] FAT-fs (loop2): Directory bread(block 71) failed [ 497.649831][ T8913] FAT-fs (loop2): Directory bread(block 72) failed [ 497.674517][ T8913] FAT-fs (loop2): Directory bread(block 73) failed [ 497.677432][ T8836] device veth1_vlan entered promiscuous mode [ 497.730388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 497.733082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 497.741896][ T8836] device veth0_macvtap entered promiscuous mode [ 498.001621][ T8836] device veth1_macvtap entered promiscuous mode [ 498.038169][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.044129][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.046412][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.080914][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.094603][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.097000][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.124620][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.127003][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.156438][ T8836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.171640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.174258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.176831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.182127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.201879][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.208762][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.232905][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.247179][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.256693][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.280345][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.282674][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.284996][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.316909][ T8836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.331068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.333692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.354733][ T8836] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.356703][ T8836] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.358719][ T8836] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.360541][ T8836] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.435261][ T4101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.437304][ T4101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.440091][ T4068] Bluetooth: hci2: command 0x040f tx timeout [ 498.465416][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 498.509524][ T4101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.511739][ T4101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.519574][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 498.708220][ T4068] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 499.710634][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.712181][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.740362][ T6048] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 499.750575][ T8940] loop6: detected capacity change from 0 to 16 [ 499.818877][ T8940] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 499.898243][ T4068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.900943][ T4068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.903240][ T4068] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 499.910038][ T4068] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.914627][ T4068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.922691][ T4068] usb 1-1: config 0 descriptor?? [ 499.973985][ T8946] __nla_validate_parse: 344 callbacks suppressed [ 499.974012][ T8946] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1389'. [ 500.285665][ T8953] loop6: detected capacity change from 0 to 256 [ 500.461171][ T4068] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x4 [ 500.463216][ T4068] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 500.464890][ T4068] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 500.466386][ T4068] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 500.476796][ T4068] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 500.506980][ T4068] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 500.529453][ T4068] Bluetooth: hci2: command 0x0419 tx timeout [ 501.988289][ T8929] usb 1-1: string descriptor 0 read error: -71 [ 502.171615][ T8968] loop0: detected capacity change from 0 to 24 [ 503.087273][ T4064] usb 1-1: USB disconnect, device number 12 [ 504.210650][ T8977] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1398'. [ 504.230422][ T8977] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1398'. [ 504.242824][ T8977] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1398'. [ 504.277748][ T8977] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1398'. [ 504.294638][ T8977] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1398'. [ 504.304812][ T8977] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1398'. [ 504.341988][ T8977] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1398'. [ 504.374731][ T8977] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1398'. [ 504.384698][ T8977] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1398'. [ 505.881552][ T9003] loop3: detected capacity change from 0 to 256 [ 506.894588][ T9003] FAT-fs (loop3): Directory bread(block 64) failed [ 506.896357][ T9003] FAT-fs (loop3): Directory bread(block 65) failed [ 506.897863][ T9003] FAT-fs (loop3): Directory bread(block 66) failed [ 506.928569][ T9003] FAT-fs (loop3): Directory bread(block 67) failed [ 506.930239][ T9003] FAT-fs (loop3): Directory bread(block 68) failed [ 506.937597][ T9003] FAT-fs (loop3): Directory bread(block 69) failed [ 506.950613][ T9003] FAT-fs (loop3): Directory bread(block 70) failed [ 506.952256][ T9003] FAT-fs (loop3): Directory bread(block 71) failed [ 506.953808][ T9003] FAT-fs (loop3): Directory bread(block 72) failed [ 506.955248][ T9003] FAT-fs (loop3): Directory bread(block 73) failed [ 509.451927][ T9029] __nla_validate_parse: 6 callbacks suppressed [ 509.451944][ T9029] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1414'. [ 509.481598][ T9029] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1414'. [ 509.495325][ T9029] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1414'. [ 509.508307][ T9029] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1414'. [ 509.511048][ T9029] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1414'. [ 509.528340][ T9029] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1414'. [ 509.535186][ T9029] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1414'. [ 509.551956][ T9029] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1414'. [ 509.557466][ T9029] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1414'. [ 509.572134][ T9029] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1414'. [ 513.441150][ T9061] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.443557][ T9061] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.445543][ T9061] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.447600][ T9061] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.328909][ T9061] team0: Port device vxlan0 added [ 514.792318][ T9073] __nla_validate_parse: 218 callbacks suppressed [ 514.794539][ T9073] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1426'. [ 514.808293][ T9073] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1426'. [ 514.815007][ T9073] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1426'. [ 514.823933][ T9073] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1426'. [ 514.830687][ T9073] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1426'. [ 514.842071][ T9073] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1426'. [ 514.855425][ T9073] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1426'. [ 514.864350][ T9073] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1426'. [ 514.872330][ T9073] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1426'. [ 514.884331][ T9073] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.1426'. [ 516.211052][ T9087] loop2: detected capacity change from 0 to 256 [ 516.366663][ T9087] FAT-fs (loop2): Directory bread(block 64) failed [ 516.370915][ T9087] FAT-fs (loop2): Directory bread(block 65) failed [ 516.378625][ T9087] FAT-fs (loop2): Directory bread(block 66) failed [ 516.380163][ T9087] FAT-fs (loop2): Directory bread(block 67) failed [ 516.391980][ T9087] FAT-fs (loop2): Directory bread(block 68) failed [ 516.400941][ T9087] FAT-fs (loop2): Directory bread(block 69) failed [ 516.418394][ T9087] FAT-fs (loop2): Directory bread(block 70) failed [ 516.420043][ T9087] FAT-fs (loop2): Directory bread(block 71) failed [ 516.421585][ T9087] FAT-fs (loop2): Directory bread(block 72) failed [ 516.423145][ T9087] FAT-fs (loop2): Directory bread(block 73) failed [ 525.106266][ T9151] loop6: detected capacity change from 0 to 256 [ 525.189871][ T9151] FAT-fs (loop6): Directory bread(block 64) failed [ 525.191514][ T9151] FAT-fs (loop6): Directory bread(block 65) failed [ 525.193192][ T9151] FAT-fs (loop6): Directory bread(block 66) failed [ 525.218298][ T9151] FAT-fs (loop6): Directory bread(block 67) failed [ 525.219895][ T9151] FAT-fs (loop6): Directory bread(block 68) failed [ 525.221408][ T9151] FAT-fs (loop6): Directory bread(block 69) failed [ 525.222957][ T9151] FAT-fs (loop6): Directory bread(block 70) failed [ 525.224434][ T9151] FAT-fs (loop6): Directory bread(block 71) failed [ 525.225880][ T9151] FAT-fs (loop6): Directory bread(block 72) failed [ 525.227367][ T9151] FAT-fs (loop6): Directory bread(block 73) failed [ 527.028946][ T9162] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.031538][ T9162] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.033455][ T9162] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.035499][ T9162] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.129290][ T9162] team0: Port device vxlan0 added [ 530.777315][ T4388] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 532.393584][ T9213] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.395638][ T9213] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.397670][ T9213] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.399778][ T9213] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.469386][ T4611] bond0: (slave vxlan0): interface is now down [ 532.482825][ T9213] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 532.488376][ T4388] bond0: (slave vxlan0): interface is now down [ 532.491791][ T4388] bond0: now running without any active interface! [ 535.798072][ T9241] loop3: detected capacity change from 0 to 256 [ 535.882856][ T9241] FAT-fs (loop3): Directory bread(block 64) failed [ 535.884495][ T9241] FAT-fs (loop3): Directory bread(block 65) failed [ 535.908569][ T9241] FAT-fs (loop3): Directory bread(block 66) failed [ 535.910134][ T9241] FAT-fs (loop3): Directory bread(block 67) failed [ 535.911775][ T9241] FAT-fs (loop3): Directory bread(block 68) failed [ 535.913405][ T9241] FAT-fs (loop3): Directory bread(block 69) failed [ 535.914955][ T9241] FAT-fs (loop3): Directory bread(block 70) failed [ 535.916391][ T9241] FAT-fs (loop3): Directory bread(block 71) failed [ 535.926806][ T9241] FAT-fs (loop3): Directory bread(block 72) failed [ 535.928572][ T9241] FAT-fs (loop3): Directory bread(block 73) failed [ 542.030129][ T9297] loop6: detected capacity change from 0 to 256 [ 542.081120][ T9297] FAT-fs (loop6): Directory bread(block 64) failed [ 542.082768][ T9297] FAT-fs (loop6): Directory bread(block 65) failed [ 542.084428][ T9297] FAT-fs (loop6): Directory bread(block 66) failed [ 542.085919][ T9297] FAT-fs (loop6): Directory bread(block 67) failed [ 542.096057][ T9297] FAT-fs (loop6): Directory bread(block 68) failed [ 542.097758][ T9297] FAT-fs (loop6): Directory bread(block 69) failed [ 542.101095][ T9297] FAT-fs (loop6): Directory bread(block 70) failed [ 542.102613][ T9297] FAT-fs (loop6): Directory bread(block 71) failed [ 542.104045][ T9297] FAT-fs (loop6): Directory bread(block 72) failed [ 542.105511][ T9297] FAT-fs (loop6): Directory bread(block 73) failed [ 547.585971][ T9345] __nla_validate_parse: 317 callbacks suppressed [ 547.585987][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1505'. [ 551.711120][ T9387] loop3: detected capacity change from 0 to 256 [ 551.813180][ T9387] FAT-fs (loop3): Directory bread(block 64) failed [ 551.814774][ T9387] FAT-fs (loop3): Directory bread(block 65) failed [ 551.816374][ T9387] FAT-fs (loop3): Directory bread(block 66) failed [ 551.843182][ T9387] FAT-fs (loop3): Directory bread(block 67) failed [ 551.844784][ T9387] FAT-fs (loop3): Directory bread(block 68) failed [ 551.846297][ T9387] FAT-fs (loop3): Directory bread(block 69) failed [ 551.847784][ T9387] FAT-fs (loop3): Directory bread(block 70) failed [ 551.863144][ T9387] FAT-fs (loop3): Directory bread(block 71) failed [ 551.864797][ T9387] FAT-fs (loop3): Directory bread(block 72) failed [ 551.866322][ T9387] FAT-fs (loop3): Directory bread(block 73) failed [ 559.297190][ T9465] loop5: detected capacity change from 0 to 16 [ 559.319343][ T9465] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 561.086176][ T9480] loop5: detected capacity change from 0 to 256 [ 561.280349][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.281880][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.338549][ T9480] FAT-fs (loop5): Directory bread(block 64) failed [ 561.345555][ T9480] FAT-fs (loop5): Directory bread(block 65) failed [ 561.361559][ T9480] FAT-fs (loop5): Directory bread(block 66) failed [ 561.363506][ T9480] FAT-fs (loop5): Directory bread(block 67) failed [ 561.373209][ T9480] FAT-fs (loop5): Directory bread(block 68) failed [ 561.377104][ T9480] FAT-fs (loop5): Directory bread(block 69) failed [ 561.381137][ T9480] FAT-fs (loop5): Directory bread(block 70) failed [ 561.386843][ T9480] FAT-fs (loop5): Directory bread(block 71) failed [ 561.391289][ T9480] FAT-fs (loop5): Directory bread(block 72) failed [ 561.395338][ T9480] FAT-fs (loop5): Directory bread(block 73) failed [ 562.409603][ T4388] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.745693][ T9502] loop3: detected capacity change from 0 to 16 [ 562.789105][ T9502] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 567.130752][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1566'. [ 570.404566][ T9581] loop6: detected capacity change from 0 to 17 [ 572.223082][ T9602] loop6: detected capacity change from 0 to 1024 [ 574.833377][ T9628] loop5: detected capacity change from 0 to 64 [ 575.160152][ T9635] loop5: detected capacity change from 0 to 16 [ 575.210559][ T9635] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 575.956280][ T9645] binder: 9644:9645 tried to acquire reference to desc 0, got 1 instead [ 575.993044][ T9645] binder: 9644:9645 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 576.018222][ T9645] binder: 9645 RLIMIT_NICE not set [ 576.019952][ T9645] binder: undelivered transaction 8, fd fixups failed [ 576.021877][ T9645] binder: 9644:9645 async transaction 8 fd fixups failed 29201/-12, line 4507 [ 576.040808][ T8069] binder: undelivered TRANSACTION_COMPLETE [ 576.587495][ T9659] loop6: detected capacity change from 0 to 4096 [ 576.639147][ T9666] loop0: detected capacity change from 0 to 128 [ 576.735890][ T9659] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 577.751070][ T9674] loop0: detected capacity change from 0 to 16 [ 577.753155][ T9674] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 578.795605][ T9685] loop0: detected capacity change from 0 to 32768 [ 578.951817][ T9685] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1608 (9685) [ 578.985097][ T9685] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 578.987344][ T9685] BTRFS info (device loop0): using free space tree [ 578.996551][ T9685] BTRFS info (device loop0): has skinny extents [ 579.248225][ T9695] netlink: 988 bytes leftover after parsing attributes in process `syz.6.1612'. [ 579.262618][ T9695] netlink: 988 bytes leftover after parsing attributes in process `syz.6.1612'. [ 579.267439][ T9695] netlink: 988 bytes leftover after parsing attributes in process `syz.6.1612'. [ 579.286054][ T9695] netlink: 988 bytes leftover after parsing attributes in process `syz.6.1612'. [ 579.295772][ T9695] netlink: 988 bytes leftover after parsing attributes in process `syz.6.1612'. [ 579.312935][ T9695] netlink: 988 bytes leftover after parsing attributes in process `syz.6.1612'. [ 579.315405][ T9695] netlink: 988 bytes leftover after parsing attributes in process `syz.6.1612'. [ 579.323480][ T9695] netlink: 988 bytes leftover after parsing attributes in process `syz.6.1612'. [ 579.331081][ T9695] netlink: 988 bytes leftover after parsing attributes in process `syz.6.1612'. [ 579.333869][ T9685] BTRFS info (device loop0): enabling ssd optimizations [ 579.364766][ T9695] netlink: 988 bytes leftover after parsing attributes in process `syz.6.1612'. [ 579.880232][ T9730] loop0: detected capacity change from 0 to 16 [ 579.897279][ T9732] udc-core: couldn't find an available UDC or it's busy [ 579.899133][ T9732] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 579.920036][ T9730] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 580.671305][ T9747] udc-core: couldn't find an available UDC or it's busy [ 580.673171][ T9747] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 582.349332][ T9770] loop2: detected capacity change from 0 to 1024 [ 582.858565][ T9770] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,delalloc,bsdgroups,max_batch_time=0x0000000000000003,lazytime,stripe=0x0000000000000000,nobarrier,data_err=abort,,errors=continue. Quota mode: writeback. [ 583.171042][ T9749] loop5: detected capacity change from 0 to 32768 [ 583.295924][ T9749] [ 583.295924][ T9749] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 583.295924][ T9749] [ 583.449966][ T9774] [ 583.449966][ T9774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 583.449966][ T9774] [ 583.452796][ T9774] [ 583.452796][ T9774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 583.452796][ T9774] [ 583.455282][ T9774] [ 583.455282][ T9774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 583.455282][ T9774] [ 583.498351][ T9774] [ 583.498351][ T9774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 583.498351][ T9774] [ 583.501000][ T9774] [ 583.501000][ T9774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 583.501000][ T9774] [ 583.504082][ T9774] [ 583.504082][ T9774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 583.504082][ T9774] [ 583.577519][ T240] [ 583.577519][ T240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 583.577519][ T240] [ 583.732647][ T6076] [ 583.732647][ T6076] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 583.732647][ T6076] [ 583.758319][ T6076] [ 583.758319][ T6076] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 583.758319][ T6076] [ 584.299918][ T9778] loop2: detected capacity change from 0 to 32768 [ 584.380588][ T9778] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 584.558972][ T4034] ocfs2: Unmounting device (7,2) on (node local) [ 585.694865][ T9790] loop0: detected capacity change from 0 to 32768 [ 587.688800][ T9812] mmap: syz.6.1644 (9812) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 587.849523][ T9810] __nla_validate_parse: 324 callbacks suppressed [ 587.849540][ T9810] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1643'. [ 587.853255][ T9810] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1643'. [ 587.855512][ T9810] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1643'. [ 587.857713][ T9810] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1643'. [ 587.926072][ T9810] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1643'. [ 587.948124][ T9810] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1643'. [ 587.966679][ T9810] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1643'. [ 587.979942][ T9810] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1643'. [ 587.989267][ T9810] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1643'. [ 588.010467][ T9810] netlink: 988 bytes leftover after parsing attributes in process `syz.2.1643'. [ 588.644059][ T9805] loop5: detected capacity change from 0 to 40427 [ 588.720544][ T9805] F2FS-fs (loop5): invalid crc value [ 588.770429][ T9805] F2FS-fs (loop5): Found nat_bits in checkpoint [ 588.829741][ T9805] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 589.446746][ T9838] udc-core: couldn't find an available UDC or it's busy [ 589.455132][ T9838] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 589.624813][ T9840] udc-core: couldn't find an available UDC or it's busy [ 589.626538][ T9840] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 591.147571][ T9864] tipc: MTU too low for tipc bearer [ 591.175281][ T9868] loop6: detected capacity change from 0 to 16 [ 591.228847][ T9868] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 593.097616][ T9872] loop0: detected capacity change from 0 to 32768 [ 593.161910][ T9900] binder: 9899:9900 ioctl 40046205 0 returned -22 [ 593.172054][ T9900] binder: 9899:9900 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 593.175016][ T9900] binder: 9900 RLIMIT_NICE not set [ 593.198975][ T9872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1666 (9872) [ 593.251062][ T9872] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 593.253194][ T9872] BTRFS info (device loop0): setting nodatacow, compression disabled [ 593.255256][ T9872] BTRFS info (device loop0): disabling tree log [ 593.256659][ T9872] BTRFS info (device loop0): turning on sync discard [ 593.261645][ T9907] loop3: detected capacity change from 0 to 16 [ 593.272154][ T9872] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 593.274842][ T9872] BTRFS info (device loop0): force zstd compression, level 3 [ 593.276606][ T9872] BTRFS info (device loop0): using free space tree [ 593.290612][ T9872] BTRFS info (device loop0): has skinny extents [ 593.428731][ T9907] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 593.604064][ T136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 594.418387][ T9872] BTRFS error (device loop0): open_ctree failed [ 594.538442][ T4347] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4347) [ 594.825183][ T9904] loop6: detected capacity change from 0 to 32768 [ 594.872166][ T9904] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1678 (9904) [ 594.915532][ T9904] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 594.918173][ T9904] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 594.920397][ T9904] BTRFS info (device loop6): use zstd compression, level 3 [ 594.926718][ T9904] BTRFS info (device loop6): using free space tree [ 594.933827][ T9904] BTRFS info (device loop6): has skinny extents [ 595.344111][ T9904] BTRFS info (device loop6): enabling ssd optimizations [ 595.372316][ T9969] loop5: detected capacity change from 0 to 512 [ 595.480514][ T9969] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 595.483875][ T9969] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 595.509408][ T9969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 595.511321][ T9969] System zones: 1-12 [ 595.532822][ T9969] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 595.568668][ T9969] EXT4-fs (loop5): 1 truncate cleaned up [ 595.570060][ T9969] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 595.885001][ T26] audit: type=1326 audit(595.850:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92475368 code=0x7ffc0000 [ 595.913132][ T26] audit: type=1326 audit(595.880:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=229 compat=0 ip=0xffff92475368 code=0x7ffc0000 [ 595.926859][ T26] audit: type=1326 audit(595.890:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92475368 code=0x7ffc0000 [ 596.036986][ T26] audit: type=1326 audit(596.000:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f7e7368 code=0x7ffc0000 [ 596.046443][ T26] audit: type=1326 audit(596.010:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=227 compat=0 ip=0xffff8f7e7368 code=0x7ffc0000 [ 596.056557][ T26] audit: type=1326 audit(596.010:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f7e7368 code=0x7ffc0000 [ 596.144135][ T26] audit: type=1326 audit(596.010:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f7e7368 code=0x7ffc0000 [ 596.173759][ T9984] loop6: detected capacity change from 0 to 2048 [ 597.042512][ T9965] loop2: detected capacity change from 0 to 32768 [ 597.101100][ T9984] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 597.163947][ T9965] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1688 (9965) [ 597.198451][ T9965] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 597.209912][ T9965] BTRFS info (device loop2): force zlib compression, level 3 [ 597.221384][ T9965] BTRFS info (device loop2): force clearing of disk cache [ 597.223114][ T9965] BTRFS info (device loop2): setting nodatasum [ 597.249280][ T9965] BTRFS info (device loop2): allowing degraded mounts [ 597.253440][ T9965] BTRFS info (device loop2): enabling disk space caching [ 597.256371][ T9965] BTRFS info (device loop2): disk space caching is enabled [ 597.267374][ T9965] BTRFS info (device loop2): has skinny extents [ 597.383731][T10002] loop6: detected capacity change from 0 to 16 [ 597.385794][T10002] erofs: Unknown parameter '@8\*vCԬygzz]ltc݆' [ 597.524374][ T9965] BTRFS info (device loop2): clearing free space tree [ 597.526387][ T9965] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 597.529994][ T9965] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 597.805073][T10017] fuse: Bad value for 'group_id' [ 598.268514][T10026] udc-core: couldn't find an available UDC or it's busy [ 598.270241][T10026] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 598.705104][T10032] __nla_validate_parse: 261 callbacks suppressed [ 598.705121][T10032] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1704'. [ 598.766737][T10034] loop6: detected capacity change from 0 to 512 [ 598.848982][T10034] EXT4-fs (loop6): Ignoring removed nobh option [ 598.851643][T10034] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 598.906768][T10041] netlink: 'syz.2.1709': attribute type 10 has an invalid length. [ 598.926419][T10034] EXT4-fs (loop6): 1 truncate cleaned up [ 598.934394][T10041] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.935501][T10034] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 598.936203][T10041] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.979376][T10041] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.981505][T10041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.983379][T10041] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.985081][T10041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.786681][T10041] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 599.987919][ T26] audit: type=1326 audit(599.950:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f7e7368 code=0x7ffc0000 [ 599.996177][ T26] audit: type=1326 audit(599.950:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f7e7368 code=0x7ffc0000 [ 600.028132][ T26] audit: type=1326 audit(599.960:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=133 compat=0 ip=0xffff8f7e7368 code=0x7ffc0000 [ 600.271734][ T4064] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 600.508128][ T4064] usb 1-1: Using ep0 maxpacket: 32 [ 601.178194][ T4064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.181288][ T4064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.183719][ T4064] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 601.187041][ T4064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.206638][ T4064] usb 1-1: config 0 descriptor?? [ 601.369423][T10082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1722'. [ 601.791009][ T4064] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 601.798486][ T4064] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 601.821452][T10092] udc-core: couldn't find an available UDC or it's busy [ 601.822995][T10092] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 602.009326][ T4064] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 602.250054][ T4064] Unable to handle kernel paging request at virtual address dfff8000000000fd [ 602.255433][ T4064] Mem abort info: [ 602.256320][ T4064] ESR = 0x0000000096000006 [ 602.257429][ T4064] EC = 0x25: DABT (current EL), IL = 32 bits [ 602.265376][ T4064] SET = 0, FnV = 0 [ 602.266911][ T4064] EA = 0, S1PTW = 0 [ 602.271321][ T4064] FSC = 0x06: level 2 translation fault [ 602.273371][ T4064] Data abort info: [ 602.274368][ T4064] ISV = 0, ISS = 0x00000006 [ 602.275513][ T4064] CM = 0, WnR = 0 [ 602.276408][ T4064] [dfff8000000000fd] address between user and kernel address ranges [ 602.284432][ T4064] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 602.286021][ T4064] Modules linked in: [ 602.286960][ T4064] CPU: 1 PID: 4064 Comm: kworker/1:5 Not tainted 5.15.173-syzkaller #0 [ 602.288892][ T4064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 602.291184][ T4064] Workqueue: usb_hub_wq hub_event [ 602.292348][ T4064] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 602.294082][ T4064] pc : ft260_smbus_xfer+0x6c/0x126c [ 602.295256][ T4064] lr : ft260_smbus_xfer+0x48/0x126c [ 602.296417][ T4064] sp : ffff800020015e80 [ 602.297375][ T4064] x29: ffff800020015ea0 x28: 0000000000000000 x27: 0000000000000000 [ 602.299213][ T4064] x26: 1fffe0001a334835 x25: 0000000000000000 x24: ffff0000d19a41a8 [ 602.301047][ T4064] x23: dfff800000000000 x22: 0000000000000000 x21: 000000010000760e [ 602.302910][ T4064] x20: 1ffff00002947e30 x19: 00000000000007e8 x18: ffff800020015c80 [ 602.304713][ T4064] x17: 1fffe00036835d8e x16: ffff800011ab8a34 x15: 0000000000042183 [ 602.306744][ T4064] x14: ffff800017140500 x13: dfff800000000000 x12: 0000000000100000 [ 602.308670][ T4064] x11: 00000000000ea7df x10: ffff80002aca5000 x9 : 00000000000ea7e0 [ 602.310576][ T4064] x8 : 00000000000000fd x7 : 0000000000000000 x6 : 0000000000000000 [ 602.312554][ T4064] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 [ 602.314298][ T4064] x2 : 0000000000000000 x1 : 0000000000000018 x0 : ffff0000d19a4080 [ 602.316031][ T4064] Call trace: [ 602.316731][ T4064] ft260_smbus_xfer+0x6c/0x126c [ 602.317855][ T4064] __i2c_smbus_xfer+0x570/0x2b70 [ 602.319017][ T4064] i2c_smbus_xfer+0x210/0x31c [ 602.320113][ T4064] i2c_default_probe+0x1c0/0x248 [ 602.321214][ T4064] i2c_do_add_adapter+0x3c4/0x8d4 [ 602.322301][ T4064] __process_new_adapter+0x28/0x3c [ 602.323527][ T4064] bus_for_each_drv+0x158/0x1e0 [ 602.324629][ T4064] i2c_register_adapter+0xd88/0x1040 [ 602.325804][ T4064] i2c_add_adapter+0x170/0x250 [ 602.326876][ T4064] ft260_probe+0x3f0/0x570 [ 602.327902][ T4064] hid_device_probe+0x23c/0x338 [ 602.328913][ T4064] really_probe+0x26c/0xaec [ 602.329917][ T4064] __driver_probe_device+0x194/0x3b4 [ 602.331121][ T4064] driver_probe_device+0x78/0x34c [ 602.332249][ T4064] __device_attach_driver+0x28c/0x4d8 [ 602.333399][ T4064] bus_for_each_drv+0x158/0x1e0 [ 602.334512][ T4064] __device_attach+0x2f0/0x480 [ 602.335530][ T4064] device_initial_probe+0x24/0x34 [ 602.336633][ T4064] bus_probe_device+0xbc/0x1c8 [ 602.337701][ T4064] device_add+0xae0/0xef4 [ 602.338732][ T4064] hid_add_device+0x318/0x4b4 [ 602.339723][ T4064] usbhid_probe+0x868/0xba8 [ 602.340699][ T4064] usb_probe_interface+0x500/0x984 [ 602.341830][ T4064] really_probe+0x26c/0xaec [ 602.342825][ T4064] __driver_probe_device+0x194/0x3b4 [ 602.344058][ T4064] driver_probe_device+0x78/0x34c [ 602.345089][ T4064] __device_attach_driver+0x28c/0x4d8 [ 602.346306][ T4064] bus_for_each_drv+0x158/0x1e0 [ 602.347406][ T4064] __device_attach+0x2f0/0x480 [ 602.348478][ T4064] device_initial_probe+0x24/0x34 [ 602.349534][ T4064] bus_probe_device+0xbc/0x1c8 [ 602.350598][ T4064] device_add+0xae0/0xef4 [ 602.351615][ T4064] usb_set_configuration+0x15e0/0x1b60 [ 602.352716][ T4064] usb_generic_driver_probe+0x8c/0x148 [ 602.353827][ T4064] usb_probe_device+0x120/0x25c [ 602.354863][ T4064] really_probe+0x26c/0xaec [ 602.355789][ T4064] __driver_probe_device+0x194/0x3b4 [ 602.356873][ T4064] driver_probe_device+0x78/0x34c [ 602.357923][ T4064] __device_attach_driver+0x28c/0x4d8 [ 602.359029][ T4064] bus_for_each_drv+0x158/0x1e0 [ 602.360032][ T4064] __device_attach+0x2f0/0x480 [ 602.361001][ T4064] device_initial_probe+0x24/0x34 [ 602.362048][ T4064] bus_probe_device+0xbc/0x1c8 [ 602.363072][ T4064] device_add+0xae0/0xef4 [ 602.363976][ T4064] usb_new_device+0x900/0x145c [ 602.364967][ T4064] hub_event+0x236c/0x46b8 [ 602.365844][ T4064] process_one_work+0x790/0x11b8 [ 602.366979][ T4064] worker_thread+0x910/0x1034 [ 602.368028][ T4064] kthread+0x37c/0x45c [ 602.368946][ T4064] ret_from_fork+0x10/0x20 [ 602.370007][ T4064] Code: 96514f3e f9400276 911fa2d3 d343fe68 (38776908) [ 602.371503][ T4064] ---[ end trace 1c8adcc3ef4e5dcf ]--- [ 603.064345][ T4064] Kernel panic - not syncing: Oops: Fatal exception [ 603.065815][ T4064] SMP: stopping secondary CPUs [ 603.066958][ T4064] Kernel Offset: disabled [ 603.068023][ T4064] CPU features: 0x8,000081c1,21302e40 [ 603.069212][ T4064] Memory Limit: none [ 603.715637][ T4064] Rebooting in 86400 seconds..