last executing test programs: 14.856293576s ago: executing program 5: munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x80, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) write$P9_RSTAT(r2, 0x0, 0x45) 14.487035615s ago: executing program 1: r0 = msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x1065c21cc0096cfa) write$P9_RLOPEN(r2, 0x0, 0x0) rt_sigreturn() msgctl$IPC_RMID(r0, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) 13.880201439s ago: executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mlockall(0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) clock_gettime(0x0, 0x0) 11.497272284s ago: executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000500)=ANY=[@ANYBLOB="06bc9d3a2bb821f2f2adaa8b6f31bc1580ca86b497c89b029a74fa39b5bf37d0599890945a0c6784d58bcde4ee6ebd938030be14ba60ed025327711a6553f8ca3330cf5df85d01d03601a5e4e96e354d415bcbaaba30af721aa7133f41a8d86de038af3fa3adb151bfa7fed9f0e531a122f02180641bd9d7e1e74d9461d31d94aae1656bbc52253cd2eda04a20d25a165eccad162d2397338a24a5e172cb9139c08eafa50e42ae15a3c87eeddc9e6856d478e3e822dd08e5dafd1b14bbc26996d73b1678fd8f9e8faeabd07901a8221e070891de356d5a987f4774ae3794c97a009d18a712655cb8180cb000"/250]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) write(0xffffffffffffffff, &(0x7f0000000400)="6f88b2a60614ef91a3f8ef9e1220b2675bce0f59b2", 0x15) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) sendmmsg$inet6(r4, &(0x7f00000090c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 11.476332836s ago: executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='changehat 0x000000000000'], 0x9e) 11.469165725s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000), 0x4) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0x40400) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) 11.416210276s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x5, 0x5, 0x6, 0x3}, {0x7, 0x80, 0x6, 0x9}, {0x6, 0x2, 0x81, 0x2b29}, {0x3772, 0xac, 0x80, 0x1}, {0x9, 0x5, 0xff, 0x2da9}]}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x1, 0x7ffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r4]}, 0x90) timerfd_create(0x9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10.092181054s ago: executing program 5: open(0x0, 0x0, 0x1d1) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) remap_file_pages(&(0x7f00002f8000/0x4000)=nil, 0x300, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x80184151, 0x0) 9.9981532s ago: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000b70200001400"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x0, 0x8}, 0x48) r4 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") futimesat(r4, &(0x7f0000000040)='./file1\x00', 0x0) 9.946435932s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000009e70818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x1, 0x7, 0x20009, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000), 0x0}, 0x20) 9.794971894s ago: executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfea7) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) 9.554443091s ago: executing program 5: syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r0 = syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 9.281002823s ago: executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpid() chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') pread64(r0, &(0x7f0000002100)=""/4116, 0x1014, 0x101) r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYRES8=r1, @ANYRES32=0xee00, @ANYBLOB="0200", @ANYRES32=r2, @ANYBLOB="02000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="d12400", @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007940), 0x55, 0x30, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) 8.342405764s ago: executing program 0: munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x80, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) write$P9_RSTAT(r2, 0x0, 0x45) 8.267389301s ago: executing program 4: r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) landlock_restrict_self(r1, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 7.56728872s ago: executing program 4: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x800442, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) fchdir(0xffffffffffffffff) fspick(0xffffffffffffff9c, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x7) getegid() socket$unix(0x1, 0x0, 0x0) r1 = gettid() openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) splice(0xffffffffffffffff, &(0x7f0000003880), 0xffffffffffffffff, &(0x7f00000038c0), 0x0, 0xa) syz_open_procfs$userns(0x0, &(0x7f0000000380)) r2 = openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(r2) memfd_create(&(0x7f0000000100)='\xd4\xb4y\x05F%v\xd5\xb2\xe0P(p\xe2\xbd%\x02\xe1\x89|\xe0un\x00\x00\xad\xeb\x7ft\x92\xda\xce\x0f\x89=\xa9\xd8q\'\x00\x00\x00\x00J6h\x11\xf2\xd8f\xbe/\xcdn\xe6\x01\xa7\xfb\x16\xaa\x84\x05A\xa1B\xe1B\x12\xd6\xb7w\xd9\xc4`\x15\xf3\x90\x8e\xe5x\xfe\xdck\x1c\xb1\xde\xf7\xebY;b\xd0[\xed2\x1b\xd0\x80u', 0x0) 6.684272136s ago: executing program 5: socket$packet(0x11, 0x0, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) readv(0xffffffffffffffff, &(0x7f0000000a00)=[{0x0}, {&(0x7f00000008c0)=""/167, 0xa7}, {&(0x7f0000000980)=""/82, 0x52}], 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r7 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendto$inet(r5, &(0x7f00000000c0)="1c", 0x88d5, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000003100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804000, &(0x7f0000000780)=ANY=[], 0x40, 0x2c7, &(0x7f0000000300)="$eJzs3c9rE1sUwPGTpq9JU9rkwePBe6AedKOboY3/QIO0IAaU2hR1IUztREPGpGRCJSK2G3Hr31FcuhPUf6AbcePeXREEN12IkcyPdtJMaqq2SZvvB8q9M+ce7m1nppwJzGT71ouH5aJjFM26jCRVRkQ2ZEck0+r5Zv22tScmYxK2IZcmvn48c/P2nWu5fH5uQXU+t3g5q6pT5948evLy/Lv6xNKrqdcJ2crc3f6S/bT179Z/298XH5QcLTlaqdbV1OVqtW4u25aulJyyoXrDtkzH0lLFsWpt8aJdXV1tqFlZmUyt1izHUbPS0LLV0HpV67WGmvfNUkUNw9DJlAyF2W6B0R6SC5sLC2aua7gZ/9VVoT/Go3bWajkzHhksbB7HogAAwGA5uP73av2YP7az/s8vee0R1//BAn5W/0umt/o/skoaDhttW13r/9ixLQhHrlX/p/zrtx31PwAAAAAAAAAAAAAAAAAAAAAAJ8FOs5luNpvpoA1+EiKSFJFg2xvN8+CnzeGOP06b0IN7SRH7+VphreC1XjxXlJLYYsm0pOWbez74vP781fzctLoy8tZe9/PX1wpxSQT5gUxU/tm/Z7x8bc//S1Lh+bOSln+i589G5Lemu3ghlG9IWt7fk6rYsuKe13v5T2dUr1zPa6Jt/nF33D5d37YBAAAAAMAgM3RXx/27G3cHJKUz7uUf4vOBfff3o/J/L6+oBAAAAAAAv81pPC6btm3VQp0xEXE7Mf8GPWJMq5PoHhqMjkg/Zo9Ln3/3mIgMyiHoVycpIt4e7TVrPHQ5fN5N72XSsRP8B092u4T7/Z8JAAAAwJ+2V/QfIunDsyNcEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6fXV4UF4ztCQeCA9NB0fIEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtqPAAAA//8q4xMz") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) 6.587575349s ago: executing program 2: pipe2(&(0x7f0000000080), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="92", 0x1}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000008f40)=""/4119, 0xfffffddc}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r6 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r6, 0x0, 0x0, 0x2400001) fallocate(r6, 0x3, 0x3, 0xffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.191986187s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xb3d8) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) 6.16698642s ago: executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000700)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x29, 0x4}], 0x18}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@assoc={0x18, 0x117, 0x4, 0xe89f}, @assoc={0x18, 0x117, 0x4, 0xec}], 0x30, 0x20048021}], 0x2, 0x0) 5.450715748s ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0x40400) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) 5.103703975s ago: executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x4, 0x5e}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e21, @broadcast}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x200}, 0x0, 0x0) syz_io_uring_setup(0x2292, &(0x7f0000000640)={0x0, 0x0, 0x2}, &(0x7f0000000400)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000001340)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = socket(0x18, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r8, r7, 0x0, 0x80006) unshare(0x68040200) 4.840369228s ago: executing program 1: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x2, 0x10001}}}}}, 0x0) 4.681804153s ago: executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 4.087772042s ago: executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SOUND_MIXER_READ_CAPS(r3, 0xc018620b, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440000000004bdfa3"], 0x34}}, 0x0) 3.788017759s ago: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, &(0x7f0000000280)=""/38, 0x0, 0x26, 0x1}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000008c0)}, 0x10) 3.767240548s ago: executing program 3: syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) 3.150019308s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000004ec1606e3aad06f80007000000180100002004002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x12) write$cgroup_pid(r3, &(0x7f0000000340), 0x1001) 2.284063645s ago: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpid() chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') pread64(r0, &(0x7f0000002100)=""/4116, 0x1014, 0x101) r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYRES8=r1, @ANYRES32=0xee00, @ANYBLOB="0200", @ANYRES32=r2, @ANYBLOB="02000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="d12400", @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007940), 0x55, 0x30, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) 2.192306311s ago: executing program 2: socket$kcm(0x2, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x30010, &(0x7f0000000380)={[], [{@subj_user={'subj_user', 0x3d, '/dev/cpu/#/msr\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#'}}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\xdd'}}]}, 0x0, 0x47d, &(0x7f0000000e40)="$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") sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file2\x00', 0x18, &(0x7f00000005c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYBLOB="e66b77c3a32196"], 0xfd, 0x5d7e, &(0x7f000000bd00)="$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") open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r7, &(0x7f0000000240), 0x0, 0x10001) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x1000000201005) 1.9403596s ago: executing program 3: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x800442, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) fchdir(0xffffffffffffffff) fspick(0xffffffffffffff9c, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x7) getegid() socket$unix(0x1, 0x0, 0x0) r1 = gettid() openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) splice(0xffffffffffffffff, &(0x7f0000003880), 0xffffffffffffffff, &(0x7f00000038c0), 0x0, 0xa) syz_open_procfs$userns(0x0, &(0x7f0000000380)) r2 = openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(r2) memfd_create(&(0x7f0000000100)='\xd4\xb4y\x05F%v\xd5\xb2\xe0P(p\xe2\xbd%\x02\xe1\x89|\xe0un\x00\x00\xad\xeb\x7ft\x92\xda\xce\x0f\x89=\xa9\xd8q\'\x00\x00\x00\x00J6h\x11\xf2\xd8f\xbe/\xcdn\xe6\x01\xa7\xfb\x16\xaa\x84\x05A\xa1B\xe1B\x12\xd6\xb7w\xd9\xc4`\x15\xf3\x90\x8e\xe5x\xfe\xdck\x1c\xb1\xde\xf7\xebY;b\xd0[\xed2\x1b\xd0\x80u', 0x0) 1.175464395s ago: executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000700)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x29, 0x4}], 0x18}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@assoc={0x18, 0x117, 0x4, 0xe89f}, @assoc={0x18, 0x117, 0x4, 0xec}], 0x30, 0x20048021}], 0x2, 0x0) 820.617048ms ago: executing program 0: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 644.445859ms ago: executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x200, 0xf0, 0x0, 0x310, 0x310, 0x310, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'wg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2}}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000003400048030000180080001006e617400240002800800014000000000080002400000000208000340000000160800044000000080"], 0x88}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8100000086dd604f3bf500483a0020010000000000000000000000000802ff020000000000000000000000000001010090780000000060456e5a00000000fe880000000000000000000000000001fdffffff0000004a02000000000000bb110000000000000000000000000000000006000000000000"], 0x0) 536.234773ms ago: executing program 1: syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x7e1, &(0x7f0000001100)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0xff68, 0x0) 0s ago: executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$isdn(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) kernel console output (not intermixed with test programs): .899243][ T29] audit: type=1326 audit(1719025410.975:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faddda7d0a9 code=0x7ffc0000 [ 442.936051][ T29] audit: type=1326 audit(1719025410.975:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddda7d0a9 code=0x7ffc0000 [ 442.965664][ T29] audit: type=1326 audit(1719025410.975:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddda7d0a9 code=0x7ffc0000 [ 442.971111][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 442.999248][ T29] audit: type=1326 audit(1719025410.985:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7faddda7d0a9 code=0x7ffc0000 [ 443.010223][ T9925] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 443.023951][ T29] audit: type=1326 audit(1719025410.985:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddda7d0a9 code=0x7ffc0000 [ 443.071848][ T29] audit: type=1326 audit(1719025410.985:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddda7d0a9 code=0x7ffc0000 [ 443.263918][ T9726] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 443.376649][ T9726] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 443.388667][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 443.424784][ T9726] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 443.485044][ T9726] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 443.776012][ T9614] veth0_vlan: entered promiscuous mode [ 443.846480][ T9614] veth1_vlan: entered promiscuous mode [ 443.979953][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.237422][ T9781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.263017][ T9781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.324629][ T9614] veth0_macvtap: entered promiscuous mode [ 444.800660][ T9781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 445.049518][ T9781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 445.099772][ T9614] veth1_macvtap: entered promiscuous mode [ 445.134050][ T9759] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.217885][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.225221][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.297010][ T9967] can: request_module (can-proto-0) failed. [ 445.319816][ T9726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.379519][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.404796][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.423611][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.443354][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.467025][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.513651][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.520881][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.571973][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.608571][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.638976][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.666775][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.692259][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.742620][ T9614] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.758897][ T9614] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.768513][ T9614] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.781292][ T9614] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.921777][ T9726] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.981248][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.988532][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.035900][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.043139][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.334376][ T9975] loop3: detected capacity change from 0 to 32768 [ 446.403170][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.430219][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.458901][ T9975] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 446.470862][ T9726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.675745][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.693703][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.702433][ T9781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.781119][ T9975] XFS (loop3): Ending clean mount [ 446.849562][ T9975] XFS (loop3): Quotacheck needed: Please wait. [ 446.868646][ T9781] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.976046][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.983366][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.025738][ T9975] XFS (loop3): Quotacheck: Done. [ 447.099291][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.106552][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.253910][ T9094] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 447.274187][ T9986] loop0: detected capacity change from 0 to 32768 [ 447.341744][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.584716][ T9726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.538385][ T9781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.921914][ T9759] veth0_vlan: entered promiscuous mode [ 449.027376][ T9726] veth0_vlan: entered promiscuous mode [ 449.046005][ T9781] veth0_vlan: entered promiscuous mode [ 449.094760][ T9759] veth1_vlan: entered promiscuous mode [ 449.144589][ T9726] veth1_vlan: entered promiscuous mode [ 449.183039][ T9781] veth1_vlan: entered promiscuous mode [ 449.371500][ T9759] veth0_macvtap: entered promiscuous mode [ 449.475660][ T9759] veth1_macvtap: entered promiscuous mode [ 449.496769][ T9726] veth0_macvtap: entered promiscuous mode [ 449.529559][ T9781] veth0_macvtap: entered promiscuous mode [ 449.570168][ T9781] veth1_macvtap: entered promiscuous mode [ 449.642989][ T9726] veth1_macvtap: entered promiscuous mode [ 449.649357][T10034] loop1: detected capacity change from 0 to 32768 [ 449.743808][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.779143][T10034] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 449.801729][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.843537][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.883231][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.893185][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.958404][T10034] XFS (loop1): Ending clean mount [ 449.974543][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.015084][T10034] XFS (loop1): Quotacheck needed: Please wait. [ 450.046362][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.156920][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.187851][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.188918][T10034] XFS (loop1): Quotacheck: Done. [ 450.208183][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.222028][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.239648][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.250612][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.262997][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.297854][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.341840][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.377149][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.409846][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.440615][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.470150][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.503516][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.543447][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.565873][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.595570][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.633244][T10079] loop3: detected capacity change from 0 to 136 [ 450.643687][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.673946][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.698625][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.720715][ T9614] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 450.723818][T10079] iso9660: Bad value for 'map' [ 450.772515][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.790911][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.800876][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.818269][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.829324][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.854839][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.876013][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.894728][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.936968][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.966417][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.978259][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.996151][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.011546][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.028894][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.050555][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.115320][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.165963][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.209265][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.228310][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.256413][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.268563][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.292917][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.308844][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.319967][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.347014][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.362392][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.407312][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.493234][ T9759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.533638][ T9759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.562810][ T9759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.593364][ T9759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.648610][ T9781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.669710][ T9781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.690034][ T9781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.711325][ T9781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.739369][ T9726] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.781022][ T9726] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.798469][ T9726] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.810277][ T9726] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.245693][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 452.270424][ T6797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.317002][ T6797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.427256][ T2862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.463182][ T2862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.535613][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.555159][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.766505][ T2862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.805717][ T2862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.945811][ T6797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.976432][ T6797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.038358][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.070844][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.573634][ T5178] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 454.195275][ T5178] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 454.229446][ T5178] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.299598][ T5178] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 454.332604][ T5178] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 454.384722][ T5178] usb 5-1: Manufacturer: syz [ 454.392872][ T5178] usb 5-1: config 0 descriptor?? [ 454.428047][ T5178] igorplugusb 5-1:0.0: incorrect number of endpoints [ 455.958276][T10148] loop5: detected capacity change from 0 to 136 [ 455.972502][T10120] loop1: detected capacity change from 0 to 32768 [ 456.050142][T10148] iso9660: Bad value for 'map' [ 456.177396][T10120] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 456.487615][T10120] XFS (loop1): Ending clean mount [ 456.536346][T10120] XFS (loop1): Quotacheck needed: Please wait. [ 456.744962][T10120] XFS (loop1): Quotacheck: Done. [ 456.803554][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 456.803574][ T29] audit: type=1804 audit(1719025425.025:252): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1653443914/syzkaller.IVcz8l/4/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 457.160740][T10143] loop3: detected capacity change from 0 to 32768 [ 457.190787][ T9614] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 457.326779][ T5181] usb 5-1: USB disconnect, device number 16 [ 457.344457][ T29] audit: type=1804 audit(1719025425.565:253): pid=10143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3589163232/syzkaller.A9iwue/44/file0/file1" dev="loop3" ino=4 res=1 errno=0 [ 457.492046][T10140] loop2: detected capacity change from 0 to 32768 [ 457.520799][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 457.590193][T10140] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 457.978732][T10140] XFS (loop2): Ending clean mount [ 458.032584][T10140] XFS (loop2): Quotacheck needed: Please wait. [ 458.183433][T10140] XFS (loop2): Quotacheck: Done. [ 458.374003][ T9781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 460.936936][T10226] loop1: detected capacity change from 0 to 40427 [ 460.972546][T10226] F2FS-fs (loop1): invalid crc value [ 460.997248][T10226] F2FS-fs (loop1): Found nat_bits in checkpoint [ 461.092913][T10226] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 461.365069][T10232] loop0: detected capacity change from 0 to 136 [ 461.591310][T10234] syz-executor.1: attempt to access beyond end of device [ 461.591310][T10234] loop1: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 461.634291][ T29] audit: type=1800 audit(1719025429.775:254): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="overlay" ino=28 res=0 errno=0 [ 461.758217][T10232] iso9660: Bad value for 'map' [ 461.844096][ T29] audit: type=1804 audit(1719025429.835:255): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1653443914/syzkaller.IVcz8l/7/file0/bus/file2" dev="overlay" ino=28 res=1 errno=0 [ 461.870236][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.124945][ T9446] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 462.159146][T10219] loop4: detected capacity change from 0 to 32768 [ 462.183865][ T9614] syz-executor.1: attempt to access beyond end of device [ 462.183865][ T9614] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 462.278750][T10219] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 462.296952][ T9614] syz-executor.1: attempt to access beyond end of device [ 462.296952][ T9614] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 462.610572][T10219] XFS (loop4): Ending clean mount [ 462.635882][T10219] XFS (loop4): Quotacheck needed: Please wait. [ 462.691567][ T2879] kworker/u8:12: attempt to access beyond end of device [ 462.691567][ T2879] loop1: rw=2049, sector=40960, nr_sectors = 128 limit=40427 [ 462.726370][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.734619][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.751021][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.802974][T10219] XFS (loop4): Quotacheck: Done. [ 462.821429][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.849476][ T29] audit: type=1804 audit(1719025431.065:256): pid=10219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3414783340/syzkaller.XIUG1B/3/file0/bus" dev="loop4" ino=9290 res=1 errno=0 [ 462.882590][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.902562][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.912590][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.923258][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.930434][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.938362][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.949371][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.957145][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.964892][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.972895][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 462.985112][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 463.006542][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 463.010488][T10258] ptrace attach of "/root/syz-executor.2 exec"[9781] was attempted by "/root/syz-executor.2 exec"[10258] [ 463.226147][ T9726] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 464.014297][ T2879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.315647][T10270] loop2: detected capacity change from 0 to 8 [ 464.341906][ T2879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.646116][ T2879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.177768][T10278] loop3: detected capacity change from 0 to 40427 [ 465.210074][ T2879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.235737][T10278] F2FS-fs (loop3): invalid crc value [ 465.288510][T10270] SQUASHFS error: lzo decompression failed, data probably corrupt [ 465.301082][T10278] F2FS-fs (loop3): Found nat_bits in checkpoint [ 465.374969][T10270] SQUASHFS error: Failed to read block 0x0: -5 [ 465.387862][T10270] SQUASHFS error: lzo decompression failed, data probably corrupt [ 465.397705][T10278] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 465.631682][T10270] SQUASHFS error: Failed to read block 0x0: -5 [ 465.814171][T10285] syz-executor.3: attempt to access beyond end of device [ 465.814171][T10285] loop3: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 465.994359][ T29] audit: type=1800 audit(1719025434.025:257): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="overlay" ino=28 res=0 errno=0 [ 466.015544][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.331729][ T29] audit: type=1804 audit(1719025434.055:258): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3589163232/syzkaller.A9iwue/48/file0/bus/file2" dev="overlay" ino=28 res=1 errno=0 [ 466.425583][ T29] audit: type=1800 audit(1719025434.505:259): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 466.460973][ T9094] syz-executor.3: attempt to access beyond end of device [ 466.460973][ T9094] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 466.533703][ T9094] syz-executor.3: attempt to access beyond end of device [ 466.533703][ T9094] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 466.705269][ T2879] bridge_slave_1: left allmulticast mode [ 466.743242][ T2879] bridge_slave_1: left promiscuous mode [ 466.763573][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.832316][T10288] loop0: detected capacity change from 0 to 136 [ 466.850716][ T2879] bridge_slave_0: left allmulticast mode [ 466.881903][ T2879] bridge_slave_0: left promiscuous mode [ 466.910585][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.922691][T10288] iso9660: Bad value for 'map' [ 467.104574][ T6797] kworker/u8:25: attempt to access beyond end of device [ 467.104574][ T6797] loop3: rw=2049, sector=40960, nr_sectors = 128 limit=40427 [ 467.219003][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.252734][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.289499][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.330462][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.371921][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.418615][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.458155][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.484282][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.551846][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.631708][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.650932][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.664812][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.672546][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.681938][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.690086][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 467.698570][ T6797] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 468.050544][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.070961][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.080198][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.097969][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.116883][ T5138] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 468.133383][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.741133][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.759241][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.812963][ T2879] bond0 (unregistering): Released all slaves [ 469.013046][T10300] loop4: detected capacity change from 0 to 4096 [ 469.066385][T10300] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 469.111153][T10300] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 469.152064][T10302] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 469.361450][T10302] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 770) > current cno (= 3) [ 469.423585][T10302] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=5) [ 469.503667][T10302] Remounting filesystem read-only [ 469.592269][ T9726] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 469.635462][ T9726] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 469.642163][ T9726] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 469.655702][ T9726] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 469.662608][ T9726] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 469.697249][ T9726] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 469.704500][ T9726] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 469.711942][ T9726] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 469.730896][ T9726] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 469.745139][ T9726] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 469.767313][ T9726] NILFS (loop4): discard dirty block: blocknr=27, size=4096 [ 469.800392][ T9726] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 469.849093][ T9726] NILFS (loop4): discard dirty block: blocknr=26, size=4096 [ 469.881116][ T9726] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 469.918257][T10306] loop0: detected capacity change from 0 to 8192 [ 469.943867][ T9726] NILFS (loop4): discard dirty block: blocknr=28, size=4096 [ 469.953645][ T5182] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 469.993218][ T9726] NILFS (loop4): discard dirty page: offset=4096, ino=3 [ 470.020740][ T9726] NILFS (loop4): discard dirty block: blocknr=29, size=4096 [ 470.075592][T10306] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 470.075808][ T9726] NILFS (loop4): discard dirty page: offset=8192, ino=3 [ 470.097724][ T9726] NILFS (loop4): discard dirty block: blocknr=30, size=4096 [ 470.131923][ T2879] hsr_slave_0: left promiscuous mode [ 470.134726][T10306] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 470.145615][T10306] loop0: p2 p3 p4 [ 470.149897][T10306] loop0: partition table partially beyond EOD, truncated [ 470.164457][T10306] loop0: p2 start 452985600 is beyond EOD, truncated [ 470.172987][T10306] loop0: p3 size 33554432 extends beyond EOD, truncated [ 470.195494][ T5138] Bluetooth: hci3: command tx timeout [ 470.224275][T10306] loop0: p4 start 8388607 is beyond EOD, truncated [ 470.261782][ T5182] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 470.289412][ T2879] hsr_slave_1: left promiscuous mode [ 470.308226][ T5182] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.344049][ T5182] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 470.379019][ T2879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.390342][ T5182] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 470.400907][T10298] loop5: detected capacity change from 0 to 32768 [ 470.408067][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.459831][ T5182] usb 3-1: Manufacturer: syz [ 470.476908][ T2879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.486303][ T5182] usb 3-1: config 0 descriptor?? [ 470.515810][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.518936][ T5182] igorplugusb 3-1:0.0: incorrect number of endpoints [ 470.648575][T10298] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 470.770299][ T2879] veth1_macvtap: left promiscuous mode [ 470.809558][ T2879] veth0_macvtap: left promiscuous mode [ 470.868514][ T2879] veth1_vlan: left promiscuous mode [ 470.923520][ T2879] veth0_vlan: left promiscuous mode [ 471.090213][T10298] XFS (loop5): Ending clean mount [ 471.141234][T10298] XFS (loop5): Quotacheck needed: Please wait. [ 471.324888][T10298] XFS (loop5): Quotacheck: Done. [ 472.323710][ T5138] Bluetooth: hci3: command tx timeout [ 472.423270][T10339] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 472.563933][ T9759] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 472.988679][ T5123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.006580][ T5123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.017394][ T5123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.037217][ T5123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.063670][ T5123] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 473.071133][ T5123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 473.850388][T10346] loop4: detected capacity change from 0 to 32768 [ 474.037846][T10346] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 474.059733][T10346] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 474.126389][T10346] bcachefs (loop4): alloc_read... done [ 474.132073][T10346] bcachefs (loop4): stripes_read... done [ 474.140085][T10346] bcachefs (loop4): snapshots_read... done [ 474.163491][T10346] bcachefs (loop4): journal_replay... done [ 474.170985][T10346] bcachefs (loop4): resume_logged_ops... done [ 474.181227][T10346] bcachefs (loop4): going read-write [ 474.201361][T10346] bcachefs (loop4): done starting filesystem [ 474.202943][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 474.352788][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 474.360116][ T5138] Bluetooth: hci3: command tx timeout [ 474.510169][ T9726] bcachefs (loop4): shutting down [ 474.523494][ T9726] bcachefs (loop4): going read-only [ 474.528910][ T9726] bcachefs (loop4): finished waiting for writes to stop [ 474.545291][ T9726] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 474.602059][ T9726] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 474.613184][ T9726] bcachefs (loop4): shutdown complete, journal seq 15 [ 474.646098][ T9726] bcachefs (loop4): marking filesystem clean [ 474.766221][ T9726] bcachefs (loop4): shutdown complete [ 475.156444][ T5138] Bluetooth: hci5: command tx timeout [ 475.230816][ T5123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 475.241539][ T5123] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 475.258572][ T5123] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 475.289141][ T5123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 475.338274][ T5123] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 475.352660][ T5123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 476.331592][T10291] chnl_net:caif_netlink_parms(): no params data found [ 476.433625][ T5138] Bluetooth: hci3: command tx timeout [ 476.940774][ T5181] usb 3-1: USB disconnect, device number 12 [ 477.234287][ T5138] Bluetooth: hci5: command tx timeout [ 477.246444][T10291] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.281344][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.289661][T10291] bridge_slave_0: entered allmulticast mode [ 477.297509][T10291] bridge_slave_0: entered promiscuous mode [ 477.338388][ T2879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.451104][T10291] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.471132][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.485950][ T5138] Bluetooth: hci6: command tx timeout [ 477.498305][T10291] bridge_slave_1: entered allmulticast mode [ 477.517909][T10291] bridge_slave_1: entered promiscuous mode [ 477.716902][ T2879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.798540][T10291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.847256][T10412] loop0: detected capacity change from 0 to 512 [ 477.911977][T10412] EXT4-fs (loop0): Test dummy encryption mode enabled [ 477.960305][T10412] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 478.014409][ T2879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.038028][T10412] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 478.076995][T10291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.077481][T10412] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.144833][T10366] chnl_net:caif_netlink_parms(): no params data found [ 478.200494][T10416] loop5: detected capacity change from 0 to 512 [ 478.255917][T10416] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 478.300214][ T2879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.310802][T10416] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz-executor.5: invalid indirect mapped block 512 (level 0) [ 478.336219][T10416] EXT4-fs (loop5): Remounting filesystem read-only [ 478.351919][T10416] EXT4-fs (loop5): 1 orphan inode deleted [ 478.383492][T10416] EXT4-fs (loop5): 1 truncate cleaned up [ 478.390798][T10416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.410935][T10291] team0: Port device team_slave_0 added [ 478.417383][T10412] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 478.439845][T10345] chnl_net:caif_netlink_parms(): no params data found [ 478.515108][T10291] team0: Port device team_slave_1 added [ 478.788627][ T9294] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 479.044270][T10291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.051273][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.135421][T10291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.136065][ T9759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.184422][T10291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.213413][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.270038][T10291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.309741][T10366] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.325952][ T5138] Bluetooth: hci5: command tx timeout [ 479.331732][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.375485][T10366] bridge_slave_0: entered allmulticast mode [ 479.382793][T10366] bridge_slave_0: entered promiscuous mode [ 479.553597][ T5138] Bluetooth: hci6: command tx timeout [ 479.739277][T10366] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.754432][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.761791][T10366] bridge_slave_1: entered allmulticast mode [ 479.795437][T10366] bridge_slave_1: entered promiscuous mode [ 479.925672][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 479.950149][T10345] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.968322][T10345] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.984268][T10345] bridge_slave_0: entered allmulticast mode [ 480.002378][T10345] bridge_slave_0: entered promiscuous mode [ 480.102583][T10291] hsr_slave_0: entered promiscuous mode [ 480.125622][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.138469][T10291] hsr_slave_1: entered promiscuous mode [ 480.143417][ T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 480.162329][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 480.171737][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.171941][T10291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.194528][ T8] usb 6-1: config 0 descriptor?? [ 480.201318][T10291] Cannot create hsr debugfs directory [ 480.289647][T10345] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.309604][T10345] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.326302][T10345] bridge_slave_1: entered allmulticast mode [ 480.346273][T10345] bridge_slave_1: entered promiscuous mode [ 480.441473][T10434] loop0: detected capacity change from 0 to 32768 [ 480.541893][T10434] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 480.598021][T10366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.746949][T10434] XFS (loop0): Ending clean mount [ 480.762683][T10434] XFS (loop0): Quotacheck needed: Please wait. [ 480.769754][ T2879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.865007][T10434] XFS (loop0): Quotacheck: Done. [ 480.897531][T10366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.951016][ T29] audit: type=1804 audit(1719025449.165:260): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2071103307/syzkaller.m2MVNK/59/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 481.051370][T10345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.061797][ T9294] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 481.151186][ T2879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.247108][T10366] team0: Port device team_slave_0 added [ 481.262830][T10345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.345761][ T2879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.371514][T10366] team0: Port device team_slave_1 added [ 481.400673][ T5138] Bluetooth: hci5: command tx timeout [ 481.637923][ T5138] Bluetooth: hci6: command tx timeout [ 481.721700][ T2879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.934903][T10345] team0: Port device team_slave_0 added [ 482.017772][T10366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.031628][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.080259][T10366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.109874][T10345] team0: Port device team_slave_1 added [ 482.208911][T10366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.216264][ T5125] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 482.243221][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.287618][T10366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.434505][T10345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.447804][T10345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.498480][ T5125] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 482.511050][T10345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.518986][ T5125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.557197][T10345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.579524][ T5125] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 482.598712][T10345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.605694][ T5125] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 482.647218][ T8] usb 6-1: string descriptor 0 read error: -71 [ 482.653637][ T5125] usb 3-1: Manufacturer: syz [ 482.656470][ T5125] usb 3-1: config 0 descriptor?? [ 482.703339][T10345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.733596][ T8] usb 6-1: USB disconnect, device number 9 [ 482.736401][ T5125] igorplugusb 3-1:0.0: incorrect number of endpoints [ 483.027905][T10366] hsr_slave_0: entered promiscuous mode [ 483.091005][T10366] hsr_slave_1: entered promiscuous mode [ 483.119974][T10366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.130868][T10366] Cannot create hsr debugfs directory [ 483.595413][T10492] mmap: syz-executor.0 (10492) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 483.713617][ T5138] Bluetooth: hci6: command tx timeout [ 484.287370][T10345] hsr_slave_0: entered promiscuous mode [ 484.330622][T10345] hsr_slave_1: entered promiscuous mode [ 484.341244][T10345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.356244][T10345] Cannot create hsr debugfs directory [ 484.837898][ T2879] bridge_slave_1: left allmulticast mode [ 484.861141][ T2879] bridge_slave_1: left promiscuous mode [ 484.870196][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.891860][ T2879] bridge_slave_0: left allmulticast mode [ 484.904523][ T2879] bridge_slave_0: left promiscuous mode [ 484.919533][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.963148][ T2879] bridge_slave_1: left allmulticast mode [ 484.973526][ T2879] bridge_slave_1: left promiscuous mode [ 484.993575][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.007217][ T2879] bridge_slave_0: left allmulticast mode [ 485.023037][ T2879] bridge_slave_0: left promiscuous mode [ 485.033592][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.279314][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.319866][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.337172][ T2879] bond0 (unregistering): Released all slaves [ 486.547409][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.578043][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.595685][ T2879] bond0 (unregistering): Released all slaves [ 488.029021][ T5177] usb 3-1: USB disconnect, device number 13 [ 488.068149][T10291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 488.115720][T10291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 488.144316][T10291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 488.262272][ T2879] hsr_slave_0: left promiscuous mode [ 488.283541][ T2879] hsr_slave_1: left promiscuous mode [ 488.298561][ T2879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.307796][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.317483][ T2879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.326396][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.342460][ T2879] hsr_slave_0: left promiscuous mode [ 488.348661][ T2879] hsr_slave_1: left promiscuous mode [ 488.364346][ T2879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.371923][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.385738][ T2879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.394702][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.470887][ T2879] veth1_macvtap: left promiscuous mode [ 488.484958][ T2879] veth0_macvtap: left promiscuous mode [ 488.490688][ T2879] veth1_vlan: left promiscuous mode [ 488.507232][ T2879] veth0_vlan: left promiscuous mode [ 488.528602][ T2879] veth1_macvtap: left promiscuous mode [ 488.550938][ T2879] veth0_macvtap: left promiscuous mode [ 488.568271][ T2879] veth1_vlan: left promiscuous mode [ 488.578544][ T2879] veth0_vlan: left promiscuous mode [ 489.416275][T10507] loop0: detected capacity change from 0 to 32768 [ 489.487250][T10507] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 489.600766][T10507] XFS (loop0): Ending clean mount [ 489.614413][T10507] XFS (loop0): Quotacheck needed: Please wait. [ 489.726786][T10507] XFS (loop0): Quotacheck: Done. [ 489.769351][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 489.839255][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 489.907294][ T9294] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 490.734603][T10518] loop0: detected capacity change from 0 to 1764 [ 490.932351][T10518] No control pipe specified [ 490.959780][ T29] audit: type=1326 audit(1719025459.165:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdb607d0a9 code=0x0 [ 491.507892][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 491.578621][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 492.326626][T10521] loop0: detected capacity change from 0 to 32768 [ 492.392767][T10291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 492.441706][T10521] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 492.473208][T10499] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 492.764935][T10521] XFS (loop0): Ending clean mount [ 492.816392][T10521] XFS (loop0): Quotacheck needed: Please wait. [ 492.912117][T10291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.961955][ T29] audit: type=1326 audit(1719025461.165:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c6e7d0a9 code=0x0 [ 492.997600][T10521] XFS (loop0): Quotacheck: Done. [ 493.036457][T10291] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.075021][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.082316][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.115375][ T29] audit: type=1804 audit(1719025461.335:263): pid=10536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2071103307/syzkaller.m2MVNK/67/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 493.141109][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.167126][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.174443][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.296937][ T9294] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 493.441062][T10291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 493.456494][T10291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.520973][T10366] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 493.675732][T10366] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 493.791024][T10366] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 493.845324][T10366] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 494.600046][T10291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.717081][T10552] loop5: detected capacity change from 0 to 40427 [ 494.742559][T10552] F2FS-fs (loop5): invalid crc value [ 494.778013][T10552] F2FS-fs (loop5): Found nat_bits in checkpoint [ 494.842981][T10552] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 495.131476][T10345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 495.329277][ T29] audit: type=1800 audit(1719025463.535:264): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="overlay" ino=28 res=0 errno=0 [ 495.503663][T10345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 495.561543][ T29] audit: type=1804 audit(1719025463.545:265): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2468880702/syzkaller.HeC27t/23/file0/bus/file2" dev="overlay" ino=28 res=1 errno=0 [ 495.879430][ T9759] syz-executor.5: attempt to access beyond end of device [ 495.879430][ T9759] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 495.923573][ T9759] syz-executor.5: attempt to access beyond end of device [ 495.923573][ T9759] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 496.024729][T10345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 496.085073][T10345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 496.230028][T10366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.252983][ T2812] kworker/u8:10: attempt to access beyond end of device [ 496.252983][ T2812] loop5: rw=2049, sector=40960, nr_sectors = 128 limit=40427 [ 496.295778][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.309924][T10291] veth0_vlan: entered promiscuous mode [ 496.313490][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.322499][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.330677][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.347429][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.369909][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.392218][T10291] veth1_vlan: entered promiscuous mode [ 496.407014][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.460049][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.479666][T10366] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.509174][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.516423][ T5207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.523575][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.540526][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.560505][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.565628][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.567771][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.588672][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.612137][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.628147][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.640302][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.652590][ T2812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 496.890966][T10291] veth0_macvtap: entered promiscuous mode [ 497.067406][T10291] veth1_macvtap: entered promiscuous mode [ 497.228036][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.253469][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.289393][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.317776][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.348563][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.390842][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.429413][T10291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.547073][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.587754][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.634085][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.665159][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.695666][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.733227][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.777784][T10291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.880610][ T6797] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.000513][T10345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.028093][T10291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.058803][T10291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.072549][T10291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.091157][T10291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.185493][ T6797] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.294613][T10345] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.452363][ T6797] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.505668][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.512873][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.573021][T10366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.753874][ T6797] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.805651][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.812899][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.217782][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.235673][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.246622][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.255613][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.276055][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 499.290754][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.384582][ T2862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.392450][ T2862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.726754][ T2879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.735161][ T6797] bridge_slave_1: left allmulticast mode [ 499.740826][ T6797] bridge_slave_1: left promiscuous mode [ 499.760243][ T2879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.773894][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.819168][ T6797] bridge_slave_0: left allmulticast mode [ 499.835574][ T6797] bridge_slave_0: left promiscuous mode [ 499.855368][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.970539][T10594] loop0: detected capacity change from 0 to 32768 [ 500.094722][T10594] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 500.329400][T10594] XFS (loop0): Ending clean mount [ 500.367816][T10594] XFS (loop0): Quotacheck needed: Please wait. [ 500.505239][T10594] XFS (loop0): Quotacheck: Done. [ 501.207497][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.222944][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.445114][ T9294] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 501.481629][ T5138] Bluetooth: hci1: command tx timeout [ 501.757296][ T6797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.824898][ T6797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.898411][ T6797] bond0 (unregistering): Released all slaves [ 502.233170][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 502.322837][T10654] loop2: detected capacity change from 0 to 128 [ 502.410761][T10654] FAT-fs (loop2): Directory bread(block 160) failed [ 502.440786][T10654] FAT-fs (loop2): Directory bread(block 161) failed [ 502.465423][T10654] FAT-fs (loop2): Directory bread(block 162) failed [ 502.487031][T10654] FAT-fs (loop2): Directory bread(block 163) failed [ 502.503453][T10654] FAT-fs (loop2): Directory bread(block 164) failed [ 502.520682][T10654] FAT-fs (loop2): Directory bread(block 165) failed [ 502.533196][T10654] FAT-fs (loop2): Directory bread(block 166) failed [ 502.542578][T10654] FAT-fs (loop2): Directory bread(block 167) failed [ 502.556584][T10654] FAT-fs (loop2): Directory bread(block 160) failed [ 502.564608][T10654] FAT-fs (loop2): Directory bread(block 161) failed [ 502.683407][ T29] audit: type=1326 audit(1719025470.885:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdb607d0a9 code=0x0 [ 502.927868][T10366] veth0_vlan: entered promiscuous mode [ 502.967035][ T6797] hsr_slave_0: left promiscuous mode [ 502.991235][ T6797] hsr_slave_1: left promiscuous mode [ 503.010362][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.021887][ T6797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.069895][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.098654][ T6797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.204664][ T6797] veth1_macvtap: left promiscuous mode [ 503.210518][ T6797] veth0_macvtap: left promiscuous mode [ 503.217607][ T6797] veth1_vlan: left promiscuous mode [ 503.232327][ T6797] veth0_vlan: left promiscuous mode [ 503.554291][ T5138] Bluetooth: hci1: command tx timeout [ 504.551465][ T6797] team0 (unregistering): Port device team_slave_1 removed [ 504.609133][ T6797] team0 (unregistering): Port device team_slave_0 removed [ 505.693536][ T5138] Bluetooth: hci1: command tx timeout [ 507.723474][ T5123] Bluetooth: hci1: command tx timeout [ 507.971268][T10366] veth1_vlan: entered promiscuous mode [ 508.067915][T10345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.107201][T10604] chnl_net:caif_netlink_parms(): no params data found [ 508.331916][T10366] veth0_macvtap: entered promiscuous mode [ 508.439308][T10366] veth1_macvtap: entered promiscuous mode [ 508.787897][T10604] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.808490][T10604] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.823862][T10604] bridge_slave_0: entered allmulticast mode [ 508.838224][T10604] bridge_slave_0: entered promiscuous mode [ 508.916419][T10604] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.923839][T10604] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.931210][T10604] bridge_slave_1: entered allmulticast mode [ 508.939524][T10604] bridge_slave_1: entered promiscuous mode [ 508.968194][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.983159][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.996733][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.026903][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.062068][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.097510][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.133226][T10366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.244616][T10729] loop1: detected capacity change from 0 to 32768 [ 510.059095][T10604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.162275][T10604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.189246][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.194792][T10732] loop0: detected capacity change from 0 to 32768 [ 510.199950][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.218643][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.231569][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.242999][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.263472][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.301575][T10366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.313766][T10729] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 510.353820][T10729] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 510.391699][T10729] bcachefs (loop1): alloc_read... done [ 510.409397][T10732] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 510.423134][T10729] bcachefs (loop1): stripes_read... done [ 510.442389][T10729] bcachefs (loop1): snapshots_read... done [ 510.467661][T10604] team0: Port device team_slave_0 added [ 510.478175][T10729] bcachefs (loop1): journal_replay... done [ 510.487138][T10729] bcachefs (loop1): resume_logged_ops... done [ 510.503792][T10729] bcachefs (loop1): going read-write [ 510.517603][T10729] bcachefs (loop1): done starting filesystem [ 510.574916][T10604] team0: Port device team_slave_1 added [ 510.604800][T10366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.649931][T10366] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.668499][T10732] XFS (loop0): Ending clean mount [ 510.682674][T10366] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.700367][T10366] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.710965][T10732] XFS (loop0): Quotacheck needed: Please wait. [ 510.811492][T10345] veth0_vlan: entered promiscuous mode [ 510.853011][T10732] XFS (loop0): Quotacheck: Done. [ 510.959098][T10604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.966869][T10604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.993717][T10604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.032065][T10291] bcachefs (loop1): shutting down [ 511.038592][T10291] bcachefs (loop1): going read-only [ 511.046407][T10291] bcachefs (loop1): finished waiting for writes to stop [ 511.059045][T10291] bcachefs (loop1): flushing journal and stopping allocators, journal seq 9 [ 511.064887][T10604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.085974][T10604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.096850][T10291] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 511.120128][T10604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.140975][T10291] bcachefs (loop1): shutdown complete, journal seq 11 [ 511.148907][T10291] bcachefs (loop1): marking filesystem clean [ 511.164045][ T9294] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 511.215401][T10291] bcachefs (loop1): shutdown complete [ 511.261736][T10345] veth1_vlan: entered promiscuous mode [ 511.661732][T10604] hsr_slave_0: entered promiscuous mode [ 511.741964][T10604] hsr_slave_1: entered promiscuous mode [ 511.765581][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 511.825547][T10345] veth0_macvtap: entered promiscuous mode [ 512.000159][T10345] veth1_macvtap: entered promiscuous mode [ 512.074124][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.122783][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.534398][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.538587][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.564068][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.593859][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.623501][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.660608][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.697919][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.729981][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.760519][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.781688][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.829034][T10345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.843688][T10802] batadv0: entered promiscuous mode [ 512.860776][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.882963][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.913617][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.943421][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.963422][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.980578][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.996867][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.010300][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.032189][T10345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.196433][T10801] batadv0: left promiscuous mode [ 513.247103][T10345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.252571][ T29] audit: type=1326 audit(1719025481.465:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10805 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66b8c7d0a9 code=0x0 [ 513.260114][T10345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.295496][T10345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.305821][T10345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.398878][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.463778][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.825380][ T2812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.859921][ T2812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.407145][T10604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.604845][T10604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 516.824295][T10814] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 516.896539][T10604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 517.036996][T10604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 517.195841][T10814] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 517.263938][T10814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.368384][T10814] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 517.403647][T10814] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 517.421567][T10814] usb 2-1: Manufacturer: syz [ 517.431442][T10814] usb 2-1: config 0 descriptor?? [ 517.457491][T10814] igorplugusb 2-1:0.0: incorrect number of endpoints [ 517.788948][T10604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.968155][T10604] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.085751][T10814] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.092934][T10814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.169096][T10896] loop0: detected capacity change from 0 to 512 [ 518.224177][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.231401][ T5115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.278353][T10896] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 518.553510][T10896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 518.613719][T10896] ext4 filesystem being mounted at /root/syzkaller-testdir2071103307/syzkaller.m2MVNK/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.786393][T10857] loop2: detected capacity change from 0 to 32768 [ 519.129683][T10857] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 519.243423][T10857] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop2": -EINTR [ 519.261950][T10857] XFS (loop2): log mount failed [ 519.363256][ T9294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 520.105590][T10604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.693948][T10814] usb 2-1: USB disconnect, device number 10 [ 521.126507][ T29] audit: type=1326 audit(1719025489.335:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66b8c7d0a9 code=0x0 [ 521.308121][T10604] veth0_vlan: entered promiscuous mode [ 521.409286][T10604] veth1_vlan: entered promiscuous mode [ 521.570551][T10604] veth0_macvtap: entered promiscuous mode [ 521.640071][T10604] veth1_macvtap: entered promiscuous mode [ 521.735785][T10959] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 521.860262][T10959] : entered promiscuous mode [ 522.503947][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.598101][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.642988][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.656000][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.686270][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.707281][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.728162][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.749047][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.769460][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.791116][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.822102][T10604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.879409][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.905936][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.943379][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.954911][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.970774][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.991910][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.012647][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.037225][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.057524][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.083413][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.117579][T10604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.158502][T10604] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.173648][T10604] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.193257][T10604] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.202562][T10604] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.270686][T10972] loop3: detected capacity change from 0 to 512 [ 523.346090][T10972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 523.370713][T10948] loop4: detected capacity change from 0 to 32768 [ 523.401184][T10948] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10948) [ 523.456681][T10948] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 523.473125][T10972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 523.524021][T10948] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 523.532773][T10948] BTRFS info (device loop4): using free-space-tree [ 523.581961][T10972] ext4 filesystem being mounted at /root/syzkaller-testdir1080715558/syzkaller.hLarlK/4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.691175][ T2879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.715450][ T2879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.836977][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.918647][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.925053][T10345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 524.570137][T10366] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 526.460094][ T29] audit: type=1326 audit(1719025494.675:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69ac27d0a9 code=0x0 [ 526.482857][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.748024][T11048] batadv0: entered promiscuous mode [ 526.792548][T11046] batadv0: left promiscuous mode [ 529.340661][ T29] audit: type=1326 audit(1719025497.495:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c6e7d0a9 code=0x0 [ 529.408918][T11108] loop0: detected capacity change from 0 to 256 [ 529.453498][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 529.460199][T11108] FAT-fs (loop0): Unrecognized mount option "uaefree" or missing value [ 529.645542][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 529.663384][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 529.698785][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.753418][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.771287][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.812353][ T9] usb 5-1: config 0 descriptor?? [ 529.845576][T11103] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 530.306669][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 530.335840][ T9] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 530.404695][ T9] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 530.479763][T11117] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 530.559688][T11117] bond0: (slave bond_slave_0): Releasing backup interface [ 530.566695][T11108] loop0: detected capacity change from 0 to 32768 [ 530.639471][T11108] [ 530.639471][T11108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.639471][T11108] [ 530.729385][T11123] [ 530.729385][T11123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.729385][T11123] [ 530.760831][T11123] [ 530.760831][T11123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.760831][T11123] [ 530.784902][T11123] jfs: Unrecognized mount option "1844674407370955161500000000000000000000000Xcv:Q"Co"'ή_0-%+ t6P'k;/|%T9i(%Z@G~ͱ\%S:UVTOvO7MfOJjN"Bn]XZ [ 530.784902][T11123] o*e4bL*" or missing value [ 530.819232][T11108] [ 530.819232][T11108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.819232][T11108] [ 530.837654][T11108] [ 530.837654][T11108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.837654][T11108] [ 530.848501][T11108] [ 530.848501][T11108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.848501][T11108] [ 530.860774][T11108] [ 530.860774][T11108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.860774][T11108] [ 530.889058][T11108] [ 530.889058][T11108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.889058][T11108] [ 530.901016][T11108] [ 530.901016][T11108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.901016][T11108] [ 530.965545][ T112] [ 530.965545][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.965545][ T112] [ 531.047453][T11128] loop5: detected capacity change from 0 to 1024 [ 531.102949][T11128] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 531.151428][ T9294] [ 531.151428][ T9294] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 531.151428][ T9294] [ 531.163643][ T9294] [ 531.163643][ T9294] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 531.163643][ T9294] [ 531.581124][T11137] loop3: detected capacity change from 0 to 1764 [ 531.721511][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 532.079233][T11137] loop3: detected capacity change from 0 to 128 [ 532.184879][T11147] loop0: detected capacity change from 0 to 8 [ 532.198630][T11137] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 532.262676][T11137] sysv_free_block: trying to free block not in datazone [ 533.212130][ T5180] usb 5-1: USB disconnect, device number 17 [ 533.244345][ T29] audit: type=1804 audit(1719025501.465:271): pid=11137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1080715558/syzkaller.hLarlK/10/file0" dev="loop3" ino=2 res=1 errno=0 [ 533.340749][T11147] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 533.564617][T11156] loop4: detected capacity change from 0 to 2048 [ 533.696434][T11156] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.769113][T10345] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 536.073873][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 536.112683][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 536.119960][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 536.126567][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 536.133380][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 536.139948][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 536.146683][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 536.153401][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 536.160118][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 536.166768][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 536.173650][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 536.180272][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 536.187112][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.195056][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.203105][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.211149][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.219229][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.227167][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.235296][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.243393][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.251631][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.259579][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.267734][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.275753][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.284368][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.292277][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.300424][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.308377][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.316474][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.324407][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.332435][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.340406][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.348511][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.356471][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.364557][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.372451][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.380539][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.388509][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.396596][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.404542][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.412540][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.420487][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.428531][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.436518][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.444562][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.452532][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.460587][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.468551][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.476595][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.484538][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.492558][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.500520][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.508559][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.516532][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.524581][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.532685][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.540844][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.548804][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.557022][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.565000][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.573043][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.580970][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.589304][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.597242][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.605307][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.613201][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.621240][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.629337][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.637512][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.645460][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.653550][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.661459][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.669486][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.677408][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.685456][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.693415][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.701434][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.709349][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.717711][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.725636][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.733690][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.741605][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.749634][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.757552][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.765611][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.773524][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 536.781560][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 536.789476][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 537.043500][ T5178] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 537.265613][ T5178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 537.283074][ T5178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 537.305005][ T5178] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.348992][ T5178] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.379523][ T5178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.402087][ T5178] usb 2-1: config 0 descriptor?? [ 537.430640][T11190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 537.443620][T11208] Bluetooth: MGMT ver 1.22 [ 537.838930][T11212] can: request_module (can-proto-0) failed. [ 537.934561][ T5178] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 537.965204][ T5178] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 538.019150][T11219] loop0: detected capacity change from 0 to 1024 [ 538.023931][ T5178] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 538.034439][T11219] EXT4-fs: Ignoring removed nobh option [ 538.047824][T11219] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 538.112079][T11219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.252601][ T9294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.948487][T11240] loop3: detected capacity change from 0 to 512 [ 539.022303][T11240] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 539.042628][T11240] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 539.860825][T11238] loop3: detected capacity change from 0 to 32768 [ 539.915543][T11238] find_entry called with index = 0 [ 539.933570][T11238] find_entry called with index = 0 [ 540.084353][ T25] usb 2-1: USB disconnect, device number 11 [ 541.059884][T11259] loop5: detected capacity change from 0 to 32768 [ 541.143633][T11259] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (11259) [ 541.261701][T11259] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 541.272545][T11259] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 541.284660][T11259] BTRFS info (device loop5): using free-space-tree [ 541.432074][T11286] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 541.725850][T11291] kAFS: No cell specified [ 541.905009][T11259] BTRFS info (device loop5): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 542.013346][T11300] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 542.261054][T10604] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 543.413929][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 543.710524][T11332] loop2: detected capacity change from 0 to 512 [ 543.765359][T11332] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 543.778747][T11332] EXT4-fs (loop2): orphan cleanup on readonly fs [ 543.792431][T11332] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 543.843762][T11332] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 543.856532][T11332] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 543.878848][T11332] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 13 (err -117) [ 543.899853][T11332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 543.937915][T11337] loop5: detected capacity change from 0 to 256 [ 543.956060][T11338] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 543.990818][T11337] FAT-fs (loop5): Unrecognized mount option "iochabset=default" or missing value [ 544.034620][T11339] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 544.553076][T11337] loop5: detected capacity change from 0 to 2048 [ 544.982980][T11337] NILFS (loop5): invalid segment: Sequence number mismatch [ 544.997461][T11337] NILFS (loop5): trying rollback from an earlier position [ 545.043151][T11337] NILFS (loop5): recovery complete [ 545.062196][T11348] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 545.068537][T11347] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 545.114020][ T9781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.609008][T11353] loop1: detected capacity change from 0 to 8 [ 547.261957][T11353] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 547.890540][T11385] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 548.477100][T11395] syzkaller0: entered promiscuous mode [ 548.482677][T11395] syzkaller0: entered allmulticast mode [ 549.313591][ T5138] Bluetooth: hci4: command 0x0406 tx timeout [ 551.087722][T11404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.444637][T11401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.049832][T11423] loop3: detected capacity change from 0 to 136 [ 553.104662][T11423] iso9660: Bad value for 'map' [ 553.940673][T11446] syzkaller0: entered promiscuous mode [ 553.946449][T11446] syzkaller0: entered allmulticast mode [ 554.879200][ T29] audit: type=1804 audit(1719025523.095:272): pid=11452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2826644688/syzkaller.xQsHa6/26/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 554.955616][T11452] netlink: 4068 bytes leftover after parsing attributes in process `syz-executor.4'. [ 554.967856][T11454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.036000][T11454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.166821][T11457] loop1: detected capacity change from 0 to 8 [ 555.418767][T11459] loop5: detected capacity change from 0 to 1764 [ 556.756042][T11457] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 557.055978][T11459] loop5: detected capacity change from 0 to 128 [ 557.123602][T11459] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 557.133547][T11478] loop2: detected capacity change from 0 to 136 [ 557.186628][T11478] iso9660: Bad value for 'map' [ 557.206103][T11459] sysv_free_block: trying to free block not in datazone [ 557.299327][ T9446] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 557.511239][ T29] audit: type=1804 audit(1719025525.725:273): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir231686481/syzkaller.zOtzVQ/27/file0" dev="loop5" ino=2 res=1 errno=0 [ 558.046682][T10604] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 558.210561][T11490] loop3: detected capacity change from 0 to 2048 [ 558.290521][T11490] loop3: AHDI p1 [ 558.348154][T11494] loop0: detected capacity change from 0 to 2048 [ 558.484804][T11494] loop0: p1 < > p3 p4 < > [ 558.521454][T11494] loop0: p3 start 4284289 is beyond EOD, truncated [ 558.929776][ T29] audit: type=1800 audit(1719025527.145:274): pid=11502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1942 res=0 errno=0 [ 558.953654][ T29] audit: type=1804 audit(1719025527.145:275): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir18768910/syzkaller.eq1weY/65/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 559.279171][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 559.324489][T11506] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 560.374589][T11522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.526084][T11522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.791776][T11533] loop4: detected capacity change from 0 to 136 [ 560.872260][T11533] iso9660: Bad value for 'map' [ 560.901052][T11530] loop1: detected capacity change from 0 to 32768 [ 560.938126][T11530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11530) [ 560.984621][T11530] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 560.994983][T11530] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 561.003798][T11530] BTRFS info (device loop1): using free-space-tree [ 562.381269][T10291] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 562.597541][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.610295][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.861463][T11560] loop2: detected capacity change from 0 to 1764 [ 562.992643][T11560] No control pipe specified [ 563.042008][ T29] audit: type=1326 audit(1719025531.255:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c6e7d0a9 code=0x0 [ 564.070487][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 564.125637][T11583] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 565.136858][T11596] loop0: detected capacity change from 0 to 32768 [ 565.193443][T11596] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (11596) [ 565.226206][T11596] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 565.236581][T11596] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 565.245400][T11596] BTRFS info (device loop0): using free-space-tree [ 566.620272][ T9294] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 566.695585][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 567.396467][T11634] loop1: detected capacity change from 0 to 1764 [ 567.658019][ T5181] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 567.713441][T11634] No control pipe specified [ 567.749773][ T29] audit: type=1326 audit(1719025535.965:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66b8c7d0a9 code=0x0 [ 567.855664][ T5181] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 567.865636][ T5181] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 567.899405][ T5181] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 567.932766][ T5181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.956899][ T5181] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 568.159179][ T5181] gspca_sn9c2028: read1 error -32 [ 568.194566][ T5181] gspca_sn9c2028: read1 error -32 [ 568.433573][ T5181] usb 4-1: USB disconnect, device number 13 [ 568.867219][ T29] audit: type=1326 audit(1719025536.845:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11660 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdb607d0a9 code=0x0 [ 570.428834][T11679] loop5: detected capacity change from 0 to 32768 [ 570.465737][T11679] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (11679) [ 570.502753][T11679] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 570.513155][T11679] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 570.522399][T11679] BTRFS info (device loop5): using free-space-tree [ 572.192736][T10604] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 573.253058][ T29] audit: type=1804 audit(1719025541.465:279): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir18768910/syzkaller.eq1weY/73/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 573.374864][T11724] loop3: detected capacity change from 0 to 1764 [ 573.520625][ T9446] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 573.755435][T11724] No control pipe specified [ 573.765761][T10814] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 573.802234][ T29] audit: type=1326 audit(1719025542.015:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69ac27d0a9 code=0x0 [ 573.973852][T10814] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 574.044685][T10814] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 574.069392][T10814] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 574.085783][T10814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.158677][T10814] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 574.356944][T10814] gspca_sn9c2028: read1 error -32 [ 574.382613][T10814] gspca_sn9c2028: read1 error -32 [ 574.658590][T10814] usb 2-1: USB disconnect, device number 12 [ 575.774600][T11772] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 576.145826][T11757] loop3: detected capacity change from 0 to 32768 [ 576.214721][T11757] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 576.450558][T11757] XFS (loop3): Ending clean mount [ 576.460040][T11757] XFS (loop3): Quotacheck needed: Please wait. [ 576.631601][T11757] XFS (loop3): Quotacheck: Done. [ 576.806934][T11757] XFS (loop3): Metadata CRC error detected at xfs_refcountbt_read_verify+0x41/0xd0, xfs_refcountbt block 0x28 [ 576.860122][T11757] XFS (loop3): Unmount and run xfs_repair [ 576.888783][T11757] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 577.010406][T11757] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 577.093006][T11757] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 577.199637][ T29] audit: type=1326 audit(1719025545.415:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdb607d0a9 code=0x0 [ 578.005832][T11757] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 578.083779][T11757] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 578.145247][T11757] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 578.177027][T11757] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 578.214582][ T29] audit: type=1800 audit(1719025546.435:282): pid=11799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file2" dev="loop3" ino=4423 res=0 errno=0 [ 578.214714][T11757] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 578.285367][T11807] loop5: detected capacity change from 0 to 1764 [ 578.352279][T11757] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 578.385733][T11757] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x28 len 8 error 74 [ 578.564631][T11757] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 578.644077][T11757] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 578.675009][T11807] No control pipe specified [ 578.704637][ T29] audit: type=1326 audit(1719025546.915:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11801 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8540e7d0a9 code=0x0 [ 578.726915][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.839803][T10345] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 579.491369][T11829] loop0: detected capacity change from 0 to 256 [ 579.534407][T11829] FAT-fs (loop0): Unrecognized mount option "iochabset=default" or missing value [ 579.803474][ T5177] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 579.962040][T11829] loop0: detected capacity change from 0 to 2048 [ 580.025314][T11829] NILFS (loop0): invalid segment: Sequence number mismatch [ 580.025433][ T5177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.044393][T11829] NILFS (loop0): trying rollback from an earlier position [ 580.050647][ T5177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.103199][ T5177] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 580.118095][T11829] NILFS (loop0): recovery complete [ 580.181873][ T5177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.191228][T11847] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 580.201306][ T5177] usb 3-1: config 0 descriptor?? [ 581.016442][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.467863][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.750388][ T5177] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 581.811914][ T5177] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 581.891157][ T5177] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0010/input/input14 [ 581.997559][ T5177] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 582.071634][ T5177] usb 3-1: USB disconnect, device number 14 [ 583.160185][T11890] loop3: detected capacity change from 0 to 1764 [ 583.520422][T11890] No control pipe specified [ 583.550767][ T29] audit: type=1326 audit(1719025551.755:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11882 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69ac27d0a9 code=0x0 [ 584.102498][ T29] audit: type=1326 audit(1719025552.315:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdb607d0a9 code=0x0 [ 584.576899][T11930] loop5: detected capacity change from 0 to 256 [ 584.630220][T11930] FAT-fs (loop5): Unrecognized mount option "iochabset=default" or missing value [ 584.947835][T11937] syz-executor.1[11937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 584.948017][T11937] syz-executor.1[11937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.152043][T11930] loop5: detected capacity change from 0 to 2048 [ 585.246073][T11930] NILFS (loop5): invalid segment: Sequence number mismatch [ 585.260065][T11930] NILFS (loop5): trying rollback from an earlier position [ 585.391945][T11930] NILFS (loop5): recovery complete [ 585.411398][ T5115] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 585.442794][T11946] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 585.628106][ T5115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.687427][ T5115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.753623][ T5115] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 585.796789][ T5115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.851407][ T5115] usb 3-1: config 0 descriptor?? [ 586.088115][T11941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.132472][T11941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.395829][ T5115] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 586.437850][ T5115] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 586.488296][ T5115] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0011/input/input15 [ 586.536397][ T5115] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 586.617262][ T5115] usb 3-1: USB disconnect, device number 15 [ 589.204872][T12004] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 589.483911][T12004] bond1: entered promiscuous mode [ 589.511101][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 590.304025][ T5138] Bluetooth: hci3: command 0x0406 tx timeout [ 590.381903][T12029] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 591.476492][T12062] syzkaller0: entered allmulticast mode [ 591.484195][T12064] loop2: detected capacity change from 0 to 512 [ 591.548350][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805590d800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 591.553580][T12064] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 591.583494][T12064] EXT4-fs (loop2): orphan cleanup on readonly fs [ 591.595367][T12064] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 591.622646][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.648524][T12064] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 591.669263][T12064] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 591.696886][T12064] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 13 (err -117) [ 591.713612][T12064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 591.897493][T12072] Invalid ELF section header overflow [ 592.167034][T12078] loop3: detected capacity change from 0 to 256 [ 592.255586][T12078] FAT-fs (loop3): Directory bread(block 64) failed [ 592.279892][T12078] FAT-fs (loop3): Directory bread(block 65) failed [ 592.312743][T12078] FAT-fs (loop3): Directory bread(block 66) failed [ 592.339565][T12078] FAT-fs (loop3): Directory bread(block 67) failed [ 592.371268][T12078] FAT-fs (loop3): Directory bread(block 68) failed [ 592.396516][T12078] FAT-fs (loop3): Directory bread(block 69) failed [ 592.413840][T12078] FAT-fs (loop3): Directory bread(block 70) failed [ 592.420506][T12078] FAT-fs (loop3): Directory bread(block 71) failed [ 592.428832][T12078] FAT-fs (loop3): Directory bread(block 72) failed [ 592.452068][T12078] FAT-fs (loop3): Directory bread(block 73) failed [ 592.491524][ T9781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.660251][T12084] loop5: detected capacity change from 0 to 512 [ 592.705509][T12084] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.5: corrupted in-inode xattr: invalid ea_ino [ 592.746596][T12084] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz-executor.5: couldn't read orphan inode 12 (err -117) [ 592.814563][T12084] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.910834][T12084] EXT4-fs error (device loop5): dx_make_map:1327: inode #2: block 255: comm syz-executor.5: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 592.974153][T12084] EXT4-fs error (device loop5) in do_split:2091: Corrupt filesystem [ 593.161067][T10604] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 593.201410][T12080] loop4: detected capacity change from 0 to 32768 [ 593.226586][T12080] btrfs: Unknown parameter 'fragment' [ 593.268252][ T9446] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 593.991945][T12109] syzkaller0: entered allmulticast mode [ 594.419308][T12119] loop3: detected capacity change from 0 to 512 [ 594.487999][T12119] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 594.540418][T12119] EXT4-fs (loop3): orphan cleanup on readonly fs [ 594.586550][T12119] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 594.620547][T12119] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 594.638626][T12119] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 594.672242][T12119] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 594.695878][T12119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 594.861454][T12124] Invalid ELF section header overflow [ 594.929541][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807ec48400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 594.960478][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 595.327686][T10345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.397207][ T5123] Bluetooth: hci5: command 0x0406 tx timeout [ 597.995557][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 598.657905][T12208] bridge0: port 3(ip6gretap0) entered blocking state [ 598.707744][T12208] bridge0: port 3(ip6gretap0) entered disabled state [ 598.750267][T12208] ip6gretap0: entered allmulticast mode [ 598.791370][T12208] ip6gretap0: entered promiscuous mode [ 598.829007][T12208] bridge0: port 3(ip6gretap0) entered blocking state [ 598.836090][T12208] bridge0: port 3(ip6gretap0) entered forwarding state [ 598.878262][T12209] loop0: detected capacity change from 0 to 32768 [ 598.909687][T12209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (12209) [ 598.930508][T12209] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 598.940993][T12209] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 598.949849][T12209] BTRFS info (device loop0): using free-space-tree [ 599.882094][ T9294] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 600.527843][ T5138] Bluetooth: hci6: command 0x0406 tx timeout [ 602.625065][T12259] AppArmor: change_hat: Invalid input '0x000000000000' [ 603.587281][T12277] loop0: detected capacity change from 0 to 128 [ 603.861990][T12277] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 603.876267][T12277] ext4 filesystem being mounted at /root/syzkaller-testdir2071103307/syzkaller.m2MVNK/150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 604.331008][ T29] audit: type=1326 audit(1719025572.545:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8540e7d0a9 code=0x0 [ 604.482266][T12285] vivid-001: disconnect [ 604.575258][ T9294] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 604.721228][T12284] loop2: detected capacity change from 0 to 32768 [ 604.861484][T12284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12284) [ 605.016399][T12284] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 605.027398][T12284] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 605.036199][T12284] BTRFS info (device loop2): using free-space-tree [ 605.394608][T12281] vivid-001: reconnect [ 606.221270][ T9781] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 606.666233][T12318] loop3: detected capacity change from 0 to 1764 [ 606.765882][T12322] loop5: detected capacity change from 0 to 128 [ 606.826210][T12322] FAT-fs (loop5): Directory bread(block 160) failed [ 606.866541][T12322] FAT-fs (loop5): Directory bread(block 161) failed [ 606.890631][ T1104] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.909383][T12322] FAT-fs (loop5): Directory bread(block 162) failed [ 606.939036][T12322] FAT-fs (loop5): Directory bread(block 163) failed [ 607.023837][T12322] FAT-fs (loop5): Directory bread(block 164) failed [ 607.059452][T12322] FAT-fs (loop5): Directory bread(block 165) failed [ 607.072865][T12318] No control pipe specified [ 607.113930][T12322] FAT-fs (loop5): Directory bread(block 166) failed [ 607.135135][ T29] audit: type=1326 audit(1719025575.345:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12314 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69ac27d0a9 code=0x0 [ 607.188476][T12322] FAT-fs (loop5): Directory bread(block 167) failed [ 607.222984][T12322] FAT-fs (loop5): Directory bread(block 160) failed [ 607.271416][T12322] FAT-fs (loop5): Directory bread(block 161) failed [ 607.289189][ T1104] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.522018][ T1104] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.668989][ T1104] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.041346][ T1104] ip6gretap0: left allmulticast mode [ 608.076699][ T1104] ip6gretap0: left promiscuous mode [ 608.134650][ T1104] bridge0: port 3(ip6gretap0) entered disabled state [ 608.245662][ T1104] bridge_slave_1: left allmulticast mode [ 608.290879][ T1104] bridge_slave_1: left promiscuous mode [ 608.352333][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.413052][ T1104] bridge_slave_0: left allmulticast mode [ 608.483657][ T1104] bridge_slave_0: left promiscuous mode [ 608.532287][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.753540][ T5177] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 608.811085][ T5138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 608.857786][ T5138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 608.867669][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 608.884888][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 608.893459][ T5138] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 608.900921][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 609.002112][ T5177] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 609.022273][ T5177] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.097974][ T5177] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 609.168343][ T5177] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 609.200345][ T5177] usb 6-1: Manufacturer: syz [ 609.259236][ T5177] usb 6-1: config 0 descriptor?? [ 609.343792][ T5177] igorplugusb 6-1:0.0: incorrect number of endpoints [ 609.405872][T12369] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 609.412953][T12369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 609.464522][T12369] vhci_hcd vhci_hcd.0: Device attached [ 609.513640][T12374] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 609.520264][T12374] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 609.604930][T12374] vhci_hcd vhci_hcd.0: Device attached [ 609.647641][T12377] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 609.733556][ T25] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 609.873446][T12374] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 609.880023][T12374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 609.985402][T12369] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 609.992058][T12369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 610.025579][T12374] vhci_hcd vhci_hcd.0: Device attached [ 610.079987][T12369] vhci_hcd vhci_hcd.0: Device attached [ 610.134834][T12385] vhci_hcd: connection closed [ 610.135583][T12381] vhci_hcd: connection closed [ 610.141042][T12371] vhci_hcd: connection reset by peer [ 610.142963][ T35] vhci_hcd: stop threads [ 610.158357][T12375] vhci_hcd: connection closed [ 610.310757][ T35] vhci_hcd: release socket [ 610.347681][ T35] vhci_hcd: disconnect device [ 610.402901][ T35] vhci_hcd: stop threads [ 610.415405][ T35] vhci_hcd: release socket [ 610.429717][ T35] vhci_hcd: disconnect device [ 610.441413][ T35] vhci_hcd: stop threads [ 610.460914][ T35] vhci_hcd: release socket [ 610.482474][ T35] vhci_hcd: disconnect device [ 610.497134][ T35] vhci_hcd: stop threads [ 610.511805][ T35] vhci_hcd: release socket [ 610.526785][ T35] vhci_hcd: disconnect device [ 611.154515][T12390] loop0: detected capacity change from 0 to 32768 [ 611.172620][ T5123] Bluetooth: hci2: command tx timeout [ 611.215713][T12390] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (12390) [ 611.254021][T12390] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 611.264403][T12390] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 611.273128][T12390] BTRFS info (device loop0): using free-space-tree [ 611.463097][T12405] loop2: detected capacity change from 0 to 512 [ 611.547790][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.586534][ T9447] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 611.637125][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.763951][ T1104] bond0 (unregistering): Released all slaves [ 611.886611][ T9294] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 611.938275][ T1104] bond1 (unregistering): Released all slaves [ 612.580520][T12420] loop1: detected capacity change from 0 to 764 [ 612.619450][T12420] rock: directory entry would overflow storage [ 612.672764][T12420] rock: sig=0x4654, size=5, remaining=4 [ 612.704865][T12391] loop2: detected capacity change from 0 to 32768 [ 613.243471][ T5123] Bluetooth: hci2: command tx timeout [ 615.313479][ T5123] Bluetooth: hci2: command tx timeout [ 718.043321][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 718.050363][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12420/1:b..l [ 718.059317][ C0] rcu: (detected by 0, t=10502 jiffies, g=82773, q=445 ncpus=2) [ 718.067157][ C0] task:syz-executor.1 state:R running task stack:21392 pid:12420 tgid:12418 ppid:10291 flags:0x00004002 [ 718.080887][ C0] Call Trace: [ 718.084226][ C0] [ 718.087180][ C0] __schedule+0x17e8/0x4a20 [ 718.091744][ C0] ? __pfx___schedule+0x10/0x10 [ 718.096635][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.102303][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 718.108378][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 718.113707][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 718.118900][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 718.124678][ C0] irqentry_exit+0x5e/0x90 [ 718.129178][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 718.135194][ C0] RIP: 0010:read_word_at_a_time+0xe/0x20 [ 718.140862][ C0] Code: 7c ce e8 f5 29 7d f6 eb c7 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 53 48 89 fb be 01 00 00 00 e8 e2 2b 7d f6 <48> 8b 03 5b e9 b4 97 31 00 66 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 718.160505][ C0] RSP: 0018:ffffc9001446e130 EFLAGS: 00000256 [ 718.166606][ C0] RAX: 1ffff11003036c01 RBX: ffff88802920c4b8 RCX: ffffffff8b7ea94e [ 718.174629][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88802920c4b8 [ 718.182635][ C0] RBP: 0000000000000008 R08: ffff88802920c4b8 R09: 1ffff11005241897 [ 718.190629][ C0] R10: dffffc0000000000 R11: ffffed1005241898 R12: ffff8880181b64f8 [ 718.198629][ C0] R13: ffff88802920c4b0 R14: 0000000000000008 R15: 0000000000000000 [ 718.206639][ C0] ? read_word_at_a_time+0xe/0x20 [ 718.211773][ C0] sized_strscpy+0x8d/0x220 [ 718.216323][ C0] __set_page_owner+0x285/0x800 [ 718.221837][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 718.227247][ C0] ? do_raw_spin_trylock+0xc8/0x1f0 [ 718.232497][ C0] post_alloc_hook+0x1f3/0x230 [ 718.237348][ C0] get_page_from_freelist+0x2e43/0x2f00 [ 718.243037][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.248706][ C0] ? finish_task_switch+0x1e5/0x870 [ 718.253948][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.259608][ C0] ? __schedule+0x17f0/0x4a20 [ 718.264318][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.269981][ C0] ? prepare_alloc_pages+0x369/0x5d0 [ 718.275311][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 718.280559][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 718.286332][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.292003][ C0] alloc_pages_mpol_noprof+0x12d/0x680 [ 718.297508][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 718.303532][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.309195][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.314940][ C0] ? alloc_pages_noprof+0x8c/0x170 [ 718.320090][ C0] get_free_pages_noprof+0xc/0x30 [ 718.325237][ C0] kasan_populate_vmalloc_pte+0x38/0xe0 [ 718.330816][ C0] __apply_to_page_range+0x8aa/0xe50 [ 718.336148][ C0] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 718.342424][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 718.348267][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 718.353506][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.359166][ C0] alloc_vmap_area+0x1d41/0x23e0 [ 718.364153][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 718.369463][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.375120][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 718.379918][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.385571][ C0] ? kmalloc_node_trace_noprof+0x1d3/0x300 [ 718.391415][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.397069][ C0] ? __get_vm_area_node+0x113/0x270 [ 718.402295][ C0] ? hash_netiface_create+0x356/0x1040 [ 718.407779][ C0] __get_vm_area_node+0x1a9/0x270 [ 718.412837][ C0] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 718.418760][ C0] ? hash_netiface_create+0x356/0x1040 [ 718.424245][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.429900][ C0] ? __alloc_pages_noprof+0xbd/0x6c0 [ 718.435337][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 718.441687][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.447319][ C0] ? rcu_is_watching+0x15/0xb0 [ 718.452203][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.457984][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.463627][ C0] ? __kmalloc_node_noprof+0x247/0x440 [ 718.469132][ C0] ? kvmalloc_node_noprof+0x72/0x190 [ 718.474434][ C0] kvmalloc_node_noprof+0x142/0x190 [ 718.479904][ C0] ? hash_netiface_create+0x356/0x1040 [ 718.485460][ C0] hash_netiface_create+0x356/0x1040 [ 718.490755][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.496389][ C0] ? __pfx_hash_netiface_create+0x10/0x10 [ 718.502114][ C0] ip_set_create+0xa5e/0x1900 [ 718.506803][ C0] ? ip_set_create+0x45e/0x1900 [ 718.511675][ C0] ? trace_raw_output_contention_end+0xaa/0xd0 [ 718.517870][ C0] ? __pfx_ip_set_create+0x10/0x10 [ 718.523008][ C0] ? trace_contention_end+0x3c/0x120 [ 718.528353][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.533995][ C0] ? nfnetlink_rcv_msg+0x225/0x1180 [ 718.539200][ C0] nfnetlink_rcv_msg+0xbee/0x1180 [ 718.544228][ C0] ? 0xffffffffa0003d80 [ 718.548377][ C0] ? nfnetlink_rcv_msg+0x225/0x1180 [ 718.553610][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 718.559122][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.564751][ C0] ? kasan_save_track+0x51/0x80 [ 718.569598][ C0] ? kasan_save_track+0x3f/0x80 [ 718.574442][ C0] ? kasan_save_free_info+0x40/0x50 [ 718.579648][ C0] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 718.584849][ C0] ? __netlink_deliver_tap+0x54d/0x7c0 [ 718.590308][ C0] ? netlink_deliver_tap+0x19d/0x1b0 [ 718.595622][ C0] ? netlink_unicast+0x7b8/0x980 [ 718.600557][ C0] ? netlink_sendmsg+0x8db/0xcb0 [ 718.605496][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 718.610482][ C0] netlink_rcv_skb+0x1e5/0x430 [ 718.615359][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 718.620830][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 718.626127][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.631784][ C0] ? apparmor_capable+0x138/0x1b0 [ 718.636809][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.642456][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.648084][ C0] ? security_capable+0x90/0xb0 [ 718.652949][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.658605][ C0] nfnetlink_rcv+0x297/0x2a80 [ 718.663312][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 718.669644][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 718.675010][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.680636][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 718.685837][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.691463][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 718.696827][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 718.702135][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 718.707251][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 718.712971][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 718.718091][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.723717][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 718.728922][ C0] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 718.734046][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 718.739170][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.744797][ C0] ? ref_tracker_free+0x643/0x7e0 [ 718.749824][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.755453][ C0] ? __asan_memcpy+0x40/0x70 [ 718.760039][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 718.765438][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.771073][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.776706][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.781905][ C0] ? skb_clone+0x240/0x390 [ 718.786320][ C0] ? __pfx_lock_release+0x10/0x10 [ 718.791344][ C0] ? __netlink_deliver_tap+0x77e/0x7c0 [ 718.796815][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.802018][ C0] netlink_unicast+0x7ec/0x980 [ 718.806802][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 718.812114][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.817740][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.823387][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.829018][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.834646][ C0] ? __check_object_size+0x49c/0x900 [ 718.839956][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.845583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.851213][ C0] netlink_sendmsg+0x8db/0xcb0 [ 718.855995][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.861290][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.866917][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 718.871973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.877614][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.883252][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 718.888741][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.894027][ C0] __sock_sendmsg+0x223/0x270 [ 718.898775][ C0] ____sys_sendmsg+0x525/0x7d0 [ 718.903664][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 718.909300][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.914602][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 718.919200][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 718.924357][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 718.930716][ C0] ? do_syscall_64+0x100/0x230 [ 718.935487][ C0] ? do_syscall_64+0xb6/0x230 [ 718.940192][ C0] do_syscall_64+0xf3/0x230 [ 718.944706][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.950610][ C0] RIP: 0033:0x7f66b8c7d0a9 [ 718.955018][ C0] RSP: 002b:00007f66b9aba0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.963496][ C0] RAX: ffffffffffffffda RBX: 00007f66b8db3f80 RCX: 00007f66b8c7d0a9 [ 718.971468][ C0] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 718.979436][ C0] RBP: 00007f66b8cec074 R08: 0000000000000000 R09: 0000000000000000 [ 718.987403][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.995367][ C0] R13: 000000000000000b R14: 00007f66b8db3f80 R15: 00007ffd8014b2d8 [ 719.003350][ C0] [ 719.006371][ C0] rcu: rcu_preempt kthread starved for 10530 jiffies! g82773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 719.017606][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 719.027606][ C0] rcu: RCU grace-period kthread stack dump: [ 719.033512][ C0] task:rcu_preempt state:R running task stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 719.045273][ C0] Call Trace: [ 719.048546][ C0] [ 719.051474][ C0] __schedule+0x17e8/0x4a20 [ 719.056001][ C0] ? __pfx___schedule+0x10/0x10 [ 719.060891][ C0] ? __pfx_lock_release+0x10/0x10 [ 719.065913][ C0] ? __asan_memset+0x23/0x50 [ 719.070507][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 719.076314][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 719.082644][ C0] ? schedule+0x90/0x320 [ 719.086883][ C0] schedule+0x14b/0x320 [ 719.091071][ C0] schedule_timeout+0x1be/0x310 [ 719.095941][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 719.101325][ C0] ? __pfx_process_timeout+0x10/0x10 [ 719.106657][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 719.112312][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 719.117885][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 719.122752][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 719.127699][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 719.133767][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 719.139079][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 719.145018][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 719.150647][ C0] ? finish_swait+0xd4/0x1e0 [ 719.155236][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 719.159852][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 719.165050][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 719.170956][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 719.176591][ C0] ? __kthread_parkme+0x169/0x1d0 [ 719.181621][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 719.186817][ C0] kthread+0x2f2/0x390 [ 719.190891][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 719.196086][ C0] ? __pfx_kthread+0x10/0x10 [ 719.200679][ C0] ret_from_fork+0x4d/0x80 [ 719.205099][ C0] ? __pfx_kthread+0x10/0x10 [ 719.209693][ C0] ret_from_fork_asm+0x1a/0x30 [ 719.214477][ C0] [ 719.217490][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 719.223808][ C0] Sending NMI from CPU 0 to CPUs 1: [ 719.229052][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 2024/06/22 03:08:07 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 719.243964][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 719.250382][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 719.259581][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 719.266040][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.366100][ T5123] Bluetooth: hci2: command tx timeout