last executing test programs: 1m24.800006225s ago: executing program 3 (id=1433): r0 = syz_open_dev$vim2m(&(0x7f0000002a80), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x0, 0x0, 0x33424752}}) 1m24.320520445s ago: executing program 3 (id=1438): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) pipe2(0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@my=0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff8}) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) 1m23.009312572s ago: executing program 3 (id=1440): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200), 0x20) 1m22.440404129s ago: executing program 3 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00), 0x4) 1m21.596236122s ago: executing program 3 (id=1452): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mkdir(&(0x7f0000000a80)='./file1\x00', 0x0) 1m17.380488317s ago: executing program 3 (id=1465): openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/sem\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002180), 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$alg(r4, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="12", 0x1}], 0x1}], 0x1, 0x20008008) recvmsg$unix(r4, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="07000000010001", 0x7) 1m11.235032714s ago: executing program 0 (id=1497): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="c4e2", 0xfffff, 0xfffffffffffffffd) 1m10.317775694s ago: executing program 0 (id=1504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "088d912d0cfca515ad577da22ccd9a84"}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x3c}}, 0x0) 1m6.020479967s ago: executing program 0 (id=1509): r0 = io_uring_setup(0x7af2, &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 1m5.775282112s ago: executing program 0 (id=1514): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x200108cc, &(0x7f0000000140)=ANY=[@ANYBLOB=',errors=remount-ro,errors=continue,\x00', @ANYBLOB="8eee371aa4f77526fa8dd9b08d64127579dcb5500430e2d3b37ddcbf2e630f2b95d899d82386e933664e7ed6cc1cad9fe91d8c80206084e83221de248dd3e3921e1dc63fc02909340d4e032ad7e0546190e0531c6d5c6457edd791ed75894f680e9b34f2b8a235a0de9a0c661daec5aaa406bf692155b2a03fdfcc516b85cafc9ed8ffe209c785fbf2e4a50ee5fca2b4c63308cc469db59ce0666c66bcb303cf64d423f0aee683c3fc28fc18", @ANYRES16, @ANYRES64, @ANYBLOB='iocharset=iso8859-6,errors=continue,allow_utime=00000000000002000000006,uid=', @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x81, 0x14f6, &(0x7f0000001580)="$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") io_uring_setup(0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140)) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000009b40)='./file0\x00', 0x0, &(0x7f0000009bc0)=ANY=[@ANYBLOB="9fcef77b37684e035a4ff190bea4efd68642d60d23be8a9aae70a00438e0f98931e9a9d2a4cb9b6cbfab8dfce47f4b2b71261b3f0e57e07c47bd5f5623882d8cfb74849aa6ac895f872fc7b24be91726c52cd28c52a456e1eb884528b4be46e89d563eff77fe8f", @ANYRESDEC], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") write$P9_RSETATTR(r0, &(0x7f0000009c40)={0x7}, 0x7) 1m3.63181441s ago: executing program 0 (id=1521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x6, 0x5, 0x9f, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@broadcast, @random="00f3ffff1f00", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000190019a9000000000000000002200000ff02ff000000000008000100ac14141218009400111a8200040090f7c10f4b31901b77481e35fd008a"], 0x1}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2ca) splice(r4, 0x0, r6, 0x0, 0x84ffe0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x7fff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000002}, 0x48) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "b53a25"}}, 0x0, 0x0, 0x0}, 0x0) 59.044589735s ago: executing program 0 (id=1530): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 42.646354166s ago: executing program 1 (id=1584): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x58}}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./file0\x00') sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getaddr={0x14, 0x16, 0x0, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) creat(&(0x7f0000000e00)='./file0\x00', 0x0) renameat2(r5, &(0x7f0000000380)='./file0\x00', r5, &(0x7f00000000c0)='./bus/file0\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x6, &(0x7f0000000040), 0x7, 0x4de, &(0x7f0000000e40)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0xc0506617, &(0x7f0000000000)) 41.195393863s ago: executing program 1 (id=1588): syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe80000000000000000000000000000000020000000000000709"], 0x0) 41.068754795s ago: executing program 5 (id=1589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x38, r1, 0x5, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_VHT_CAPABILITY={0x10}]}, 0x38}}, 0x0) 40.957167072s ago: executing program 1 (id=1590): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x29}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x100000, 0x0}, 0x10) 40.791896661s ago: executing program 1 (id=1591): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2000010, &(0x7f0000000140)=ANY=[], 0x3, 0x6b5, &(0x7f0000001240)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8) r1 = request_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000440)='\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r0, r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/2, 0x2}}, 0x120) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x52, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @val={0x5, 0x4, {0x0, 0x0, 0x0, "83"}}, @void, @void, @val={0x3c, 0x4}, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0xf, 0x20}}, @val={0x76, 0x6}}}]}, 0x70}}, 0x0) write$UHID_INPUT(r2, &(0x7f0000003840)={0xc, {"a2e3ad214fc752f91b38090987f70e06d038e7ff7fc6e5539b5064078b089b0e082363090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b39300d3b6d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bfe800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678caf889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e3bc48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f09fcbbaba8f1cefdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e44726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f510477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca50938381ab1b6fc6522d4e4fdc11a48c912d486046752a4ab94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f24385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b2105201069ba358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94a52cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607e6ac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afaa5500acbb1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81a50b000000000000aaaea1cc43a6c5cbe5ffffbfee2916580dac4b008e595f43749db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c0ad21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c6614bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939affdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff020000003fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000003007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b69685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a0101000000000000275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff84556935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edd0f3349832386469a4b621501f60fe5b5b6e582c749274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f077ff010000d367e5f84c96ec664b72934b4905109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40eb911791bc3679a9f729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dc20000000000000005f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e3d00", 0x1000}}, 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0x100000000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r10, 0x5, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010300000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r11], 0x4c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000d5c300000000f5ff0000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001867000010000000000000009afe000018120000", @ANYRES16=r1, @ANYBLOB="00000000000000009500000000000000184a0000050000000000000000000000186800000800000000000000080000009500000000000000b7080000000000007b8af8ff00000000b708000000ff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x100, 0x70bd26, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4040091) 40.70140555s ago: executing program 5 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000002c0022800c000080080006000000000004000080070000800400008001000080040000800400008004000080070021"], 0x48}}, 0x0) 40.52403092s ago: executing program 5 (id=1593): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@allocspi={0x1ac, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@remote}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback}, 0x0, 0x800}, [@policy={0xac, 0x7, {{@in=@multicast1, @in6=@empty}}}, @extra_flags={0x8}]}, 0x1ac}}, 0x0) 40.369779059s ago: executing program 5 (id=1596): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) 40.058307833s ago: executing program 5 (id=1599): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x45}], 0x300) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="c68a76fc052ea9e5861f22eefbe4355322573df4473febc5460a4ac3cf40c7fb7d5f6d3de3c066b337381c804f1ad36dfc60d71b78058e95eb3c21c658ffce5b4102793eb0", 0x45}], 0x1}}], 0x1, 0x0) 39.25745428s ago: executing program 5 (id=1602): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0xc) syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x980a, &(0x7f00000130c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\f\x00\x00'], 0x0) 37.08129377s ago: executing program 1 (id=1611): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f00000004c0)={[{@rodir}, {@shortname_win95}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@errors_continue}, {@uni_xlate}, {@fat=@check_strict}]}, 0x6, 0x2d5, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 35.987141937s ago: executing program 1 (id=1613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c90800", 0xe}], 0x1) 3.633155969s ago: executing program 4 (id=1677): syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000100000011, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0x10, 0x2, 0x0) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$inet6(0xa, 0x805, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64=r0]) 3.471853001s ago: executing program 2 (id=1678): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) 3.382898688s ago: executing program 2 (id=1679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.350681321s ago: executing program 4 (id=1680): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1cfddeec4d70aa0986fcc021dacbdc57f8225811ffff1900010000000000000000001d01e2700ef5139363ff50ffee830a896548609661c1dcdc69ff9c98775322b919134e905e52037aa40ae66ff88eac3181769e6a8959460a7d72c5dc94bc5ce6c11d"], 0x14}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r10 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r10, &(0x7f00000003c0)={0x0, 0xffffffffffffff89, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1000) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r11, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback={0x0, 0x460c6}}}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31070000000000000000380000000e0001"], 0x64}, 0x1, 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r12, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001040090780000000060fd906300003a00ff010000000000000000000000000001ff0200000000000000000000000000011e520b4c951ee12e"], 0x0) setsockopt$inet6_int(r12, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r12, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) 3.243310705s ago: executing program 2 (id=1681): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900), 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newlink={0x328, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_TOS={0x5}]}}}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e0059014fa0fe22b9a5af49321374494"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "810f813930bdcae5415f1d6bb298f1c7"}]}, @IFLA_VFINFO_LIST={0x29c, 0x16, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfe52, 0x400}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xeb, 0x2}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80, 0x4f1, 0x4, 0x88a8}}, {0x14, 0x1, {0x20, 0xe3c, 0x8, 0x8100}}, {0x14, 0x1, {0xc97, 0xd87, 0x7, 0x88a8}}, {0x14, 0x1, {0x4, 0x9b8, 0x0, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x59, 0x400}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3f, 0x2bd2bfd}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}}]}, {0xfffffffffffffeda, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @remote}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x35500000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x5e8, 0x8001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xd00000, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x101}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x7b6, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7ff, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x200}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x7fff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4000, 0xdae, 0x1000, 0x88a8}}, {0x14, 0x1, {0xfff, 0xc56, 0x0, 0x8100}}, {0x14, 0x1, {0x56a7fac9, 0x90b, 0x7, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x8}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @local}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3f, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8001, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3f, 0x100}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @broadcast}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @remote}}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140), 0x5c}, 0x1, 0x0, 0x0, 0x20040881}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0x64}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)={0xe0, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1000}, 0x24004881) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r13, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r12}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0xfc, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xdb, 0xffffcc57, 0x6, 0x2, r0, 0xffffffff, '\x00', r12, r14, 0x3, 0x1, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r15}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000dc0), &(0x7f0000000e40), 0xffff, r15}, 0x38) 2.70102848s ago: executing program 2 (id=1682): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, r1, 0x2e, 0x0, 0x0, @prog_id}, 0x20) 2.382761062s ago: executing program 4 (id=1683): ioperm(0x0, 0x9, 0x5) capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000040)) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 2.361045021s ago: executing program 2 (id=1684): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {0x5}}}, &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.249533978s ago: executing program 4 (id=1685): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x2, @random="bb7fb37b9489", 'ip6gretap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) write$binfmt_misc(r0, 0x0, 0xfffffc8f) 2.208834554s ago: executing program 2 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0x40415, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES8], 0x1, 0x2a1, &(0x7f0000000f40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1.412474724s ago: executing program 4 (id=1687): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000230000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e1f59f18f845f82e9a7cde9e8f1b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8d91633a8b9c70e804744dc081ac69cfea08e4e5a06f70c6792f2888d6fd95f202028070000003771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f439547bcdac15e52a4b6a2981eb4afadbbdf9157fa588f475c4cd2e44e2129dc6b93993909613e8d95f5610c067d9b97c524c210af077707d71e8512e"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r2, 0x0, 0x44004) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000006780), 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="24be2842400a", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) fstat(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 0s ago: executing program 4 (id=1688): socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) kernel console output (not intermixed with test programs): [ 501.764848][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.158592][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.169846][ T25] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 502.230482][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.301312][ T25] usb 1-1: config 0 descriptor?? [ 502.862424][T10007] loop3: detected capacity change from 0 to 512 [ 503.028928][T10007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 503.122135][T10007] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.041103][ T25] hkems 0003:2006:0118.0011: unbalanced delimiter at end of report description [ 504.056187][ T25] hkems 0003:2006:0118.0011: parse failed [ 504.414866][ T29] audit: type=1326 audit(1722621165.683:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.0.1133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94337779f9 code=0x0 [ 505.474838][T10015] syz.2.1123 (10015): drop_caches: 2 [ 505.541526][T10042] loop0: detected capacity change from 0 to 16 [ 505.589333][T10021] loop4: detected capacity change from 0 to 32768 [ 505.599042][T10042] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 505.668295][T10021] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1130 (10021) [ 505.718417][ T25] hkems 0003:2006:0118.0011: probe with driver hkems failed with error -22 [ 505.770514][ T25] usb 1-1: USB disconnect, device number 12 [ 505.794251][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 505.929566][T10021] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 505.968962][T10007] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 31 (only 1 groups) [ 506.014366][T10021] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 506.071587][T10021] BTRFS info (device loop4): using free-space-tree [ 506.170268][ T29] audit: type=1804 audit(1722621167.423:2203): pid=10007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1127" name="/newroot/27/file0/bus" dev="loop3" ino=19 res=1 errno=0 [ 506.199677][T10007] Invalid ELF header len 1 [ 506.417255][T10021] BTRFS info (device loop4): rebuilding free space tree [ 506.832455][T10052] loop2: detected capacity change from 0 to 32768 [ 506.896912][T10052] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 507.072606][T10052] XFS (loop2): Ending clean mount [ 507.082938][ T6327] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 507.214048][ T29] audit: type=1804 audit(1722621168.483:2204): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1138" name="/newroot/16/file1/bus" dev="loop2" ino=4425 res=1 errno=0 [ 507.309248][ T29] audit: type=1804 audit(1722621168.533:2205): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1138" name="/newroot/16/file1/bus" dev="loop2" ino=4425 res=1 errno=0 [ 507.613282][ T9372] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 507.748550][T10096] loop0: detected capacity change from 0 to 128 [ 507.845871][T10096] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 507.950464][T10096] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 508.121313][T10102] loop5: detected capacity change from 0 to 2048 [ 508.640574][T10116] netlink: 'syz.5.1154': attribute type 1 has an invalid length. [ 508.915223][ T9083] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 509.120513][ T9256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 509.163267][T10122] loop4: detected capacity change from 0 to 64 [ 509.499655][T10129] netlink: 'syz.3.1159': attribute type 9 has an invalid length. [ 509.673074][ T29] audit: type=1326 audit(1722621170.943:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10136 comm="syz.4.1163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0f39779f9 code=0x0 [ 509.866611][T10144] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 509.890272][ T9532] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 509.961838][T10144] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 510.131231][ T9532] usb 2-1: Using ep0 maxpacket: 16 [ 510.296301][ T9532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 510.491520][ T9532] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 510.636122][ T9532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.932629][ T9532] usb 2-1: config 0 descriptor?? [ 512.101787][T10133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.441021][T10133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.848463][T10151] loop0: detected capacity change from 0 to 512 [ 513.100773][T10151] EXT4-fs (loop0): 1 truncate cleaned up [ 513.191944][T10151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.640709][T10159] input: syz0 as /devices/virtual/input/input24 [ 513.970483][T10175] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.1168: Directory hole found for htree leaf block 0 [ 514.248646][T10163] delete_channel: no stack [ 514.400840][T10177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.515793][T10177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.619341][T10183] netlink: 'syz.2.1178': attribute type 3 has an invalid length. [ 515.139581][ T9532] usbhid 2-1:0.0: can't add hid device: -71 [ 515.200369][ T9532] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 515.284804][ T9532] usb 2-1: USB disconnect, device number 11 [ 516.091766][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 516.204777][T10214] loop2: detected capacity change from 0 to 512 [ 516.274873][ T8] usb 4-1: device descriptor read/64, error -71 [ 516.330377][T10214] loop2: detected capacity change from 0 to 164 [ 516.460643][T10214] syz.2.1188: attempt to access beyond end of device [ 516.460643][T10214] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 516.579275][T10214] syz.2.1188: attempt to access beyond end of device [ 516.579275][T10214] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 516.580386][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 516.654467][ T9083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.671256][ T29] audit: type=1800 audit(1722621177.933:2207): pid=10214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1188" name="file0" dev="loop2" ino=1862 res=0 errno=0 [ 516.850289][ T8] usb 4-1: device descriptor read/64, error -71 [ 516.890380][ T60] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 516.971251][ T8] usb usb4-port1: attempt power cycle [ 517.130397][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 517.168933][ T60] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 517.216033][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.258210][ T60] usb 5-1: config 0 descriptor?? [ 517.273939][ T60] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 517.315759][ T60] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 517.356902][ T60] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 517.409439][ T60] usb 5-1: media controller created [ 517.617099][ T60] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.812726][ T60] usb 5-1: selecting invalid altsetting 1 [ 517.833560][ T60] set interface failed [ 517.835149][ T60] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 517.875297][ T60] error writing reg: 0xff, val: 0x00 [ 518.105827][ T60] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 518.237960][ T60] usb 5-1: USB disconnect, device number 17 [ 518.946895][T10267] xt_l2tp: v2 tid > 0xffff: 262144 [ 519.890689][T10275] loop4: detected capacity change from 0 to 128 [ 519.953211][T10280] loop5: detected capacity change from 0 to 256 [ 520.145658][T10281] loop3: detected capacity change from 0 to 512 [ 520.169756][T10281] EXT4-fs: Ignoring removed nobh option [ 520.238878][T10281] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 522.137130][T10275] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 522.454960][T10275] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 522.532538][T10281] EXT4-fs (loop3): 1 truncate cleaned up [ 522.539823][T10281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.544341][ T9256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.617817][ T6327] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 524.431704][T10302] loop3: detected capacity change from 0 to 512 [ 524.530253][T10302] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 524.575613][T10302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 524.585461][T10302] EXT4-fs (loop3): orphan cleanup on readonly fs [ 524.617527][T10302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1218: bg 0: block 361: padding at end of block bitmap is not set [ 524.638798][T10302] EXT4-fs (loop3): Remounting filesystem read-only [ 524.659280][T10302] EXT4-fs (loop3): 1 truncate cleaned up [ 524.675596][T10302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 525.151833][T10304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1222'. [ 525.219646][ T9256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 525.495377][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'. [ 525.575201][T10314] netlink: 'syz.1.1223': attribute type 11 has an invalid length. [ 525.632613][ T6520] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 525.726243][T10314] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.735596][T10314] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.744441][T10314] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.753339][T10314] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.783917][T10320] loop4: detected capacity change from 0 to 1024 [ 525.854388][T10320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.922358][ T6520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 191, setting to 64 [ 525.933579][ T6520] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 525.942737][ T6520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.955005][ T6520] usb 3-1: config 0 descriptor?? [ 525.996123][T10314] vxlan0: entered promiscuous mode [ 526.173774][ T6520] ath6kl: Failed to submit usb control message: -71 [ 526.181740][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 526.188481][ T6520] ath6kl: unable to send the bmi data to the device: -71 [ 526.225501][ T6520] ath6kl: Unable to send get target info: -71 [ 526.244047][ T6520] ath6kl: Failed to init ath6kl core: -71 [ 526.288936][ T6520] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 526.329874][ T6520] usb 3-1: USB disconnect, device number 13 [ 526.352165][ T6327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.400276][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 526.443026][ T8] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 526.483584][ T8] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 526.529965][ T8] usb 4-1: config 135 has no interface number 0 [ 526.555627][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.580580][ T8] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.643670][ T8] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 526.685589][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.710263][ T8] usb 4-1: Product: syz [ 526.714485][ T8] usb 4-1: Manufacturer: syz [ 526.720630][ T8] usb 4-1: SerialNumber: syz [ 526.975397][T10334] loop4: detected capacity change from 0 to 1024 [ 527.075014][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.382132][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.665436][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.776545][ T9773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.795883][ T9773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.805037][ T9773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.814361][ T9773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.824758][ T9773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 527.832875][ T9773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 528.078389][T10350] loop4: detected capacity change from 0 to 16 [ 528.096995][T10350] erofs: (device loop4): mounted with root inode @ nid 36. [ 528.466759][ T35] bridge_slave_1: left allmulticast mode [ 528.495837][ T35] bridge_slave_1: left promiscuous mode [ 528.520715][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.589036][ T35] bridge_slave_0: left allmulticast mode [ 528.630583][ T35] bridge_slave_0: left promiscuous mode [ 528.644001][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.653560][ T8] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 528.672568][ T8] usb 4-1: No valid video chain found. [ 528.701111][ T8] usb 4-1: USB disconnect, device number 11 [ 528.746675][ T9140] udevd[9140]: setting mode of /dev/bus/usb/004/011 to 020664 failed: No such file or directory [ 528.800484][ T9140] udevd[9140]: setting owner of /dev/bus/usb/004/011 to uid=0, gid=0 failed: No such file or directory [ 529.637250][T10365] loop2: detected capacity change from 0 to 4096 [ 529.657378][T10365] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 529.714653][T10365] ntfs3: loop2: Failed to load $Extend (-22). [ 529.721460][T10365] ntfs3: loop2: Failed to initialize $Extend. [ 529.882757][ T9773] Bluetooth: hci2: command tx timeout [ 530.137168][T10373] loop2: detected capacity change from 0 to 128 [ 530.156610][T10373] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 530.553996][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.571708][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.587567][ T35] bond0 (unregistering): Released all slaves [ 530.644944][ T6520] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 530.919380][ T6520] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 530.958608][ T6520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.983419][ T6520] usb 3-1: Product: syz [ 530.998009][ T6520] usb 3-1: Manufacturer: syz [ 531.003541][ T6520] usb 3-1: SerialNumber: syz [ 531.019731][ T6520] usb 3-1: config 0 descriptor?? [ 531.040846][T10384] loop0: detected capacity change from 0 to 64 [ 531.377682][T10392] loop3: detected capacity change from 0 to 512 [ 531.428727][T10347] chnl_net:caif_netlink_parms(): no params data found [ 531.499582][T10392] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1256: iget: bad i_size value: -67835469387268086 [ 531.650703][T10392] EXT4-fs (loop3): Remounting filesystem read-only [ 531.671130][ T6520] mos7840 3-1:0.0: required endpoints missing [ 531.701707][T10392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.752400][ T6520] usb 3-1: USB disconnect, device number 14 [ 531.845992][T10392] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 531.950274][ T9773] Bluetooth: hci2: command tx timeout [ 532.398827][ T9256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.487617][ T35] hsr_slave_0: left promiscuous mode [ 532.538525][ T35] hsr_slave_1: left promiscuous mode [ 532.546578][T10407] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1258'. [ 532.590565][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.620825][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.700075][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.728218][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.013280][ T35] veth1_macvtap: left promiscuous mode [ 533.027226][ T35] veth0_macvtap: left promiscuous mode [ 533.097167][ T35] veth1_vlan: left promiscuous mode [ 533.111530][T10379] loop4: detected capacity change from 0 to 32768 [ 533.141933][ T35] veth0_vlan: left promiscuous mode [ 533.150628][T10379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1251 (10379) [ 533.243781][T10379] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 533.276015][T10411] overlayfs: workdir and upperdir must be separate subtrees [ 533.302765][T10379] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 533.378741][T10379] BTRFS info (device loop4): using free-space-tree [ 533.878072][ T9773] Bluetooth: hci3: command 0x0406 tx timeout [ 534.040420][ T5242] Bluetooth: hci2: command tx timeout [ 534.192659][ T6327] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 537.359169][ T5242] Bluetooth: hci2: command tx timeout [ 538.377730][T10463] loop4: detected capacity change from 0 to 512 [ 538.401610][T10463] journal_path: Lookup failure for './file1' [ 538.407668][T10463] EXT4-fs: error: could not find journal device path [ 538.462920][T10463] loop4: detected capacity change from 0 to 16 [ 538.501949][T10463] erofs: (device loop4): mounted with root inode @ nid 36. [ 538.534694][T10463] syz.4.1269: attempt to access beyond end of device [ 538.534694][T10463] loop4: rw=0, sector=1049256, nr_sectors = 8 limit=16 [ 538.541641][ T5002] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 538.789435][T10467] loop3: detected capacity change from 0 to 1024 [ 538.889623][ T5002] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 538.905065][ T5002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.010387][T10469] syz.4.1269: attempt to access beyond end of device [ 539.010387][T10469] loop4: rw=0, sector=1049256, nr_sectors = 8 limit=16 [ 539.670365][ T5002] usb 2-1: Product: syz [ 539.675934][ T5002] usb 2-1: Manufacturer: syz [ 539.680733][ T5002] usb 2-1: SerialNumber: syz [ 539.691642][ T5002] usb 2-1: config 0 descriptor?? [ 539.713243][ T5002] gspca_main: touptek-2.14.0 probing 0547:6801 [ 539.885778][ T35] team0 (unregistering): Port device team_slave_1 removed [ 540.022111][ T47] usb 2-1: USB disconnect, device number 12 [ 540.116520][T10476] loop3: detected capacity change from 0 to 4096 [ 540.149793][T10476] EXT4-fs: Ignoring removed oldalloc option [ 540.169003][T10476] EXT4-fs (loop3): Test dummy encryption mode enabled [ 540.191128][ T35] team0 (unregistering): Port device team_slave_0 removed [ 540.269429][T10476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.780652][ T5286] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 540.977352][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 540.989905][ T5286] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 541.038244][ T5286] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 541.067210][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.076205][ T5286] usb 5-1: Product: syz [ 541.089225][ T5286] usb 5-1: Manufacturer: syz [ 541.113731][ T5286] usb 5-1: SerialNumber: syz [ 541.601997][T10485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.615198][T10485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.631473][ T5286] usb 5-1: USB disconnect, device number 18 [ 541.703726][T10424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.780958][T10347] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.788169][T10347] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.830472][T10347] bridge_slave_0: entered allmulticast mode [ 541.849258][T10347] bridge_slave_0: entered promiscuous mode [ 541.893952][T10347] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.898766][ T9256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.911787][T10347] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.919129][T10347] bridge_slave_1: entered allmulticast mode [ 541.949360][T10347] bridge_slave_1: entered promiscuous mode [ 542.173275][T10347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.215206][T10347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.344685][T10503] loop3: detected capacity change from 0 to 1024 [ 542.463198][T10503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.599050][T10347] team0: Port device team_slave_0 added [ 542.664408][T10347] team0: Port device team_slave_1 added [ 543.787397][T10347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.835584][T10347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.844030][ T9256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.886209][T10347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.920081][T10347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.938680][T10347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.080388][T10347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.267409][T10536] loop2: detected capacity change from 0 to 128 [ 544.298454][T10536] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0177777777777777777777701777777777777777777777' [ 545.387378][T10540] input: syz0 as /devices/virtual/input/input25 [ 545.747065][T10347] hsr_slave_0: entered promiscuous mode [ 545.866186][T10347] hsr_slave_1: entered promiscuous mode [ 545.985341][T10347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.014994][T10347] Cannot create hsr debugfs directory [ 546.321842][T10566] binder: BINDER_SET_CONTEXT_MGR already set [ 546.328863][T10566] binder: 10561:10566 ioctl 4018620d 20000040 returned -16 [ 547.086907][T10571] loop0: detected capacity change from 0 to 32768 [ 547.107398][T10571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1299 (10571) [ 547.134800][T10571] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 547.145355][T10571] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 547.154214][T10571] BTRFS info (device loop0): using free-space-tree [ 547.623721][T10591] loop2: detected capacity change from 0 to 128 [ 547.677262][T10591] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 548.021969][ T9083] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 549.204160][T10615] veth1_to_hsr: entered promiscuous mode [ 549.258811][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 549.795619][T10347] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 549.855151][T10608] loop2: detected capacity change from 0 to 32768 [ 549.867279][T10347] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 549.879603][T10608] XFS: ikeep mount option is deprecated. [ 549.900395][T10608] XFS: ikeep mount option is deprecated. [ 549.941085][T10347] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 550.044911][T10608] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 550.056892][T10347] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 550.287905][T10635] loop0: detected capacity change from 0 to 512 [ 550.397293][T10608] XFS (loop2): Ending clean mount [ 550.416633][T10635] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 550.460356][ T29] audit: type=1800 audit(1722621211.713:2208): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1305" name="bus" dev="loop2" ino=9289 res=0 errno=0 [ 550.523486][T10635] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1308: attempt to clear invalid blocks 1024 len 1 [ 550.545834][ T9372] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 550.558080][T10635] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1308: invalid indirect mapped block 1819239214 (level 0) [ 550.588822][T10635] EXT4-fs (loop0): 1 truncate cleaned up [ 550.599429][T10635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.649228][T10347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.735339][T10347] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.765585][T10635] EXT4-fs error (device loop0): __ext4_remount:6491: comm syz.0.1308: Abort forced by user [ 550.808958][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.816172][ T9532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.868947][T10635] EXT4-fs (loop0): Remounting filesystem read-only [ 550.903708][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.910938][ T9532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.099171][T10347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.262702][ T9083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.866167][T10656] input: syz0 as /devices/virtual/input/input27 [ 552.730301][ T5286] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 552.900270][ T6520] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 552.921600][ T5286] usb 1-1: device descriptor read/64, error -71 [ 553.010978][T10347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.095995][T10670] loop3: detected capacity change from 0 to 256 [ 553.200776][ T5286] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 553.214777][T10670] FAT-fs (loop3): Directory bread(block 64) failed [ 553.240948][T10670] FAT-fs (loop3): Directory bread(block 65) failed [ 553.265437][T10670] FAT-fs (loop3): Directory bread(block 66) failed [ 553.280408][T10670] FAT-fs (loop3): Directory bread(block 67) failed [ 553.297468][T10670] FAT-fs (loop3): Directory bread(block 68) failed [ 553.317496][T10670] FAT-fs (loop3): Directory bread(block 69) failed [ 553.345714][T10670] FAT-fs (loop3): Directory bread(block 70) failed [ 553.375152][T10670] FAT-fs (loop3): Directory bread(block 71) failed [ 553.408802][T10670] FAT-fs (loop3): Directory bread(block 72) failed [ 553.436165][T10670] FAT-fs (loop3): Directory bread(block 73) failed [ 553.642643][T10682] xt_l2tp: invalid flags combination: 0 [ 553.741377][T10347] veth0_vlan: entered promiscuous mode [ 553.799162][T10347] veth1_vlan: entered promiscuous mode [ 553.988039][T10347] veth0_macvtap: entered promiscuous mode [ 554.036578][T10347] veth1_macvtap: entered promiscuous mode [ 554.146384][T10698] loop0: detected capacity change from 0 to 512 [ 554.149441][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.200429][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.246324][T10698] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 554.270273][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.300349][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.328134][T10712] 9pnet_fd: Insufficient options for proto=fd [ 554.358270][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.386201][ T60] kernel write not supported for file /input/mouse0 (pid: 60 comm: kworker/0:2) [ 554.420396][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.469172][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.508551][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.550329][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.602507][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.660220][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.074473][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.301961][T10347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.570473][T10698] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 555.610938][T10700] mkiss: ax0: crc mode is auto. [ 555.644934][T10712] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 555.683175][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.701028][T10712] EXT4-fs warning (device loop0): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 555.701028][T10712] [ 555.707290][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.726973][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.738250][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.748805][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.759659][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.774309][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.792850][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.835025][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.873551][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.913354][T10347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.954834][T10347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.026352][T10347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.095717][T10347] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.138944][T10347] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.166771][T10741] netlink: 'syz.1.1332': attribute type 1 has an invalid length. [ 556.168396][T10347] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.194287][T10347] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.229874][ T9083] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 556.240265][T10741] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1332'. [ 556.629319][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 556.822985][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.874852][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.605524][T10766] loop4: detected capacity change from 0 to 64 [ 557.678638][ T9898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.758893][ T9898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.140450][ T9374] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 558.410753][ T9374] usb 1-1: Using ep0 maxpacket: 8 [ 559.040604][ T9374] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 559.049786][ T9374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.107906][ T9374] usb 1-1: config 0 descriptor?? [ 560.813739][T10798] loop4: detected capacity change from 0 to 164 [ 560.816943][ T9374] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 560.951322][T10793] overlayfs: failed to resolve './file0': -2 [ 561.645661][ T9374] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 561.667256][ T9374] asix 1-1:0.0: probe with driver asix failed with error -71 [ 561.704304][ T9374] usb 1-1: USB disconnect, device number 15 [ 562.416067][T10841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.489056][T10841] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 562.517799][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.524651][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.678940][T10848] loop3: detected capacity change from 0 to 64 [ 563.968573][T10861] tipc: Started in network mode [ 564.009519][T10861] tipc: Node identity , cluster identity 4711 [ 564.029817][T10861] tipc: Failed to set node id, please configure manually [ 564.080418][T10861] tipc: Enabling of bearer rejected, failed to enable media [ 564.412400][T10876] loop4: detected capacity change from 0 to 8 [ 564.419262][T10876] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 564.631490][T10876] cramfs: Error -3 while decompressing! [ 564.637740][T10876] cramfs: ffffffff95056698(42)->ffff88803e412000(4096) [ 564.858957][T10844] loop2: detected capacity change from 0 to 32768 [ 564.895128][T10844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1360 (10844) [ 565.102657][ T5299] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 565.111083][T10844] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 565.175004][T10844] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 565.209559][T10844] BTRFS info (device loop2): using free-space-tree [ 565.527115][T10844] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 565.530773][T10844] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 565.541341][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.561553][T10899] loop3: detected capacity change from 0 to 1024 [ 565.568762][T10899] EXT4-fs: Ignoring removed orlov option [ 565.611953][T10844] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 565.616029][T10844] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 565.640774][T10899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.670095][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.704097][ T5299] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 565.718190][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.726797][T10844] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 565.727859][T10844] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 565.744060][T10844] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 565.765022][T10899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.765076][T10844] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 565.794523][T10918] loop4: detected capacity change from 0 to 128 [ 565.809850][T10844] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 565.813724][ T5299] usb 1-1: config 0 descriptor?? [ 565.834310][T10844] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 565.859012][T10844] BTRFS error (device loop2): open_ctree failed [ 566.204909][T10889] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 566.405523][T10922] fuse: Bad value for 'fd' [ 566.546256][ T9256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.613460][ T5299] logitech-djreceiver 0003:046D:C71B.0012: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input0 [ 566.718516][T10927] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1385'. [ 566.741081][ T5299] usb 1-1: USB disconnect, device number 16 [ 566.926527][T10937] loop5: detected capacity change from 0 to 8 [ 567.113558][ T6520] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 567.396457][ T6520] usb 4-1: config index 0 descriptor too short (expected 32, got 18) [ 567.410722][ T6520] usb 4-1: config 128 has no interfaces? [ 567.424444][ T6520] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 567.444262][ T6520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.749451][T10933] loop3: detected capacity change from 0 to 1024 [ 567.765503][T10933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 567.792251][T10933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 567.819371][T10933] EXT4-fs (loop3): Test dummy encryption mode enabled [ 567.852520][T10933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003] [ 567.929878][T10933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.044160][T10957] input: syz1 as /devices/virtual/input/input28 [ 568.046708][T10955] dvmrp0: entered allmulticast mode [ 569.385399][T10966] loop4: detected capacity change from 0 to 2048 [ 569.427112][T10933] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 569.510620][T10974] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 569.721307][T10974] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 569.752740][T10974] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 569.818367][T10974] Remounting filesystem read-only [ 569.848492][ T6327] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 569.869329][ T6327] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 569.895502][ T6327] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 569.917009][ T6327] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 569.940315][ T6327] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 569.964016][ T6327] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 569.992125][ T6327] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 570.019949][ T6327] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 570.040958][ T6327] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 570.049861][ T6327] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 570.074686][ T6327] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 570.095297][ T6327] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 570.110254][ T6327] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 570.129656][ T6327] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 570.148608][ T8] usb 4-1: USB disconnect, device number 12 [ 570.150987][ T6327] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 570.191449][ T9773] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 570.202978][ T9773] Bluetooth: hci3: Injecting HCI hardware error event [ 570.213720][ T9773] Bluetooth: hci3: hardware error 0x00 [ 570.213720][ T6327] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 570.219195][ T6327] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 570.219222][ T6327] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 570.219245][ T6327] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 570.219266][ T6327] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 570.308156][ T9256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.670886][ T60] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 570.757402][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'. [ 570.777587][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 570.779122][T11006] loop3: detected capacity change from 0 to 512 [ 570.857863][T11006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.870744][T11011] loop4: detected capacity change from 0 to 256 [ 570.879268][T11011] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 570.894251][T11006] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.920426][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 570.929041][ T60] usb 6-1: config 0 has an invalid interface number: 234 but max is 3 [ 570.937364][ T60] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.947698][ T60] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 570.958060][ T60] usb 6-1: config 0 has no interface number 0 [ 570.964281][ T60] usb 6-1: config 0 interface 234 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 570.977611][ T60] usb 6-1: config 0 interface 234 has no altsetting 0 [ 570.992999][ T60] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=95.14 [ 571.011090][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.019170][ T60] usb 6-1: Product: syz [ 571.023885][ T60] usb 6-1: Manufacturer: syz [ 571.028502][ T60] usb 6-1: SerialNumber: syz [ 571.037928][ T60] usb 6-1: config 0 descriptor?? [ 571.281095][ T60] usb 6-1: USB disconnect, device number 13 [ 571.364587][ T9256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.475361][ T5242] Bluetooth: hci2: command tx timeout [ 571.604754][T11029] loop4: detected capacity change from 0 to 512 [ 571.671627][T11029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.699835][T11031] loop3: detected capacity change from 0 to 1024 [ 571.709089][T11029] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 571.787218][ T6327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.000688][ T35] hfsplus: b-tree write err: -5, ino 4 [ 572.088912][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 572.284485][T11054] loop3: detected capacity change from 0 to 64 [ 572.350557][ T9773] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 573.491594][T11051] loop5: detected capacity change from 0 to 2048 [ 573.702548][T11069] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 573.726151][T11065] loop2: detected capacity change from 0 to 256 [ 573.754488][T11051] loop5: p1 < > p4 [ 573.775242][T11051] loop5: p4 size 8388608 extends beyond EOD, truncated [ 573.781486][T11065] exfat: Unknown parameter 'ë ©' [ 573.950301][ T5235] Bluetooth: hci2: command 0x0405 tx timeout [ 574.000008][T11080] loop4: detected capacity change from 0 to 764 [ 574.960544][ T5242] Bluetooth: hci7: command 0x0406 tx timeout [ 575.479874][T11089] loop5: detected capacity change from 0 to 8 [ 575.528819][T11089] squashfs: Unknown parameter 'bridge0' [ 575.667659][ T29] audit: type=1326 audit(1722621236.923:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31cf779f9 code=0x7ffc0000 [ 575.757157][ T29] audit: type=1326 audit(1722621236.923:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31cf779f9 code=0x7ffc0000 [ 575.810321][T11103] loop2: detected capacity change from 0 to 128 [ 575.840601][ T29] audit: type=1326 audit(1722621236.943:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fa31cf779f9 code=0x7ffc0000 [ 575.886935][T11101] loop4: detected capacity change from 0 to 4096 [ 575.924537][T11101] nilfs2: Unknown parameter '.' [ 575.943548][ T29] audit: type=1326 audit(1722621236.943:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31cf779f9 code=0x7ffc0000 [ 576.036008][ T29] audit: type=1326 audit(1722621236.943:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31cf779f9 code=0x7ffc0000 [ 576.199846][T11107] loop3: detected capacity change from 0 to 1024 [ 576.307654][T11117] loop4: detected capacity change from 0 to 256 [ 576.322397][T11107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.357279][T11113] loop2: detected capacity change from 0 to 4096 [ 576.365457][T11117] exfat: Bad value for 'uid' [ 576.384900][T11117] exfat: Bad value for 'uid' [ 576.450358][ T5299] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 576.650254][ T5299] usb 1-1: Using ep0 maxpacket: 16 [ 576.671111][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.721322][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.751219][ T5299] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 576.796903][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.828255][ T5299] usb 1-1: config 0 descriptor?? [ 576.835149][T11127] loop4: detected capacity change from 0 to 512 [ 577.992073][ T5299] corsair 0003:1B1C:1B02.0013: unknown main item tag 0x0 [ 578.059871][ T5299] corsair 0003:1B1C:1B02.0013: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 578.113853][ T5299] corsair 0003:1B1C:1B02.0013: Failed to get K90 initial state (error -71). [ 578.149677][ T5299] usb 1-1: USB disconnect, device number 17 [ 580.570729][T11142] 9pnet: Could not find request transport: fd0x0000000000000005 [ 580.658269][T11150] loop0: detected capacity change from 0 to 512 [ 580.670617][T11150] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 580.840560][ T9256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.865904][T11150] EXT4-fs (loop0): 1 truncate cleaned up [ 580.886967][T11150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.236199][ T1300] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.258994][ T9083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.419862][ T1300] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.559568][T11172] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 581.603442][T11172] vhci_hcd: invalid port number 10 [ 581.608584][T11172] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 581.723066][ T1300] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.798703][T11177] loop4: detected capacity change from 0 to 1024 [ 581.831151][T11177] EXT4-fs: Ignoring removed orlov option [ 581.840235][T11177] EXT4-fs: Ignoring removed nomblk_io_submit option [ 581.922187][T11177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.127070][ T1300] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.404051][ T9374] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 582.489481][ T9374] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 582.607339][ T6327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.690314][ T60] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 582.725591][T11193] loop5: detected capacity change from 0 to 4096 [ 582.815640][T11193] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 582.888810][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 582.901851][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.921616][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 582.930679][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 582.942037][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 582.950311][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 582.959538][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 583.015617][ T60] usb 1-1: unable to get BOS descriptor or descriptor too short [ 583.048567][ T60] usb 1-1: config 0 has no interfaces? [ 583.074286][ T60] usb 1-1: string descriptor 0 read error: -22 [ 583.098142][ T60] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.40 [ 583.144928][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.196658][ T60] usb 1-1: config 0 descriptor?? [ 583.264109][ T1300] bridge_slave_1: left allmulticast mode [ 583.286803][ T1300] bridge_slave_1: left promiscuous mode [ 583.309912][ T1300] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.352299][ T1300] bridge_slave_0: left allmulticast mode [ 583.368222][ T1300] bridge_slave_0: left promiscuous mode [ 583.388710][ T1300] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.522866][ T5002] usb 1-1: USB disconnect, device number 18 [ 583.937455][ T9532] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 584.310977][T11193] ntfs3: loop5: ino=0, ntfs_iget5 [ 584.316476][T11193] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 584.390454][ T9532] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 584.399730][ T9532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.504303][T11205] loop4: detected capacity change from 0 to 1024 [ 584.521508][ T9532] usb 2-1: Product: syz [ 584.525728][ T9532] usb 2-1: Manufacturer: syz [ 584.557648][ T9532] usb 2-1: SerialNumber: syz [ 584.608844][ T9532] usb 2-1: config 0 descriptor?? [ 584.652071][T11192] binder: 11186:11192 ioctl c0306201 20000300 returned -22 [ 584.870404][ T2537] hfsplus: b-tree write err: -5, ino 8 [ 585.030459][ T5299] usb 2-1: USB disconnect, device number 13 [ 585.070572][ T5242] Bluetooth: hci0: command tx timeout [ 586.985741][ T1300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.006089][ T1300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.037104][ T1300] bond0 (unregistering): Released all slaves [ 587.151170][ T5242] Bluetooth: hci0: command tx timeout [ 587.359842][T11253] Invalid option length (1048436) for dns_resolver key [ 587.624348][T11257] loop5: detected capacity change from 0 to 4096 [ 587.639761][T11257] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 587.809713][ T29] audit: type=1800 audit(1722621249.073:2214): pid=11257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1499" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 587.880047][ T29] audit: type=1800 audit(1722621249.083:2215): pid=11257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1499" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 587.900533][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.045521][ T1300] hsr_slave_0: left promiscuous mode [ 588.066306][ T1300] hsr_slave_1: left promiscuous mode [ 588.077125][ T1300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.103609][ T1300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.156386][ T1300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.182311][ T1300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.295007][ T1300] veth1_macvtap: left promiscuous mode [ 588.314141][ T1300] veth0_macvtap: left promiscuous mode [ 588.319898][ T1300] veth1_vlan: left promiscuous mode [ 588.350549][ T1300] veth0_vlan: left promiscuous mode [ 588.702011][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 589.240739][ T5242] Bluetooth: hci0: command tx timeout [ 590.145348][ T1300] team0 (unregistering): Port device team_slave_1 removed [ 591.008258][ T1300] team0 (unregistering): Port device team_slave_0 removed [ 591.319324][ T5242] Bluetooth: hci0: command tx timeout [ 592.250276][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1503'. [ 592.270845][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 592.547359][T11198] chnl_net:caif_netlink_parms(): no params data found [ 592.638210][T11292] netlink: 'syz.2.1513': attribute type 10 has an invalid length. [ 592.677813][T11292] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 592.743951][T11295] loop0: detected capacity change from 0 to 1024 [ 592.769393][T11295] EXT4-fs: Ignoring removed oldalloc option [ 592.800263][T11295] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 593.031900][T11295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.141451][T11313] loop5: detected capacity change from 0 to 512 [ 593.365814][T11313] EXT4-fs (loop5): Test dummy encryption mode enabled [ 593.411288][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.452929][T11313] EXT4-fs error (device loop5): __ext4_fill_super:5435: inode #2: comm syz.5.1517: casefold flag without casefold feature [ 594.467638][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.483488][T11198] bridge_slave_0: entered allmulticast mode [ 594.491477][T11198] bridge_slave_0: entered promiscuous mode [ 594.510708][T11313] EXT4-fs (loop5): get root inode failed [ 594.516700][T11313] EXT4-fs (loop5): mount failed [ 594.580327][T11295] loop0: detected capacity change from 1024 to 0 [ 594.585709][T11320] loop2: detected capacity change from 0 to 512 [ 594.646068][T11320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.704261][T11313] loop5: detected capacity change from 0 to 128 [ 594.721156][T11320] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 594.755176][ T9083] syz-executor: attempt to access beyond end of device [ 594.755176][ T9083] loop0: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 595.047950][ T9083] syz-executor: attempt to access beyond end of device [ 595.047950][ T9083] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 596.850290][ T9083] syz-executor: attempt to access beyond end of device [ 596.850290][ T9083] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 597.126475][ T9083] syz-executor: attempt to access beyond end of device [ 597.126475][ T9083] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 597.204988][ T9083] syz-executor: attempt to access beyond end of device [ 597.204988][ T9083] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 597.259930][ T9083] syz-executor: attempt to access beyond end of device [ 597.259930][ T9083] loop0: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 597.338733][ T9083] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #2: block 5: comm syz-executor: unable to read itable block [ 597.415358][ T9083] syz-executor: attempt to access beyond end of device [ 597.415358][ T9083] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 597.468868][ T9083] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 597.503119][ T9083] EXT4-fs (loop0): I/O error while writing superblock [ 597.510019][ T9083] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: IO failure [ 597.533774][ T9083] syz-executor: attempt to access beyond end of device [ 597.533774][ T9083] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 597.580702][ T9083] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 597.598683][ T9083] EXT4-fs (loop0): I/O error while writing superblock [ 597.646211][ T9083] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 597.697033][ T9083] syz-executor: attempt to access beyond end of device [ 597.697033][ T9083] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 597.728074][ T9083] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 597.738104][ T9083] EXT4-fs (loop0): I/O error while writing superblock [ 597.844384][ T59] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm kworker/u8:4: Error while async write back metadata [ 597.872091][ T59] kworker/u8:4: attempt to access beyond end of device [ 597.872091][ T59] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 597.900255][ T59] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 597.911412][ T59] EXT4-fs (loop0): I/O error while writing superblock [ 597.925620][ T59] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 112) [ 597.964940][ T59] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm kworker/u8:4: Error while async write back metadata [ 598.003468][ T59] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 598.030381][T11306] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 598.039162][T11306] EXT4-fs error (device loop0): kmmpd:186: comm kmmpd-loop0: Error writing to MMP block [ 598.049444][ T59] EXT4-fs (loop0): I/O error while writing superblock [ 598.094835][T11306] EXT4-fs (loop0): previous I/O error to superblock detected [ 598.103037][ T59] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm kworker/u8:4: Error while async write back metadata [ 598.130619][T11306] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 598.150240][T11306] EXT4-fs (loop0): I/O error while writing superblock [ 598.157639][ T59] EXT4-fs (loop0): previous I/O error to superblock detected [ 598.191359][ T59] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 598.199741][ T59] EXT4-fs (loop0): I/O error while writing superblock [ 598.212253][ T59] Buffer I/O error on device loop0, logical block 112 [ 598.219869][ T59] Buffer I/O error on device loop0, logical block 113 [ 598.226649][ T59] Buffer I/O error on device loop0, logical block 114 [ 598.233422][ T59] Buffer I/O error on device loop0, logical block 115 [ 598.294847][ T59] Buffer I/O error on device loop0, logical block 116 [ 598.301673][ T59] Buffer I/O error on device loop0, logical block 117 [ 598.308458][ T59] Buffer I/O error on device loop0, logical block 118 [ 598.315273][ T59] Buffer I/O error on device loop0, logical block 119 [ 598.336637][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.344916][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.373616][T11198] bridge_slave_1: entered allmulticast mode [ 598.382560][T11198] bridge_slave_1: entered promiscuous mode [ 598.389919][ T59] Buffer I/O error on device loop0, logical block 120 [ 598.396716][ T59] Buffer I/O error on device loop0, logical block 121 [ 598.436860][ T59] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm kworker/u8:4: Error while async write back metadata [ 598.477510][ T59] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 598.510407][ T59] EXT4-fs (loop0): I/O error while writing superblock [ 598.532311][ T59] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 148) [ 598.570328][ T59] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm kworker/u8:4: Error while async write back metadata [ 598.613227][T11345] dccp_close: ABORT with 36 bytes unread [ 598.622396][ T59] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 598.633510][ T59] EXT4-fs (loop0): I/O error while writing superblock [ 598.673769][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.696639][ T59] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm kworker/u8:4: Error while async write back metadata [ 598.715580][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.733269][ T9372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.757533][ T59] EXT4-fs (loop0): I/O error while writing superblock [ 598.766989][ T59] EXT4-fs (loop0): I/O error while writing superblock [ 598.860712][ T5286] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 598.888845][T11198] team0: Port device team_slave_0 added [ 598.917616][ T9083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.948165][T11198] team0: Port device team_slave_1 added [ 599.025778][T11348] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 599.055774][ T5286] usb 2-1: Using ep0 maxpacket: 32 [ 599.180558][ T5286] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 599.210290][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.265179][ T5286] usb 2-1: Product: syz [ 599.288208][ T5286] usb 2-1: Manufacturer: syz [ 599.306501][ T5286] usb 2-1: SerialNumber: syz [ 599.342784][ T5286] usb 2-1: config 0 descriptor?? [ 599.370870][ T5286] cdc_ether 2-1:0.0: More than one union descriptor, skipping ... [ 599.389669][T11352] netlink: 'syz.5.1527': attribute type 21 has an invalid length. [ 599.399154][T11352] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1527'. [ 599.417013][T11352] netlink: 'syz.5.1527': attribute type 5 has an invalid length. [ 599.431216][ T5286] usb 2-1: bad CDC descriptors [ 599.438120][T11352] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1527'. [ 599.452701][T11356] loop2: detected capacity change from 0 to 2048 [ 599.468911][ T5286] usb 2-1: unsupported MDLM descriptors [ 599.484581][T11356] EXT4-fs: Ignoring removed mblk_io_submit option [ 599.503861][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.527885][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.588259][T11356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.614888][ T5286] usb 2-1: USB disconnect, device number 14 [ 599.638519][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.661009][ T29] audit: type=1800 audit(1722621260.933:2216): pid=11356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1529" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 600.254317][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.783756][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.823581][T11356] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1529: bg 0: block 234: padding at end of block bitmap is not set [ 600.842603][T11356] EXT4-fs (loop2): Remounting filesystem read-only [ 601.012651][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.292817][ T29] audit: type=1326 audit(1722621262.563:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f39779f9 code=0x7ffc0000 [ 601.393360][ T29] audit: type=1326 audit(1722621262.563:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f39779f9 code=0x7ffc0000 [ 601.486474][ T29] audit: type=1326 audit(1722621262.573:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0f39779f9 code=0x7ffc0000 [ 601.560295][ T29] audit: type=1326 audit(1722621262.573:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f39779f9 code=0x7ffc0000 [ 601.600890][ T1300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.660530][ T29] audit: type=1326 audit(1722621262.583:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0f39779f9 code=0x7ffc0000 [ 601.738382][ T29] audit: type=1326 audit(1722621262.583:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f39779f9 code=0x7ffc0000 [ 601.817017][T11371] loop5: detected capacity change from 0 to 512 [ 601.854165][ T29] audit: type=1326 audit(1722621262.613:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0f396e9a7 code=0x7ffc0000 [ 601.949507][T11371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.091408][T11371] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 602.227429][T11198] hsr_slave_0: entered promiscuous mode [ 602.605247][ T29] audit: type=1326 audit(1722621262.613:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0f3913349 code=0x7ffc0000 [ 602.657537][ T5002] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 602.661242][T11198] hsr_slave_1: entered promiscuous mode [ 602.677362][ T29] audit: type=1326 audit(1722621262.613:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd0f39779f9 code=0x7ffc0000 [ 602.712172][T11198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.750368][T11198] Cannot create hsr debugfs directory [ 602.779419][T11375] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.793725][T11375] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.837018][ T9773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 602.849860][ T9773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 602.869028][ T9773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 602.878950][ T9773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 602.886844][ T9773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 602.894110][ T5002] usb 2-1: Using ep0 maxpacket: 32 [ 602.901719][ T9773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 602.982206][ T5002] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.993791][ T5002] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.004956][ T5002] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 603.040493][ T5002] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 603.049628][ T5002] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 603.068486][ T5002] usb 2-1: Product: syz [ 603.072290][ T9372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.072853][ T5002] usb 2-1: Manufacturer: syz [ 603.090645][ T5002] usb 2-1: SerialNumber: syz [ 603.124305][ T5002] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input29 [ 603.191653][T10347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.336201][ T1300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.625165][ T5299] usb 2-1: USB disconnect, device number 15 [ 603.660243][ T1300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.688213][ T5299] appletouch 2-1:1.0: input: appletouch disconnected [ 603.778261][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 603.918678][ T1300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.007762][T11394] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 604.020373][T11394] netlink: 9396 bytes leftover after parsing attributes in process `syz.4.1543'. [ 604.640048][T11404] loop4: detected capacity change from 0 to 16 [ 604.663767][T11404] erofs: (device loop4): z_erofs_parse_cfgs: unidentified algorithms fff0, please upgrade kernel [ 604.698171][ T1300] bridge_slave_1: left allmulticast mode [ 604.770162][ T1300] bridge_slave_1: left promiscuous mode [ 604.777890][ T1300] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.881496][ T1300] bridge_slave_0: left allmulticast mode [ 604.887370][ T1300] bridge_slave_0: left promiscuous mode [ 604.916851][ T1300] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.000769][ T5242] Bluetooth: hci3: command tx timeout [ 605.179110][T11412] loop5: detected capacity change from 0 to 8 [ 605.503776][T11416] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 605.510401][T11416] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 605.518216][T11416] vhci_hcd vhci_hcd.0: Device attached [ 605.533654][T11418] vhci_hcd: connection closed [ 605.534475][ T35] vhci_hcd: stop threads [ 605.550685][ T35] vhci_hcd: release socket [ 605.600556][ T35] vhci_hcd: disconnect device [ 605.704722][T11421] loop4: detected capacity change from 0 to 512 [ 605.722195][T11421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 605.743653][ T1300] dvmrp0 (unregistering): left allmulticast mode [ 605.790360][T11421] EXT4-fs (loop4): 1 truncate cleaned up [ 605.797937][T11421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.976232][ T6327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.318625][ T1300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.359469][ T1300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.408669][ T1300] bond0 (unregistering): Released all slaves [ 606.903721][T11435] loop2: detected capacity change from 0 to 128 [ 606.991052][T11437] loop4: detected capacity change from 0 to 64 [ 607.029113][T11437] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 607.070305][ T5242] Bluetooth: hci3: command tx timeout [ 607.180868][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 607.180889][ T29] audit: type=1326 audit(1722621268.453:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb041f779f9 code=0x0 [ 607.515428][ T1300] hsr_slave_0: left promiscuous mode [ 607.555178][ T1300] hsr_slave_1: left promiscuous mode [ 607.563066][ T1300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.580204][ T1300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.598607][ T1300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.633914][ T1300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.800277][ T1300] veth1_macvtap: left promiscuous mode [ 607.805898][ T1300] veth0_macvtap: left promiscuous mode [ 607.850473][ T1300] veth1_vlan: left promiscuous mode [ 607.866230][ T1300] veth0_vlan: left promiscuous mode [ 608.015935][T11429] loop5: detected capacity change from 0 to 32768 [ 608.148710][T11429] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 608.334353][T11429] XFS (loop5): Ending clean mount [ 608.388189][T11429] XFS (loop5): Quotacheck needed: Please wait. [ 608.755425][T11429] XFS (loop5): Quotacheck: Done. [ 609.035049][T10347] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 609.153886][ T5242] Bluetooth: hci3: command tx timeout [ 610.029586][T11467] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1564'. [ 610.052220][T11467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1564'. [ 611.087118][ T1300] team0 (unregistering): Port device team_slave_1 removed [ 611.231132][ T5242] Bluetooth: hci3: command tx timeout [ 611.307025][ T1300] team0 (unregistering): Port device team_slave_0 removed [ 611.330659][ T5328] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 611.550356][ T5328] usb 2-1: Using ep0 maxpacket: 16 [ 611.597564][ T5328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 611.652048][ T5328] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 611.680238][ T5328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.688380][ T5328] usb 2-1: Product: syz [ 611.711605][ T5328] usb 2-1: Manufacturer: syz [ 611.716348][ T5328] usb 2-1: SerialNumber: syz [ 611.761369][ T5328] usb 2-1: config 0 descriptor?? [ 612.010604][ T5328] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 612.060605][ T5328] usb 2-1: USB disconnect, device number 16 [ 612.372369][T11489] loop4: detected capacity change from 0 to 32768 [ 613.054449][T11495] loop4: detected capacity change from 0 to 16 [ 613.099676][T11495] erofs: (device loop4): mounted with root inode @ nid 36. [ 614.506728][T11472] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1570'. [ 614.896496][T11378] chnl_net:caif_netlink_parms(): no params data found [ 615.467045][T11509] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1582'. [ 615.532645][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1582'. [ 615.960281][ T6520] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 616.113059][T11198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 616.132780][T11198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 616.160221][ T6520] usb 3-1: Using ep0 maxpacket: 32 [ 616.174977][ T6520] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 616.184877][ T6520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.196467][ T6520] usb 3-1: Product: syz [ 616.200974][ T6520] usb 3-1: Manufacturer: syz [ 616.206217][ T6520] usb 3-1: SerialNumber: syz [ 616.218562][ T6520] usb 3-1: config 0 descriptor?? [ 616.225929][ T6520] hub 3-1:0.0: bad descriptor, ignoring hub [ 616.232739][ T6520] hub 3-1:0.0: probe with driver hub failed with error -5 [ 616.334165][T11198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 616.378652][T11198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 616.454139][T11378] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.464471][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.474660][T11378] bridge_slave_0: entered allmulticast mode [ 616.518552][T11378] bridge_slave_0: entered promiscuous mode [ 616.584158][T11378] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.603985][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.614555][T11378] bridge_slave_1: entered allmulticast mode [ 616.638570][T11378] bridge_slave_1: entered promiscuous mode [ 616.820795][T11520] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 616.865133][ T5286] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 616.910051][T11378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.972585][T11378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.244664][T11378] team0: Port device team_slave_0 added [ 617.293503][T11378] team0: Port device team_slave_1 added [ 617.443025][T11378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.462860][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.489432][ T5299] usb 3-1: USB disconnect, device number 16 [ 617.503209][T11378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.530487][T11378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.545399][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.598426][T11378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.763658][T11378] hsr_slave_0: entered promiscuous mode [ 617.772536][T11378] hsr_slave_1: entered promiscuous mode [ 617.789202][T11378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.798249][T11378] Cannot create hsr debugfs directory [ 617.893678][ T6520] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 617.919798][ T6520] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 617.963087][ T6520] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 618.047533][T11545] loop2: detected capacity change from 0 to 512 [ 618.103313][T11545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.122595][T11198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.130497][ T5242] Bluetooth: hci0: command 0x0401 tx timeout [ 618.159457][T11545] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 618.253899][ T9372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.521878][T11560] loop4: detected capacity change from 0 to 128 [ 618.806373][T11198] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.961927][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.969260][ T5002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.002854][ T5002] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.010072][ T5002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.129451][ T5242] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:201' [ 619.129743][ T5242] CPU: 1 UID: 0 PID: 5242 Comm: kworker/u9:6 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 619.129778][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 619.129799][ T5242] Workqueue: hci7 hci_rx_work [ 619.129834][ T5242] Call Trace: [ 619.129846][ T5242] [ 619.129860][ T5242] dump_stack_lvl+0x241/0x360 [ 619.129912][ T5242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.129954][ T5242] ? __pfx__printk+0x10/0x10 [ 619.129993][ T5242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.130029][ T5242] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 619.130064][ T5242] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 619.130111][ T5242] sysfs_create_dir_ns+0x2ce/0x3a0 [ 619.130146][ T5242] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 619.130174][ T5242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.130219][ T5242] kobject_add_internal+0x435/0x8d0 [ 619.130272][ T5242] kobject_add+0x152/0x220 [ 619.130309][ T5242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.130346][ T5242] ? do_raw_spin_unlock+0x13c/0x8b0 [ 619.130386][ T5242] ? device_add+0x3e7/0xbf0 [ 619.130434][ T5242] ? __pfx_kobject_add+0x10/0x10 [ 619.130470][ T5242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.130505][ T5242] ? _raw_spin_unlock+0x28/0x50 [ 619.130539][ T5242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.130576][ T5242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.130607][ T5242] ? get_device_parent+0x165/0x410 [ 619.130659][ T5242] device_add+0x4e5/0xbf0 [ 619.130715][ T5242] hci_conn_add_sysfs+0xe8/0x200 [ 619.130766][ T5242] le_conn_complete_evt+0xc9f/0x12e0 [ 619.130813][ T5242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.130844][ T5242] ? trace_contention_end+0x3c/0x120 [ 619.130883][ T5242] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 619.130922][ T5242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.130953][ T5242] ? __mutex_unlock_slowpath+0x21d/0x750 [ 619.131000][ T5242] ? __copy_skb_header+0x437/0x5b0 [ 619.131036][ T5242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.131067][ T5242] ? skb_pull_data+0x112/0x230 [ 619.131111][ T5242] hci_le_enh_conn_complete_evt+0x185/0x420 [ 619.131161][ T5242] hci_event_packet+0xa57/0x1540 [ 619.131217][ T5242] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 619.131261][ T5242] ? __pfx_hci_event_packet+0x10/0x10 [ 619.131307][ T5242] ? do_raw_spin_unlock+0x13c/0x8b0 [ 619.131362][ T5242] ? __entry_text_end+0xfdfc5/0x1020c9 [ 619.131393][ T5242] ? hci_send_to_monitor+0xd8/0x7f0 [ 619.131431][ T5242] ? kcov_remote_start+0x9e/0x7e0 [ 619.131483][ T5242] hci_rx_work+0x3e8/0xca0 [ 619.131526][ T5242] ? process_scheduled_works+0x945/0x1830 [ 619.131569][ T5242] process_scheduled_works+0xa2e/0x1830 [ 619.131655][ T5242] ? __pfx_process_scheduled_works+0x10/0x10 [ 619.131712][ T5242] ? assign_work+0x364/0x3d0 [ 619.131761][ T5242] worker_thread+0x86d/0xd40 [ 619.131827][ T5242] ? __kthread_parkme+0x169/0x1d0 [ 619.131879][ T5242] ? __pfx_worker_thread+0x10/0x10 [ 619.131923][ T5242] kthread+0x2f2/0x390 [ 619.131952][ T5242] ? __pfx_worker_thread+0x10/0x10 [ 619.131994][ T5242] ? __pfx_kthread+0x10/0x10 [ 619.132025][ T5242] ret_from_fork+0x4d/0x80 [ 619.132071][ T5242] ? __pfx_kthread+0x10/0x10 [ 619.132099][ T5242] ret_from_fork_asm+0x1a/0x30 [ 619.132168][ T5242] [ 619.137364][ T5242] kobject: kobject_add_internal failed for hci7:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 619.137425][ T5242] Bluetooth: hci7: failed to register connection device [ 619.580648][ T127] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.884944][ T127] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.213740][ T127] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.306287][T11570] loop4: detected capacity change from 0 to 64 [ 620.436226][ T127] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.709583][T11378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 620.774438][T11378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 620.821170][T11378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 620.865011][T11378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 621.046900][T11580] loop2: detected capacity change from 0 to 2048 [ 621.150389][ T9773] Bluetooth: hci7: command 0x0406 tx timeout [ 621.173327][ T9773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 621.188350][ T127] bridge_slave_1: left allmulticast mode [ 621.201872][ T9773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 621.219638][ T127] bridge_slave_1: left promiscuous mode [ 621.225840][ T9773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 621.240839][T11580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.243977][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.281864][ T9773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 621.303127][ T9773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 621.313929][ T127] bridge_slave_0: left allmulticast mode [ 621.319618][ T127] bridge_slave_0: left promiscuous mode [ 621.358281][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.436929][ T9773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 621.633352][ T9372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.738106][T11594] Bluetooth: MGMT ver 1.23 [ 622.764828][ T5242] Bluetooth: hci5: sending frame failed (-49) [ 622.776185][ T9773] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 623.557668][ T9773] Bluetooth: hci2: command tx timeout [ 623.637660][T11616] sctp: [Deprecated]: syz.4.1616 (pid 11616) Use of int in max_burst socket option. [ 623.637660][T11616] Use struct sctp_assoc_value instead [ 623.814750][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.838304][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.868778][ T127] bond0 (unregistering): Released all slaves [ 623.979381][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.986373][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.215730][T11620] loop2: detected capacity change from 0 to 512 [ 624.251940][T11620] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.413807][ T9372] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 624.773516][T11630] loop4: detected capacity change from 0 to 2048 [ 624.805516][T11630] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 624.846339][T11630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.966537][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 625.182160][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.192762][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.212130][ T25] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 625.221434][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 625.234190][ T25] usb 3-1: SerialNumber: syz [ 625.325730][T11637] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 625.340408][T11637] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 625.459212][ T25] usb 3-1: 0:2 : does not exist [ 625.471113][ T25] usb 3-1: unit 255 not found! [ 625.504665][ T25] usb 3-1: 5:0: cannot get min/max values for control 16 (id 5) [ 625.546452][ T25] usb 3-1: USB disconnect, device number 17 [ 625.630357][ T9773] Bluetooth: hci2: command tx timeout [ 625.691342][ T6520] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 625.880372][ T6520] usb 5-1: Using ep0 maxpacket: 16 [ 625.893664][ T6520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 625.915982][ T6520] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 625.927702][ T6520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.945869][ T6520] usb 5-1: config 0 descriptor?? [ 626.411444][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.420214][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.469711][ T6520] hid (null): nested delimiters [ 626.482224][ T6520] hid (null): nested delimiters [ 626.513260][ T6520] hid (null): nested delimiters [ 626.532416][ T6520] hid (null): report_id 24797 is invalid [ 626.538222][ T6520] hid (null): bogus close delimiter [ 626.600493][ T6520] hid (null): unknown global tag 0x83 [ 626.606159][ T6520] hid (null): unknown global tag 0xc [ 626.663137][ T6520] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 626.696087][ T6520] hid-generic 0003:0158:0100.0016: unexpected long global item [ 626.719558][ T6520] hid-generic 0003:0158:0100.0016: probe with driver hid-generic failed with error -22 [ 626.765086][ T6520] usb 5-1: USB disconnect, device number 19 [ 627.710242][ T9773] Bluetooth: hci2: command tx timeout [ 629.073932][T11652] ptrace attach of "./syz-executor exec"[9372] was attempted by "./syz-executor exec"[11652] [ 629.369414][T11654] loop2: detected capacity change from 0 to 512 [ 629.385520][T11654] EXT4-fs: Ignoring removed i_version option [ 629.396387][T11654] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 629.448995][T11654] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 629.464542][T11654] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e02c, mo2=0002] [ 629.491650][T11654] System zones: 0-1, 15-15, 18-18, 34-34 [ 629.497766][T11654] EXT4-fs (loop2): orphan cleanup on readonly fs [ 629.511757][T11654] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 629.530862][T11654] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 629.580271][T11654] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 629.597160][T11654] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1630: bg 0: block 40: padding at end of block bitmap is not set [ 629.622520][T11654] EXT4-fs (loop2): Remounting filesystem read-only [ 629.640541][T11654] EXT4-fs (loop2): 1 truncate cleaned up [ 629.647749][T11654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 629.800596][ T9773] Bluetooth: hci2: command tx timeout [ 629.812453][ T9372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.160505][T11661] loop2: detected capacity change from 0 to 128 [ 630.194628][T11661] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 630.303067][T11661] bio_check_eod: 18 callbacks suppressed [ 630.303093][T11661] syz.2.1632: attempt to access beyond end of device [ 630.303093][T11661] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 630.380230][T11661] syz.2.1632: attempt to access beyond end of device [ 630.380230][T11661] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 630.480693][T11664] FAT-fs (loop2): FAT read failed (blocknr 128) [ 630.780486][ T5299] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 630.972446][ T5299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 630.983613][ T5299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 630.993548][ T5299] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 631.019341][ T5299] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.028740][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 631.040662][ T5299] usb 3-1: SerialNumber: syz [ 631.048865][T11661] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 631.058392][ T5299] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 631.326091][ T5299] usb 3-1: USB disconnect, device number 18 [ 631.951422][ T59] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 632.096796][ T29] audit: type=1326 audit(1722621293.353:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11669 comm="syz.2.1633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb041f779f9 code=0x0 [ 633.049628][T11674] vivid-000: disconnect [ 633.057560][T11673] vivid-000: reconnect [ 633.429833][ T5242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 633.465002][ T5242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 633.474244][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 633.491349][ T5242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 633.499183][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 633.512203][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 633.857926][T11644] macvlan2: entered promiscuous mode [ 633.880306][T11644] macvlan2: entered allmulticast mode [ 633.887154][T11644] team_slave_0: entered promiscuous mode [ 633.893633][T11644] team_slave_1: entered promiscuous mode [ 633.909951][T11644] team0: entered allmulticast mode [ 633.930324][T11644] team_slave_0: entered allmulticast mode [ 633.939576][T11644] team_slave_1: entered allmulticast mode [ 633.952523][T11644] team0: entered promiscuous mode [ 633.965534][T11644] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 633.989434][T11644] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 634.039932][T11198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.838064][T11691] loop2: detected capacity change from 0 to 512 [ 634.959362][T11691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 635.019120][T11691] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.330660][ T127] hsr_slave_0: left promiscuous mode [ 635.355638][ T127] hsr_slave_1: left promiscuous mode [ 635.385389][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.416699][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.447233][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.449547][ T9372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 635.480336][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.550502][ T5242] Bluetooth: hci5: command tx timeout [ 635.698956][ T127] veth1_macvtap: left promiscuous mode [ 635.740536][ T127] veth0_macvtap: left promiscuous mode [ 635.746298][ T127] veth1_vlan: left promiscuous mode [ 635.780363][ T127] veth0_vlan: left promiscuous mode [ 636.391594][T11705] loop4: detected capacity change from 0 to 4096 [ 636.428791][T11705] NILFS (loop4): invalid segment: Checksum error in segment payload [ 636.451412][T11705] NILFS (loop4): trying rollback from an earlier position [ 636.526678][T11705] NILFS (loop4): recovery complete [ 636.533149][T11706] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 636.662878][T11705] loop4: detected capacity change from 4096 to 0 [ 636.667247][T11707] syz.4.1647: attempt to access beyond end of device [ 636.667247][T11707] loop4: rw=0, sector=24, nr_sectors = 2 limit=0 [ 636.687106][T11707] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 636.825378][T11706] segctord: attempt to access beyond end of device [ 636.825378][T11706] loop4: rw=0, sector=24, nr_sectors = 2 limit=0 [ 636.870285][T11706] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 636.910522][T11706] segctord: attempt to access beyond end of device [ 636.910522][T11706] loop4: rw=0, sector=24, nr_sectors = 2 limit=0 [ 636.931538][T11706] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 636.979893][T11706] segctord: attempt to access beyond end of device [ 636.979893][T11706] loop4: rw=0, sector=24, nr_sectors = 2 limit=0 [ 637.049389][T11706] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 637.089607][ T6327] syz-executor: attempt to access beyond end of device [ 637.089607][ T6327] loop4: rw=0, sector=24, nr_sectors = 2 limit=0 [ 637.107602][ T6327] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 637.118968][ T6327] syz-executor: attempt to access beyond end of device [ 637.118968][ T6327] loop4: rw=0, sector=24, nr_sectors = 2 limit=0 [ 637.133429][ T6327] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 637.145550][ T6327] syz-executor: attempt to access beyond end of device [ 637.145550][ T6327] loop4: rw=0, sector=24, nr_sectors = 2 limit=0 [ 637.160722][ T6327] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 637.180860][ T6327] syz-executor: attempt to access beyond end of device [ 637.180860][ T6327] loop4: rw=0, sector=24, nr_sectors = 2 limit=0 [ 637.194119][ T6327] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 637.203175][ T6327] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 637.217057][ T6327] syz-executor: attempt to access beyond end of device [ 637.217057][ T6327] loop4: rw=395265, sector=2, nr_sectors = 2 limit=0 [ 637.275032][ T6327] buffer_io_error: 4 callbacks suppressed [ 637.275057][ T6327] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 637.300408][ T6327] NILFS (loop4): unable to write superblock: err=-5 [ 637.310227][ T6327] syz-executor: attempt to access beyond end of device [ 637.310227][ T6327] loop4: rw=395265, sector=4088, nr_sectors = 2 limit=0 [ 637.340328][ T6327] Buffer I/O error on dev loop4, logical block 2044, lost sync page write [ 637.348899][ T6327] NILFS (loop4): unable to write superblock: err=-5 [ 637.485172][T11709] loop4: detected capacity change from 0 to 16 [ 637.508402][T11709] erofs: (device loop4): mounted with root inode @ nid 36. [ 637.544432][ T127] team0 (unregistering): Port device team_slave_1 removed [ 637.555654][ T29] audit: type=1800 audit(1722621298.823:2231): pid=11709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1648" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 637.630552][ T5242] Bluetooth: hci5: command tx timeout [ 637.778835][ T127] team0 (unregistering): Port device team_slave_0 removed [ 637.822004][T11715] loop4: detected capacity change from 0 to 128 [ 638.139512][T11720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 639.712161][ T5242] Bluetooth: hci5: command tx timeout [ 640.489648][T11198] veth0_vlan: entered promiscuous mode [ 640.739840][T11198] veth1_vlan: entered promiscuous mode [ 640.896705][T11378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.912620][T11726] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1654'. [ 641.119714][T11732] loop2: detected capacity change from 0 to 128 [ 641.174247][T11198] veth0_macvtap: entered promiscuous mode [ 641.201831][T11732] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 641.290309][T11732] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 641.331312][T11198] veth1_macvtap: entered promiscuous mode [ 641.365824][T11378] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.585510][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.620172][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.650323][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.720217][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.760516][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.790469][ T5242] Bluetooth: hci5: command tx timeout [ 641.796299][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.811960][T11741] loop4: detected capacity change from 0 to 256 [ 641.850199][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.905863][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.923941][T11741] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 641.947126][T11198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.105310][ T9372] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 642.227004][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.234362][ T5002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.293706][ T5002] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.300974][ T5002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.343343][T11677] chnl_net:caif_netlink_parms(): no params data found [ 642.699950][T11745] loop2: detected capacity change from 0 to 40427 [ 642.735017][T11745] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 642.742961][T11745] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 642.833244][T11745] F2FS-fs (loop2): Found nat_bits in checkpoint [ 642.938062][T11745] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 642.945986][T11745] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 647.986061][T11378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 648.037394][ T9773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 648.052395][ T9773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 648.070542][ T9773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 648.085329][ T9773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 648.110503][ T9773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 648.117972][ T9773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 648.118941][T11584] chnl_net:caif_netlink_parms(): no params data found [ 648.312589][T11677] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.327681][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.351128][T11677] bridge_slave_0: entered allmulticast mode [ 648.368266][T11677] bridge_slave_0: entered promiscuous mode [ 648.636320][T11677] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.660453][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.667847][T11677] bridge_slave_1: entered allmulticast mode [ 648.712953][T11677] bridge_slave_1: entered promiscuous mode [ 649.723931][T11677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.270894][ T9773] Bluetooth: hci4: command tx timeout [ 650.319934][T11677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.755281][T11677] team0: Port device team_slave_0 added [ 650.765596][T11771] loop2: detected capacity change from 0 to 32768 [ 650.872940][T11771] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 650.882768][T11771] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 650.910706][T11584] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.920923][T11771] XFS (loop2): Quotacheck needed: Please wait. [ 650.969654][T11771] XFS (loop2): Quotacheck: Done. [ 651.013938][T11584] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.021510][T11584] bridge_slave_0: entered allmulticast mode [ 651.030213][T11584] bridge_slave_0: entered promiscuous mode [ 651.084061][T11677] team0: Port device team_slave_1 added [ 651.239090][T11584] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.272156][ T9372] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 651.294533][T11584] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.341401][T11584] bridge_slave_1: entered allmulticast mode [ 651.383592][T11584] bridge_slave_1: entered promiscuous mode [ 651.721611][T11677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.728906][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.800305][T11677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.873384][T11584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.024260][T11677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.052995][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.117440][T11677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.144265][T11584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.158253][T11794] loop2: detected capacity change from 0 to 1024 [ 652.171156][T11378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.181030][T11794] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 652.222082][T11794] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 652.241341][T11794] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 652.255063][T11794] EXT4-fs error (device loop2): ext4_get_journal_inode:5740: inode #5: comm syz.2.1668: unexpected bad inode w/o EXT4_IGET_BAD [ 652.287750][T11794] EXT4-fs (loop2): no journal found [ 652.293279][T11794] EXT4-fs (loop2): can't get journal size [ 652.350951][ T9773] Bluetooth: hci4: command tx timeout [ 652.355745][T11794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 652.467501][T11584] team0: Port device team_slave_0 added [ 652.524306][ T9372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.635478][T11677] hsr_slave_0: entered promiscuous mode [ 652.639712][T11798] loop2: detected capacity change from 0 to 256 [ 652.662758][T11798] exfat: Deprecated parameter 'namecase' [ 652.664556][T11677] hsr_slave_1: entered promiscuous mode [ 652.712187][T11677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.742778][T11677] Cannot create hsr debugfs directory [ 652.753717][T11584] team0: Port device team_slave_1 added [ 652.777322][T11798] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 653.101541][T11584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.108541][T11584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.142769][T11584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.173038][T11584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.200409][T11584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.250436][T11584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.445677][ T1847] kernel read not supported for file [fanotify] (pid: 1847 comm: kworker/1:2) [ 653.660805][ T127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.700483][ T127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.901263][T11378] veth0_vlan: entered promiscuous mode [ 653.907461][ T5242] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 653.992143][ T127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.057480][T11815] loop2: detected capacity change from 0 to 256 [ 654.070268][ T127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.091297][T11815] vfat: Unknown parameter '' [ 654.142527][T11813] netlink: 'syz.2.1673': attribute type 16 has an invalid length. [ 654.170450][T11813] netlink: 'syz.2.1673': attribute type 3 has an invalid length. [ 654.178381][T11813] netlink: 29346 bytes leftover after parsing attributes in process `syz.2.1673'. [ 654.179440][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1674'. [ 654.272253][T11584] hsr_slave_0: entered promiscuous mode [ 654.283012][T11584] hsr_slave_1: entered promiscuous mode [ 654.289907][T11584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.307443][T11584] Cannot create hsr debugfs directory [ 654.325112][T11378] veth1_vlan: entered promiscuous mode [ 654.431507][ T5242] Bluetooth: hci4: command tx timeout [ 654.535696][ T127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.572567][ T127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.828470][ T127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.868081][ T127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.912769][T11832] program syz.4.1677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.954177][T11754] chnl_net:caif_netlink_parms(): no params data found [ 655.512227][T11845] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1680'. [ 656.052911][T11754] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.060257][T11754] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.067560][T11754] bridge_slave_0: entered allmulticast mode [ 656.102259][T11754] bridge_slave_0: entered promiscuous mode [ 656.307304][ T127] bridge_slave_1: left allmulticast mode [ 656.331317][ T127] bridge_slave_1: left promiscuous mode [ 656.337258][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.421258][ T127] bridge_slave_0: left allmulticast mode [ 656.426986][ T127] bridge_slave_0: left promiscuous mode [ 656.478738][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.511173][ T5242] Bluetooth: hci4: command 0x0419 tx timeout [ 656.539631][ T127] bridge_slave_1: left allmulticast mode [ 656.561691][ T127] bridge_slave_1: left promiscuous mode [ 656.567563][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.632795][ T127] bridge_slave_0: left allmulticast mode [ 656.638498][ T127] bridge_slave_0: left promiscuous mode [ 656.692046][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.592078][ T9773] Bluetooth: hci4: command 0x0419 tx timeout [ 662.713991][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 662.728112][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 662.736647][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 662.746407][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 662.755368][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 662.762857][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 664.830392][ T5242] Bluetooth: hci0: command tx timeout [ 666.910293][ T5242] Bluetooth: hci0: command tx timeout [ 667.672120][ T9773] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 667.690497][ T9773] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 667.700378][ T9773] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 667.711813][ T9773] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 667.726532][ T9773] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 667.734190][ T9773] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 668.994452][ T9773] Bluetooth: hci0: command tx timeout [ 669.790932][ T9773] Bluetooth: hci8: command tx timeout [ 670.272024][ T5242] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 670.285958][ T5242] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 670.294274][ T5242] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 670.302694][ T5242] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 670.310749][ T5242] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 670.318447][ T5242] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 671.087402][ T9773] Bluetooth: hci0: command tx timeout [ 671.871556][ T9773] Bluetooth: hci8: command tx timeout [ 672.350707][ T9773] Bluetooth: hci9: command tx timeout [ 673.950675][ T9773] Bluetooth: hci8: command tx timeout [ 674.430237][ T9773] Bluetooth: hci9: command tx timeout [ 676.030362][ T9773] Bluetooth: hci8: command tx timeout [ 676.521808][ T9773] Bluetooth: hci9: command tx timeout [ 678.590347][ T9773] Bluetooth: hci9: command tx timeout [ 680.982496][ T5242] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 680.996627][ T5242] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 681.006158][ T5242] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 681.017623][ T5242] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 681.025797][ T5242] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 681.034269][ T5242] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 683.070421][ T5242] Bluetooth: hci10: command tx timeout [ 685.150305][ T5242] Bluetooth: hci10: command tx timeout [ 685.407924][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.420221][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.231549][ T5242] Bluetooth: hci10: command tx timeout [ 689.320522][ T5242] Bluetooth: hci10: command tx timeout [ 693.984584][ T9773] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 693.995941][ T9773] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 694.004333][ T9773] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 694.020362][ T9773] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 694.030929][ T9773] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 694.040512][ T9773] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 696.120295][ T9773] Bluetooth: hci11: command tx timeout [ 698.190596][ T9773] Bluetooth: hci11: command tx timeout [ 700.270367][ T5242] Bluetooth: hci11: command tx timeout [ 702.350235][ T5242] Bluetooth: hci11: command tx timeout [ 703.541219][ T9773] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 703.551830][ T9773] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 703.561593][ T9773] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 703.569889][ T9773] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 703.579998][ T9773] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 703.587783][ T9773] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 705.640522][ T9773] Bluetooth: hci12: command tx timeout [ 707.710243][ T9773] Bluetooth: hci12: command tx timeout [ 709.790639][ T9773] Bluetooth: hci12: command tx timeout [ 711.870315][ T9773] Bluetooth: hci12: command tx timeout [ 723.252032][ T5242] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 723.266901][ T5242] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 723.276555][ T5242] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 723.288170][ T5242] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 723.297203][ T5242] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 723.304817][ T5242] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 725.390345][ T5242] Bluetooth: hci13: command tx timeout [ 727.471995][ T9773] Bluetooth: hci13: command tx timeout [ 728.253209][ T5235] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 728.266641][ T5235] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 728.286607][ T5235] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 728.296909][ T5235] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 728.305070][ T5235] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 728.312689][ T5235] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 728.435394][ T9773] Bluetooth: hci3: command 0x0406 tx timeout [ 729.560558][ T5242] Bluetooth: hci13: command tx timeout [ 730.360288][ T9773] Bluetooth: hci14: command tx timeout [ 730.772975][ T5242] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 730.786696][ T5242] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 730.795203][ T5242] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 730.814972][ T5242] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 730.831111][ T5242] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 730.850225][ T5242] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 731.630465][ T5242] Bluetooth: hci13: command tx timeout [ 732.439798][ T5242] Bluetooth: hci14: command tx timeout [ 732.910785][ T5242] Bluetooth: hci15: command tx timeout [ 734.518893][ T5242] Bluetooth: hci14: command tx timeout [ 734.990647][ T5242] Bluetooth: hci15: command tx timeout [ 736.602956][ T5242] Bluetooth: hci14: command tx timeout [ 737.070355][ T9773] Bluetooth: hci15: command tx timeout [ 739.150327][ T9773] Bluetooth: hci15: command tx timeout [ 741.361707][ T5242] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 741.375019][ T5242] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 741.390705][ T5242] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 741.399449][ T5242] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 741.407743][ T5242] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 741.415372][ T5242] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 743.472091][ T9773] Bluetooth: hci16: command tx timeout [ 743.807647][ T9773] Bluetooth: hci2: command 0x0406 tx timeout [ 745.550333][ T5242] Bluetooth: hci16: command tx timeout [ 746.839513][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.845998][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.630315][ T9773] Bluetooth: hci16: command tx timeout [ 749.712023][ T9773] Bluetooth: hci16: command tx timeout [ 754.592510][ T5242] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 754.608260][ T5242] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 754.616538][ T5242] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 754.625071][ T5242] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 754.633916][ T5242] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 754.641566][ T5242] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 756.750376][ T9773] Bluetooth: hci17: command tx timeout [ 758.830301][ T5242] Bluetooth: hci17: command tx timeout [ 759.155383][ T5242] Bluetooth: hci5: command 0x0406 tx timeout [ 760.912056][ T5242] Bluetooth: hci17: command tx timeout [ 762.990229][ T5242] Bluetooth: hci17: command tx timeout [ 764.092765][ T9773] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 764.106120][ T9773] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 764.115438][ T9773] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 764.127828][ T9773] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 764.135950][ T9773] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 764.146414][ T9773] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 766.190359][ T9773] Bluetooth: hci18: command tx timeout [ 766.548475][ T7989] syz.1.644: attempt to access beyond end of device [ 766.548475][ T7989] loop1: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 766.574668][ T7989] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 766.589762][ T7989] syz.1.644: attempt to access beyond end of device [ 766.589762][ T7989] loop1: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 766.610182][ T7989] Buffer I/O error on dev loop1, logical block 8833403, async page read [ 766.618608][ T7989] syz.1.644: attempt to access beyond end of device [ 766.618608][ T7989] loop1: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 766.642901][ T7989] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 766.658401][ T7989] syz.1.644: attempt to access beyond end of device [ 766.658401][ T7989] loop1: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 766.697308][ T7989] Buffer I/O error on dev loop1, logical block 8073606, async page read [ 768.270351][ T9773] Bluetooth: hci18: command tx timeout [ 770.350486][ T9773] Bluetooth: hci18: command tx timeout [ 772.440345][ T5242] Bluetooth: hci18: command tx timeout [ 774.514621][ T5242] Bluetooth: hci4: command 0x0419 tx timeout [ 783.121047][ T9773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 783.133196][ T9773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 783.141408][ T9773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 783.152154][ T9773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 783.160638][ T9773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 783.168089][ T9773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 785.230828][ T5242] Bluetooth: hci1: command tx timeout [ 787.310782][ T5242] Bluetooth: hci1: command tx timeout [ 788.167231][T11913] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 788.178702][T11913] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 788.188334][T11913] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 788.198790][T11913] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 788.206847][T11913] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 788.214476][T11913] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 789.390700][ T5235] Bluetooth: hci1: command tx timeout [ 789.870500][ T5235] Bluetooth: hci0: command 0x0406 tx timeout [ 789.876741][ T5235] Bluetooth: hci8: command 0x0406 tx timeout [ 790.279615][ T5242] Bluetooth: hci19: command tx timeout [ 790.630766][ T9773] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 790.650385][ T9773] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 790.659703][ T9773] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 790.669087][ T9773] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 790.686069][ T9773] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 790.693719][ T9773] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 791.470705][ T9773] Bluetooth: hci1: command tx timeout [ 792.350349][ T9773] Bluetooth: hci19: command tx timeout [ 792.750810][ T9773] Bluetooth: hci20: command tx timeout [ 794.430633][ T9773] Bluetooth: hci19: command tx timeout [ 794.830776][T11913] Bluetooth: hci20: command tx timeout [ 794.995548][T11913] Bluetooth: hci9: command 0x0406 tx timeout [ 796.510489][ T5242] Bluetooth: hci19: command tx timeout [ 796.918483][ T5242] Bluetooth: hci20: command tx timeout [ 798.999146][ T5242] Bluetooth: hci20: command tx timeout [ 801.142131][T11913] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 801.157432][T11913] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 801.166703][T11913] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 801.175369][T11913] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 801.183625][T11913] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 801.191338][T11913] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 803.230591][T11913] Bluetooth: hci21: command tx timeout [ 805.241744][ T5242] Bluetooth: hci10: command 0x0406 tx timeout [ 805.310328][T11913] Bluetooth: hci21: command tx timeout [ 807.390231][T11913] Bluetooth: hci21: command tx timeout [ 808.279407][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.290284][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.470634][T11913] Bluetooth: hci21: command tx timeout [ 812.750537][ T30] INFO: task kworker/u8:5:127 blocked for more than 143 seconds. [ 812.758336][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 812.779079][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 812.798731][ T30] task:kworker/u8:5 state:D stack:18672 pid:127 tgid:127 ppid:2 flags:0x00004000 [ 812.821327][ T30] Workqueue: netns cleanup_net [ 812.826445][ T30] Call Trace: [ 812.829782][ T30] [ 812.860218][ T30] __schedule+0x1800/0x4a60 [ 812.864851][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 812.890380][ T30] ? __pfx___schedule+0x10/0x10 [ 812.895397][ T30] ? __pfx_lock_release+0x10/0x10 [ 812.991314][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 812.997112][ T30] ? kthread_data+0x52/0xd0 [ 813.080116][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.085840][ T30] ? wq_worker_sleeping+0x66/0x240 [ 813.113330][ T30] ? schedule+0x90/0x320 [ 813.117732][ T30] schedule+0x14b/0x320 [ 813.130144][ T30] schedule_timeout+0xb0/0x310 [ 813.134959][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 813.150656][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 813.156730][ T30] ? wait_for_completion+0x2fe/0x620 [ 813.162393][ T30] ? wait_for_completion+0x2fe/0x620 [ 813.167716][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 813.183673][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.189353][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 813.200238][ T30] ? wait_for_completion+0x2fe/0x620 [ 813.205569][ T30] wait_for_completion+0x355/0x620 [ 813.222282][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.228175][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 813.250195][ T30] ? __flush_work+0xe6/0xd00 [ 813.254879][ T30] __flush_work+0xaa9/0xd00 [ 813.259431][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.274712][ T30] ? mark_lock+0x9a/0x350 [ 813.279118][ T30] ? __flush_work+0xe6/0xd00 [ 813.284148][ T30] ? __pfx___flush_work+0x10/0x10 [ 813.289404][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 813.306127][ T30] ? xfrm_dev_state_flush+0x274/0x700 [ 813.316463][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 813.323929][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 813.329187][ T30] xfrm_dev_state_flush+0x280/0x700 [ 813.346895][ T30] bond_netdev_event+0x288/0xf20 [ 813.355574][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.368386][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 813.374409][ T30] ? __pfx_bond_netdev_event+0x10/0x10 [ 813.379919][ T30] ? rt_flush_dev+0x480/0x4b0 [ 813.397438][ T30] notifier_call_chain+0x1a1/0x3e0 [ 813.403101][ T30] unregister_netdevice_many_notify+0xd81/0x1c40 [ 813.409506][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 813.427098][ T30] ? net_generic+0x1f/0x240 [ 813.433335][ T30] ? __pfx_lock_release+0x10/0x10 [ 813.439136][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.455963][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 813.462140][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 813.468428][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.484990][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.495590][ T30] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 813.501951][ T30] cleanup_net+0x75d/0xcc0 [ 813.506453][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 813.520197][ T30] ? process_scheduled_works+0x945/0x1830 [ 813.526001][ T30] process_scheduled_works+0xa2e/0x1830 [ 813.544655][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 813.559134][ T30] ? assign_work+0x364/0x3d0 [ 813.570146][ T30] worker_thread+0x86d/0xd40 [ 813.574804][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 813.590167][ T30] ? __kthread_parkme+0x169/0x1d0 [ 813.595266][ T30] ? __pfx_worker_thread+0x10/0x10 [ 813.610003][ T30] kthread+0x2f2/0x390 [ 813.614248][ T30] ? __pfx_worker_thread+0x10/0x10 [ 813.619412][ T30] ? __pfx_kthread+0x10/0x10 [ 813.630161][ T30] ret_from_fork+0x4d/0x80 [ 813.634654][ T30] ? __pfx_kthread+0x10/0x10 [ 813.639274][ T30] ret_from_fork_asm+0x1a/0x30 [ 813.655116][ T30] [ 813.670195][ T30] INFO: task kworker/u8:8:1300 blocked for more than 144 seconds. [ 813.678079][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 813.697467][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 813.706501][ T30] task:kworker/u8:8 state:D stack:18736 pid:1300 tgid:1300 ppid:2 flags:0x00004000 [ 813.729550][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 813.735774][ T30] Call Trace: [ 813.739067][ T30] [ 813.750215][ T30] __schedule+0x1800/0x4a60 [ 813.754799][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.770117][ T30] ? __pfx___schedule+0x10/0x10 [ 813.775033][ T30] ? __pfx_lock_release+0x10/0x10 [ 813.789534][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 813.796219][ T30] ? kthread_data+0x52/0xd0 [ 813.801141][ T30] ? schedule+0x90/0x320 [ 813.805425][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.821725][ T30] ? wq_worker_sleeping+0x66/0x240 [ 813.826916][ T30] ? schedule+0x90/0x320 [ 813.831533][ T30] schedule+0x14b/0x320 [ 813.835730][ T30] schedule_preempt_disabled+0x13/0x30 [ 813.852792][ T30] __mutex_lock+0x6a4/0xd70 [ 813.857373][ T30] ? mark_lock+0x9a/0x350 [ 813.862133][ T30] ? __mutex_lock+0x527/0xd70 [ 813.866851][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 813.888403][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 813.900287][ T30] addrconf_dad_work+0xd0/0x16f0 [ 813.905299][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 813.920232][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 813.925753][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 813.941748][ T30] ? process_scheduled_works+0x945/0x1830 [ 813.949143][ T30] process_scheduled_works+0xa2e/0x1830 [ 813.980541][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 813.986675][ T30] ? assign_work+0x364/0x3d0 [ 814.004824][ T30] worker_thread+0x86d/0xd40 [ 814.009514][ T30] ? __kthread_parkme+0x169/0x1d0 [ 814.024900][ T30] ? __pfx_worker_thread+0x10/0x10 [ 814.030443][ T30] kthread+0x2f2/0x390 [ 814.034547][ T30] ? __pfx_worker_thread+0x10/0x10 [ 814.039701][ T30] ? __pfx_kthread+0x10/0x10 [ 814.062005][ T30] ret_from_fork+0x4d/0x80 [ 814.066512][ T30] ? __pfx_kthread+0x10/0x10 [ 814.081507][ T30] ret_from_fork_asm+0x1a/0x30 [ 814.086379][ T30] [ 814.089552][ T30] INFO: task jbd2/sda1-8:4640 blocked for more than 144 seconds. [ 814.097805][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 814.119277][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.130236][ T30] task:jbd2/sda1-8 state:D stack:24048 pid:4640 tgid:4640 ppid:2 flags:0x00004000 [ 814.149503][ T30] Call Trace: [ 814.154277][ T30] [ 814.157235][ T30] __schedule+0x1800/0x4a60 [ 814.171034][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.176708][ T30] ? __pfx___schedule+0x10/0x10 [ 814.191150][ T30] ? __pfx_lock_release+0x10/0x10 [ 814.196215][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 814.211465][ T30] ? schedule+0x90/0x320 [ 814.215831][ T30] schedule+0x14b/0x320 [ 814.220018][ T30] io_schedule+0x8d/0x110 [ 814.234481][ T30] bit_wait_io+0x12/0xd0 [ 814.238762][ T30] __wait_on_bit+0xb2/0x2f0 [ 814.250349][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 814.259826][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 814.270351][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 814.275327][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 814.290100][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 814.295625][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 814.312143][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 814.318864][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 814.330366][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.336035][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 814.353191][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.359695][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 814.376854][ T30] ? __timer_delete_sync+0x15c/0x310 [ 814.384538][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.390504][ T30] ? __timer_delete_sync+0x25d/0x310 [ 814.395839][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 814.412183][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 814.417723][ T30] ? prepare_to_wait+0x184/0x210 [ 814.430717][ T30] ? schedule+0x90/0x320 [ 814.435009][ T30] kjournald2+0x41c/0x7b0 [ 814.439414][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 814.460108][ T30] ? __pfx_kjournald2+0x10/0x10 [ 814.465147][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 814.480159][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.485867][ T30] ? __kthread_parkme+0x169/0x1d0 [ 814.500446][ T30] ? __pfx_kjournald2+0x10/0x10 [ 814.505335][ T30] kthread+0x2f2/0x390 [ 814.509431][ T30] ? __pfx_kjournald2+0x10/0x10 [ 814.525626][ T30] ? __pfx_kthread+0x10/0x10 [ 814.530548][ T30] ret_from_fork+0x4d/0x80 [ 814.535016][ T30] ? __pfx_kthread+0x10/0x10 [ 814.539634][ T30] ret_from_fork_asm+0x1a/0x30 [ 814.556969][ T30] [ 814.562342][ T30] INFO: task kworker/0:3:5002 blocked for more than 145 seconds. [ 814.579682][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 814.587420][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.610108][ T30] task:kworker/0:3 state:D stack:19408 pid:5002 tgid:5002 ppid:2 flags:0x00004000 [ 814.630127][ T30] Workqueue: events linkwatch_event [ 814.635395][ T30] Call Trace: [ 814.638692][ T30] [ 814.652389][ T30] __schedule+0x1800/0x4a60 [ 814.656970][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.663157][ T30] ? __pfx___schedule+0x10/0x10 [ 814.668730][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 814.697982][ T30] ? __pfx_lock_release+0x10/0x10 [ 814.703321][ T30] ? kick_pool+0x1bd/0x620 [ 814.707787][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 814.720126][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.725807][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 814.740127][ T30] ? schedule+0x90/0x320 [ 814.744776][ T30] schedule+0x14b/0x320 [ 814.748980][ T30] schedule_preempt_disabled+0x13/0x30 [ 814.768089][ T30] __mutex_lock+0x6a4/0xd70 [ 814.776165][ T30] ? __mutex_lock+0x527/0xd70 [ 814.781186][ T30] ? linkwatch_event+0xe/0x60 [ 814.785905][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 814.802043][ T30] ? process_scheduled_works+0x945/0x1830 [ 814.807824][ T30] linkwatch_event+0xe/0x60 [ 814.821521][ T30] process_scheduled_works+0xa2e/0x1830 [ 814.827158][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 814.840199][ T30] ? assign_work+0x364/0x3d0 [ 814.844848][ T30] worker_thread+0x86d/0xd40 [ 814.849496][ T30] ? __kthread_parkme+0x169/0x1d0 [ 814.864625][ T30] ? __pfx_worker_thread+0x10/0x10 [ 814.876894][ T30] kthread+0x2f2/0x390 [ 814.885844][ T30] ? __pfx_worker_thread+0x10/0x10 [ 814.891201][ T30] ? __pfx_kthread+0x10/0x10 [ 814.895819][ T30] ret_from_fork+0x4d/0x80 [ 814.912512][ T30] ? __pfx_kthread+0x10/0x10 [ 814.917167][ T30] ret_from_fork_asm+0x1a/0x30 [ 814.930144][ T30] [ 814.933266][ T30] INFO: task kworker/1:7:6520 blocked for more than 145 seconds. [ 814.950126][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 814.958133][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.977522][ T30] task:kworker/1:7 state:D stack:19824 pid:6520 tgid:6520 ppid:2 flags:0x00004000 [ 815.001355][ T30] Workqueue: events switchdev_deferred_process_work [ 815.008081][ T30] Call Trace: [ 815.011868][ T30] [ 815.014837][ T30] __schedule+0x1800/0x4a60 [ 815.019415][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.037077][ T30] ? __pfx___schedule+0x10/0x10 [ 815.044402][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 815.058272][ T30] ? __pfx_lock_release+0x10/0x10 [ 815.063604][ T30] ? kick_pool+0x1bd/0x620 [ 815.068070][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 815.084886][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.095093][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 815.100572][ T30] ? schedule+0x90/0x320 [ 815.104866][ T30] schedule+0x14b/0x320 [ 815.109123][ T30] schedule_preempt_disabled+0x13/0x30 [ 815.126033][ T30] __mutex_lock+0x6a4/0xd70 [ 815.137828][ T30] ? __mutex_lock+0x527/0xd70 [ 815.148375][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 815.166826][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 815.172246][ T30] ? process_scheduled_works+0x945/0x1830 [ 815.178881][ T30] switchdev_deferred_process_work+0xe/0x20 [ 815.196391][ T30] process_scheduled_works+0xa2e/0x1830 [ 815.202272][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 815.208322][ T30] ? assign_work+0x364/0x3d0 [ 815.220109][ T30] worker_thread+0x86d/0xd40 [ 815.224789][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 815.243258][ T30] ? __kthread_parkme+0x169/0x1d0 [ 815.248489][ T30] ? __pfx_worker_thread+0x10/0x10 [ 815.254013][ T30] kthread+0x2f2/0x390 [ 815.258114][ T30] ? __pfx_worker_thread+0x10/0x10 [ 815.274348][ T30] ? __pfx_kthread+0x10/0x10 [ 815.279761][ T30] ret_from_fork+0x4d/0x80 [ 815.290258][ T30] ? __pfx_kthread+0x10/0x10 [ 815.294966][ T30] ret_from_fork_asm+0x1a/0x30 [ 815.299804][ T30] [ 815.317385][ T30] INFO: task syz-executor:11378 blocked for more than 145 seconds. [ 815.325685][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 815.340125][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 815.348895][ T30] task:syz-executor state:D stack:20992 pid:11378 tgid:11378 ppid:1 flags:0x00000004 [ 815.373538][ T30] Call Trace: [ 815.376938][ T30] [ 815.379899][ T30] __schedule+0x1800/0x4a60 [ 815.397246][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.405642][ T30] ? __pfx___schedule+0x10/0x10 [ 815.418759][ T30] ? __pfx_lock_release+0x10/0x10 [ 815.424032][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 815.429637][ T30] ? schedule+0x90/0x320 [ 815.440161][ T30] schedule+0x14b/0x320 [ 815.444412][ T30] schedule_preempt_disabled+0x13/0x30 [ 815.449926][ T30] __mutex_lock+0x6a4/0xd70 [ 815.464499][ T30] ? __mutex_lock+0x527/0xd70 [ 815.469262][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 815.490156][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 815.495465][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 815.510143][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 815.515346][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 815.530124][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.535844][ T30] ? ref_tracker_free+0x643/0x7e0 [ 815.550207][ T30] netlink_rcv_skb+0x1e5/0x430 [ 815.555057][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 815.570778][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 815.576173][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.586541][ T30] netlink_unicast+0x7f2/0x990 [ 815.600213][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 815.605659][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.620117][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.625828][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.649714][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.660174][ T30] ? __check_object_size+0x49c/0x900 [ 815.665511][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.680178][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.685876][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 815.705258][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.717554][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 815.727276][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.739757][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 815.745009][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.751271][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.757020][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 815.772669][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.778065][ T30] __sock_sendmsg+0x223/0x270 [ 815.790651][ T30] __sys_sendto+0x3a4/0x4f0 [ 815.795224][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 815.810567][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.816372][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 815.833412][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 815.839961][ T30] __x64_sys_sendto+0xde/0x100 [ 815.845093][ T30] do_syscall_64+0xf3/0x230 [ 815.849666][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.866066][ T30] RIP: 0033:0x7fba5757978c [ 815.870760][ T30] RSP: 002b:00007ffdbec72490 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 815.879210][ T30] RAX: ffffffffffffffda RBX: 00007fba58234620 RCX: 00007fba5757978c [ 815.902386][ T30] RDX: 000000000000002c RSI: 00007fba58234670 RDI: 0000000000000003 [ 815.918867][ T30] RBP: 0000000000000000 R08: 00007ffdbec724e4 R09: 000000000000000c [ 815.927239][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 815.941637][ T30] R13: 0000000000000000 R14: 00007fba58234670 R15: 0000000000000000 [ 815.949702][ T30] [ 815.966480][ T30] INFO: task syz-executor:11584 blocked for more than 146 seconds. [ 815.974671][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 815.990096][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.009670][ T30] task:syz-executor state:D stack:21424 pid:11584 tgid:11584 ppid:1 flags:0x00000004 [ 816.030472][ T30] Call Trace: [ 816.033803][ T30] [ 816.036758][ T30] __schedule+0x1800/0x4a60 [ 816.045506][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.060157][ T30] ? __pfx___schedule+0x10/0x10 [ 816.065077][ T30] ? __pfx_lock_release+0x10/0x10 [ 816.079742][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 816.085450][ T30] ? schedule+0x90/0x320 [ 816.089762][ T30] schedule+0x14b/0x320 [ 816.094383][ T30] schedule_preempt_disabled+0x13/0x30 [ 816.110105][ T30] __mutex_lock+0x6a4/0xd70 [ 816.114671][ T30] ? __mutex_lock+0x527/0xd70 [ 816.119403][ T30] ? del_device_store+0xfc/0x480 [ 816.135973][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 816.141295][ T30] del_device_store+0xfc/0x480 [ 816.146105][ T30] ? __pfx_del_device_store+0x10/0x10 [ 816.164779][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.170764][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 816.175649][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.193936][ T30] ? bus_attr_store+0x4f/0xa0 [ 816.198675][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 816.216409][ T30] kernfs_fop_write_iter+0x3a3/0x500 [ 816.225257][ T30] vfs_write+0xa74/0xc90 [ 816.229566][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 816.235715][ T30] ? __pfx_vfs_write+0x10/0x10 [ 816.250106][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.256054][ T30] ksys_write+0x1a0/0x2c0 [ 816.270603][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.276289][ T30] ? __pfx_ksys_write+0x10/0x10 [ 816.290111][ T30] ? do_syscall_64+0x100/0x230 [ 816.294928][ T30] ? do_syscall_64+0xb6/0x230 [ 816.299650][ T30] do_syscall_64+0xf3/0x230 [ 816.315439][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.325764][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.331935][ T30] RIP: 0033:0x7f15b1f764df [ 816.336375][ T30] RSP: 002b:00007ffd49c5a780 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 816.360271][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f15b1f764df [ 816.368297][ T30] RDX: 0000000000000001 RSI: 00007ffd49c5a7d0 RDI: 0000000000000005 [ 816.387142][ T30] RBP: 00007f15b1fe695f R08: 0000000000000000 R09: 00007ffd49c5a5d7 [ 816.399437][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 816.419826][ T30] R13: 00007ffd49c5a7d0 R14: 00007f15b2c34620 R15: 0000000000000003 [ 816.427996][ T30] [ 816.443801][ T30] INFO: task syz-executor:11677 blocked for more than 147 seconds. [ 816.451966][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 816.459616][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.478707][ T30] task:syz-executor state:D stack:21728 pid:11677 tgid:11677 ppid:1 flags:0x00004006 [ 816.498845][ T30] Call Trace: [ 816.503669][ T30] [ 816.507279][ T30] __schedule+0x1800/0x4a60 [ 816.525768][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.536207][ T30] ? __pfx___schedule+0x10/0x10 [ 816.541390][ T30] ? __pfx_lock_release+0x10/0x10 [ 816.546518][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 816.560146][ T30] ? schedule+0x90/0x320 [ 816.564645][ T30] schedule+0x14b/0x320 [ 816.568866][ T30] schedule_preempt_disabled+0x13/0x30 [ 816.583675][ T30] __mutex_lock+0x6a4/0xd70 [ 816.588265][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.600261][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 816.605572][ T30] ? __mutex_lock+0x527/0xd70 [ 816.622819][ T30] ? nsim_destroy+0x71/0x5c0 [ 816.627488][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 816.632860][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 816.638286][ T30] ? _raw_spin_unlock+0x28/0x50 [ 816.653342][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.659053][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.678224][ T30] nsim_destroy+0x71/0x5c0 [ 816.690199][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.695930][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 816.710142][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 816.718157][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 816.730317][ T30] nsim_drv_remove+0x58/0x160 [ 816.735081][ T30] device_release_driver_internal+0x4ab/0x7c0 [ 816.751773][ T30] bus_remove_device+0x34f/0x420 [ 816.756885][ T30] device_del+0x57a/0x9b0 [ 816.770155][ T30] ? __pfx_device_del+0x10/0x10 [ 816.775094][ T30] device_unregister+0x20/0xc0 [ 816.779897][ T30] del_device_store+0x363/0x480 [ 816.794057][ T30] ? __pfx_del_device_store+0x10/0x10 [ 816.799525][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.805608][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 816.815196][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.828728][ T30] ? bus_attr_store+0x4f/0xa0 [ 816.838029][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 816.843580][ T30] kernfs_fop_write_iter+0x3a3/0x500 [ 816.848920][ T30] vfs_write+0xa74/0xc90 [ 816.864568][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 816.870664][ T30] ? __pfx_vfs_write+0x10/0x10 [ 816.875485][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.890934][ T30] ksys_write+0x1a0/0x2c0 [ 816.895323][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.901291][ T30] ? __pfx_ksys_write+0x10/0x10 [ 816.906180][ T30] ? do_syscall_64+0x100/0x230 [ 816.923969][ T30] ? do_syscall_64+0xb6/0x230 [ 816.928694][ T30] do_syscall_64+0xf3/0x230 [ 816.933617][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 816.939381][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.955570][ T30] RIP: 0033:0x7f3b73d764df [ 816.960223][ T30] RSP: 002b:00007ffdfd4bda40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 816.968691][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f3b73d764df [ 816.988971][ T30] RDX: 0000000000000001 RSI: 00007ffdfd4bda90 RDI: 0000000000000005 [ 817.010073][ T30] RBP: 00007f3b73de695f R08: 0000000000000000 R09: 00007ffdfd4bd897 [ 817.018083][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 817.037642][ T30] R13: 00007ffdfd4bda90 R14: 00007f3b74a34620 R15: 0000000000000003 [ 817.048227][ T30] [ 817.051694][ T30] INFO: task syz-executor:11754 blocked for more than 147 seconds. [ 817.059778][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 817.109766][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.119414][ T30] task:syz-executor state:D stack:21728 pid:11754 tgid:11754 ppid:1 flags:0x00004004 [ 817.141843][ T30] Call Trace: [ 817.145164][ T30] [ 817.160181][ T30] __schedule+0x1800/0x4a60 [ 817.164928][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.182337][ T30] ? __pfx___schedule+0x10/0x10 [ 817.187259][ T30] ? __pfx_lock_release+0x10/0x10 [ 817.203842][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 817.209530][ T30] ? schedule+0x90/0x320 [ 817.214176][ T30] schedule+0x14b/0x320 [ 817.218457][ T30] schedule_preempt_disabled+0x13/0x30 [ 817.237307][ T30] __mutex_lock+0x6a4/0xd70 [ 817.247406][ T30] ? __mutex_lock+0x527/0xd70 [ 817.259110][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 817.267772][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 817.273121][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 817.278185][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 817.293334][ T30] ? __lock_acquire+0x137a/0x2040 [ 817.298437][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 817.311470][ T30] netlink_rcv_skb+0x1e5/0x430 [ 817.316284][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 817.330112][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 817.335475][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 817.350654][ T30] netlink_unicast+0x7f2/0x990 [ 817.355509][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 817.372182][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.377857][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.383808][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.389469][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.410227][ T30] ? __check_object_size+0x49c/0x900 [ 817.415565][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.433439][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.439295][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 817.460735][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.466132][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 817.484881][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.491106][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 817.496098][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.509340][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.520285][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 817.525806][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.544899][ T30] __sock_sendmsg+0x223/0x270 [ 817.549661][ T30] __sys_sendto+0x3a4/0x4f0 [ 817.560279][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 817.565425][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.580248][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 817.586298][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 817.604024][ T30] __x64_sys_sendto+0xde/0x100 [ 817.608932][ T30] do_syscall_64+0xf3/0x230 [ 817.613792][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.619736][ T30] RIP: 0033:0x7fb12d77978c [ 817.637734][ T30] RSP: 002b:00007fff2323e8b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 817.659002][ T30] RAX: ffffffffffffffda RBX: 00007fb12e434620 RCX: 00007fb12d77978c [ 817.667264][ T30] RDX: 0000000000000028 RSI: 00007fb12e434670 RDI: 0000000000000003 [ 817.680237][ T30] RBP: 0000000000000000 R08: 00007fff2323e904 R09: 000000000000000c [ 817.688253][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 817.705448][ T30] R13: 0000000000000000 R14: 00007fb12e434670 R15: 0000000000000000 [ 817.736028][ T30] [ 817.740656][ T30] INFO: task syz.4.1688:11866 blocked for more than 148 seconds. [ 817.748428][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 817.773388][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.790164][ T30] task:syz.4.1688 state:D stack:27136 pid:11866 tgid:11865 ppid:6327 flags:0x00000004 [ 817.810102][ T30] Call Trace: [ 817.813415][ T30] [ 817.816377][ T30] __schedule+0x1800/0x4a60 [ 817.830099][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.835781][ T30] ? __pfx___schedule+0x10/0x10 [ 817.851274][ T30] ? __pfx_lock_release+0x10/0x10 [ 817.856451][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 817.870328][ T30] ? schedule+0x90/0x320 [ 817.874619][ T30] schedule+0x14b/0x320 [ 817.878810][ T30] schedule_preempt_disabled+0x13/0x30 [ 817.898813][ T30] __mutex_lock+0x6a4/0xd70 [ 817.903623][ T30] ? __mutex_lock+0x527/0xd70 [ 817.908455][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 817.923848][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 817.928995][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 817.934244][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 817.939404][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 817.957561][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.963518][ T30] ? ref_tracker_free+0x643/0x7e0 [ 817.968677][ T30] netlink_rcv_skb+0x1e5/0x430 [ 817.984354][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 817.991831][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 817.997239][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 818.013037][ T30] netlink_unicast+0x7f2/0x990 [ 818.017862][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 818.030257][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.035933][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.057005][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.062946][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.068620][ T30] ? __check_object_size+0x49c/0x900 [ 818.084003][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.089676][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.095561][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 818.110451][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.115789][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.130247][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 818.135230][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.150119][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.155788][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 818.171094][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.176424][ T30] __sock_sendmsg+0x223/0x270 [ 818.181440][ T30] ____sys_sendmsg+0x525/0x7d0 [ 818.186233][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.201914][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.207259][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 818.221053][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 818.226256][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 818.242338][ T30] ? do_syscall_64+0x100/0x230 [ 818.247192][ T30] ? do_syscall_64+0xb6/0x230 [ 818.260174][ T30] do_syscall_64+0xf3/0x230 [ 818.264732][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.281572][ T30] RIP: 0033:0x7fd0f39779f9 [ 818.286046][ T30] RSP: 002b:00007fd0f481d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.294778][ T30] RAX: ffffffffffffffda RBX: 00007fd0f3b05f80 RCX: 00007fd0f39779f9 [ 818.310100][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 818.318114][ T30] RBP: 00007fd0f39e58ee R08: 0000000000000000 R09: 0000000000000000 [ 818.338069][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.349598][ T30] R13: 000000000000000b R14: 00007fd0f3b05f80 R15: 00007ffea2f8aa08 [ 818.369412][ T30] [ 818.372658][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 818.391880][ T30] INFO: task syz-executor:11868 blocked for more than 149 seconds. [ 818.399796][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 818.410146][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 818.418835][ T30] task:syz-executor state:D stack:24992 pid:11868 tgid:11868 ppid:1 flags:0x00000004 [ 818.446618][ T30] Call Trace: [ 818.449957][ T30] [ 818.460215][ T30] __schedule+0x1800/0x4a60 [ 818.464824][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.484329][ T30] ? __pfx___schedule+0x10/0x10 [ 818.489281][ T30] ? __pfx_lock_release+0x10/0x10 [ 818.494786][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 818.548074][ T30] ? schedule+0x90/0x320 [ 818.554165][ T30] schedule+0x14b/0x320 [ 818.570150][ T30] schedule_preempt_disabled+0x13/0x30 [ 818.575718][ T30] __mutex_lock+0x6a4/0xd70 [ 818.589919][ T30] ? __mutex_lock+0x527/0xd70 [ 818.595406][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 818.600978][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 818.606074][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 818.620146][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 818.625358][ T30] ? __lock_acquire+0x137a/0x2040 [ 818.639869][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 818.645677][ T30] netlink_rcv_skb+0x1e5/0x430 [ 818.658487][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 818.665522][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 818.680283][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 818.685659][ T30] netlink_unicast+0x7f2/0x990 [ 818.700196][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 818.705530][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.721393][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.727088][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.740220][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.745919][ T30] ? __check_object_size+0x49c/0x900 [ 818.772595][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.778321][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.794579][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 818.799421][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.805299][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.820123][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 818.825107][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.840172][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.845839][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 818.860131][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.867412][ T30] __sock_sendmsg+0x223/0x270 [ 818.881752][ T30] __sys_sendto+0x3a4/0x4f0 [ 818.886318][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 818.900179][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 818.905855][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 818.924006][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 818.930948][ T30] ? exc_page_fault+0x590/0x8c0 [ 818.935846][ T30] __x64_sys_sendto+0xde/0x100 [ 818.950084][ T30] do_syscall_64+0xf3/0x230 [ 818.954659][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.972750][ T30] RIP: 0033:0x7fbc14d7978c [ 818.977269][ T30] RSP: 002b:00007ffc39ddc360 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 818.992233][ T30] RAX: ffffffffffffffda RBX: 00007fbc15a34620 RCX: 00007fbc14d7978c [ 819.010080][ T30] RDX: 0000000000000028 RSI: 00007fbc15a34670 RDI: 0000000000000003 [ 819.018098][ T30] RBP: 0000000000000000 R08: 00007ffc39ddc3b4 R09: 000000000000000c [ 819.036140][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 819.047685][ T30] R13: 0000000000000000 R14: 00007fbc15a34670 R15: 0000000000000000 [ 819.055998][ T30] [ 819.059039][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 819.083980][ T30] INFO: task syz-executor:11871 blocked for more than 149 seconds. [ 819.092402][ T30] Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 819.112306][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 819.130130][ T30] task:syz-executor state:D stack:24992 pid:11871 tgid:11871 ppid:1 flags:0x00000004 [ 819.149981][ T30] Call Trace: [ 819.153516][ T30] [ 819.156485][ T30] __schedule+0x1800/0x4a60 [ 819.170386][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.176076][ T30] ? __pfx___schedule+0x10/0x10 [ 819.190080][ T30] ? __pfx_lock_release+0x10/0x10 [ 819.195246][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 819.209782][ T30] ? schedule+0x90/0x320 [ 819.214159][ T30] schedule+0x14b/0x320 [ 819.218356][ T30] schedule_preempt_disabled+0x13/0x30 [ 819.225570][ T30] __mutex_lock+0x6a4/0xd70 [ 819.240133][ T30] ? __mutex_lock+0x527/0xd70 [ 819.244869][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 819.250016][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 819.265226][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 819.280115][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 819.285289][ T30] ? __lock_acquire+0x137a/0x2040 [ 819.300141][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 819.305677][ T30] netlink_rcv_skb+0x1e5/0x430 [ 819.320126][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 819.325649][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 819.341827][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 819.347087][ T30] netlink_unicast+0x7f2/0x990 [ 819.360282][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 819.365615][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.380396][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.386095][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.400079][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.405756][ T30] ? __check_object_size+0x49c/0x900 [ 819.420787][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.426490][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.440188][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 819.445136][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.460131][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.465851][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 819.490198][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.495953][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.510191][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 819.516061][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.530183][ T30] __sock_sendmsg+0x223/0x270 [ 819.534923][ T30] __sys_sendto+0x3a4/0x4f0 [ 819.539490][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 819.554088][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.559781][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 819.577797][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 819.588634][ T30] ? exc_page_fault+0x590/0x8c0 [ 819.600184][ T30] __x64_sys_sendto+0xde/0x100 [ 819.605022][ T30] do_syscall_64+0xf3/0x230 [ 819.609577][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.625909][ T30] RIP: 0033:0x7fd77a57978c [ 819.640276][ T30] RSP: 002b:00007ffdf7d21c90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 819.648764][ T30] RAX: ffffffffffffffda RBX: 00007fd77b234620 RCX: 00007fd77a57978c [ 819.667649][ T30] RDX: 0000000000000028 RSI: 00007fd77b234670 RDI: 0000000000000003 [ 819.679494][ T30] RBP: 0000000000000000 R08: 00007ffdf7d21ce4 R09: 000000000000000c [ 819.699703][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 819.707825][ T30] R13: 0000000000000000 R14: 00007fd77b234670 R15: 0000000000000000 [ 819.716403][ T30] [ 819.719450][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 819.740441][ T30] [ 819.740441][ T30] Showing all locks held in the system: [ 819.748215][ T30] 1 lock held by khungtaskd/30: [ 819.763576][ T30] #0: ffffffff8e9377a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 819.779510][ T30] 4 locks held by kworker/u8:5/127: [ 819.786988][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 819.816496][ T30] #1: ffffc90002df7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 819.836893][ T30] #2: ffffffff8fc735d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 819.846762][ T30] #3: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 819.866288][ T30] 3 locks held by kworker/u8:8/1300: [ 819.877754][ T30] #0: ffff88802abc2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 819.903807][ T30] #1: ffffc90004db7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 819.917080][ T30] #2: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 819.936849][ T30] 2 locks held by getty/4979: [ 819.941755][ T30] #0: ffff88802b28a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 819.960119][ T30] #1: ffffc9000313b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 819.979914][ T30] 3 locks held by kworker/0:3/5002: [ 819.985274][ T30] #0: ffff888015878948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 820.009733][ T30] #1: ffffc900037c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 820.021281][ T30] #2: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 820.040434][ T30] 3 locks held by kworker/1:3/5286: [ 820.045683][ T30] 3 locks held by kworker/1:7/6520: [ 820.061698][ T30] #0: ffff888015878948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 820.073076][ T30] #1: ffffc90003bc7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 820.095308][ T30] #2: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 820.111621][ T30] 1 lock held by syz.1.644/7989: [ 820.116584][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 820.138308][ T30] 1 lock held by syz-executor/11378: [ 820.143806][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.163416][ T30] 4 locks held by syz-executor/11584: [ 820.168809][ T30] #0: ffff8880303f6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 820.180222][ T30] #1: ffff88804b7b4888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 820.207732][ T30] #2: ffff888023631f08 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 820.218194][ T30] #3: ffffffff8f51cf88 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 820.241451][ T30] 7 locks held by syz-executor/11677: [ 820.246881][ T30] #0: ffff8880303f6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 820.256396][ T30] #1: ffff8880668b6888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 820.270120][ T30] #2: ffff888023631f08 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 820.290138][ T30] #3: ffffffff8f51cf88 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 820.312655][ T30] #4: ffff8880685f70e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 820.323580][ T30] #5: ffff88802448a250 (&devlink->lock_key#23){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 820.345386][ T30] #6: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 820.367870][ T30] 1 lock held by syz-executor/11754: [ 820.373443][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.390077][ T30] 1 lock held by syz.2.1686/11857: [ 820.395390][ T30] 1 lock held by syz.4.1688/11866: [ 820.411054][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.429863][ T30] 1 lock held by syz-executor/11868: [ 820.436542][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.450400][ T30] 1 lock held by syz-executor/11871: [ 820.455704][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.486248][ T30] 1 lock held by syz-executor/11874: [ 820.492036][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.510577][ T30] 1 lock held by syz-executor/11877: [ 820.516281][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.547446][ T30] 1 lock held by syz-executor/11880: [ 820.553017][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.570130][ T30] 1 lock held by syz-executor/11883: [ 820.575446][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.600358][ T5242] Bluetooth: hci11: command 0x0406 tx timeout [ 820.630133][ T30] 1 lock held by syz-executor/11886: [ 820.635560][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.655367][ T30] 1 lock held by syz-executor/11889: [ 820.665272][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.675363][ T30] 1 lock held by syz-executor/11892: [ 820.700906][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.728542][ T30] 1 lock held by syz-executor/11895: [ 820.740121][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.749916][ T30] 1 lock held by syz-executor/11898: [ 820.769128][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.789531][ T30] 1 lock held by syz-executor/11905: [ 820.794939][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.804882][ T30] 1 lock held by syz-executor/11908: [ 820.810939][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.847756][ T30] 1 lock held by syz-executor/11911: [ 820.853269][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 820.873055][ T30] 6 locks held by kworker/u9:2/11913: [ 820.878495][ T30] #0: ffff88815820d948 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 820.899971][ T30] #1: ffffc9001578fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 820.924462][ T30] #2: ffff88806e5e0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 820.934864][ T30] #3: ffff88806e5e0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 820.956136][ T30] #4: ffffffff8fdeba68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 820.966286][ T30] #5: ffffffff8e93cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 820.987830][ T30] 1 lock held by syz-executor/11915: [ 820.993660][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 821.013556][ T30] 1 lock held by syz-executor/11918: [ 821.018888][ T30] #0: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 821.042529][ T30] [ 821.068418][ T30] ============================================= [ 821.068418][ T30] [ 821.077370][ T30] NMI backtrace for cpu 0 [ 821.081724][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 821.092699][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 821.102782][ T30] Call Trace: [ 821.106085][ T30] [ 821.109044][ T30] dump_stack_lvl+0x241/0x360 [ 821.113856][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.119089][ T30] ? __pfx__printk+0x10/0x10 [ 821.123708][ T30] ? vprintk_emit+0x631/0x770 [ 821.128426][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 821.133486][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 821.138477][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 821.143982][ T30] ? _printk+0xd5/0x120 [ 821.148167][ T30] ? __pfx__printk+0x10/0x10 [ 821.152789][ T30] ? __wake_up_klogd+0xcc/0x110 [ 821.158285][ T30] ? __pfx__printk+0x10/0x10 [ 821.162906][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.168560][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 821.173622][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 821.179641][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 821.185669][ T30] watchdog+0xfee/0x1030 [ 821.189950][ T30] ? watchdog+0x1ea/0x1030 [ 821.194411][ T30] ? __pfx_watchdog+0x10/0x10 [ 821.199121][ T30] kthread+0x2f2/0x390 [ 821.203213][ T30] ? __pfx_watchdog+0x10/0x10 [ 821.207923][ T30] ? __pfx_kthread+0x10/0x10 [ 821.212536][ T30] ret_from_fork+0x4d/0x80 [ 821.216989][ T30] ? __pfx_kthread+0x10/0x10 [ 821.221602][ T30] ret_from_fork_asm+0x1a/0x30 [ 821.226432][ T30] [ 821.230945][ T30] Sending NMI from CPU 0 to CPUs 1: [ 821.236177][ C1] NMI backtrace for cpu 1 [ 821.236192][ C1] CPU: 1 UID: 0 PID: 11857 Comm: syz.2.1686 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 821.236219][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 821.236232][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 821.236273][ C1] Code: 44 0a 20 e9 75 d6 5c 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 40 d7 03 00 65 8b 05 80 6c 70 7e a9 00 01 ff 00 74 [ 821.236293][ C1] RSP: 0018:ffffc900034f7a48 EFLAGS: 00000246 [ 821.236314][ C1] RAX: 0000000000000000 RBX: ffff8880235a9e00 RCX: 0000000000040000 [ 821.236330][ C1] RDX: ffffc9000e9c2000 RSI: 0000000000000000 RDI: 0000000000000000 [ 821.236345][ C1] RBP: 0000000000000000 R08: ffffffff81e1c341 R09: ffffc900034f7b90 [ 821.236367][ C1] R10: dffffc0000000000 R11: fffff5200069ef78 R12: dffffc0000000000 [ 821.236385][ C1] R13: 0000000000000000 R14: 0000000000000062 R15: ffffffff8c05a0e0 [ 821.236404][ C1] FS: 00007fb042d056c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 821.236424][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.236440][ C1] CR2: 000000002006b000 CR3: 000000006ca9e000 CR4: 0000000000350ef0 [ 821.236458][ C1] Call Trace: [ 821.236468][ C1] [ 821.236477][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 821.236516][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 821.236553][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 821.236589][ C1] ? nmi_handle+0x2a/0x5a0 [ 821.236625][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 821.236655][ C1] ? nmi_handle+0x151/0x5a0 [ 821.236678][ C1] ? nmi_handle+0x2a/0x5a0 [ 821.236701][ C1] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 821.236735][ C1] ? default_do_nmi+0x63/0x160 [ 821.236758][ C1] ? exc_nmi+0x123/0x1f0 [ 821.236780][ C1] ? end_repeat_nmi+0xf/0x53 [ 821.236806][ C1] ? __might_fault+0x51/0x120 [ 821.236843][ C1] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 821.236878][ C1] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 821.236914][ C1] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 821.236949][ C1] [ 821.236957][ C1] [ 821.236964][ C1] __might_fault+0x51/0x120 [ 821.237000][ C1] fpu__restore_sig+0x1a1/0x11b0 [ 821.237037][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.237063][ C1] ? __pfx_fpu__restore_sig+0x10/0x10 [ 821.237109][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.237133][ C1] ? __might_fault+0xc6/0x120 [ 821.237172][ C1] restore_sigcontext+0x675/0x7d0 [ 821.237209][ C1] ? __pfx_restore_sigcontext+0x10/0x10 [ 821.237262][ C1] ? __pfx___set_current_blocked+0x10/0x10 [ 821.237294][ C1] ? __task_pid_nr_ns+0x28/0x450 [ 821.237323][ C1] __do_sys_rt_sigreturn+0x17f/0x270 [ 821.237362][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 821.237396][ C1] ? do_syscall_64+0x100/0x230 [ 821.237430][ C1] ? do_syscall_64+0xb6/0x230 [ 821.237462][ C1] do_syscall_64+0xf3/0x230 [ 821.237494][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.237520][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.237555][ C1] RIP: 0033:0x7fb041f779f9 [ 821.237574][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.237592][ C1] RSP: 002b:00007fb042d05048 EFLAGS: 00000246 [ 821.237610][ C1] RAX: 0000000000000000 RBX: 00007fb042105f80 RCX: 00007fb041f779f9 [ 821.237627][ C1] RDX: 000000002006b000 RSI: 0000000000000000 RDI: 0000000000000000 [ 821.237641][ C1] RBP: 00007fb041fe58ee R08: 0000000000000000 R09: 0000000000000000 [ 821.237657][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.237671][ C1] R13: 000000000000000b R14: 00007fb042105f80 R15: 00007ffe8bdcd6d8 [ 821.237700][ C1] [ 821.661595][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 821.668519][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 821.679051][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 821.689140][ T30] Call Trace: [ 821.692464][ T30] [ 821.695469][ T30] dump_stack_lvl+0x241/0x360 [ 821.700193][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.705430][ T30] ? __pfx__printk+0x10/0x10 [ 821.710044][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 821.716093][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.721856][ T30] ? vscnprintf+0x5d/0x90 [ 821.726227][ T30] panic+0x349/0x860 [ 821.730150][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.735807][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 821.742005][ T30] ? __pfx_panic+0x10/0x10 [ 821.746457][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 821.751948][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.757626][ T30] ? __irq_work_queue_local+0x137/0x410 [ 821.763231][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.768891][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 821.774304][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 821.780520][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 821.786720][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.792379][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 821.798601][ T30] watchdog+0x102d/0x1030 [ 821.802970][ T30] ? watchdog+0x1ea/0x1030 [ 821.807517][ T30] ? __pfx_watchdog+0x10/0x10 [ 821.812256][ T30] kthread+0x2f2/0x390 [ 821.816345][ T30] ? __pfx_watchdog+0x10/0x10 [ 821.821057][ T30] ? __pfx_kthread+0x10/0x10 [ 821.825667][ T30] ret_from_fork+0x4d/0x80 [ 821.830118][ T30] ? __pfx_kthread+0x10/0x10 [ 821.834731][ T30] ret_from_fork_asm+0x1a/0x30 [ 821.839548][ T30] [ 821.842809][ T30] Kernel Offset: disabled [ 821.847133][ T30] Rebooting in 86400 seconds..