last executing test programs: 26.809640583s ago: executing program 2 (id=2681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x80400c, &(0x7f0000000380), 0x3, 0x55a3, &(0x7f0000005640)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x40449426, &(0x7f00000020c0)) 25.628573445s ago: executing program 2 (id=2684): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000996000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/111) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlockall() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 22.049912501s ago: executing program 2 (id=2692): r0 = syz_open_procfs(0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "696df3ac7cad48ab2867d8f5d5430319eb4da9be48d467c9f5bd630dd4955859e3a2d57b95ec2a61dadc24bb6151e95cbc3c32856686a62ab90452cf2bead3cc"}, 0x48, 0xfffffffffffffffd) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xfff) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000400)={{0x0, 0x0, 0x401, 0x0, 'syz1\x00', 0x4}, 0x5, 0x40, 0x1, r3, 0x0, 0x0, 'syz0\x00', 0x0, 0xfffffffffffffef5}) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x5, 0x0, 0x4, 0x749629f, '\x00', 0x1f}, 0x1, 0x40, 0x0, r7, 0x2, 0x6de, 'syz0\x00', &(0x7f0000000380)=['@\x00', '\x00'], 0x3}) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid=r8}]}]}, 0x1c}], 0x1}, 0x0) dup2(r4, r2) 21.289758419s ago: executing program 2 (id=2698): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x0, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000180)=0x10000, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/19, 0x13}}], 0x1, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000bc0cc50559f3484020"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x27, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x104}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3c8}, 0x48) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pipe2$watch_queue(0x0, 0x80) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chdir(0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 17.163066982s ago: executing program 2 (id=2705): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982"], 0x0}, 0x90) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x40}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 16.553000248s ago: executing program 2 (id=2709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x15}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 14.237918378s ago: executing program 3 (id=2715): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@umask}, {@errors_remount}, {}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 14.230161865s ago: executing program 4 (id=2716): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040300f1101000000000001090224000100000000090400000103c59a0009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00900d0000000ac2290600421e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 12.512273481s ago: executing program 3 (id=2721): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a80800000000010"], 0x2c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff64000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140), 0x14) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 10.591190516s ago: executing program 4 (id=2723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}}, 0x0) 10.26276767s ago: executing program 3 (id=2725): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYRESDEC], 0x0) 10.136019073s ago: executing program 1 (id=2726): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2200054, &(0x7f0000000180), 0x4, 0x244, &(0x7f0000000480)="$eJzs3TFoE3scB/DfJU372oZH33vLgwfvPRARLRTdBAfrolCQIg6CChURJ2mF2uLWOrk46KzSyUXEzeooLsVFEZyqdKiLoMXB0kGHSHJpbW3F0sSc9D4fuCR397/73ZH7/i8E7i6A3OqJiP6IKEZEb0SUIiJZ3eD/dOipj051zgxFVCrHPyS1dul4anm57oiYjIj90b6ymvHpU/NLs0d2XRsr7bwzfbKzRbu3xsL83NHF24NXHwzsG3/+8t1gEv1Rrs9bvR/NlGwwrS2J+PNnFPtFJG1ZbwGbcezy/VfV3P8VETtq+S9FIdIv7/po+5NS7Ln1vWVvvH/xTyu3FWi+SqVUPQdOVoDcKUREOZJCX0SknwuFvr70N/zrYlfhwsjopd7zI2PD57LuqYBmKUfMHX7U8bD7m/y/Lab5B7avcvpXX81iMdttAVqrev7vPTOxO+Qfckf+Ybtp33RL+Yf8kn/IL/mH/JJ/yC/5h/ySf8gv+Yf8kn/Ir9X5BwDypdKxteuGl29s0+zrkYHWybr/AQAAAAAAAAAAAAAAAAAA1pvqnBlaHlpV8+nNiIVDEdG2Uf1i7XnEEb/VXrs+JtVmK5J0sYac/q/BFTToXsZXX//+Jtv6z/7Ntv7EcMTklYhYqk9Yc/wl9eNv6/74wfzS2QYLNOjAiWzrf76bbf2B2YjH1f5n70b9TyH+rr2v738OpvdP+/oA5S26+KnBFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAyXwIAAP//VeRflA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 8.505023672s ago: executing program 1 (id=2730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) msgget$private(0x0, 0x4a4) msgctl$IPC_RMID(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000002240)=ANY=[@ANYRES16, @ANYBLOB="00042bbd7000fbdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000600040003000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040003000000"], 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x0) msgsnd(0x0, &(0x7f0000002340)={0x3}, 0x8, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) write$cgroup_int(r3, &(0x7f0000000080)=0x2, 0x12) 7.655979605s ago: executing program 0 (id=2733): syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}}}, 0x0) 7.085410446s ago: executing program 3 (id=2735): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000180)={0x0, [], 0x7}) 6.863374766s ago: executing program 1 (id=2736): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000003c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000003400)={'wg0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) socket$inet(0x2, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYRES32], 0x44}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0xdb301b89474aaf70, 0x0, 0x0, 0xfffffffe}, 0xc) 6.570062631s ago: executing program 3 (id=2737): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000980)={0x30, 0x7}, 0x30) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000fbf80e1004231f02af5f010203010902120001000000000904"], 0x0) socket(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x232242, 0x0) r3 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) r5 = syz_io_uring_setup(0x0, &(0x7f00000003c0), &(0x7f0000000000), 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8a01, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)) writev(r6, &(0x7f0000000040)=[{0x0}], 0x1) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x9, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) gettid() r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="23092cbd70002c005a661000821eb91321170d0000000500eb946418d05201ce18b3a635008000000008000300"/55, @ANYRES32=r12, @ANYBLOB="08003c000700000005002900010000000800340008000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x8040) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.620804731s ago: executing program 0 (id=2738): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000410000ca6d18ba002020732500000000002020207b1af8ff0000e7c92cf2734cf4a6000007010000553398bab702000033030000b70300000000000008000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r2, 0x0, 0xa, 0x0, &(0x7f0000000a40)="070808d6aecb899c9c14", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) fsetxattr$security_ima(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x0, 0x1, 0x2, 0x0, 0xaa, "5e8675e76b2c208ffd16135e2a390200373c9e351afbaf08ed20e5d1b699ef82b49e1e6b33c04f0254695dee1507b565895cff8d88a06ee874cb4a67cd99f3e8111427c7b6ea9fb22f2b33bf1b6b6f0f87bf02fd7a18726a8be8046e013b9744332818116498db9c2a32812435fb5f7eb49749b0dee7bb3fb18076fcc9245eddacad16e28639f757b9a15af4aeb9831b80b4bfd76aacf640413dcf7014c7b27f4960c14c50f8d1d29381"}, 0xb3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0x4, 0x4}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000042a8000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r5}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)={[{@numtail}, {@shortname_win95}, {@fat=@errors_remount}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@flush}, {@rodir}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_win95}, {@fat=@uid}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_winnt}]}, 0x97, 0x2a9, &(0x7f0000000500)="$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") r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6000) ftruncate(r7, 0x2) write$binfmt_misc(r7, &(0x7f00000001c0)={'syz0'}, 0x4) 5.172946554s ago: executing program 5 (id=2740): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x408, 0x1f0, 0x1f0, 0xe8, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@private, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="bd22fdd68c29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "0d6581a280a9fd38cc0cd92b7c41598c1625a223e855c9fbc1389f5d44ef17d4f24b7890dbf5909d70031d8427048dc1646921eaa7e6ac8400"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x16, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)=@chain) sendfile(r1, r0, 0x0, 0x2) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x10001, 0x2}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x0, 0x0, "8e19c1d5992588e3f49a2c6bdf389a31ff875a1b6afccb94", {0x6, 0x80000001}, 0x1ff}) 3.745484787s ago: executing program 5 (id=2741): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001800dd8d00000000000000000200000000000006000000000600150006000000100016800c0001"], 0x34}}, 0x0) 3.5955411s ago: executing program 1 (id=2742): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2200054, &(0x7f0000000180), 0x4, 0x244, &(0x7f0000000480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 3.291131918s ago: executing program 0 (id=2743): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000900)=ANY=[], 0xff2e) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4a6d576"}, 0x0, 0x2, {0x0}}) 3.039728166s ago: executing program 1 (id=2744): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x244}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000aa7000/0x3000)=nil, 0x3000, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000041000/0x1000)=nil, 0x1000}, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) read(r0, &(0x7f0000000380)=""/167, 0xa7) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000442000/0x1000)=nil, 0x1000}}) 2.90767156s ago: executing program 4 (id=2745): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00@\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000300)=ANY=[], 0x0}, 0x90) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d9000200202f00fe8000000000000000000000000000aaff02000000"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000002030300000000000000000000000000080003400000000008000100010000000800044000000000090002ff0700000001000000"], 0x38}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x0, 0x20, 0xffffa}, 0x2f) r6 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0x81}, 0x2f) close(r7) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 2.858587923s ago: executing program 0 (id=2746): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000740)={0x208, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x208}}, 0x0) 2.790017485s ago: executing program 5 (id=2747): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x330, 0x11, 0x148, 0x330, 0x10, 0x408, 0x2a8, 0x2a8, 0x408, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2c8, 0x330, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0xe778c993a3925fcc}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'sit0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x500) 2.479036468s ago: executing program 4 (id=2748): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 2.443871118s ago: executing program 5 (id=2749): syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}}}, 0x0) 2.403595868s ago: executing program 1 (id=2750): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x2, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x2) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000440)='&', 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x11) ioctl$TCSETSW2(r5, 0x5437, 0x0) 2.34017158s ago: executing program 0 (id=2751): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2) 2.156410178s ago: executing program 5 (id=2752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x82, &(0x7f0000000100)={r5}, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.076856825s ago: executing program 4 (id=2753): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_procfs(0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 1.983818748s ago: executing program 0 (id=2754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) write(r4, &(0x7f0000000000)='#', 0x1) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000340)={0xff02, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x5f) ioperm(0x0, 0x9, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001040)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f00002a0000/0x1000)=nil, 0x2) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000800)={@local, @local, @void, {@can={0xc, {{0x3, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "65c9f5a65b90bee6"}}}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0xa04108, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0xa}}, {@nolazytime}, {@noquota}, {@jqfmt_vfsold}, {@minixdf}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@grpid}, {@debug}]}, 0x11, 0x4d8, &(0x7f0000000540)="$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") 399.059534ms ago: executing program 5 (id=2755): r0 = syz_open_procfs(0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "696df3ac7cad48ab2867d8f5d5430319eb4da9be48d467c9f5bd630dd4955859e3a2d57b95ec2a61dadc24bb6151e95cbc3c32856686a62ab90452cf2bead3cc"}, 0x48, 0xfffffffffffffffd) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xfff) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000400)={{0x0, 0x0, 0x401, 0x0, 'syz1\x00', 0x4}, 0x5, 0x40, 0x1, r3, 0x0, 0x0, 'syz0\x00', 0x0, 0xfffffffffffffef5}) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x5, 0x0, 0x4, 0x749629f, '\x00', 0x1f}, 0x1, 0x40, 0x0, r7, 0x2, 0x6de, 'syz0\x00', &(0x7f0000000380)=['@\x00', '\x00'], 0x3}) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid=r8}]}]}, 0x1c}], 0x1}, 0x0) dup2(r4, r2) 176.387136ms ago: executing program 4 (id=2756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}}, 0x0) 0s ago: executing program 3 (id=2757): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2200054, &(0x7f0000000180), 0x4, 0x244, &(0x7f0000000480)="$eJzs3TFoE3scB/DfJU372oZH33vLgwfvPRARLRTdBAfrolCQIg6CChURJ2mF2uLWOrk46KzSyUXEzeooLsVFEZyqdKiLoMXB0kGHSHJpbW3F0sSc9D4fuCR397/73ZH7/i8E7i6A3OqJiP6IKEZEb0SUIiJZ3eD/dOipj051zgxFVCrHPyS1dul4anm57oiYjIj90b6ymvHpU/NLs0d2XRsr7bwzfbKzRbu3xsL83NHF24NXHwzsG3/+8t1gEv1Rrs9bvR/NlGwwrS2J+PNnFPtFJG1ZbwGbcezy/VfV3P8VETtq+S9FIdIv7/po+5NS7Ln1vWVvvH/xTyu3FWi+SqVUPQdOVoDcKUREOZJCX0SknwuFvr70N/zrYlfhwsjopd7zI2PD57LuqYBmKUfMHX7U8bD7m/y/Lab5B7avcvpXX81iMdttAVqrev7vPTOxO+Qfckf+Ybtp33RL+Yf8kn/IL/mH/JJ/yC/5h/ySf8gv+Yf8kn/Ir9X5BwDypdKxteuGl29s0+zrkYHWybr/AQAAAAAAAAAAAAAAAAAA1pvqnBlaHlpV8+nNiIVDEdG2Uf1i7XnEEb/VXrs+JtVmK5J0sYac/q/BFTToXsZXX//+Jtv6z/7Ntv7EcMTklYhYqk9Yc/wl9eNv6/74wfzS2QYLNOjAiWzrf76bbf2B2YjH1f5n70b9TyH+rr2v738OpvdP+/oA5S26+KnBFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAyXwIAAP//VeRflA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) kernel console output (not intermixed with test programs): comm syz.4.2181: invalid block [ 1534.588994][T14181] EXT4-fs error (device loop4): ext4_free_branches:1027: inode #13: comm syz.4.2181: invalid indirect mapped block 1819239214 (level 1) [ 1534.676277][T14181] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.2181: bg 0: block 361: padding at end of block bitmap is not set [ 1534.786888][T14181] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1534.814690][ T5238] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1534.832983][T14181] EXT4-fs error (device loop4): ext4_clear_blocks:881: inode #13: comm syz.4.2181: attempt to clear invalid blocks 33619980 len 1 [ 1534.837070][T14192] xt_addrtype: ipv6 does not support BROADCAST matching [ 1534.947794][T14181] EXT4-fs error (device loop4): ext4_free_branches:1027: inode #13: comm syz.4.2181: invalid indirect mapped block 1819239214 (level 0) [ 1535.001939][T14181] EXT4-fs (loop4): 1 truncate cleaned up [ 1535.021325][T14181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1535.038387][T14198] loop1: detected capacity change from 0 to 512 [ 1535.085576][T14198] ext4: Unknown parameter 'measure' [ 1535.851724][T14209] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.2181: Directory hole found for htree index block 0 [ 1537.152484][T13890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.241312][T14198] loop1: detected capacity change from 0 to 512 [ 1537.298113][T14198] EXT4-fs: Ignoring removed bh option [ 1537.423565][T14198] EXT4-fs (loop1): 1 truncate cleaned up [ 1537.450517][T14198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1537.527389][T14206] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1537.528823][T14213] netlink: 'syz.3.2345': attribute type 32 has an invalid length. [ 1537.638613][T14198] EXT4-fs error (device loop1): ext4_find_dest_de:2066: inode #2: block 13: comm syz.1.2342: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 1540.052604][T14232] loop0: detected capacity change from 0 to 2048 [ 1540.229152][T14242] loop4: detected capacity change from 0 to 64 [ 1540.279534][T14244] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1540.847094][T14218] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1540.985649][T14256] loop5: detected capacity change from 0 to 512 [ 1541.043474][T14256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1541.060713][T14256] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1541.362442][T14261] loop3: detected capacity change from 0 to 512 [ 1541.428031][T13814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.480796][T14261] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 1541.496841][T14261] System zones: 1-12 [ 1541.501603][T14261] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1541.520341][T14261] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.2360: invalid block [ 1541.579828][T14261] EXT4-fs error (device loop3): ext4_free_branches:1027: inode #13: comm syz.3.2360: invalid indirect mapped block 1819239214 (level 1) [ 1541.662595][T14261] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.2360: bg 0: block 361: padding at end of block bitmap is not set [ 1541.667905][T12788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.747599][T14261] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1541.834030][T14261] EXT4-fs error (device loop3): ext4_clear_blocks:881: inode #13: comm syz.3.2360: attempt to clear invalid blocks 33619980 len 1 [ 1541.877344][T14272] loop0: detected capacity change from 0 to 512 [ 1541.902665][T14261] EXT4-fs error (device loop3): ext4_free_branches:1027: inode #13: comm syz.3.2360: invalid indirect mapped block 1819239214 (level 0) [ 1541.983335][T14261] EXT4-fs (loop3): 1 truncate cleaned up [ 1542.020984][T14261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1542.692063][T14285] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2360: Directory hole found for htree index block 0 [ 1544.452571][ T5238] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1544.626792][ T5238] Bluetooth: hci3: Injecting HCI hardware error event [ 1544.637676][ T5238] Bluetooth: hci3: hardware error 0x00 [ 1544.684631][T14277] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1544.866216][T14280] netlink: 'syz.1.2367': attribute type 32 has an invalid length. [ 1544.891021][T13670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.294603][T14298] 9pnet_fd: Insufficient options for proto=fd [ 1546.060090][T14298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2372'. [ 1546.336170][T14307] input: syz1 as /devices/virtual/input/input37 [ 1546.508242][T14308] loop1: detected capacity change from 0 to 512 [ 1546.522265][T14311] loop0: detected capacity change from 0 to 64 [ 1546.612674][T14308] ext4: Unknown parameter 'measure' [ 1546.927153][ T5238] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1547.511992][T14308] loop1: detected capacity change from 0 to 512 [ 1547.587788][T14308] EXT4-fs: Ignoring removed bh option [ 1547.797142][T14308] EXT4-fs (loop1): 1 truncate cleaned up [ 1547.805530][T14308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1547.955829][T14308] EXT4-fs error (device loop1): ext4_find_dest_de:2066: inode #2: block 13: comm syz.1.2375: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 1547.964988][T14326] loop3: detected capacity change from 0 to 8 [ 1548.014079][T14326] SQUASHFS error: Unknown inode type 1078 in squashfs_iget! [ 1549.442277][T10325] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1549.451605][T14341] loop0: detected capacity change from 0 to 512 [ 1549.498284][T14341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1549.520220][T14341] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1549.559745][T14341] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.2387: iget: bogus i_mode (0) [ 1549.561789][T14341] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2387: couldn't read orphan inode 17 (err -117) [ 1549.564631][T14341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1550.636682][T10325] usb 4-1: Using ep0 maxpacket: 16 [ 1550.666045][T10325] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104 [ 1550.675947][T10325] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1550.676003][T10325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.676046][T10325] usb 4-1: Product: syz [ 1550.676079][T10325] usb 4-1: Manufacturer: syz [ 1550.676111][T10325] usb 4-1: SerialNumber: syz [ 1550.691833][T10325] usb 4-1: config 0 descriptor?? [ 1550.692790][T14326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1550.735644][T10325] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input38 [ 1550.857956][ T5238] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1550.858199][ T5238] Bluetooth: hci0: Injecting HCI hardware error event [ 1550.862322][ T55] Bluetooth: hci0: hardware error 0x00 [ 1550.904933][T14354] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.2387: bg 0: block 7: invalid block bitmap [ 1550.933283][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1551.950032][T14323] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1552.148239][T13814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.153545][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1552.175634][T13724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.291519][T12834] usb 4-1: USB disconnect, device number 19 [ 1552.291640][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1552.396687][T14349] loop4: detected capacity change from 0 to 2048 [ 1553.073301][T14360] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1553.177381][T14365] loop3: detected capacity change from 0 to 64 [ 1554.136975][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1554.152765][T14372] loop5: detected capacity change from 0 to 512 [ 1554.197535][T14372] ext4: Unknown parameter 'noacl' [ 1554.267977][T14374] input: syz1 as /devices/virtual/input/input40 [ 1554.407125][ T5308] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1554.609495][ T5308] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1554.707276][ T5308] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1554.736612][ T5308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1555.588206][ T5308] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1555.615107][ T5308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.643994][ T5308] usb 2-1: Product: syz [ 1555.696665][ T5308] usb 2-1: Manufacturer: syz [ 1555.701342][ T5308] usb 2-1: SerialNumber: syz [ 1555.887335][T14387] random: crng reseeded on system resumption [ 1555.974932][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.997301][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1557.407036][ T55] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1557.417919][ T55] Bluetooth: hci5: Injecting HCI hardware error event [ 1557.428184][ T55] Bluetooth: hci5: hardware error 0x00 [ 1557.571226][ T5308] usb 2-1: 0:2 : does not exist [ 1557.753276][T14399] 9pnet_fd: Insufficient options for proto=fd [ 1557.838427][T14403] loop0: detected capacity change from 0 to 512 [ 1559.038413][T14403] ext4: Unknown parameter 'measure' [ 1559.098249][T14399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2406'. [ 1559.243365][ T5294] usb 2-1: USB disconnect, device number 21 [ 1559.577822][ T55] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1560.205701][T14421] loop5: detected capacity change from 0 to 512 [ 1560.504871][T14403] loop0: detected capacity change from 0 to 512 [ 1560.569073][T14403] EXT4-fs: Ignoring removed bh option [ 1560.713914][T14421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1560.820619][T14421] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1560.836809][T14403] EXT4-fs (loop0): 1 truncate cleaned up [ 1560.845063][T14403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.235241][T12788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.374405][T13724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.537197][T12834] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1561.800511][T12834] usb 5-1: Using ep0 maxpacket: 16 [ 1561.841335][T12834] usb 5-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=be.6d [ 1561.881518][T12834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.929057][T12834] usb 5-1: Product: syz [ 1561.933394][T12834] usb 5-1: Manufacturer: syz [ 1561.946163][T14453] loop0: detected capacity change from 0 to 64 [ 1561.956433][T12834] usb 5-1: SerialNumber: syz [ 1561.987964][T12834] usb 5-1: config 0 descriptor?? [ 1562.018918][T14456] loop2: detected capacity change from 0 to 64 [ 1562.236757][T14453] loop0: detected capacity change from 64 to 0 [ 1562.257038][ T5294] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1562.445539][T12834] kaweth 5-1:0.0: Firmware present in device. [ 1562.576409][ T5294] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1562.586616][ T5294] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1562.599412][T12834] kaweth 5-1:0.0: Statistics collection: 0 [ 1562.602207][ T5294] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1562.708175][T14461] syz.0.2422: attempt to access beyond end of device [ 1562.708175][T14461] loop0: rw=2049, sector=1, nr_sectors = 1 limit=0 [ 1562.737588][ T5294] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1562.750112][ T5294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.758272][T12834] kaweth 5-1:0.0: Multicast filter limit: 0 [ 1562.758310][T12834] kaweth 5-1:0.0: MTU: 0 [ 1562.764420][ T5294] usb 4-1: Product: syz [ 1562.835925][ T5294] usb 4-1: Manufacturer: syz [ 1562.886375][ T5294] usb 4-1: SerialNumber: syz [ 1562.902540][T14461] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 1562.916798][T12834] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1562.923409][T14461] syz.0.2422: attempt to access beyond end of device [ 1562.923409][T14461] loop0: rw=0, sector=8, nr_sectors = 1 limit=0 [ 1562.923571][T14461] Unable to read inode block [ 1563.230396][T12834] kaweth 5-1:0.0: Error setting SOFS wait [ 1563.257080][T12834] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 1563.301272][T12834] usb 5-1: USB disconnect, device number 22 [ 1563.303273][ T7753] kworker/u8:15: attempt to access beyond end of device [ 1563.303273][ T7753] loop0: rw=0, sector=8, nr_sectors = 1 limit=0 [ 1563.390546][ T7753] Unable to read inode block [ 1563.417297][ T7753] kworker/u8:15: attempt to access beyond end of device [ 1563.417297][ T7753] loop0: rw=0, sector=8, nr_sectors = 1 limit=0 [ 1563.451264][ T7753] Unable to read inode block [ 1563.456084][ T7753] kworker/u8:15: attempt to access beyond end of device [ 1563.456084][ T7753] loop0: rw=0, sector=8, nr_sectors = 1 limit=0 [ 1563.504135][ T7753] Unable to read inode block [ 1563.609158][ T5294] usb 4-1: 0:2 : does not exist [ 1564.017553][ T5308] usb 4-1: USB disconnect, device number 20 [ 1564.118244][ T2519] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.473369][ T2519] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.759956][ T2519] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.109796][ T2519] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.155301][T14482] input: syz1 as /devices/virtual/input/input42 [ 1565.241425][ T55] Bluetooth: hci8: unexpected event for opcode 0x080c [ 1565.511140][ T55] Bluetooth: hci8: unexpected event for opcode 0x2005 [ 1565.584453][ T8320] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1565.827027][ T8320] usb 4-1: Using ep0 maxpacket: 32 [ 1565.848072][ T8320] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.896562][ T8320] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.916196][ T2519] bridge_slave_1: left allmulticast mode [ 1565.941068][ T2519] bridge_slave_1: left promiscuous mode [ 1565.965384][ T8320] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1565.968115][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.016890][T14498] loop1: detected capacity change from 0 to 512 [ 1566.037405][ T2519] bridge_slave_0: left allmulticast mode [ 1566.047002][ T8320] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1566.065912][T14498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1566.101788][ T2519] bridge_slave_0: left promiscuous mode [ 1566.103692][ T8320] usb 4-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1566.146108][T14498] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1566.166150][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.210356][ T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1566.213958][ T8320] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1566.230328][ T55] Bluetooth: hci1: Injecting HCI hardware error event [ 1566.239367][ T8320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.244448][ T55] Bluetooth: hci1: hardware error 0x00 [ 1566.305705][T14498] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.2440: iget: bogus i_mode (0) [ 1566.348791][T14498] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2440: couldn't read orphan inode 17 (err -117) [ 1566.434991][T14498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1566.699316][T14504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz.1.2440: bg 0: block 7: invalid block bitmap [ 1567.324206][ T8320] ntrig 0003:1B96:000A.0014: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 1567.428781][T13814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.524180][T14508] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1567.530178][ T8320] usb 4-1: USB disconnect, device number 21 [ 1567.547350][T14508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1567.597043][T14508] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1567.637092][T14508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1567.658342][T14508] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1567.670820][T14508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1568.284168][ T8320] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1568.497137][ T8320] usb 5-1: Using ep0 maxpacket: 16 [ 1568.499350][T14522] loop3: detected capacity change from 0 to 2048 [ 1568.514931][ T8320] usb 5-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=be.6d [ 1568.526289][ T8320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.535471][ T8320] usb 5-1: Product: syz [ 1568.539994][ T8320] usb 5-1: Manufacturer: syz [ 1568.544705][ T8320] usb 5-1: SerialNumber: syz [ 1568.553670][ T8320] usb 5-1: config 0 descriptor?? [ 1568.575064][T14522] loop3: p3 < > p4 < > [ 1568.583993][T14522] loop3: partition table partially beyond EOD, truncated [ 1568.603899][T14522] loop3: p3 start 4284289 is beyond EOD, truncated [ 1568.611115][ T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1568.782586][ T2519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1568.813551][ T2519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.825771][ T8320] kaweth 5-1:0.0: Firmware present in device. [ 1568.855708][ T2519] bond0 (unregistering): Released all slaves [ 1569.012705][ T8320] kaweth 5-1:0.0: Statistics collection: 0 [ 1569.039472][ T8320] kaweth 5-1:0.0: Multicast filter limit: 0 [ 1569.049240][ T8320] kaweth 5-1:0.0: MTU: 0 [ 1569.065544][ T8320] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1569.155649][ T5325] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1569.165144][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1569.165171][ T29] audit: type=1326 audit(1722242584.965:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.2.2449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c75d77299 code=0x0 [ 1569.376713][ T5325] usb 4-1: Using ep0 maxpacket: 8 [ 1569.398622][ T5325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.424129][ T8320] kaweth 5-1:0.0: Error setting SOFS wait [ 1569.456685][ T8320] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 1569.483751][ T5325] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=9f.c0 [ 1569.512115][ T8320] usb 5-1: USB disconnect, device number 23 [ 1569.518316][ T5325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.526398][ T5325] usb 4-1: Product: syz [ 1569.579629][ T5325] usb 4-1: Manufacturer: syz [ 1569.584324][ T5325] usb 4-1: SerialNumber: syz [ 1569.614524][ T5325] usb 4-1: config 0 descriptor?? [ 1569.651025][ T5325] usbserial_generic 4-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1569.665465][ T5325] usbserial_generic 4-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1569.688772][ T5325] usbserial_generic 4-1:0.0: device has no bulk endpoints [ 1569.812039][ T55] Bluetooth: hci0: command tx timeout [ 1569.919502][ T2519] hsr_slave_0: left promiscuous mode [ 1569.938741][ T2519] hsr_slave_1: left promiscuous mode [ 1569.958882][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.973417][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.996233][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1570.007878][ T5308] usb 4-1: USB disconnect, device number 22 [ 1570.015338][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.110867][ T2519] veth1_macvtap: left promiscuous mode [ 1570.145461][ T2519] veth0_macvtap: left promiscuous mode [ 1570.166578][ T2519] veth1_vlan: left promiscuous mode [ 1570.175576][ T2519] veth0_vlan: left promiscuous mode [ 1571.218485][T14549] loop5: detected capacity change from 0 to 1024 [ 1571.687955][T14549] loop5: detected capacity change from 1024 to 0 [ 1571.724688][T14549] syz.5.2458: attempt to access beyond end of device [ 1571.724688][T14549] loop5: rw=0, sector=4, nr_sectors = 2 limit=0 [ 1571.756661][T14549] Buffer I/O error on dev loop5, logical block 2, async page read [ 1571.806743][T14560] random: crng reseeded on system resumption [ 1571.848929][T14549] syz.5.2458: attempt to access beyond end of device [ 1571.848929][T14549] loop5: rw=0, sector=4, nr_sectors = 2 limit=0 [ 1571.904426][ T55] Bluetooth: hci0: command tx timeout [ 1571.916906][T14549] Buffer I/O error on dev loop5, logical block 2, async page read [ 1572.127330][T14557] 9pnet_fd: Insufficient options for proto=fd [ 1572.291920][T12788] hfsplus: bad catalog entry type [ 1573.967182][ T55] Bluetooth: hci0: command tx timeout [ 1574.538730][ T2580] kworker/u8:12: attempt to access beyond end of device [ 1574.538730][ T2580] loop5: rw=1, sector=206, nr_sectors = 8 limit=0 [ 1574.592882][ T2580] hfsplus: b-tree write err: -5, ino 4 [ 1574.825267][T11343] kworker/u8:2: attempt to access beyond end of device [ 1574.825267][T11343] loop5: rw=2049, sector=206, nr_sectors = 8 limit=0 [ 1574.888044][T14573] syz.4.2466: attempt to access beyond end of device [ 1574.888044][T14573] loop5: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 1575.073363][ T2519] team0 (unregistering): Port device team_slave_1 removed [ 1576.047327][ T55] Bluetooth: hci0: command tx timeout [ 1576.171005][ T2519] team0 (unregistering): Port device team_slave_0 removed [ 1576.492698][ T8136] kworker/0:3: attempt to access beyond end of device [ 1576.492698][ T8136] loop5: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 1576.550687][ T8136] hfsplus: delayed sync fs err -5 [ 1579.548636][T14612] random: crng reseeded on system resumption [ 1579.764354][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2473'. [ 1579.806912][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2473'. [ 1579.817828][T12788] syz-executor: attempt to access beyond end of device [ 1579.817828][T12788] loop5: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 1579.947272][T14505] chnl_net:caif_netlink_parms(): no params data found [ 1579.963107][T12788] syz-executor: attempt to access beyond end of device [ 1579.963107][T12788] loop5: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 1583.125882][T14505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.273617][T14505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.281221][T14505] bridge_slave_0: entered allmulticast mode [ 1583.290211][T14505] bridge_slave_0: entered promiscuous mode [ 1583.315148][T14505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.327182][T14505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.335191][T14505] bridge_slave_1: entered allmulticast mode [ 1583.344222][T14505] bridge_slave_1: entered promiscuous mode [ 1583.481194][T14505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.560035][T14505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.986911][T14505] team0: Port device team_slave_0 added [ 1585.045795][T14505] team0: Port device team_slave_1 added [ 1585.077194][T14646] loop3: detected capacity change from 0 to 1024 [ 1585.413311][T14646] EXT4-fs: Ignoring removed orlov option [ 1585.985319][T14646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1586.478064][T14505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.485217][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.545470][T14505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.176615][ T29] audit: type=1800 audit(1722242604.955:390): pid=14665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2491" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1589.641936][ T2519] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1589.655646][T14508] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1589.671027][ T2519] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.688522][T14657] 9pnet_fd: Insufficient options for proto=fd [ 1589.707089][T14508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1589.728562][T14508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1589.742395][T14508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1589.750850][T14508] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1589.761408][T14508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1589.865899][T14657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2493'. [ 1589.904612][T14505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.960512][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1590.112765][T14505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1590.356985][ T2519] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1590.375892][ T2519] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.598392][ T2519] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1590.623431][ T2519] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.647153][T14685] random: crng reseeded on system resumption [ 1590.692599][T13670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.993467][ T2519] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1591.036685][ T2519] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.435694][T14505] hsr_slave_0: entered promiscuous mode [ 1591.474268][T14505] hsr_slave_1: entered promiscuous mode [ 1591.810465][ T55] Bluetooth: hci4: command tx timeout [ 1592.795010][T14700] loop2: detected capacity change from 0 to 1024 [ 1592.808249][T14700] EXT4-fs: Ignoring removed orlov option [ 1592.880607][T14700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1592.886846][T12834] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1592.961091][ T2519] team0: left allmulticast mode [ 1592.966206][ T2519] team_slave_0: left allmulticast mode [ 1593.003069][ T2519] team_slave_1: left allmulticast mode [ 1593.028549][ T2519] bridge0: port 3(team0) entered disabled state [ 1593.139911][ T2519] bridge_slave_1: left allmulticast mode [ 1593.158392][ T2519] bridge_slave_1: left promiscuous mode [ 1593.176476][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.239665][ T2519] bridge_slave_0: left allmulticast mode [ 1593.245606][ T2519] bridge_slave_0: left promiscuous mode [ 1593.289480][T14508] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1593.310209][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.319041][T14508] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1593.338174][T14508] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1593.361716][T14508] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1593.372462][T14508] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1593.380210][T14508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1593.450253][T12834] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1593.465142][T12834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1594.496827][T14508] Bluetooth: hci4: command tx timeout [ 1594.574292][T12834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1594.604977][T12834] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1594.625109][T12834] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1594.834875][T12834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.879791][T12834] usb 2-1: config 0 descriptor?? [ 1594.886166][T14697] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1595.374363][T12834] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 1595.400681][T12834] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 1595.454776][T12834] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1595.491397][T14508] Bluetooth: hci5: command tx timeout [ 1595.786835][ T5293] usb 2-1: USB disconnect, device number 22 [ 1596.064961][ T2519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.093402][ T2519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.132189][ T2519] bond0 (unregistering): Released all slaves [ 1596.526789][T14508] Bluetooth: hci4: command tx timeout [ 1596.711318][T13805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.265855][ T2519] hsr_slave_0: left promiscuous mode [ 1597.283777][ T2519] hsr_slave_1: left promiscuous mode [ 1597.295157][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.303164][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1597.321004][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.335905][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.405502][ T2519] veth1_macvtap: left promiscuous mode [ 1597.411594][ T2519] veth0_macvtap: left promiscuous mode [ 1597.417626][ T2519] veth1_vlan: left promiscuous mode [ 1597.423096][ T2519] veth0_vlan: left promiscuous mode [ 1597.566777][T14508] Bluetooth: hci5: command tx timeout [ 1598.036249][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1598.063191][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1598.072274][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1598.097477][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1598.118272][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1598.135828][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1598.563837][ T2519] team_slave_1 (unregistering): left promiscuous mode [ 1598.582217][ T2519] team0 (unregistering): Port device team_slave_1 removed [ 1598.607071][T14508] Bluetooth: hci4: command tx timeout [ 1598.655983][ T2519] team_slave_0 (unregistering): left promiscuous mode [ 1598.668891][ T2519] team0 (unregistering): Port device team_slave_0 removed [ 1599.624264][T14674] chnl_net:caif_netlink_parms(): no params data found [ 1599.662516][T14508] Bluetooth: hci5: command tx timeout [ 1599.995442][T14729] random: crng reseeded on system resumption [ 1600.061052][T14728] loop1: detected capacity change from 0 to 128 [ 1600.100575][T14728] vfat: Unknown parameter 'nonumtailµšK{4ùname' [ 1600.217034][T14508] Bluetooth: hci1: command tx timeout [ 1600.410043][T14674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.434183][T14674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.447465][T14674] bridge_slave_0: entered allmulticast mode [ 1600.472155][T14674] bridge_slave_0: entered promiscuous mode [ 1600.528546][T14674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.541854][T14674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.560800][T14674] bridge_slave_1: entered allmulticast mode [ 1600.579391][T14674] bridge_slave_1: entered promiscuous mode [ 1601.008564][T14674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.135905][T14674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.216876][T14738] loop1: detected capacity change from 0 to 128 [ 1601.233187][T14505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1601.253687][T14738] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1601.480956][T14741] loop4: detected capacity change from 0 to 512 [ 1601.529873][T14505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1601.555901][T14741] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1601.570909][T14741] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1601.612692][T14674] team0: Port device team_slave_0 added [ 1601.621069][T14741] EXT4-fs error (device loop4): ext4_acquire_dquot:6846: comm syz.4.2517: Failed to acquire dquot type 1 [ 1601.678950][T14674] team0: Port device team_slave_1 added [ 1601.696820][T14704] chnl_net:caif_netlink_parms(): no params data found [ 1601.726840][T14508] Bluetooth: hci5: command tx timeout [ 1601.741289][T14741] EXT4-fs (loop4): 1 truncate cleaned up [ 1601.806014][T14741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1601.822233][T14505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1601.840070][T14741] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1601.847020][T14505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1601.890782][T14741] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1601.908046][T14741] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1601.919374][T14741] EXT4-fs error (device loop4): ext4_acquire_dquot:6846: comm syz.4.2517: Failed to acquire dquot type 1 [ 1602.044280][T13890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.233382][T14749] loop4: detected capacity change from 0 to 8 [ 1602.252484][T14749] Major/Minor mismatch, trying to mount newer 4.224 filesystem [ 1602.275773][T14749] Please update your kernel [ 1602.287338][T14508] Bluetooth: hci1: command tx timeout [ 1602.332740][T14674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1602.343106][T14674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1602.394047][T14674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1602.563038][T14674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1602.574162][T14674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1602.605579][T14674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1604.023679][ T2519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.230495][T14508] Bluetooth: hci2: unexpected event 0x0f length: 96 > 4 [ 1604.275717][T14775] loop1: detected capacity change from 0 to 2048 [ 1604.328969][T14775] loop1: [ICS] [ 1604.367166][T14508] Bluetooth: hci1: command tx timeout [ 1604.402353][ T2519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.470945][T14674] hsr_slave_0: entered promiscuous mode [ 1604.507203][T14674] hsr_slave_1: entered promiscuous mode [ 1604.515791][T14674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1604.524249][T14674] Cannot create hsr debugfs directory [ 1604.586070][T14721] chnl_net:caif_netlink_parms(): no params data found [ 1604.683606][ T2519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.789854][T14784] loop1: detected capacity change from 0 to 8 [ 1604.807871][T14704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.815115][T14704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.821424][T14784] Major/Minor mismatch, trying to mount newer 4.224 filesystem [ 1604.823584][T14704] bridge_slave_0: entered allmulticast mode [ 1604.831017][T14784] Please update your kernel [ 1604.851638][T14704] bridge_slave_0: entered promiscuous mode [ 1604.931172][ T2519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.006008][T14704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.017142][T14704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.024537][T14704] bridge_slave_1: entered allmulticast mode [ 1605.033899][T14704] bridge_slave_1: entered promiscuous mode [ 1605.641397][T14704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.680172][T14704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.348220][T14704] team0: Port device team_slave_0 added [ 1606.352024][T14804] loop1: detected capacity change from 0 to 2048 [ 1606.370814][T14704] team0: Port device team_slave_1 added [ 1606.403982][T14804] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1606.452760][T14508] Bluetooth: hci1: command tx timeout [ 1606.463359][T14804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1606.670979][T14804] UDF-fs: warning (device loop1): udf_rmdir: empty directory has nlink != 2 (0) [ 1606.963448][ T29] audit: type=1326 audit(1722242622.765:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7ffc0000 [ 1606.993644][T14721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.018365][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.031753][ T29] audit: type=1326 audit(1722242622.765:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7ffc0000 [ 1607.062693][T14721] bridge_slave_0: entered allmulticast mode [ 1607.096143][T14721] bridge_slave_0: entered promiscuous mode [ 1607.108952][ T29] audit: type=1326 audit(1722242622.815:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fccab377299 code=0x7ffc0000 [ 1607.180900][ T29] audit: type=1326 audit(1722242622.815:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7ffc0000 [ 1607.267982][ T29] audit: type=1326 audit(1722242622.815:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7ffc0000 [ 1607.302604][ T29] audit: type=1326 audit(1722242622.825:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fccab377299 code=0x7ffc0000 [ 1607.378968][ T29] audit: type=1326 audit(1722242622.825:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7ffc0000 [ 1607.497684][ T29] audit: type=1326 audit(1722242622.825:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7ffc0000 [ 1607.597372][ T29] audit: type=1326 audit(1722242622.835:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fccab377299 code=0x7ffc0000 [ 1607.648099][ T29] audit: type=1326 audit(1722242622.835:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7ffc0000 [ 1607.674974][T14704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1607.712066][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1607.791723][T14704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1607.819522][T14721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.827017][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.836134][T14721] bridge_slave_1: entered allmulticast mode [ 1607.867828][T14721] bridge_slave_1: entered promiscuous mode [ 1608.116159][T14704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.128714][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.186178][T14704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.299422][ T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1608.310189][ T55] Bluetooth: hci2: Injecting HCI hardware error event [ 1608.474488][T14721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.534871][T14721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.812555][ T2519] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.822621][T14815] loop4: detected capacity change from 0 to 128 [ 1608.844224][T14815] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1609.182121][ T2519] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.224267][T14721] team0: Port device team_slave_0 added [ 1609.256705][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 1609.266025][T14508] Bluetooth: hci2: hardware error 0x00 [ 1609.364889][T14704] hsr_slave_0: entered promiscuous mode [ 1609.390752][T14704] hsr_slave_1: entered promiscuous mode [ 1609.403269][T14704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1609.420713][T14704] Cannot create hsr debugfs directory [ 1609.448069][T14721] team0: Port device team_slave_1 added [ 1609.470743][T14825] loop1: detected capacity change from 0 to 512 [ 1609.500635][ T2519] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.590293][T14505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1609.797928][ T2519] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.902934][T14721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.936639][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.981150][T14721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.001618][T14721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.019539][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.047527][T14721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.201266][T14505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1610.481984][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.489374][ T8136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.591882][T14721] hsr_slave_0: entered promiscuous mode [ 1610.601986][T14721] hsr_slave_1: entered promiscuous mode [ 1610.618624][T14721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1610.626431][T14721] Cannot create hsr debugfs directory [ 1610.653264][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.660593][ T8320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.863846][T14674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1611.024325][T14674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1611.052801][T14674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1611.232305][T14674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1611.326881][T14508] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1611.533673][ T2519] bridge_slave_1: left allmulticast mode [ 1611.543993][ T2519] bridge_slave_1: left promiscuous mode [ 1611.550389][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.581450][ T2519] bridge_slave_0: left allmulticast mode [ 1611.593568][ T2519] bridge_slave_0: left promiscuous mode [ 1611.602037][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.638923][ T2519] bridge_slave_1: left allmulticast mode [ 1611.644798][ T2519] bridge_slave_1: left promiscuous mode [ 1611.654939][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.698635][ T2519] bridge_slave_0: left allmulticast mode [ 1611.713025][ T2519] bridge_slave_0: left promiscuous mode [ 1611.721022][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.928040][T14834] loop1: detected capacity change from 0 to 256 [ 1612.270782][T14836] loop1: detected capacity change from 0 to 512 [ 1612.330260][T14836] __quota_error: 13 callbacks suppressed [ 1612.330289][T14836] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1612.351340][T14836] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1612.361737][T14836] EXT4-fs error (device loop1): ext4_acquire_dquot:6846: comm syz.1.2548: Failed to acquire dquot type 1 [ 1612.390901][T14836] EXT4-fs (loop1): 1 truncate cleaned up [ 1612.406177][T14836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1612.423694][T14836] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1612.488978][T14836] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1612.499792][T14836] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1612.512194][T14836] EXT4-fs error (device loop1): ext4_acquire_dquot:6846: comm syz.1.2548: Failed to acquire dquot type 1 [ 1612.685102][T13814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.179229][T14847] loop1: detected capacity change from 0 to 512 [ 1613.281239][T14847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1613.304793][T14847] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1613.955343][T14851] xt_l2tp: v2 doesn't support IP mode [ 1613.980835][T13814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1614.420262][ T2519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.472641][ T2519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.494752][ T2519] bond0 (unregistering): Released all slaves [ 1614.633419][T14857] ucma_write: process 162 (syz.1.2553) changed security contexts after opening file descriptor, this is not allowed. [ 1615.188566][ T2519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.233760][ T2519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.273378][ T2519] bond0 (unregistering): Released all slaves [ 1616.067637][ T8320] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1616.313132][ T8320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.333540][ T8320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.368112][ T8320] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1616.398621][ T8320] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1616.411067][ T8320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.454078][ T8320] usb 5-1: config 0 descriptor?? [ 1616.513225][ T29] audit: type=1326 audit(1722242632.315:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1616.551177][ T29] audit: type=1326 audit(1722242632.355:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1616.717598][ T29] audit: type=1326 audit(1722242632.515:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1616.808842][ T29] audit: type=1326 audit(1722242632.515:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1616.831752][ T29] audit: type=1326 audit(1722242632.515:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1616.885746][ T29] audit: type=1326 audit(1722242632.515:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1616.979476][ T8320] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1617.021754][ T8320] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 1617.059392][ T8320] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1617.172483][T14869] loop1: detected capacity change from 0 to 256 [ 1617.324523][ T2519] hsr_slave_0: left promiscuous mode [ 1617.343285][ T2519] hsr_slave_1: left promiscuous mode [ 1617.364035][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1617.371648][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1617.385721][ T5294] usb 5-1: USB disconnect, device number 24 [ 1617.404193][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1617.419508][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.419623][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.435826][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.484509][ T2519] hsr_slave_0: left promiscuous mode [ 1617.494096][ T2519] hsr_slave_1: left promiscuous mode [ 1617.500863][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1617.511488][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1617.520303][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1617.529827][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.594778][ T2519] veth1_macvtap: left promiscuous mode [ 1617.600488][ T2519] veth0_macvtap: left promiscuous mode [ 1617.606240][ T2519] veth1_vlan: left promiscuous mode [ 1617.612925][ T2519] veth0_vlan: left promiscuous mode [ 1617.621100][ T2519] veth1_macvtap: left promiscuous mode [ 1617.627215][ T2519] veth0_macvtap: left promiscuous mode [ 1617.632972][ T2519] veth1_vlan: left promiscuous mode [ 1617.638615][ T2519] veth0_vlan: left promiscuous mode [ 1617.736747][ T8320] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1617.930746][ T8320] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1617.957384][ T8320] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1617.966073][ T8320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1617.997100][ T8320] usb 2-1: config 1 has no interface number 0 [ 1618.004010][ T8320] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1618.030931][ T8320] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 19717, setting to 64 [ 1618.056738][ T8320] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1618.111318][ T8320] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1618.129045][ T8320] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 1618.156756][ T8320] usb 2-1: Product: syz [ 1618.177202][T14871] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1618.203498][ T8320] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1618.375987][T14875] 9pnet_fd: Insufficient options for proto=fd [ 1618.434970][T14871] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1618.522089][ T8320] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1618.546290][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2559'. [ 1618.850369][ T8320] usb 2-1: USB disconnect, device number 23 [ 1618.860592][ T8320] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1619.577521][ T2519] team0 (unregistering): Port device team_slave_1 removed [ 1620.573706][ T2519] team0 (unregistering): Port device team_slave_0 removed [ 1620.776943][T14888] xt_l2tp: v2 doesn't support IP mode [ 1622.705713][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1622.705740][ T29] audit: type=1326 audit(1722242638.495:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.4.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173377299 code=0x7fc00000 [ 1622.747218][ T29] audit: type=1326 audit(1722242638.505:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.4.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0173377299 code=0x7fc00000 [ 1622.872221][ T29] audit: type=1326 audit(1722242638.665:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14891 comm="syz.4.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173377299 code=0x7fc00000 [ 1623.052996][ T2519] team0 (unregistering): Port device team_slave_1 removed [ 1623.197588][ T2519] team0 (unregistering): Port device team_slave_0 removed [ 1624.595267][T14900] loop4: detected capacity change from 0 to 512 [ 1624.733567][T14900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1624.760213][T14900] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1624.972123][T14704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1625.030922][T14704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1625.171645][T14704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1625.193488][T14704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1625.443052][T13890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.971304][T14674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.857756][T14909] 9pnet_fd: Insufficient options for proto=fd [ 1626.986882][T14909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2569'. [ 1627.015135][T14674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.146266][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.153555][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.299500][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.306915][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.665175][T14721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1627.768432][T14721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1627.969176][T14721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1628.102879][T14721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1628.294302][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1628.308498][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1628.321822][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1628.331413][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1628.342191][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1628.350181][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1628.923425][T14928] loop4: detected capacity change from 0 to 512 [ 1628.957812][T14928] EXT4-fs: Ignoring removed oldalloc option [ 1628.985287][T14928] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1629.033989][T14928] EXT4-fs (loop4): 1 truncate cleaned up [ 1629.050895][T14928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1629.183554][T14928] EXT4-fs error (device loop4): mb_free_blocks:1945: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1629.237482][T14704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.505770][T13890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.683178][T14704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.844462][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.851846][ T8136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.899204][T14939] loop1: detected capacity change from 0 to 256 [ 1629.936111][T14939] FAT-fs (loop1): Directory bread(block 64) failed [ 1629.942948][T14939] FAT-fs (loop1): Directory bread(block 65) failed [ 1629.950321][T14939] FAT-fs (loop1): Directory bread(block 66) failed [ 1629.958874][T14939] FAT-fs (loop1): Directory bread(block 67) failed [ 1629.965576][T14939] FAT-fs (loop1): Directory bread(block 68) failed [ 1629.973298][T14939] FAT-fs (loop1): Directory bread(block 69) failed [ 1629.980124][T14939] FAT-fs (loop1): Directory bread(block 70) failed [ 1629.986829][T14939] FAT-fs (loop1): Directory bread(block 71) failed [ 1629.993632][T14939] FAT-fs (loop1): Directory bread(block 72) failed [ 1630.003790][T14939] FAT-fs (loop1): Directory bread(block 73) failed [ 1630.098984][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.106286][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.216742][ T8320] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1630.416939][ T8320] usb 5-1: Using ep0 maxpacket: 32 [ 1630.425698][ T8320] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1630.438554][ T8320] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1630.449392][ T8320] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1630.456845][T14508] Bluetooth: hci0: command tx timeout [ 1630.458709][ T8320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.522152][ C1] eth0: bad gso: type: 1, size: 1408 [ 1630.540018][ T8320] hub 5-1:4.0: USB hub found [ 1630.625204][T14922] chnl_net:caif_netlink_parms(): no params data found [ 1631.046996][ T8320] hub 5-1:4.0: 2 ports detected [ 1631.958002][ T8320] hub 5-1:4.0: set hub depth failed [ 1631.981584][ T8320] usb 5-1: USB disconnect, device number 25 [ 1632.015965][T14721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.325922][T14674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.451626][T14960] sd 0:0:1:0: PR command failed: 1026 [ 1632.470063][T14960] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1632.486818][T14960] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1632.523305][T14922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.537357][T14508] Bluetooth: hci0: command tx timeout [ 1632.557187][T14922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.564586][T14922] bridge_slave_0: entered allmulticast mode [ 1632.637544][T14922] bridge_slave_0: entered promiscuous mode [ 1632.693709][T14721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.748242][T14922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.755520][T14922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.797283][T14922] bridge_slave_1: entered allmulticast mode [ 1632.821381][T14922] bridge_slave_1: entered promiscuous mode [ 1633.126650][ T25] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1633.186048][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.193428][ T8320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.246195][T14922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.285183][T14922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.357422][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1633.365849][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.378214][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1633.427284][ T25] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1633.457305][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.489484][ T25] usb 5-1: config 0 descriptor?? [ 1633.504330][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.511700][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.574336][T14922] team0: Port device team_slave_0 added [ 1633.626099][T14922] team0: Port device team_slave_1 added [ 1633.688420][ T2519] bridge_slave_1: left allmulticast mode [ 1633.694203][ T2519] bridge_slave_1: left promiscuous mode [ 1633.736593][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.780287][ T2519] bridge_slave_0: left allmulticast mode [ 1633.786139][ T2519] bridge_slave_0: left promiscuous mode [ 1633.797716][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.884866][ T29] audit: type=1326 audit(1722242649.685:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1633.965194][ T25] ntrig 0003:1B96:0008.0017: ignoring exceeding usage max [ 1633.989474][ T25] ntrig 0003:1B96:0008.0017: usage index exceeded [ 1633.995956][ T25] ntrig 0003:1B96:0008.0017: item 0 0 2 0 parsing failed [ 1634.003855][ T29] audit: type=1326 audit(1722242649.795:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1634.018634][ T25] ntrig 0003:1B96:0008.0017: parse failed [ 1634.056767][ T25] ntrig 0003:1B96:0008.0017: probe with driver ntrig failed with error -22 [ 1634.075945][ T29] audit: type=1326 audit(1722242649.795:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1634.146615][ T29] audit: type=1326 audit(1722242649.795:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1634.197637][ T29] audit: type=1326 audit(1722242649.795:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1634.271160][ T29] audit: type=1326 audit(1722242649.795:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1634.318295][ T8136] usb 5-1: USB disconnect, device number 26 [ 1634.339992][ T29] audit: type=1326 audit(1722242649.795:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1634.369875][ T29] audit: type=1326 audit(1722242649.795:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1634.403728][ T29] audit: type=1326 audit(1722242649.795:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1634.439333][ T29] audit: type=1326 audit(1722242649.795:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x7fc00000 [ 1634.607629][T14508] Bluetooth: hci0: command tx timeout [ 1634.802144][ T2519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1634.817791][ T2519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1634.827123][ T5293] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1634.840829][ T2519] bond0 (unregistering): Released all slaves [ 1635.059434][ T5293] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1635.080578][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.083735][T14922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.097608][T14922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.138202][T14922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.153371][ T5293] usb 2-1: config 0 descriptor?? [ 1635.179434][ T2519] hsr_slave_0: left promiscuous mode [ 1635.199080][ T2519] hsr_slave_1: left promiscuous mode [ 1635.211409][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.227309][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.228912][T14983] loop4: detected capacity change from 0 to 256 [ 1635.293489][T14983] FAT-fs (loop4): Directory bread(block 64) failed [ 1635.300563][T14983] FAT-fs (loop4): Directory bread(block 65) failed [ 1635.307589][T14983] FAT-fs (loop4): Directory bread(block 66) failed [ 1635.314210][T14983] FAT-fs (loop4): Directory bread(block 67) failed [ 1635.325080][T14983] FAT-fs (loop4): Directory bread(block 68) failed [ 1635.336182][T14983] FAT-fs (loop4): Directory bread(block 69) failed [ 1635.343159][T14983] FAT-fs (loop4): Directory bread(block 70) failed [ 1635.349989][T14983] FAT-fs (loop4): Directory bread(block 71) failed [ 1635.357186][T14983] FAT-fs (loop4): Directory bread(block 72) failed [ 1635.363993][T14983] FAT-fs (loop4): Directory bread(block 73) failed [ 1635.383913][T14977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.407279][T14977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.206743][T14508] Bluetooth: hci0: command tx timeout [ 1637.212450][ T5293] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 1637.226584][ T5293] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 1637.349596][T14987] loop4: detected capacity change from 0 to 40427 [ 1637.370257][T14987] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24) [ 1637.379640][T14987] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1637.398368][T14987] F2FS-fs (loop4): invalid crc value [ 1637.438991][T14987] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1637.584689][T14987] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1637.592381][T14987] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1637.710140][T14988] f2fs_ckpt-7:4: attempt to access beyond end of device [ 1637.710140][T14988] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1637.731834][T14988] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1637.777137][T14986] overlay: ./bus is not a directory [ 1637.794813][ T2519] team0 (unregistering): Port device team_slave_1 removed [ 1637.882552][ T2519] team0 (unregistering): Port device team_slave_0 removed [ 1639.101594][T14922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1639.109750][T14922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.148837][T14922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1639.180709][T13323] usb 2-1: USB disconnect, device number 24 [ 1639.482324][T14922] hsr_slave_0: entered promiscuous mode [ 1639.499503][T14922] hsr_slave_1: entered promiscuous mode [ 1639.523149][T14704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1639.578339][T14999] netlink: 'syz.1.2590': attribute type 7 has an invalid length. [ 1639.607289][T14999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2590'. [ 1639.914327][ T8136] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1640.127642][ T8136] usb 5-1: Using ep0 maxpacket: 32 [ 1640.152107][ T8136] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.170164][ T8136] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.207814][ T8136] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1640.228835][T13323] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1640.241799][ T8136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.241857][T14674] veth0_vlan: entered promiscuous mode [ 1640.275177][ T8136] hub 5-1:4.0: USB hub found [ 1640.460440][T13323] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1640.479984][T13323] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1640.492197][T14674] veth1_vlan: entered promiscuous mode [ 1640.506904][ T8136] hub 5-1:4.0: 2 ports detected [ 1640.511166][T13323] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1640.541280][T13323] usb 2-1: config 1 has no interface number 0 [ 1640.558935][T13323] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1640.579761][T13323] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 19717, setting to 64 [ 1640.596275][T14704] veth0_vlan: entered promiscuous mode [ 1640.615943][T13323] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1640.658978][T13323] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1640.680898][T13323] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 1640.702314][T13323] usb 2-1: Product: syz [ 1640.712202][T14704] veth1_vlan: entered promiscuous mode [ 1640.722227][T15003] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1640.735054][T13323] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1640.933766][T14674] veth0_macvtap: entered promiscuous mode [ 1640.969878][T15003] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1640.993387][T13323] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1641.051339][ T8136] hub 5-1:4.0: set hub depth failed [ 1641.075701][ T8136] usb 5-1: USB disconnect, device number 27 [ 1641.083131][T14674] veth1_macvtap: entered promiscuous mode [ 1641.164925][T14721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.326200][T13323] usb 2-1: USB disconnect, device number 25 [ 1641.335055][T13323] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1641.379585][T14704] veth0_macvtap: entered promiscuous mode [ 1641.451273][T14704] veth1_macvtap: entered promiscuous mode [ 1641.481616][T14674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.494096][T14674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.503980][T14674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.515000][T14674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.531403][T14674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.541912][T14674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.554778][T14674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1641.581040][T14922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1641.598416][T14922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1641.624128][T14674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.636133][T14674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.652071][T14674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.662764][T14674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.672732][T14674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.683444][T14674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.698913][T14674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1641.719267][T14922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1641.754197][T14922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1641.802763][T14674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.823744][T14674] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.834527][T14674] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.843705][T14674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.866057][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.894987][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.926917][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.940072][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.961384][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.976139][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.986986][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.003663][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.016300][T14704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1642.072541][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.084293][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.094323][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.105270][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.121457][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.132250][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.142770][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.153465][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.170436][T14704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1642.210318][ T8136] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1642.287929][T14704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.298756][T14704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.309212][T14704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.318051][T14704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.399015][T14721] veth0_vlan: entered promiscuous mode [ 1642.437129][ T8136] usb 5-1: Using ep0 maxpacket: 16 [ 1642.448054][ T8136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.499166][ T8136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.579860][ T8136] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1642.620218][ T8136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.668284][ T8136] usb 5-1: config 0 descriptor?? [ 1643.216384][T14721] veth1_vlan: entered promiscuous mode [ 1643.496392][ T8136] ntrig 0003:1B96:0008.0018: ignoring exceeding usage max [ 1643.526765][T12779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.544993][T12779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.555455][ T8136] ntrig 0003:1B96:0008.0018: usage index exceeded [ 1643.610126][ T8136] ntrig 0003:1B96:0008.0018: item 0 0 2 0 parsing failed [ 1643.668145][ T8136] ntrig 0003:1B96:0008.0018: parse failed [ 1643.697335][ T8136] ntrig 0003:1B96:0008.0018: probe with driver ntrig failed with error -22 [ 1643.763525][ T8136] usb 5-1: USB disconnect, device number 28 [ 1644.003151][ T2580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.030076][ T2580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.060965][T14721] veth0_macvtap: entered promiscuous mode [ 1644.187910][ T5288] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1644.208397][T14721] veth1_macvtap: entered promiscuous mode [ 1644.368874][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.397028][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.410323][ T5288] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1644.438020][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.449817][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.479195][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.490903][ T5288] usb 2-1: config 0 descriptor?? [ 1644.507051][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.527930][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.564580][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.596874][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.616653][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.656686][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.680918][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.706571][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.751767][T14721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1644.758941][T15020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.759546][T15020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.860896][T14922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1644.907369][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1644.919805][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1644.944731][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1644.977400][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1645.022000][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1645.031174][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1645.136836][ T5288] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 1645.158424][ T5288] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 1645.171857][ T5288] usb 2-1: USB disconnect, device number 26 [ 1645.273099][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.314301][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.333008][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.344980][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.368454][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.390288][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.402808][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.415952][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.428000][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.440639][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.456328][T14721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.724915][ T2519] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.951441][T14922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.977782][T14721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.027079][T14721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.067019][T14721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.081630][T14721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.197270][ T2519] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.257277][T15044] netlink: 'syz.1.2604': attribute type 12 has an invalid length. [ 1646.524514][ T2519] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.742203][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.749586][ T8136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.891794][T15060] loop3: detected capacity change from 0 to 128 [ 1646.958813][ T2519] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.076082][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.083423][T13555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.096862][ T55] Bluetooth: hci4: command tx timeout [ 1647.492139][T15064] loop3: detected capacity change from 0 to 512 [ 1647.573244][T15064] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2611: bad orphan inode 17 [ 1647.590177][T15064] ext4_test_bit(bit=16, block=4) = 1 [ 1647.595507][T15064] is_bad_inode(inode)=0 [ 1647.618774][T15064] NEXT_ORPHAN(inode)=0 [ 1647.622889][T15064] max_ino=32 [ 1647.626106][T15064] i_nlink=1 [ 1647.642925][T15064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1647.854396][T15069] Bluetooth: MGMT ver 1.23 [ 1647.859105][T15069] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 1647.892434][T15064] EXT4-fs error (device loop3): ext4_find_dest_de:2066: inode #2: block 13: comm syz.3.2611: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 1647.953957][ T2519] bridge_slave_1: left allmulticast mode [ 1647.986734][ T2519] bridge_slave_1: left promiscuous mode [ 1648.001177][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.034421][ T2519] bridge_slave_0: left allmulticast mode [ 1648.042967][ T2519] bridge_slave_0: left promiscuous mode [ 1648.049252][T14704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.061563][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.391531][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1648.391559][ T29] audit: type=1326 audit(1722242664.195:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15065 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173377299 code=0x7fc00000 [ 1648.471971][ T29] audit: type=1326 audit(1722242664.195:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15065 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0173377299 code=0x7fc00000 [ 1648.616644][ T29] audit: type=1326 audit(1722242664.405:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15065 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173377299 code=0x7fc00000 [ 1649.224919][ T55] Bluetooth: hci4: command tx timeout [ 1650.357194][ T2519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.388123][ T2519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.403398][ T2519] bond0 (unregistering): Released all slaves [ 1650.558545][T13555] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1650.571959][T15087] netlink: 'syz.3.2617': attribute type 12 has an invalid length. [ 1650.664510][T12779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.726961][T12779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.767048][T13555] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1650.775737][T13555] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.789998][T13555] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1650.802155][T13555] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.856381][T13555] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1650.875416][T13555] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1650.936956][T13555] usb 5-1: Product: syz [ 1650.941200][T13555] usb 5-1: Manufacturer: syz [ 1651.013747][T13555] cdc_wdm 5-1:1.0: skipping garbage [ 1651.027445][T13555] cdc_wdm 5-1:1.0: skipping garbage [ 1651.043241][T13555] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1651.060056][T13555] cdc_wdm 5-1:1.0: Unknown control protocol [ 1651.084000][T15099] loop1: detected capacity change from 0 to 128 [ 1651.123054][T15026] chnl_net:caif_netlink_parms(): no params data found [ 1651.164729][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1651.183617][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.236703][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1651.247732][ T55] Bluetooth: hci4: command tx timeout [ 1651.291230][ T5288] usb 5-1: USB disconnect, device number 29 [ 1651.330509][ T2519] hsr_slave_0: left promiscuous mode [ 1651.366611][ T2519] hsr_slave_1: left promiscuous mode [ 1651.389167][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.397255][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.414778][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.424740][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.437249][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1651.458167][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.465070][T15103] loop1: detected capacity change from 0 to 512 [ 1651.475118][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.508478][T15103] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2622: invalid block [ 1651.508706][T15091] loop4: detected capacity change from 0 to 64 [ 1651.526884][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1651.526940][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.549031][ T25] hub 4-1:4.0: USB hub found [ 1651.565291][ T2519] veth1_macvtap: left promiscuous mode [ 1651.572007][T15103] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #11: comm syz.1.2622: invalid indirect mapped block 4294967295 (level 1) [ 1651.572331][ T2519] veth0_macvtap: left promiscuous mode [ 1651.591091][T15103] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #11: comm syz.1.2622: invalid indirect mapped block 4294967295 (level 1) [ 1651.608930][ T2519] veth1_vlan: left promiscuous mode [ 1651.614464][ T2519] veth0_vlan: left promiscuous mode [ 1651.623227][T15103] EXT4-fs (loop1): 2 truncates cleaned up [ 1651.636445][T15103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1651.766136][ T25] hub 4-1:4.0: 2 ports detected [ 1653.330445][ T55] Bluetooth: hci4: command tx timeout [ 1653.404030][ T2519] team0 (unregistering): Port device team_slave_1 removed [ 1653.523872][ T2519] team0 (unregistering): Port device team_slave_0 removed [ 1653.580803][ T29] audit: type=1326 audit(1722242669.385:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173377299 code=0x7fc00000 [ 1653.617424][ T29] audit: type=1326 audit(1722242669.385:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0173377299 code=0x7fc00000 [ 1653.759344][ T29] audit: type=1326 audit(1722242669.565:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173377299 code=0x7fc00000 [ 1654.004140][ C1] eth0: bad gso: type: 1, size: 1408 [ 1654.098430][T15112] loop4: detected capacity change from 0 to 64 [ 1655.329877][T15105] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1655.424114][T15116] loop4: detected capacity change from 0 to 8 [ 1655.433262][T15116] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1655.454002][T15116] cramfs: unsupported filesystem features [ 1656.675092][ T25] hub 4-1:4.0: set hub depth failed [ 1656.862422][T13814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.952996][ T25] usb 4-1: USB disconnect, device number 23 [ 1657.413977][T14922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1657.633456][T15026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.822023][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.002617][T15026] bridge_slave_0: entered allmulticast mode [ 1658.024209][T15026] bridge_slave_0: entered promiscuous mode [ 1658.127481][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.142493][T15135] loop1: detected capacity change from 0 to 256 [ 1658.181553][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.233255][T15026] bridge_slave_1: entered allmulticast mode [ 1658.251372][T15135] exFAT-fs (loop1): failed to load alloc-bitmap [ 1658.289404][T15135] exFAT-fs (loop1): failed to recognize exfat type [ 1658.299632][T15026] bridge_slave_1: entered promiscuous mode [ 1658.548227][T15135] loop1: detected capacity change from 0 to 8 [ 1658.631717][T15135] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1658.704349][T15135] SQUASHFS error: Failed to read block 0x91: -5 [ 1658.736736][T15135] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1658.777556][T15135] SQUASHFS error: Unable to read inode 0x11f [ 1659.027406][T15138] loop3: detected capacity change from 0 to 40427 [ 1659.627436][T15144] loop4: detected capacity change from 0 to 40427 [ 1659.736361][T15138] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1659.744319][T15138] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1659.770613][T15144] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24) [ 1659.779146][T15144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1659.863751][T15138] F2FS-fs (loop3): invalid crc value [ 1659.875425][T15144] F2FS-fs (loop4): invalid crc value [ 1659.984501][T15138] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1660.136177][T15144] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1660.447125][T15144] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1660.454322][T15144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1660.549338][T15145] f2fs_ckpt-7:4: attempt to access beyond end of device [ 1660.549338][T15145] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1660.565054][T15138] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1660.574203][T15138] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1660.583025][T15145] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1660.584060][T15026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.608405][T15143] overlay: ./bus is not a directory [ 1660.660501][T15026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1660.690066][ T29] audit: type=1800 audit(1722242676.495:487): pid=15138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2632" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 1661.199669][T15026] team0: Port device team_slave_0 added [ 1661.285149][T15026] team0: Port device team_slave_1 added [ 1661.416088][T15158] loop2: detected capacity change from 0 to 512 [ 1661.499988][ T29] audit: type=1326 audit(1722242677.295:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccab377299 code=0x0 [ 1661.628525][T15026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.646647][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.665214][T15158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.685856][T15158] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1661.688002][T15026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.729761][T15026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.751645][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.826476][T15026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1661.962524][T14922] veth0_vlan: entered promiscuous mode [ 1662.175503][T14721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.279518][T15026] hsr_slave_0: entered promiscuous mode [ 1662.312089][T15026] hsr_slave_1: entered promiscuous mode [ 1662.319449][T15026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1662.336678][T15026] Cannot create hsr debugfs directory [ 1662.442497][T14922] veth1_vlan: entered promiscuous mode [ 1662.513725][T15168] loop2: detected capacity change from 0 to 512 [ 1662.582176][T15168] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2638: invalid block [ 1662.657953][T15168] EXT4-fs error (device loop2): ext4_free_branches:1027: inode #11: comm syz.2.2638: invalid indirect mapped block 4294967295 (level 1) [ 1662.685424][T15168] EXT4-fs error (device loop2): ext4_free_branches:1027: inode #11: comm syz.2.2638: invalid indirect mapped block 4294967295 (level 1) [ 1662.741630][T15168] EXT4-fs (loop2): 2 truncates cleaned up [ 1662.790797][T15168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1663.104661][ T55] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1663.225147][T15173] loop1: detected capacity change from 0 to 32768 [ 1663.234464][T14922] veth0_macvtap: entered promiscuous mode [ 1663.260347][T15173] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2640 (15173) [ 1663.324359][T15173] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1663.338433][T15173] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 1663.347987][T15173] BTRFS info (device loop1): using free-space-tree [ 1663.394929][T14922] veth1_macvtap: entered promiscuous mode [ 1663.498965][T14721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.003311][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.038069][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.076601][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.117066][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.162062][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.185588][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.203078][T13814] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1664.236623][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.262841][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.276582][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.292630][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.314412][T14922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1664.339582][T14704] syz-executor: attempt to access beyond end of device [ 1664.339582][T14704] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1664.371683][T14704] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1664.442479][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.486892][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.508119][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.522467][T13323] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1664.543161][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.566713][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.587013][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.604812][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.631851][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.652901][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.670389][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 1664.673879][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.731717][T13323] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1664.745042][T13323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.763790][T14922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.778261][T13323] usb 5-1: config 0 descriptor?? [ 1664.828414][T14922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.840608][T14922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.872053][T14922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.911856][T14922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.055514][T15192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.128322][T15192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.321295][T13323] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 1665.357003][T13323] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1665.408798][T13323] usb 5-1: USB disconnect, device number 30 [ 1665.417203][T15016] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1665.669842][T14212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.672792][T15016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.686918][T14212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.716761][T15016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.757131][T15016] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1665.766323][T15016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.822203][T15016] usb 3-1: config 0 descriptor?? [ 1665.895093][T14212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.923073][T14212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.013971][T15205] can0: slcan on pts0. [ 1666.298003][T15016] pantherlord 0003:0F30:0111.0019: item fetching failed at offset 6/7 [ 1666.330451][T15026] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1666.344318][T15016] pantherlord 0003:0F30:0111.0019: parse failed [ 1666.347845][T15206] can0 (unregistered): slcan off pts0. [ 1666.385302][T15016] pantherlord 0003:0F30:0111.0019: probe with driver pantherlord failed with error -22 [ 1666.397738][T15026] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1666.506612][T15026] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1666.521967][ T8320] usb 3-1: USB disconnect, device number 17 [ 1666.573413][T15026] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1666.712477][T15215] loop0: detected capacity change from 0 to 512 [ 1666.720480][T15216] loop4: detected capacity change from 0 to 8 [ 1666.748292][T15216] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1666.796625][T15216] cramfs: unsupported filesystem features [ 1669.387299][T15026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.436071][T15213] loop0: detected capacity change from 0 to 512 [ 1669.467294][T15213] EXT4-fs: Ignoring removed bh option [ 1669.536016][T15026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1669.615081][T15213] EXT4-fs (loop0): 1 truncate cleaned up [ 1669.670502][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.677801][ T5288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.754584][T15213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1669.834029][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.841381][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.929565][T15213] EXT4-fs error (device loop0): ext4_find_dest_de:2066: inode #2: block 13: comm syz.0.2431: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 1670.348817][T15248] loop2: detected capacity change from 0 to 128 [ 1670.457032][T15248] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1670.483726][T15250] loop1: detected capacity change from 0 to 2048 [ 1670.496609][T15250] EXT4-fs: Ignoring removed mblk_io_submit option [ 1670.625311][T15250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1670.625596][T15248] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1670.938523][T15249] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.2656: bg 0: block 234: padding at end of block bitmap is not set [ 1670.980336][T15248] overlayfs: failed to resolve './file0': -2 [ 1671.035177][T15249] EXT4-fs (loop1): Remounting filesystem read-only [ 1671.066996][T15249] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 18, error -5) [ 1671.209375][T14721] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1671.299770][T13814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1671.567056][T15241] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1671.712565][T14922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.076809][T15026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1672.087601][T13555] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1672.319948][T13555] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1672.359637][T13555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.433507][T13555] usb 4-1: config 0 descriptor?? [ 1672.749303][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.793371][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.999228][ T55] Bluetooth: hci5: link tx timeout [ 1673.005125][ T55] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1673.053058][T13555] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 1673.116956][T13555] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1673.187690][T13555] usb 4-1: USB disconnect, device number 24 [ 1673.280716][T15280] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2665'. [ 1673.432293][T15282] can0: slcan on pts0. [ 1673.607259][T15284] can0 (unregistered): slcan off pts0. [ 1673.992806][T15293] loop1: detected capacity change from 0 to 256 [ 1674.062761][T15026] veth0_vlan: entered promiscuous mode [ 1674.468034][T15026] veth1_vlan: entered promiscuous mode [ 1675.112754][T14508] Bluetooth: hci5: command 0x0406 tx timeout [ 1676.047605][T15305] loop3: detected capacity change from 0 to 2048 [ 1676.070677][T15305] EXT4-fs: Ignoring removed mblk_io_submit option [ 1676.245872][T15305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1676.378591][T15026] veth0_macvtap: entered promiscuous mode [ 1677.477114][T15026] veth1_macvtap: entered promiscuous mode [ 1677.666302][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1677.727093][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.738660][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1677.797455][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.826563][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1677.886954][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.927362][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1677.968568][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.030753][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1678.086607][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.099387][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1678.110054][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.124354][T15026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1678.163550][T14704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1678.692740][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.784995][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.839152][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.881278][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.899655][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.976787][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.057055][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.115665][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.125664][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.136174][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.146096][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.160728][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.172298][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.182876][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.201665][T15026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1679.292101][T15026] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.681348][T15336] loop2: detected capacity change from 0 to 32768 [ 1679.707627][T15026] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.754927][T15336] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2681 (15336) [ 1679.778569][T15026] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.787745][T15336] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1679.798436][T15336] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 1679.804222][T15026] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.807735][T15336] BTRFS info (device loop2): using free-space-tree [ 1680.042050][T15342] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2678'. [ 1680.348849][T15352] can0: slcan on pts0. [ 1680.455986][T14721] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1680.587724][T15355] can0 (unregistered): slcan off pts0. [ 1680.939291][T11343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.978818][T11343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.236986][ T2546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.245012][ T2546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.426782][T13555] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1681.586494][ T55] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 1681.660590][T13555] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1681.744383][T13555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1681.806098][T13555] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1681.852360][T13555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.880880][T15372] loop0: detected capacity change from 0 to 256 [ 1681.891405][T13555] usb 2-1: config 0 descriptor?? [ 1682.198090][T13555] ath6kl: Failed to submit usb control message: -71 [ 1682.208505][T13555] ath6kl: unable to send the bmi data to the device: -71 [ 1682.215919][T13555] ath6kl: Unable to send get target info: -71 [ 1682.244517][T13555] ath6kl: Failed to init ath6kl core: -71 [ 1683.497935][T13555] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1683.529002][T13555] usb 2-1: USB disconnect, device number 27 [ 1684.091655][T15386] loop4: detected capacity change from 0 to 64 [ 1684.263367][T15386] syz.4.2691: attempt to access beyond end of device [ 1684.263367][T15386] loop4: rw=34817, sector=39, nr_sectors = 114 limit=64 [ 1685.278374][T15393] loop4: detected capacity change from 0 to 32768 [ 1685.612312][T15393] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2695 (15393) [ 1686.106751][T15393] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1686.120369][T15393] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 1686.129849][T15393] BTRFS info (device loop4): using free-space-tree [ 1687.837188][T15393] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1687.842204][T15393] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1687.868547][T15393] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1687.878378][T15393] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1687.888170][T15393] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1687.898737][T15393] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1687.919344][T15393] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1687.929967][T15393] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1687.940818][T15393] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1687.951508][T15393] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1688.008602][T15393] BTRFS error (device loop4): open_ctree failed [ 1688.331145][T15429] loop5: detected capacity change from 0 to 512 [ 1688.532412][T15429] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.2701: bg 0: block 393: padding at end of block bitmap is not set [ 1688.667156][T15429] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1688.697619][T15429] EXT4-fs (loop5): 2 truncates cleaned up [ 1688.705818][T15429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1688.937170][ T935] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1689.052754][T15026] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.200446][ T935] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1689.222538][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1689.249108][ T935] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1689.275973][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.306325][ T935] usb 1-1: config 0 descriptor?? [ 1689.507176][T15442] syz.4.2702: attempt to access beyond end of device [ 1689.507176][T15442] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1689.551640][ T935] ath6kl: Failed to submit usb control message: -71 [ 1689.558464][ T935] ath6kl: unable to send the bmi data to the device: -71 [ 1689.565526][ T935] ath6kl: Unable to send get target info: -71 [ 1689.583750][ T935] ath6kl: Failed to init ath6kl core: -71 [ 1689.592482][ T935] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1689.611060][T15442] XFS (loop4): SB validate failed with error -5. [ 1689.677574][ T935] usb 1-1: USB disconnect, device number 38 [ 1689.771926][ T43] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1691.342182][ T1109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.577159][ T1109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.834858][T15469] loop3: detected capacity change from 0 to 256 [ 1691.871254][ T1109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.096724][ T25] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1692.109151][T15469] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1692.250357][ T1109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.431647][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.444767][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.454761][ T25] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1693.464126][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.477281][ T25] usb 5-1: config 0 descriptor?? [ 1695.056991][T15479] loop1: detected capacity change from 0 to 256 [ 1695.326777][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 1695.364036][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1695.418640][ T25] usb 5-1: USB disconnect, device number 31 [ 1695.530007][ T1109] bridge_slave_1: left allmulticast mode [ 1695.544078][ T1109] bridge_slave_1: left promiscuous mode [ 1695.577159][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.712542][ T1109] bridge_slave_0: left allmulticast mode [ 1695.737079][ T1109] bridge_slave_0: left promiscuous mode [ 1695.760683][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.976461][T15496] loop1: detected capacity change from 0 to 128 [ 1696.003383][T14508] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1696.034439][T14508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1696.050206][T14508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1696.275014][T14508] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1696.318851][T14508] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1696.356784][T14508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1696.704895][T15016] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1696.980188][T15496] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1697.043997][T15496] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1697.154973][T15016] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1697.204632][T15016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1697.261013][T15016] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1697.302011][T15016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.344543][T15016] usb 4-1: config 0 descriptor?? [ 1697.520914][T13814] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1697.660064][T15016] ath6kl: Failed to submit usb control message: -71 [ 1697.699155][T15016] ath6kl: unable to send the bmi data to the device: -71 [ 1697.706264][T15016] ath6kl: Unable to send get target info: -71 [ 1697.736670][T15016] ath6kl: Failed to init ath6kl core: -71 [ 1697.795982][T15016] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1697.867012][T15016] usb 4-1: USB disconnect, device number 25 [ 1698.529316][T14508] Bluetooth: hci1: command tx timeout [ 1700.559562][T14508] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 1700.629190][T14508] Bluetooth: hci1: command tx timeout [ 1700.696730][ T5288] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1700.771504][T15546] loop0: detected capacity change from 0 to 256 [ 1701.230054][ T5288] usb 4-1: Using ep0 maxpacket: 16 [ 1701.245001][ T5288] usb 4-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 1701.276717][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.284804][ T5288] usb 4-1: Product: syz [ 1701.305536][ T5288] usb 4-1: Manufacturer: syz [ 1702.206645][ T5288] usb 4-1: SerialNumber: syz [ 1702.215207][ T5288] usb 4-1: config 0 descriptor?? [ 1702.232042][ T5288] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 1702.247167][ T5288] pctv452e: pctv452e_power_ctrl: 1 [ 1702.247167][ T5288] [ 1702.254741][ T5288] usb 4-1: selecting invalid altsetting 3 [ 1702.262857][ T5288] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1702.262857][ T5288] [ 1702.276560][ T5288] dvb-usb: bulk message failed: -22 (5/0) [ 1702.349607][ T5288] dvb-usb: PCTV HDTV USB error while loading driver (-22) [ 1702.511064][T15555] loop1: detected capacity change from 0 to 128 [ 1702.589311][T15555] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1702.669325][T15555] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1702.691889][T14508] Bluetooth: hci1: command tx timeout [ 1702.717790][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.787974][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.841542][ T1109] bond0 (unregistering): Released all slaves [ 1702.937598][T13814] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1702.958401][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2741'. [ 1703.309783][T15569] ipt_rpfilter: unknown options [ 1704.766861][T14508] Bluetooth: hci1: command tx timeout [ 1704.818941][T15585] can0: slcan on pts0. [ 1705.699721][T15587] can0 (unregistered): slcan off pts0. [ 1705.780009][T15599] snd_dummy snd_dummy.0: control 0:1025:0:syz1:4 is already present [ 1705.793048][T15596] loop0: detected capacity change from 0 to 512 [ 1705.821818][T15596] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1705.832754][ T1109] hsr_slave_0: left promiscuous mode [ 1705.852519][ T1109] hsr_slave_1: left promiscuous mode [ 1705.857736][T15596] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 1705.901075][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.912935][ T5288] usb 4-1: USB disconnect, device number 26 [ 1705.919371][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.944882][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.963120][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.021915][T15604] loop3: detected capacity change from 0 to 128 [ 1706.055345][T15604] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1706.070619][ T1109] veth1_macvtap: left promiscuous mode [ 1706.085324][ T1109] veth0_macvtap: left promiscuous mode [ 1706.090771][T15604] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1706.093697][ T1109] veth1_vlan: left promiscuous mode [ 1706.123084][ T1109] veth0_vlan: left promiscuous mode [ 1706.154184][T15604] ------------[ cut here ]------------ [ 1706.159764][T15604] Looking for class "&ei->i_data_sem" with key __key.0, but found a different class "&ei->i_data_sem" with the same key [ 1706.172435][T15604] WARNING: CPU: 1 PID: 15604 at kernel/locking/lockdep.c:931 look_up_lock_class+0x133/0x140 [ 1706.182606][T15604] Modules linked in: [ 1706.186532][T15604] CPU: 1 UID: 0 PID: 15604 Comm: syz.3.2757 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1706.197348][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1706.207430][T15604] RIP: 0010:look_up_lock_class+0x133/0x140 [ 1706.213308][T15604] Code: c7 c7 20 d6 4c 8b e8 fc 77 3b f6 90 0f 0b 90 90 90 31 db eb be c6 05 00 bd e9 04 01 90 48 c7 c7 40 d9 4c 8b e8 de 77 3b f6 90 <0f> 0b 90 90 e9 62 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 1706.232972][T15604] RSP: 0018:ffffc9000486f848 EFLAGS: 00010082 [ 1706.239077][T15604] RAX: 0000000000000000 RBX: ffffffff946f4770 RCX: ffffc9000aed6000 [ 1706.247086][T15604] RDX: 0000000000040000 RSI: ffffffff814e0cc6 RDI: 0000000000000001 [ 1706.255095][T15604] RBP: ffffffff94feae41 R08: 0000000000000001 R09: 0000000000000000 [ 1706.263102][T15604] R10: 0000000000000000 R11: 20676e696b6f6f4c R12: ffff888057b51678 [ 1706.271107][T15604] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff94f1f120 [ 1706.279117][T15604] FS: 00007f64391766c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1706.288101][T15604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1706.294720][T15604] CR2: 0000001b32704ff8 CR3: 000000004a30a000 CR4: 0000000000350ef0 [ 1706.302730][T15604] Call Trace: [ 1706.306032][T15604] [ 1706.308985][T15604] ? show_regs+0x8c/0xa0 [ 1706.313381][T15604] ? __warn+0xe5/0x3c0 [ 1706.317507][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.323197][T15604] ? look_up_lock_class+0x133/0x140 [ 1706.328462][T15604] ? report_bug+0x3c0/0x580 [ 1706.333019][T15604] ? handle_bug+0x3d/0x70 [ 1706.337394][T15604] ? exc_invalid_op+0x17/0x50 [ 1706.342120][T15604] ? asm_exc_invalid_op+0x1a/0x20 [ 1706.347206][T15604] ? __warn_printk+0x1a6/0x350 [ 1706.352030][T15604] ? look_up_lock_class+0x133/0x140 [ 1706.357294][T15604] ? look_up_lock_class+0x132/0x140 [ 1706.362558][T15604] register_lock_class+0xb1/0x1230 [ 1706.367737][T15604] ? __pfx_mark_lock+0x10/0x10 [ 1706.372561][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.378241][T15604] ? register_lock_class+0xb1/0x1230 [ 1706.383596][T15604] ? __pfx_register_lock_class+0x10/0x10 [ 1706.389308][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.395004][T15604] ? truncate_inode_pages_range+0x622/0xe80 [ 1706.400954][T15604] ? __pfx_register_lock_class+0x10/0x10 [ 1706.406672][T15604] __lock_acquire+0x135/0x3cb0 [ 1706.411518][T15604] ? __pfx___lock_acquire+0x10/0x10 [ 1706.416789][T15604] lock_acquire+0x1b1/0x560 [ 1706.421358][T15604] ? ext4_double_down_write_data_sem+0x42/0x80 [ 1706.427569][T15604] ? __pfx_lock_acquire+0x10/0x10 [ 1706.432664][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.438359][T15604] ? __pfx___might_resched+0x10/0x10 [ 1706.443694][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.449399][T15604] down_write_nested+0x97/0x210 [ 1706.454296][T15604] ? ext4_double_down_write_data_sem+0x42/0x80 [ 1706.460507][T15604] ? __pfx_down_write_nested+0x10/0x10 [ 1706.466009][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.471694][T15604] ? ext4_journal_check_start+0x1b4/0x2b0 [ 1706.477453][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.483129][T15604] ext4_double_down_write_data_sem+0x42/0x80 [ 1706.489152][T15604] __ext4_ioctl+0x2a13/0x4640 [ 1706.493874][T15604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1706.499907][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.505585][T15604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1706.511535][T15604] ? __pfx___ext4_ioctl+0x10/0x10 [ 1706.516622][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.522300][T15604] ? do_vfs_ioctl+0x515/0x1ad0 [ 1706.527118][T15604] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1706.532221][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.537897][T15604] ? __fget_files+0x256/0x400 [ 1706.542609][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.548291][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.553974][T15604] ? __pfx_ext4_ioctl+0x10/0x10 [ 1706.558869][T15604] __x64_sys_ioctl+0x196/0x220 [ 1706.563664][T15604] do_syscall_64+0xcd/0x250 [ 1706.568196][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.574122][T15604] RIP: 0033:0x7f6438377299 [ 1706.578553][T15604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1706.598198][T15604] RSP: 002b:00007f6439176048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.606644][T15604] RAX: ffffffffffffffda RBX: 00007f6438505f80 RCX: 00007f6438377299 [ 1706.614637][T15604] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 1706.622633][T15604] RBP: 00007f64383e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1706.630632][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1706.638626][T15604] R13: 000000000000000b R14: 00007f6438505f80 R15: 00007ffde7dec968 [ 1706.646668][T15604] [ 1706.649705][T15604] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1706.656998][T15604] CPU: 1 UID: 0 PID: 15604 Comm: syz.3.2757 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1706.667799][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1706.677872][T15604] Call Trace: [ 1706.681164][T15604] [ 1706.684108][T15604] dump_stack_lvl+0x3d/0x1f0 [ 1706.688744][T15604] panic+0x6f5/0x7a0 [ 1706.692687][T15604] ? __pfx_panic+0x10/0x10 [ 1706.697147][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.702831][T15604] ? show_trace_log_lvl+0x363/0x500 [ 1706.708096][T15604] ? look_up_lock_class+0x133/0x140 [ 1706.713381][T15604] check_panic_on_warn+0xab/0xb0 [ 1706.718364][T15604] __warn+0xf1/0x3c0 [ 1706.722299][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.727971][T15604] ? look_up_lock_class+0x133/0x140 [ 1706.733216][T15604] report_bug+0x3c0/0x580 [ 1706.737587][T15604] handle_bug+0x3d/0x70 [ 1706.741806][T15604] exc_invalid_op+0x17/0x50 [ 1706.746353][T15604] asm_exc_invalid_op+0x1a/0x20 [ 1706.751247][T15604] RIP: 0010:look_up_lock_class+0x133/0x140 [ 1706.757120][T15604] Code: c7 c7 20 d6 4c 8b e8 fc 77 3b f6 90 0f 0b 90 90 90 31 db eb be c6 05 00 bd e9 04 01 90 48 c7 c7 40 d9 4c 8b e8 de 77 3b f6 90 <0f> 0b 90 90 e9 62 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 1706.776779][T15604] RSP: 0018:ffffc9000486f848 EFLAGS: 00010082 [ 1706.782876][T15604] RAX: 0000000000000000 RBX: ffffffff946f4770 RCX: ffffc9000aed6000 [ 1706.790872][T15604] RDX: 0000000000040000 RSI: ffffffff814e0cc6 RDI: 0000000000000001 [ 1706.798869][T15604] RBP: ffffffff94feae41 R08: 0000000000000001 R09: 0000000000000000 [ 1706.806869][T15604] R10: 0000000000000000 R11: 20676e696b6f6f4c R12: ffff888057b51678 [ 1706.814879][T15604] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff94f1f120 [ 1706.822889][T15604] ? __warn_printk+0x1a6/0x350 [ 1706.827709][T15604] ? look_up_lock_class+0x132/0x140 [ 1706.832961][T15604] register_lock_class+0xb1/0x1230 [ 1706.838123][T15604] ? __pfx_mark_lock+0x10/0x10 [ 1706.842931][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.848606][T15604] ? register_lock_class+0xb1/0x1230 [ 1706.853943][T15604] ? __pfx_register_lock_class+0x10/0x10 [ 1706.859638][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.865316][T15604] ? truncate_inode_pages_range+0x622/0xe80 [ 1706.871240][T15604] ? __pfx_register_lock_class+0x10/0x10 [ 1706.876931][T15604] __lock_acquire+0x135/0x3cb0 [ 1706.881756][T15604] ? __pfx___lock_acquire+0x10/0x10 [ 1706.887007][T15604] lock_acquire+0x1b1/0x560 [ 1706.891553][T15604] ? ext4_double_down_write_data_sem+0x42/0x80 [ 1706.897750][T15604] ? __pfx_lock_acquire+0x10/0x10 [ 1706.902827][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.908515][T15604] ? __pfx___might_resched+0x10/0x10 [ 1706.913827][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.919512][T15604] down_write_nested+0x97/0x210 [ 1706.924391][T15604] ? ext4_double_down_write_data_sem+0x42/0x80 [ 1706.930585][T15604] ? __pfx_down_write_nested+0x10/0x10 [ 1706.936076][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.941750][T15604] ? ext4_journal_check_start+0x1b4/0x2b0 [ 1706.947505][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.953182][T15604] ext4_double_down_write_data_sem+0x42/0x80 [ 1706.959211][T15604] __ext4_ioctl+0x2a13/0x4640 [ 1706.963938][T15604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1706.969972][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.975649][T15604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1706.981595][T15604] ? __pfx___ext4_ioctl+0x10/0x10 [ 1706.986662][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.992336][T15604] ? do_vfs_ioctl+0x515/0x1ad0 [ 1706.997152][T15604] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1707.002256][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.007945][T15604] ? __fget_files+0x256/0x400 [ 1707.012669][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.018350][T15604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.024025][T15604] ? __pfx_ext4_ioctl+0x10/0x10 [ 1707.028925][T15604] __x64_sys_ioctl+0x196/0x220 [ 1707.033719][T15604] do_syscall_64+0xcd/0x250 [ 1707.038253][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.044180][T15604] RIP: 0033:0x7f6438377299 [ 1707.048614][T15604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1707.068260][T15604] RSP: 002b:00007f6439176048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1707.076711][T15604] RAX: ffffffffffffffda RBX: 00007f6438505f80 RCX: 00007f6438377299 [ 1707.084797][T15604] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 1707.092784][T15604] RBP: 00007f64383e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1707.100772][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1707.108762][T15604] R13: 000000000000000b R14: 00007f6438505f80 R15: 00007ffde7dec968 [ 1707.116769][T15604] [ 1707.120029][T15604] Kernel Offset: disabled [ 1707.124358][T15604] Rebooting in 86400 seconds..