last executing test programs: 4.295410252s ago: executing program 2 (id=3047): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x7, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x0, 0x0]}}, &(0x7f0000000100)=""/179, 0x33, 0xb3, 0x1, 0xfffff262}, 0x28) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r7, 0x0) close_range(r5, r5, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x15, 0x0, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000195c0)={'ip6tnl0\x00', &(0x7f0000019540)={'syztnl0\x00', 0x0, 0x29, 0x6a, 0x61, 0x7, 0x1, @empty, @private2, 0x8000, 0x7, 0x6, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r0}, 0x94) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)="01000000", 0x4}], 0x1) 4.04540822s ago: executing program 2 (id=3049): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfa, {{@in6=@private0, @in6=@private0, 0x0, 0x7, 0x1, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffff9, 0x9}, {0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x4000050) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r1, 0xffffffffffffffff, 0x0, 0x400000000000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 3.996521552s ago: executing program 0 (id=3051): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xcd7079ef71458622}, 0x8c0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0x2, 0xfdf00002}, {0x16, 0x0, 0x6}]}, 0x10) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="f2435f0100088040000000630800d494", 0x10, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 3.942015734s ago: executing program 3 (id=3052): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x1, 0x20000044) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c01", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d36726567", @ANYRES32, @ANYBLOB="400001801400020070696d36"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.886948065s ago: executing program 2 (id=3053): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) truncate(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) socketpair(0xa, 0x6, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000a8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000008400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.74692124s ago: executing program 1 (id=3054): syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) 3.74661874s ago: executing program 0 (id=3055): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 3.668528182s ago: executing program 3 (id=3056): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x8d) acct(&(0x7f0000000040)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) memfd_create(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.512991317s ago: executing program 0 (id=3057): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x7, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x0, 0x0]}}, &(0x7f0000000100)=""/179, 0x33, 0xb3, 0x1, 0xfffff262}, 0x28) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r7, 0x0) close_range(r5, r5, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x15, 0x0, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000195c0)={'ip6tnl0\x00', &(0x7f0000019540)={'syztnl0\x00', 0x0, 0x29, 0x6a, 0x61, 0x7, 0x1, @empty, @private2, 0x8000, 0x7, 0x6, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r0}, 0x94) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)="01000000", 0x4}], 0x1) 3.177438588s ago: executing program 0 (id=3058): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) listen(0xffffffffffffffff, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}) 2.313804096s ago: executing program 3 (id=3059): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000006800), 0x0, 0x448c0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x72b6, 0x4) 2.100762162s ago: executing program 3 (id=3060): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.047207224s ago: executing program 1 (id=3061): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfa, {{@in6=@private0, @in6=@private0, 0x0, 0x7, 0x1, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffff9, 0x9}, {0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x4000050) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r1, 0xffffffffffffffff, 0x0, 0x400000000000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1.906963819s ago: executing program 3 (id=3062): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.906021449s ago: executing program 1 (id=3063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000800), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000c80)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64=r1, @ANYBLOB="b8c2befa5b0c9e63e075df3e5bc3c51e29786fa5d445328eadfbe58d12bad4be3e0fb9fd3c11b7bbd7b3ec38d3ffa8503c5877cc4444806c77a511975596df", @ANYRESHEX, @ANYRESHEX], 0x0, 0x1d3, &(0x7f00000008c0)="$eJzsmb2vEkEUxc/M7oPnizGxsbDRxJeIEZbdRQ0NBSb2JuBXJ5GVoAsYWBMgsSA2NpYWJrb+AxYWVBZ2drZaqImJhZTWa2YYdsflQ4ghkrz7S5g9M3Nn5s4FTgEgCOLI8u3rry/PrxarWQDHcYi0Gv9hxDFci//88vHFF6Vrr958ev2+feLJOLkfAxCG659vAnhXNhCofhj+ufpQPavgkb4BjgtK3wKDpfRdcNxU2gPDHaUfaLpzTAnfs+51/Pr9pu/ZonFE44qmkMxvMmKoA9hX+TFtvjcYPqz5vtdNir1wds7c1KbiL/UzJ2WOklY/8X7dfvZ0JPqz2tha/RxwOEoXwFBRuog0LMuKS6Ld/7QZ72+sc/9dECdzq2KyO5Ahif8gWHJEfKGjkVOT8Yf5Vd+3mdjZ7V5ZGheAuamPB/+2c0qZwMKY2D+F5Z7X/MmEGflHPmg9yvcGw1yzVWt4Da/tuoUr9iXbvuzmpRFN2xX+ty/96UDbf29JbIql0K8FQdfpA0HXifrutNUct/K281Ou4dL/ODLnpnuIj4q8dnrxGUy9uHwKlTGWJk8QBEEQBEEQBEEQBEEQBLERZ8Dkr6Dqj6pwCe51Gf07AAD//8+DaM4=") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300d0000000080211000001080211000000505050"], 0x44}}, 0x0) 1.577373909s ago: executing program 1 (id=3064): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x1, 0x20000044) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c01", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d36726567", @ANYRES32, @ANYBLOB="400001801400020070696d36"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.526208301s ago: executing program 2 (id=3065): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xcd7079ef71458622}, 0x8c0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0x2, 0xfdf00002}, {0x16, 0x0, 0x6}]}, 0x10) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="f2435f0100088040000000630800d494", 0x10, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.369743646s ago: executing program 1 (id=3066): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x7, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x0, 0x0]}}, &(0x7f0000000100)=""/179, 0x33, 0xb3, 0x1, 0xfffff262}, 0x28) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(0x0, 0x8fff5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r7, 0x0) close_range(r5, r5, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x15, 0x0, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000195c0)={'ip6tnl0\x00', &(0x7f0000019540)={'syztnl0\x00', 0x0, 0x29, 0x6a, 0x61, 0x7, 0x1, @empty, @private2, 0x8000, 0x7, 0x6, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r0}, 0x94) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)="01000000", 0x4}], 0x1) 1.346944157s ago: executing program 2 (id=3067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x8d) acct(&(0x7f0000000040)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) memfd_create(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.042940296s ago: executing program 0 (id=3068): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000006800), 0x0, 0x448c0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x72b6, 0x4) 949.23963ms ago: executing program 1 (id=3069): syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) 775.010125ms ago: executing program 0 (id=3070): socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x840) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x7f, 0x0, 0x8}}}}}}, 0x0) 78.284558ms ago: executing program 2 (id=3071): setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close(r0) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), 0x0}, 0x20) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 0s ago: executing program 3 (id=3072): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @none, 0x2}, 0xa) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001e40)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@host, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file1\x00', 0x2200802, &(0x7f0000000040)={[{@ikeep}]}, 0x1, 0xbad7, &(0x7f000001c300)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB='namecase=1,keep_last_dots,uid=', @ANYRESHEX=0xee00, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYRESDEC], 0x1, 0x1533, &(0x7f0000006800)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x81}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) kernel console output (not intermixed with test programs): p: entered promiscuous mode [ 1192.334581][T14595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.387683][T14595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.410424][ T5877] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1193.746300][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.755311][ T5877] usb 4-1: Product: syz [ 1193.759596][ T5877] usb 4-1: Manufacturer: syz [ 1193.764234][ T5877] usb 4-1: SerialNumber: syz [ 1193.783400][T14595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.800283][T14595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.200430][T14595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.255237][T14595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.350490][T14595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.393306][T14595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.440553][T14595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.483612][T14595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.551147][T14595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.588970][T14595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.619780][T14595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.647960][T14595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.073225][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.113718][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.292828][T10799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.338125][T10799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.396187][T14883] loop1: detected capacity change from 0 to 32768 [ 1196.080515][ T5766] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1196.733198][T14912] loop2: detected capacity change from 0 to 65536 [ 1196.740825][T14912] XFS: ikeep mount option is deprecated. [ 1196.772249][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1196.823907][T14912] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1196.940217][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1196.991976][T14912] XFS (loop2): Ending clean mount [ 1197.008994][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1197.045788][ T5778] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1197.061406][T14926] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1197.097298][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1197.107116][ T5778] XFS (loop2): Unmount and run xfs_repair [ 1197.147838][ T5778] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1197.155336][ T5778] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1197.155553][T14926] xfs: Unknown parameter 'utf8' [ 1197.168248][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1197.234261][ T5778] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1197.282464][ T5877] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1197.293854][ T5778] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1197.335598][ T5778] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1197.346877][ T5877] usb 4-1: USB disconnect, device number 23 [ 1197.353339][ T5778] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1197.364584][ T5778] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1197.384874][ T5778] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1197.394294][ T5778] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1197.460503][T14912] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1197.471926][T14932] loop3: detected capacity change from 0 to 65 [ 1197.472409][T14912] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1197.492859][T14912] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1197.519230][T14932] BFS-fs: bfs_iget(): Bad inode number loop3:00000002 [ 1199.296094][T14595] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1199.586538][T10318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1199.608832][T10318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1199.634255][T10318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1199.660936][T10318] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1199.672466][T10318] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1199.680402][T10318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1200.028630][ T3509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.087118][T14943] syzkaller0: entered promiscuous mode [ 1200.093806][T14943] syzkaller0: entered allmulticast mode [ 1200.262462][ T3509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.502540][ T3509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.677959][ T3509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.974396][T14956] loop2: detected capacity change from 0 to 32768 [ 1201.141377][T14956] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1201.208942][ T5877] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1201.296934][T14956] XFS (loop2): Ending clean mount [ 1201.362744][T14942] chnl_net:caif_netlink_parms(): no params data found [ 1201.599261][ T5877] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1201.688229][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.735741][ T5877] usb 1-1: Product: syz [ 1201.741214][T14595] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1201.756096][ T5877] usb 1-1: Manufacturer: syz [ 1201.767575][ T5877] usb 1-1: SerialNumber: syz [ 1201.799145][T10318] Bluetooth: hci2: command tx timeout [ 1202.213532][T14942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.240050][T14942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.268185][T14942] bridge_slave_0: entered allmulticast mode [ 1202.283370][T14942] bridge_slave_0: entered promiscuous mode [ 1202.316754][T14942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.359816][T14942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.381988][T14942] bridge_slave_1: entered allmulticast mode [ 1202.387000][T14993] loop3: detected capacity change from 0 to 65 [ 1202.415186][T14942] bridge_slave_1: entered promiscuous mode [ 1202.419376][T14993] BFS-fs: bfs_iget(): Bad inode number loop3:00000002 [ 1203.997781][T10318] Bluetooth: hci2: command tx timeout [ 1204.591887][T14942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.605692][T14942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.668629][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'. [ 1204.926145][T15001] loop3: detected capacity change from 0 to 4096 [ 1204.959211][ T5877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1205.037867][ T5877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1205.053050][T15001] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1205.113649][ T5877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1205.125646][T15001] NILFS (loop3): trying rollback from an earlier position [ 1205.141734][T14942] team0: Port device team_slave_0 added [ 1205.156556][ T5877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1205.194457][ T5877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1205.236521][T15001] NILFS (loop3): recovery complete [ 1205.249821][T15009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1205.289598][ T5877] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1205.345643][ T5877] usb 1-1: USB disconnect, device number 20 [ 1205.413653][T14942] team0: Port device team_slave_1 added [ 1205.552064][T15017] syzkaller0: entered promiscuous mode [ 1205.557629][T15017] syzkaller0: entered allmulticast mode [ 1205.757993][T14942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.775288][T14942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.806441][T14942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.856648][T14942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.865195][T14942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.899155][T14942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.038112][T10318] Bluetooth: hci2: command tx timeout [ 1206.055904][T14942] hsr_slave_0: entered promiscuous mode [ 1206.066059][T14942] hsr_slave_1: entered promiscuous mode [ 1206.559870][T15040] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1206.571371][T15040] batman_adv: batadv0: Adding interface: wlan0 [ 1206.579804][T15040] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.606025][T15040] batman_adv: batadv0: Interface activated: wlan0 [ 1206.632358][ T3509] hsr_slave_0: left promiscuous mode [ 1206.653572][ T3509] hsr_slave_1: left promiscuous mode [ 1206.666655][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.694507][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.722513][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.733167][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.741520][ T3509] bridge_slave_1: left allmulticast mode [ 1206.757657][ T3509] bridge_slave_1: left promiscuous mode [ 1206.758461][ T5877] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1206.784046][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.820259][ T3509] bridge_slave_0: left allmulticast mode [ 1206.830356][ T3509] bridge_slave_0: left promiscuous mode [ 1206.838379][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.869511][ T3509] veth1_macvtap: left promiscuous mode [ 1206.875047][ T3509] veth0_macvtap: left promiscuous mode [ 1206.892338][ T3509] veth1_vlan: left promiscuous mode [ 1206.902455][ T3509] veth0_vlan: left promiscuous mode [ 1207.146487][ T5877] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1207.169664][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.200175][ T5877] usb 3-1: Product: syz [ 1207.227849][ T5877] usb 3-1: Manufacturer: syz [ 1207.245679][ T5877] usb 3-1: SerialNumber: syz [ 1208.127562][T10318] Bluetooth: hci2: command tx timeout [ 1208.422327][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1208.464157][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1208.478201][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1208.490333][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1208.503087][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1208.516952][ T5877] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1208.531340][ T5877] usb 3-1: USB disconnect, device number 27 [ 1208.878751][ T3509] team0 (unregistering): Port device team_slave_1 removed [ 1208.946385][ T3509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.062106][ T3509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.810662][ T3509] bond0 (unregistering): Released all slaves [ 1210.077264][T15072] syzkaller0: entered promiscuous mode [ 1210.097818][T15072] syzkaller0: entered allmulticast mode [ 1214.159943][T10318] Bluetooth: hci1: link tx timeout [ 1214.489311][T15100] loop2: detected capacity change from 0 to 4096 [ 1214.538768][T15100] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1214.556715][T15100] NILFS (loop2): trying rollback from an earlier position [ 1214.790593][T15100] NILFS (loop2): recovery complete [ 1214.809496][T15110] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1214.838863][ T5841] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1215.100139][ T5841] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1215.125852][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.160956][ T5841] usb 4-1: Product: syz [ 1215.166519][ T5841] usb 4-1: Manufacturer: syz [ 1215.171947][ T5841] usb 4-1: SerialNumber: syz [ 1215.872283][T15126] syzkaller0: entered promiscuous mode [ 1215.872343][T15126] syzkaller0: entered allmulticast mode [ 1216.031420][T14942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1216.045888][T14942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1216.062781][T14942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1216.092744][T14942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1216.445687][T14942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.594548][T14942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.662893][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.670105][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.953472][ T7806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.960759][ T7806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.853891][ T5841] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1217.947980][ T5841] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1218.023935][ T5841] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1218.065223][ T5784] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1218.077002][ T5784] CPU: 0 PID: 5784 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1218.084629][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1218.094825][ T5784] Workqueue: hci4 hci_rx_work [ 1218.099721][ T5784] Call Trace: [ 1218.103034][ T5784] [ 1218.105999][ T5784] dump_stack_lvl+0x18c/0x250 [ 1218.110790][ T5784] ? show_regs_print_info+0x20/0x20 [ 1218.116037][ T5784] ? load_image+0x420/0x420 [ 1218.120642][ T5784] sysfs_create_dir_ns+0x26e/0x2a0 [ 1218.125863][ T5784] ? sysfs_warn_dup+0xa0/0xa0 [ 1218.130611][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 1218.136652][ T5784] kobject_add_internal+0x61c/0xcc0 [ 1218.142014][ T5784] kobject_add+0x164/0x240 [ 1218.146485][ T5784] ? __rwlock_init+0x150/0x150 [ 1218.151321][ T5784] ? kobject_init+0x1e0/0x1e0 [ 1218.156040][ T5784] ? _raw_spin_unlock+0x28/0x40 [ 1218.161273][ T5784] ? get_device_parent+0x366/0x390 [ 1218.166444][ T5784] device_add+0x408/0xc50 [ 1218.170798][ T5784] hci_conn_add_sysfs+0xd5/0x1e0 [ 1218.175803][ T5784] le_conn_complete_evt+0xf5d/0x1540 [ 1218.181152][ T5784] ? hci_event_packet+0x4cb/0x1270 [ 1218.186297][ T5784] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1218.192554][ T5784] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1218.198218][ T5784] ? skb_pull_data+0xfb/0x200 [ 1218.202954][ T5784] hci_le_conn_complete_evt+0x187/0x440 [ 1218.208523][ T5784] ? hci_remote_host_features_evt+0x150/0x150 [ 1218.214603][ T5784] hci_event_packet+0x7ba/0x1270 [ 1218.219572][ T5784] ? bis_list+0x290/0x290 [ 1218.223918][ T5784] ? lockdep_hardirqs_on+0x98/0x150 [ 1218.229138][ T5784] ? hci_send_to_monitor+0xd7/0x4f0 [ 1218.234356][ T5784] hci_rx_work+0x43a/0xd60 [ 1218.238803][ T5784] ? process_scheduled_works+0x96f/0x15d0 [ 1218.244557][ T5784] process_scheduled_works+0xa5d/0x15d0 [ 1218.250176][ T5784] ? worker_attach_to_pool+0x380/0x380 [ 1218.255680][ T5784] ? assign_work+0x3d2/0x5d0 [ 1218.260298][ T5784] worker_thread+0xa55/0xfc0 [ 1218.264934][ T5784] kthread+0x2fa/0x390 [ 1218.269020][ T5784] ? pr_cont_work+0x560/0x560 [ 1218.273730][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 1218.278340][ T5784] ret_from_fork+0x48/0x80 [ 1218.282876][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 1218.287477][ T5784] ret_from_fork_asm+0x11/0x20 [ 1218.292295][ T5784] [ 1218.298403][ T5784] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1218.312585][ T5784] Bluetooth: hci4: failed to register connection device [ 1218.322695][ T5841] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1218.344063][ T5841] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1218.359882][ T5841] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1218.399927][ T5841] usb 4-1: USB disconnect, device number 24 [ 1218.567007][T14942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.671237][T14942] veth0_vlan: entered promiscuous mode [ 1218.697564][T14942] veth1_vlan: entered promiscuous mode [ 1218.737655][T15167] syzkaller0: entered promiscuous mode [ 1218.744348][T15167] syzkaller0: entered allmulticast mode [ 1218.787972][ T5841] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1218.853178][T14942] veth0_macvtap: entered promiscuous mode [ 1218.891139][T14942] veth1_macvtap: entered promiscuous mode [ 1218.953648][T14942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.984985][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.988711][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 1219.015706][T14942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.026396][ T5841] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1219.026426][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.026446][ T5841] usb 4-1: Product: syz [ 1219.026462][ T5841] usb 4-1: Manufacturer: syz [ 1219.026478][ T5841] usb 4-1: SerialNumber: syz [ 1219.068552][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.083847][ T5841] usb 4-1: config 0 descriptor?? [ 1219.139679][T14942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1219.143197][T14942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.143259][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.143272][T14942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.143285][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.145179][T14942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.166874][T14942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.166949][T14942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.166974][T14942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.166996][T14942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.348778][ T5841] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1219.385619][T14942] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1219.385766][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.412785][T10799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.412873][T10799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.490164][ T7806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.490190][ T7806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.762228][ T5841] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1219.769833][ T5841] usb 4-1: USB disconnect, device number 25 [ 1220.578272][ T5877] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1220.769788][T15202] loop3: detected capacity change from 0 to 4096 [ 1220.794302][ T5877] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1220.834573][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.877198][T15202] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1220.897897][ T5877] usb 2-1: Product: syz [ 1220.904169][ T5877] usb 2-1: Manufacturer: syz [ 1220.915897][ T5877] usb 2-1: SerialNumber: syz [ 1220.925219][T15202] NILFS (loop3): trying rollback from an earlier position [ 1221.000291][T15202] NILFS (loop3): recovery complete [ 1221.023733][T15205] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1221.591059][T10318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1221.605144][T10318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1221.614463][T10318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1221.629006][T10318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1221.644560][T10318] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1221.652484][T10318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1222.273018][T15221] syzkaller0: entered promiscuous mode [ 1222.281384][T15221] syzkaller0: entered allmulticast mode [ 1222.455830][T15211] chnl_net:caif_netlink_parms(): no params data found [ 1222.648138][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1222.661325][T10318] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1222.689424][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1222.704178][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1222.717852][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1222.727631][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1222.745990][ T5877] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1222.765425][ T5877] usb 2-1: USB disconnect, device number 18 [ 1222.830711][T15211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.846609][T15211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.864733][T15211] bridge_slave_0: entered allmulticast mode [ 1222.881068][T15211] bridge_slave_0: entered promiscuous mode [ 1222.893633][T15211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.906926][T15211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.914531][T15211] bridge_slave_1: entered allmulticast mode [ 1222.922646][T15211] bridge_slave_1: entered promiscuous mode [ 1223.010693][T15211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.022529][T15211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.054731][T15211] team0: Port device team_slave_0 added [ 1223.070099][T15211] team0: Port device team_slave_1 added [ 1223.134781][T15211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.142272][T15211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.170811][T15211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.196955][T15211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.208736][T15211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.255406][T15211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.430896][T15211] hsr_slave_0: entered promiscuous mode [ 1223.437681][T15211] hsr_slave_1: entered promiscuous mode [ 1223.444669][T15211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1223.459727][T15211] Cannot create hsr debugfs directory [ 1223.719082][ T5784] Bluetooth: hci3: command tx timeout [ 1224.286467][T15245] loop1: detected capacity change from 0 to 4096 [ 1224.333251][T15245] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1224.341977][T15245] NILFS (loop1): trying rollback from an earlier position [ 1224.367521][T15245] NILFS (loop1): recovery complete [ 1224.374569][T15246] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1225.798130][ T5784] Bluetooth: hci3: command tx timeout [ 1227.763966][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 1227.893755][ T5784] Bluetooth: hci3: command tx timeout [ 1227.969092][T15259] loop1: detected capacity change from 0 to 512 [ 1228.019801][T15259] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1228.046261][T15259] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1228.092978][T15259] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.2481: Invalid inode table block 1 in block_group 0 [ 1228.147563][T15259] EXT4-fs (loop1): get root inode failed [ 1228.153998][T15259] EXT4-fs (loop1): mount failed [ 1228.364533][T15260] syzkaller0: entered promiscuous mode [ 1228.374992][T15260] syzkaller0: entered allmulticast mode [ 1228.969563][ T42] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1229.196757][ T42] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1229.236814][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.276737][ T42] usb 4-1: Product: syz [ 1229.305732][ T42] usb 4-1: Manufacturer: syz [ 1229.334604][ T42] usb 4-1: SerialNumber: syz [ 1229.386774][ T5784] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1229.398805][ T5784] CPU: 0 PID: 5784 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1229.406437][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1229.416707][ T5784] Workqueue: hci2 hci_rx_work [ 1229.421445][ T5784] Call Trace: [ 1229.424764][ T5784] [ 1229.427738][ T5784] dump_stack_lvl+0x18c/0x250 [ 1229.432472][ T5784] ? show_regs_print_info+0x20/0x20 [ 1229.437733][ T5784] ? load_image+0x420/0x420 [ 1229.442307][ T5784] sysfs_create_dir_ns+0x26e/0x2a0 [ 1229.447483][ T5784] ? sysfs_warn_dup+0xa0/0xa0 [ 1229.452212][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 1229.457479][ T5784] kobject_add_internal+0x61c/0xcc0 [ 1229.462746][ T5784] kobject_add+0x164/0x240 [ 1229.467225][ T5784] ? __rwlock_init+0x150/0x150 [ 1229.472048][ T5784] ? kobject_init+0x1e0/0x1e0 [ 1229.476791][ T5784] ? _raw_spin_unlock+0x28/0x40 [ 1229.481707][ T5784] ? get_device_parent+0x366/0x390 [ 1229.486960][ T5784] device_add+0x408/0xc50 [ 1229.491356][ T5784] hci_conn_add_sysfs+0xd5/0x1e0 [ 1229.496352][ T5784] le_conn_complete_evt+0xf5d/0x1540 [ 1229.501700][ T5784] ? hci_event_packet+0x4cb/0x1270 [ 1229.506887][ T5784] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1229.513180][ T5784] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1229.518868][ T5784] ? skb_pull_data+0xfb/0x200 [ 1229.523611][ T5784] hci_le_conn_complete_evt+0x187/0x440 [ 1229.529311][ T5784] ? hci_remote_host_features_evt+0x150/0x150 [ 1229.535447][ T5784] hci_event_packet+0x7ba/0x1270 [ 1229.540463][ T5784] ? bis_list+0x290/0x290 [ 1229.544865][ T5784] ? lockdep_hardirqs_on+0x98/0x150 [ 1229.550129][ T5784] ? hci_send_to_monitor+0xd7/0x4f0 [ 1229.555381][ T5784] hci_rx_work+0x43a/0xd60 [ 1229.559875][ T5784] ? process_scheduled_works+0x96f/0x15d0 [ 1229.565641][ T5784] process_scheduled_works+0xa5d/0x15d0 [ 1229.571278][ T5784] ? worker_attach_to_pool+0x380/0x380 [ 1229.576782][ T5784] ? assign_work+0x3d2/0x5d0 [ 1229.581410][ T5784] worker_thread+0xa55/0xfc0 [ 1229.586068][ T5784] kthread+0x2fa/0x390 [ 1229.590182][ T5784] ? pr_cont_work+0x560/0x560 [ 1229.594919][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 1229.599539][ T5784] ret_from_fork+0x48/0x80 [ 1229.603991][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 1229.608601][ T5784] ret_from_fork_asm+0x11/0x20 [ 1229.613410][ T5784] [ 1229.625014][ T5784] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1229.642593][ T5784] Bluetooth: hci2: failed to register connection device [ 1229.739515][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1229.847375][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1229.861626][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1229.873515][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1229.883777][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1230.178329][ T5784] Bluetooth: hci3: command tx timeout [ 1230.178832][ T42] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1230.225904][ T42] usb 4-1: USB disconnect, device number 26 [ 1230.593419][T15287] loop1: detected capacity change from 0 to 4096 [ 1230.606355][T15290] loop2: detected capacity change from 0 to 512 [ 1230.673063][T15287] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1230.700629][T15290] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1230.714094][T15287] NILFS (loop1): trying rollback from an earlier position [ 1230.757553][T15290] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1230.806460][T15290] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.2486: Invalid inode table block 1 in block_group 0 [ 1230.814512][T15287] NILFS (loop1): recovery complete [ 1230.828319][T15290] EXT4-fs (loop2): get root inode failed [ 1230.834205][T15290] EXT4-fs (loop2): mount failed [ 1230.867419][T15296] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1232.245871][T15310] loop1: detected capacity change from 0 to 65536 [ 1232.253498][T15310] XFS: ikeep mount option is deprecated. [ 1232.275091][T15310] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1232.354021][T15310] XFS (loop1): Ending clean mount [ 1232.374357][ T42] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1232.382555][T15211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1232.403654][T15211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1232.417312][T15323] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1232.426582][ T42] XFS (loop1): Unmount and run xfs_repair [ 1232.464292][ T42] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1232.496533][ T42] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1232.531987][ T42] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1232.536897][T15299] syzkaller0: entered promiscuous mode [ 1232.547469][T15299] syzkaller0: entered allmulticast mode [ 1232.567003][ T42] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1232.591177][ T42] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1232.621740][ T42] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1232.651373][ T42] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1232.673123][ T42] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1232.707029][ T42] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1232.728969][T15310] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1232.740809][T15310] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1232.755507][T15310] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1232.788256][T14942] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1233.810182][ T5784] Bluetooth: hci3: command tx timeout [ 1236.808039][T15211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1236.840480][T15211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1236.867121][ T49] batman_adv: batadv0: Interface deactivated: wlan0 [ 1237.014989][ T49] batman_adv: batadv0: Removing interface: wlan0 [ 1237.044802][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1237.721604][ T49] hsr_slave_0: left promiscuous mode [ 1237.738958][ T49] hsr_slave_1: left promiscuous mode [ 1237.745611][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.756568][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.793831][ T49] bridge_slave_1: left allmulticast mode [ 1237.818953][ T49] bridge_slave_1: left promiscuous mode [ 1237.824816][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.893659][ T49] bridge_slave_0: left allmulticast mode [ 1237.931616][ T49] bridge_slave_0: left promiscuous mode [ 1237.937471][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.964042][T15353] loop3: detected capacity change from 0 to 4096 [ 1237.987960][ T23] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1238.051317][T15353] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1238.082650][T15353] NILFS (loop3): trying rollback from an earlier position [ 1238.124039][T15353] NILFS (loop3): recovery complete [ 1238.133307][T15359] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1238.254093][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1238.307881][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.318133][ T23] usb 3-1: Product: syz [ 1238.322366][ T23] usb 3-1: Manufacturer: syz [ 1238.345877][ T23] usb 3-1: SerialNumber: syz [ 1238.538695][ T42] IPVS: starting estimator thread 0... [ 1238.609789][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1238.657290][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1238.659287][T15364] IPVS: using max 19 ests per chain, 45600 per kthread [ 1238.684072][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1238.712033][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1238.725119][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1238.766215][ T23] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1238.798146][ T23] usb 3-1: USB disconnect, device number 28 [ 1238.932407][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.938944][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.373247][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1239.477151][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.594753][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.967052][T15372] loop2: detected capacity change from 0 to 65536 [ 1239.975105][T15372] XFS: ikeep mount option is deprecated. [ 1240.023831][T15372] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1240.061963][T15372] XFS (loop2): Ending clean mount [ 1240.076518][ T23] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1240.099103][ T23] XFS (loop2): Unmount and run xfs_repair [ 1240.104903][ T23] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1240.112715][ T23] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1240.122344][ T23] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1240.131747][ T23] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1240.135440][T15381] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1240.141175][ T23] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1240.171119][ T23] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1240.207812][ T23] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1240.218584][ T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1240.237854][ T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1240.262063][T15372] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1240.273999][T15372] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1240.288987][T15372] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1240.467395][T14595] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1240.714061][ T49] bond0 (unregistering): Released all slaves [ 1241.137071][T15211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.317135][T15211] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.332056][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'. [ 1241.729946][T10318] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1241.992589][T10799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.000206][T10799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.115968][T10799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.123302][T10799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.331598][T15397] loop2: detected capacity change from 0 to 512 [ 1242.342006][T15394] loop1: detected capacity change from 0 to 4096 [ 1242.365333][T15397] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1242.397788][T15397] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1242.427391][T15394] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1242.441959][T15397] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.2506: Invalid inode table block 1 in block_group 0 [ 1242.467975][T15394] NILFS (loop1): trying rollback from an earlier position [ 1242.480983][T15397] EXT4-fs (loop2): get root inode failed [ 1242.486720][T15397] EXT4-fs (loop2): mount failed [ 1242.565623][T15394] NILFS (loop1): recovery complete [ 1242.616450][T15404] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1242.747896][ T42] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1243.474272][ T42] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1243.526877][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.545277][ T42] usb 4-1: Product: syz [ 1243.549748][ T42] usb 4-1: Manufacturer: syz [ 1243.572461][ T42] usb 4-1: SerialNumber: syz [ 1244.237310][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1244.255799][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1244.288273][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1244.312167][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1244.316090][T15211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.345762][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1244.374109][ T42] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1244.403437][ T42] usb 4-1: USB disconnect, device number 27 [ 1244.455127][T15415] loop1: detected capacity change from 0 to 512 [ 1244.490785][T15211] veth0_vlan: entered promiscuous mode [ 1244.506683][T15415] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1244.529833][T15211] veth1_vlan: entered promiscuous mode [ 1244.552946][T15415] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1244.593222][T15415] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.2509: Invalid inode table block 1 in block_group 0 [ 1244.612961][T15211] veth0_macvtap: entered promiscuous mode [ 1244.623119][T15415] EXT4-fs (loop1): get root inode failed [ 1244.627635][T15211] veth1_macvtap: entered promiscuous mode [ 1244.637956][T15415] EXT4-fs (loop1): mount failed [ 1244.680760][T15211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1244.698498][T15211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.727913][T15211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1244.747871][T15211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.769147][T15211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1244.785714][T15211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.805894][T15211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1244.951704][T15211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1244.967286][T15211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.978399][T15211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1244.994060][T15211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1245.184280][T15211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1245.293435][T15211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1245.320436][T15211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.346453][T15410] loop2: detected capacity change from 0 to 32768 [ 1245.387942][T15211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.396703][T15211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.494014][T15410] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1245.511567][T15211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.566881][T15211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.616731][T15410] XFS (loop2): Ending clean mount [ 1245.987984][T10318] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1246.130886][T15438] loop3: detected capacity change from 0 to 4096 [ 1246.174421][T15438] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1246.224145][T15438] NILFS (loop3): trying rollback from an earlier position [ 1246.279131][T15438] NILFS (loop3): recovery complete [ 1246.328292][T15439] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1246.459996][T15434] loop1: detected capacity change from 0 to 65536 [ 1246.467449][T15434] XFS: ikeep mount option is deprecated. [ 1246.504761][T15434] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1246.516615][T14595] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1246.612340][ T7688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.631778][T15434] XFS (loop1): Ending clean mount [ 1246.640612][ T7688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.656224][ T5814] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1246.673584][ T5814] XFS (loop1): Unmount and run xfs_repair [ 1246.702586][ T5814] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1246.710512][T15448] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1246.711423][ T5814] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1246.751891][ T5814] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1246.798223][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.809515][ T5814] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1246.825097][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.834366][ T5814] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1246.866129][ T5814] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1246.882561][ T5814] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1246.895016][ T5814] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1246.907676][ T5814] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1246.925319][T15434] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1246.937359][T15434] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1246.952419][T15434] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1246.987208][T14942] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1248.978550][ T42] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1249.008433][ T5784] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1249.020221][ T5784] CPU: 0 PID: 5784 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1249.027940][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1249.038022][ T5784] Workqueue: hci3 hci_rx_work [ 1249.042722][ T5784] Call Trace: [ 1249.046003][ T5784] [ 1249.048955][ T5784] dump_stack_lvl+0x18c/0x250 [ 1249.053639][ T5784] ? show_regs_print_info+0x20/0x20 [ 1249.058837][ T5784] ? load_image+0x420/0x420 [ 1249.063348][ T5784] sysfs_create_dir_ns+0x26e/0x2a0 [ 1249.068462][ T5784] ? sysfs_warn_dup+0xa0/0xa0 [ 1249.073136][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 1249.078551][ T5784] kobject_add_internal+0x61c/0xcc0 [ 1249.083835][ T5784] kobject_add+0x164/0x240 [ 1249.088314][ T5784] ? __rwlock_init+0x150/0x150 [ 1249.093115][ T5784] ? kobject_init+0x1e0/0x1e0 [ 1249.097811][ T5784] ? _raw_spin_unlock+0x28/0x40 [ 1249.102928][ T5784] ? get_device_parent+0x366/0x390 [ 1249.108075][ T5784] device_add+0x408/0xc50 [ 1249.112416][ T5784] hci_conn_add_sysfs+0xd5/0x1e0 [ 1249.117366][ T5784] le_conn_complete_evt+0xf5d/0x1540 [ 1249.122686][ T5784] ? hci_event_packet+0x4cb/0x1270 [ 1249.127837][ T5784] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1249.134112][ T5784] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1249.139760][ T5784] ? skb_pull_data+0xfb/0x200 [ 1249.144444][ T5784] hci_le_conn_complete_evt+0x187/0x440 [ 1249.150014][ T5784] ? hci_remote_host_features_evt+0x150/0x150 [ 1249.156091][ T5784] hci_event_packet+0x7ba/0x1270 [ 1249.161039][ T5784] ? bis_list+0x290/0x290 [ 1249.165371][ T5784] ? lockdep_hardirqs_on+0x98/0x150 [ 1249.170588][ T5784] ? hci_send_to_monitor+0xd7/0x4f0 [ 1249.175800][ T5784] hci_rx_work+0x43a/0xd60 [ 1249.180239][ T5784] ? process_scheduled_works+0x96f/0x15d0 [ 1249.185996][ T5784] process_scheduled_works+0xa5d/0x15d0 [ 1249.191592][ T5784] ? worker_attach_to_pool+0x380/0x380 [ 1249.197066][ T5784] ? assign_work+0x3d2/0x5d0 [ 1249.201675][ T5784] worker_thread+0xa55/0xfc0 [ 1249.206317][ T5784] kthread+0x2fa/0x390 [ 1249.210410][ T5784] ? pr_cont_work+0x560/0x560 [ 1249.215095][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 1249.219772][ T5784] ret_from_fork+0x48/0x80 [ 1249.224295][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 1249.228909][ T5784] ret_from_fork_asm+0x11/0x20 [ 1249.232626][ T42] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1249.233757][ T5784] [ 1249.250245][ T5784] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1249.264394][ T5784] Bluetooth: hci3: failed to register connection device [ 1249.350169][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.433528][ T42] usb 2-1: Product: syz [ 1249.469047][ T42] usb 2-1: Manufacturer: syz [ 1249.505283][ T42] usb 2-1: SerialNumber: syz [ 1250.088611][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1250.143153][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1250.147391][T10318] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1250.155540][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1250.191671][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1250.215084][T10318] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1250.215491][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1250.234185][ T42] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1250.234298][T10318] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1250.258750][T10318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1250.260250][T15472] loop2: detected capacity change from 0 to 4096 [ 1250.276408][ T42] usb 2-1: USB disconnect, device number 19 [ 1250.283595][T10318] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1250.296219][T10318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1250.406049][T15472] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1250.424429][T15472] NILFS (loop2): trying rollback from an earlier position [ 1250.490119][T15472] NILFS (loop2): recovery complete [ 1250.508538][T15479] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1250.573566][T15472] Bluetooth: MGMT ver 1.22 [ 1250.592192][T10953] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.642350][T15481] syz_tun: entered allmulticast mode [ 1250.664867][T15482] dvmrp6: entered allmulticast mode [ 1250.853703][T10953] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.160211][T10953] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.344836][T10953] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.874195][T15474] chnl_net:caif_netlink_parms(): no params data found [ 1252.018218][ T42] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1252.440089][ T5784] Bluetooth: hci0: command tx timeout [ 1252.450369][ T42] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1252.460361][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.541620][ T42] usb 2-1: Product: syz [ 1252.547010][ T42] usb 2-1: Manufacturer: syz [ 1252.551776][ T42] usb 2-1: SerialNumber: syz [ 1252.793573][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1252.806913][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1252.819177][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1252.831461][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1252.841699][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1252.873812][ T42] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1252.908311][ T42] usb 2-1: USB disconnect, device number 20 [ 1253.076202][T15474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.127213][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.173244][T15474] bridge_slave_0: entered allmulticast mode [ 1253.195154][T15474] bridge_slave_0: entered promiscuous mode [ 1253.341734][T15474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.363267][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.371278][T15474] bridge_slave_1: entered allmulticast mode [ 1253.386734][T15474] bridge_slave_1: entered promiscuous mode [ 1253.602522][T15474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1254.416080][T15474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.517913][ T5784] Bluetooth: hci0: command tx timeout [ 1254.625633][T15566] loop2: detected capacity change from 0 to 4096 [ 1254.693156][T15566] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1254.712611][T15566] NILFS (loop2): trying rollback from an earlier position [ 1254.728510][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2543'. [ 1254.807094][T15566] NILFS (loop2): recovery complete [ 1254.823900][T15575] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1255.021221][T15474] team0: Port device team_slave_0 added [ 1255.074506][T15474] team0: Port device team_slave_1 added [ 1255.282790][T15580] overlayfs: missing 'workdir' [ 1255.534870][T15474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.556092][T15474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.638510][T15474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.708147][ T42] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1255.755189][T15474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.768711][T15474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.809751][T15474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.921860][ T42] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1255.937332][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.955892][ T42] usb 2-1: Product: syz [ 1255.965518][ T42] usb 2-1: Manufacturer: syz [ 1255.983683][ T42] usb 2-1: SerialNumber: syz [ 1256.205269][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1256.249432][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1256.277243][T15474] hsr_slave_0: entered promiscuous mode [ 1256.282664][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1256.297217][T15474] hsr_slave_1: entered promiscuous mode [ 1256.313382][T15605] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1256.313948][T15474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1256.322907][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1256.323418][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1256.358206][T15474] Cannot create hsr debugfs directory [ 1256.399946][ T42] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1256.413771][ T42] usb 2-1: USB disconnect, device number 21 [ 1256.601260][ T5784] Bluetooth: hci0: command tx timeout [ 1256.724894][T15611] loop2: detected capacity change from 0 to 65 [ 1256.745302][T10953] hsr_slave_0: left promiscuous mode [ 1256.755888][T10953] hsr_slave_1: left promiscuous mode [ 1256.765991][T15611] BFS-fs: bfs_iget(): Bad inode number loop2:00000002 [ 1256.822226][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.829989][T10953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.199919][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.207385][T10953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.598510][T10953] bridge_slave_1: left allmulticast mode [ 1258.604247][T10953] bridge_slave_1: left promiscuous mode [ 1258.630560][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.662985][T15624] overlayfs: missing 'lowerdir' [ 1258.676140][T10953] bridge_slave_0: left allmulticast mode [ 1258.685185][ T5784] Bluetooth: hci0: command tx timeout [ 1258.728092][T10953] bridge_slave_0: left promiscuous mode [ 1258.755157][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.920450][T10953] batadv0: left promiscuous mode [ 1258.955964][T10953] veth1_macvtap: left promiscuous mode [ 1258.961706][T10953] veth0_macvtap: left promiscuous mode [ 1258.967429][T10953] veth1_vlan: left promiscuous mode [ 1258.990132][T10953] veth0_vlan: left promiscuous mode [ 1259.995918][T10953] team0 (unregistering): Port device team_slave_1 removed [ 1261.305745][T15648] loop2: detected capacity change from 0 to 4096 [ 1261.348136][T15648] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1261.348170][T15648] NILFS (loop2): trying rollback from an earlier position [ 1261.409000][T15648] NILFS (loop2): recovery complete [ 1261.418212][T15652] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1262.345022][T15662] syzkaller0: entered promiscuous mode [ 1262.353403][T10953] IPVS: stop unused estimator thread 0... [ 1262.358072][T15662] syzkaller0: entered allmulticast mode [ 1262.427937][ T5814] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1262.486462][T15669] overlayfs: missing 'lowerdir' [ 1262.680550][ T5814] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1262.702204][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.718911][ T5814] usb 3-1: Product: syz [ 1262.723764][ T5814] usb 3-1: Manufacturer: syz [ 1262.747939][ T5814] usb 3-1: SerialNumber: syz [ 1262.853228][T15474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1262.868522][T15474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1262.899082][T15474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1262.941341][T15474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1262.996452][ T5814] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1263.041672][ T5814] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1263.090524][ T5814] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1263.111093][ T5814] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1263.122356][ T5814] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1263.134376][ T5814] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1263.156969][ T5814] usb 3-1: USB disconnect, device number 29 [ 1263.205119][T15682] loop1: detected capacity change from 0 to 4096 [ 1263.273233][T15682] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1263.273264][T15682] NILFS (loop1): trying rollback from an earlier position [ 1263.276643][T15474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.314936][T15682] NILFS (loop1): recovery complete [ 1263.316230][T15687] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1263.356299][T15474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.392399][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.392559][T10953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.398323][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.398434][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.744845][T15474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1263.744875][T15474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.924228][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2573'. [ 1264.252446][T15690] loop1: detected capacity change from 0 to 65536 [ 1264.253480][T15690] XFS: ikeep mount option is deprecated. [ 1264.338896][T15690] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1264.454804][T15690] XFS (loop1): Ending clean mount [ 1264.487904][ T42] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1264.537505][T15716] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1264.548143][ T42] XFS (loop1): Unmount and run xfs_repair [ 1264.553965][ T42] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1264.563048][ T42] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1264.572790][ T42] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1264.581876][ T42] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1264.605790][ T42] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1264.627830][ T42] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1264.654133][ T42] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1264.675732][ T42] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1264.716469][ T42] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1264.731814][T15474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.739273][T15690] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1264.758310][T15690] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1264.773842][T15690] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1264.936227][T14942] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1264.967589][T15474] veth0_vlan: entered promiscuous mode [ 1265.048946][T15725] syzkaller0: entered promiscuous mode [ 1265.055005][T15725] syzkaller0: entered allmulticast mode [ 1265.090121][T15474] veth1_vlan: entered promiscuous mode [ 1265.485486][T15474] veth0_macvtap: entered promiscuous mode [ 1265.542579][T15474] veth1_macvtap: entered promiscuous mode [ 1265.612805][T15474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.647870][T15474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.691972][T15474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.711474][T15474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.732182][T15474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.750649][T15474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.764797][T15474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.785430][T15474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.814342][T15474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.848967][T15474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.868087][T15474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.894920][T15474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.917305][T14440] hid-generic 0005:0C45:1012.0004: item fetching failed at offset 0/1 [ 1265.934772][T15474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.946486][T14440] hid-generic: probe of 0005:0C45:1012.0004 failed with error -22 [ 1266.000705][T15474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.038175][ T42] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1266.047605][T15474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.057021][T15474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.076538][T15474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.086532][T15474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.242851][ T42] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1266.268688][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.272107][T15557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.293542][ T42] usb 3-1: Product: syz [ 1266.305254][ T42] usb 3-1: Manufacturer: syz [ 1266.317141][T15557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.321084][ T42] usb 3-1: SerialNumber: syz [ 1266.404270][T10799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.428033][T10799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.560939][ T42] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1266.562028][ T42] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1266.567050][ T42] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1266.567111][ T42] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1266.567659][ T42] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1266.597619][ T42] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1266.613615][ T42] usb 3-1: USB disconnect, device number 30 [ 1266.655671][ T5814] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1266.847759][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 1266.852584][ T5814] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1266.852616][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.852639][ T5814] usb 2-1: Product: syz [ 1266.852655][ T5814] usb 2-1: Manufacturer: syz [ 1266.852671][ T5814] usb 2-1: SerialNumber: syz [ 1266.855501][ T5814] usb 2-1: config 0 descriptor?? [ 1267.061413][ T5814] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1267.967460][T15775] loop3: detected capacity change from 0 to 65536 [ 1267.975060][T15775] XFS: ikeep mount option is deprecated. [ 1267.982439][ T5814] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1267.992309][ T5814] usb 2-1: USB disconnect, device number 22 [ 1268.051727][T15775] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1268.159833][T15775] XFS (loop3): Ending clean mount [ 1268.173251][ T42] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1268.211486][ T42] XFS (loop3): Unmount and run xfs_repair [ 1268.234610][T15803] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1268.238542][ T42] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1268.272957][ T42] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1268.325976][ T42] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1268.356928][ T42] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1268.396863][ T42] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1268.423126][ T42] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1268.452868][ T42] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1268.483372][ T42] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1268.526183][ T42] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1268.580480][T15775] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1268.593438][T15775] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1268.608770][T15775] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1268.658295][T15474] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1270.337959][ T788] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1270.981894][T15855] loop1: detected capacity change from 0 to 65536 [ 1270.989325][T15855] XFS: ikeep mount option is deprecated. [ 1271.005068][T15180] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1271.036262][ T788] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1271.043938][T15855] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1271.066897][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.076701][ T788] usb 4-1: Product: syz [ 1271.115798][ T788] usb 4-1: Manufacturer: syz [ 1271.133241][ T788] usb 4-1: SerialNumber: syz [ 1271.164386][T15855] XFS (loop1): Ending clean mount [ 1271.190826][ T5814] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1271.206218][T15180] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1271.215974][ T5814] XFS (loop1): Unmount and run xfs_repair [ 1271.222702][T15180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.231679][T15180] usb 1-1: Product: syz [ 1271.233394][T15869] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1271.235959][T15180] usb 1-1: Manufacturer: syz [ 1271.247136][T15180] usb 1-1: SerialNumber: syz [ 1271.257311][ T5814] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1271.272897][T15180] usb 1-1: config 0 descriptor?? [ 1271.287982][ T5814] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1271.307252][ T5814] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1271.346174][ T5814] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1271.384687][ T5814] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1271.395770][ T5814] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1271.407811][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1271.423550][ T5814] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1271.446250][ T5814] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1271.456478][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1271.474644][ T5814] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1271.484656][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1271.505697][T15855] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1271.505806][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1271.518352][T15855] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1271.534124][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1271.542855][T15855] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1271.582303][T14942] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1271.626156][ T788] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1271.714070][ T788] usb 4-1: USB disconnect, device number 28 [ 1272.917996][T15829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1273.121074][T15893] loop1: detected capacity change from 0 to 65536 [ 1273.128748][T15893] XFS: ikeep mount option is deprecated. [ 1273.164683][T15893] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1273.171906][T15896] loop3: detected capacity change from 0 to 4096 [ 1273.216336][T15896] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1273.238565][T15896] NILFS (loop3): trying rollback from an earlier position [ 1273.266726][T15893] XFS (loop1): Ending clean mount [ 1273.277122][ T5814] usb 1-1: USB disconnect, device number 21 [ 1273.367206][T11977] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1273.393104][T15908] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1273.432228][T15896] NILFS (loop3): recovery complete [ 1273.461132][T11977] XFS (loop1): Unmount and run xfs_repair [ 1273.515551][T11977] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1273.523184][T11977] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1273.547273][T11977] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1273.557127][T11977] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1273.568996][T11977] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1273.586729][T11977] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1273.644290][T15913] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1273.648287][T11977] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1273.737869][T11977] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1273.750571][T11977] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1273.761294][T15893] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1273.773020][T15893] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1273.788381][T15893] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1274.135630][T15893] xfs: Unknown parameter 'utf8' [ 1274.392219][T14942] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1274.442148][ T5784] Bluetooth: hci0: command tx timeout [ 1274.788537][T15180] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1274.996070][T15180] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1275.021679][T15180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.051319][T15180] usb 1-1: Product: syz [ 1275.062849][T15180] usb 1-1: Manufacturer: syz [ 1275.075413][T15180] usb 1-1: SerialNumber: syz [ 1275.146551][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024dac000: rx timeout, send abort [ 1275.647247][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024daf800: rx timeout, send abort [ 1275.658278][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024dac000: abort rx timeout. Force session deactivation [ 1276.155821][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024daf800: abort rx timeout. Force session deactivation [ 1276.364164][T15180] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1276.404646][T15180] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1276.422831][T15180] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1276.434604][T15180] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1276.451276][T15180] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1276.473889][T15180] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1276.494028][T15180] usb 1-1: USB disconnect, device number 22 [ 1276.687376][T15940] loop1: detected capacity change from 0 to 512 [ 1276.723686][T15940] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1276.743196][T15940] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1276.780478][T15940] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.2618: Invalid inode table block 1 in block_group 0 [ 1276.820830][T15940] EXT4-fs (loop1): get root inode failed [ 1276.867877][T15940] EXT4-fs (loop1): mount failed [ 1277.091151][T15948] loop2: detected capacity change from 0 to 4096 [ 1277.605832][T15948] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1277.713231][T15949] loop3: detected capacity change from 0 to 65536 [ 1277.720842][T15949] XFS: ikeep mount option is deprecated. [ 1277.762130][T15948] NILFS (loop2): trying rollback from an earlier position [ 1277.807351][T15949] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1277.881416][T15948] NILFS (loop2): recovery complete [ 1277.933602][T15949] XFS (loop3): Ending clean mount [ 1277.941812][T15965] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1278.013079][ T788] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1278.024891][ T788] XFS (loop3): Unmount and run xfs_repair [ 1278.031085][ T788] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1278.039061][T15966] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1278.041110][ T788] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1278.097658][ T788] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1278.131821][ T788] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1278.166358][ T788] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1278.207002][ T788] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1278.228912][T15966] xfs: Unknown parameter 'utf8' [ 1278.235868][ T788] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1278.302501][ T788] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1278.339588][ T788] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1278.350364][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2624'. [ 1278.369135][T15949] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1278.381203][T15949] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1278.396883][T15949] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1278.455085][T15474] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1278.848027][T14440] hid-generic 0005:0C45:1012.0005: item fetching failed at offset 0/1 [ 1278.954126][T14440] hid-generic: probe of 0005:0C45:1012.0005 failed with error -22 [ 1279.348885][T15981] syzkaller0: entered promiscuous mode [ 1279.358714][T15981] syzkaller0: entered allmulticast mode [ 1279.424115][T15985] loop2: detected capacity change from 0 to 512 [ 1279.453450][T15985] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1279.477911][T15985] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1279.510757][T15985] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.2631: Invalid inode table block 1 in block_group 0 [ 1279.542180][T15985] EXT4-fs (loop2): get root inode failed [ 1279.592853][T15985] EXT4-fs (loop2): mount failed [ 1279.888021][ T788] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1280.652743][T15995] loop2: detected capacity change from 0 to 4096 [ 1280.699246][T15995] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1280.715303][ T788] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1280.740122][T15995] NILFS (loop2): trying rollback from an earlier position [ 1280.740561][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.794971][ T788] usb 1-1: Product: syz [ 1280.809324][T15995] NILFS (loop2): recovery complete [ 1280.825542][ T788] usb 1-1: Manufacturer: syz [ 1280.834069][ T788] usb 1-1: SerialNumber: syz [ 1280.838847][T15999] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1282.053297][T16015] syzkaller0: entered promiscuous mode [ 1282.059445][T16015] syzkaller0: entered allmulticast mode [ 1282.961589][ T788] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1283.008943][ T788] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1283.042305][ T788] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1283.085825][ T788] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1283.160030][ T788] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1283.190824][ T788] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1283.229688][ T788] usb 1-1: USB disconnect, device number 23 [ 1283.370502][T16026] loop3: detected capacity change from 0 to 4096 [ 1283.480963][T16026] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1283.507607][T16026] NILFS (loop3): trying rollback from an earlier position [ 1283.543656][T16026] NILFS (loop3): recovery complete [ 1283.556974][T16029] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1284.238287][T16038] syzkaller0: entered promiscuous mode [ 1284.243835][T16038] syzkaller0: entered allmulticast mode [ 1284.705359][T16048] syzkaller0: entered promiscuous mode [ 1284.722406][T16048] syzkaller0: entered allmulticast mode [ 1284.948943][ T5841] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1285.187464][ T5841] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1285.200549][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.213716][ T5841] usb 3-1: Product: syz [ 1285.218728][ T5841] usb 3-1: Manufacturer: syz [ 1285.223626][ T5841] usb 3-1: SerialNumber: syz [ 1286.056631][T16069] syzkaller0: entered promiscuous mode [ 1286.067525][T16069] syzkaller0: entered allmulticast mode [ 1286.728845][T16078] loop3: detected capacity change from 0 to 4096 [ 1286.797833][T16078] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1286.814852][T16078] NILFS (loop3): trying rollback from an earlier position [ 1286.856951][T16078] NILFS (loop3): recovery complete [ 1286.869235][T16083] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1287.068550][ T5841] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1287.113546][ T5841] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1287.154634][ T5841] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1287.197039][ T5841] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1287.219581][ T5841] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1287.246464][ T5841] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1287.279645][ T5841] usb 3-1: USB disconnect, device number 31 [ 1287.620372][T16099] syzkaller0: entered promiscuous mode [ 1287.625934][T16099] syzkaller0: entered allmulticast mode [ 1287.694190][T16103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2675'. [ 1287.719676][ T42] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1287.920350][ T42] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 1287.947770][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.955104][T16107] loop3: detected capacity change from 0 to 4096 [ 1287.967829][ T42] usb 1-1: config 0 has no interfaces? [ 1287.982429][ T42] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1288.022645][T16107] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1288.023405][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.036476][T16107] NILFS (loop3): trying rollback from an earlier position [ 1288.385363][T16111] loop1: detected capacity change from 0 to 65536 [ 1288.392525][T16111] XFS: ikeep mount option is deprecated. [ 1288.453397][T16107] NILFS (loop3): recovery complete [ 1288.459530][T16111] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1288.474243][ T42] usb 1-1: config 0 descriptor?? [ 1288.497866][T16122] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1288.554591][T16111] XFS (loop1): Ending clean mount [ 1288.571490][ T42] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1288.601046][ T42] XFS (loop1): Unmount and run xfs_repair [ 1288.611051][ T42] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1288.622882][T16124] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1288.659424][ T42] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1288.679709][ T42] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1288.725532][T16124] xfs: Unknown parameter 'utf8' [ 1288.728335][ T42] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1288.746317][ T788] usb 1-1: USB disconnect, device number 24 [ 1288.796899][ T42] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1288.830020][ T42] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1288.868554][ T42] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1288.877484][ T42] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1288.901862][ T42] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1288.953961][T16111] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1288.965798][T16111] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1288.980702][T16111] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1289.028357][T14942] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1289.785722][T16141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2684'. [ 1289.971890][T16143] syzkaller0: entered promiscuous mode [ 1289.979036][T16143] syzkaller0: entered allmulticast mode [ 1290.165250][T16148] loop3: detected capacity change from 0 to 4096 [ 1290.217057][T16148] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1290.247046][T16148] NILFS (loop3): trying rollback from an earlier position [ 1290.304207][T16148] NILFS (loop3): recovery complete [ 1290.324119][T16149] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1290.989140][T16151] loop1: detected capacity change from 0 to 65536 [ 1290.996299][T16151] XFS: ikeep mount option is deprecated. [ 1291.065284][T16151] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1291.112342][T16151] XFS (loop1): Ending clean mount [ 1291.129424][ T5841] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1291.160673][ T5877] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1291.184388][T16162] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1291.193255][ T5841] XFS (loop1): Unmount and run xfs_repair [ 1291.216370][ T5841] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1291.251856][ T5841] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1291.262291][ T5841] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1291.273367][T16162] xfs: Unknown parameter 'utf8' [ 1291.302255][ T5841] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1291.324298][ T5841] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1291.334141][ T5841] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1291.343732][ T5841] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1291.353850][ T5841] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1291.367969][ T5841] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1291.384256][ T5877] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 1291.397145][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.414794][ T5877] usb 4-1: config 0 has no interfaces? [ 1291.414789][T16151] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1291.432027][T16151] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1291.446686][T16151] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1291.468559][T14942] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1291.501192][ T5877] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1291.557902][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.587324][ T5877] usb 4-1: config 0 descriptor?? [ 1291.829621][T11977] usb 4-1: USB disconnect, device number 29 [ 1292.015970][T16170] loop2: detected capacity change from 0 to 65 [ 1292.081515][T16170] BFS-fs: bfs_iget(): Bad inode number loop2:00000002 [ 1293.300336][T16176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2695'. [ 1294.479435][T16186] loop3: detected capacity change from 0 to 65536 [ 1294.486598][T16186] XFS: ikeep mount option is deprecated. [ 1294.603704][T16186] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1294.659553][T16186] XFS (loop3): Ending clean mount [ 1294.695378][T11977] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1294.708008][T11977] XFS (loop3): Unmount and run xfs_repair [ 1294.713879][T11977] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1294.727067][T11977] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1294.736276][T11977] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1294.742122][T16206] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1294.745399][T11977] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1294.824005][T11977] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1294.875837][T11977] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1294.917085][T11977] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1294.940200][T11977] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1294.951006][T16206] xfs: Unknown parameter 'utf8' [ 1294.960557][T11977] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1294.977183][T16209] loop1: detected capacity change from 0 to 65 [ 1295.006076][T16186] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1295.018197][T16186] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1295.032851][T16186] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1295.063131][T16209] BFS-fs: bfs_iget(): Bad inode number loop1:00000002 [ 1296.128185][T15474] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1296.561129][T16218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2705'. [ 1297.489305][T16225] loop3: detected capacity change from 0 to 4096 [ 1297.547197][T16225] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1297.563211][T16225] NILFS (loop3): trying rollback from an earlier position [ 1297.594410][T16225] NILFS (loop3): recovery complete [ 1297.610654][T16226] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1299.836616][T16258] loop1: detected capacity change from 0 to 512 [ 1299.859317][T16258] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1299.870740][T16258] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1299.886080][T16258] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.2719: Invalid inode table block 1 in block_group 0 [ 1299.902290][T16258] EXT4-fs (loop1): get root inode failed [ 1299.910796][T16258] EXT4-fs (loop1): mount failed [ 1300.389057][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.395859][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.144221][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 1302.340769][T16292] loop3: detected capacity change from 0 to 512 [ 1302.407160][T16292] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1302.453788][T16292] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1302.481726][T16292] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.2730: Invalid inode table block 1 in block_group 0 [ 1302.499316][T16292] EXT4-fs (loop3): get root inode failed [ 1302.505091][T16292] EXT4-fs (loop3): mount failed [ 1302.807093][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2732'. [ 1303.744826][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 1303.784400][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2735'. [ 1304.252810][T16323] batman_adv: batadv0: Adding interface: dummy0 [ 1304.259777][T16323] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.285618][T16323] batman_adv: batadv0: Interface activated: dummy0 [ 1304.339144][T16323] batadv0: mtu less than device minimum [ 1304.373574][T16323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.385549][T16323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.397070][T16323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.408651][T16323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.420151][T16323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.431666][T16323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.443258][T16323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.454797][T16323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.466303][T16323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1304.736044][T16327] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2742'. [ 1304.849515][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2743'. [ 1305.492073][T16352] batman_adv: batadv0: Adding interface: dummy0 [ 1305.503815][T16352] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.537574][T16352] batman_adv: batadv0: Interface activated: dummy0 [ 1305.781421][T16357] loop2: detected capacity change from 0 to 4096 [ 1305.821733][T16357] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1305.831354][T16357] NILFS (loop2): trying rollback from an earlier position [ 1305.891127][T16357] NILFS (loop2): recovery complete [ 1305.898019][T15180] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1305.920554][T16361] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1306.152952][T15180] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1306.173383][T15180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.181925][T15180] usb 4-1: Product: syz [ 1306.186418][T15180] usb 4-1: Manufacturer: syz [ 1306.195052][T15180] usb 4-1: SerialNumber: syz [ 1306.785991][T15180] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1306.797486][T15180] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1306.819779][T15180] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1306.839130][T15180] usb 4-1: USB disconnect, device number 30 [ 1308.399402][T16345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1308.672939][T16386] loop1: detected capacity change from 0 to 4096 [ 1308.689346][T16386] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1308.714602][T16386] NILFS (loop1): trying rollback from an earlier position [ 1308.817378][T16386] NILFS (loop1): recovery complete [ 1308.829769][T16397] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1309.027805][T15180] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1309.369180][T15180] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1309.379106][T15180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.387451][T15180] usb 4-1: Product: syz [ 1309.391831][T15180] usb 4-1: Manufacturer: syz [ 1309.397602][T15180] usb 4-1: SerialNumber: syz [ 1310.345067][T16423] net_ratelimit: 34 callbacks suppressed [ 1310.345079][T16423] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1310.740338][T15180] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1310.766033][T15180] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1310.781139][T15180] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1310.794730][T15180] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1310.824020][T15180] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1310.860147][T15180] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1310.876457][T15180] usb 4-1: USB disconnect, device number 31 [ 1311.453550][T16448] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1311.488908][T16450] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1311.653614][T16452] loop1: detected capacity change from 0 to 4096 [ 1311.691302][T16452] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1311.704608][T16452] NILFS (loop1): trying rollback from an earlier position [ 1311.747765][T16452] NILFS (loop1): recovery complete [ 1311.774062][T16457] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1312.316372][T16473] batman_adv: batadv0: Adding interface: dummy0 [ 1312.323630][T16473] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.350617][T16473] batman_adv: batadv0: Interface activated: dummy0 [ 1312.367194][T16473] batadv0: mtu less than device minimum [ 1312.380349][T16473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1312.391971][T16473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1312.403503][T16473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1312.415008][T16473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1312.447382][ T5877] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1312.647356][ T5877] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1312.683051][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.754924][ T5877] usb 2-1: Product: syz [ 1312.766240][ T5877] usb 2-1: Manufacturer: syz [ 1312.776634][ T5877] usb 2-1: SerialNumber: syz [ 1314.331547][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1314.366419][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1314.392147][ T5877] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1314.424818][ T5877] usb 2-1: USB disconnect, device number 23 [ 1314.543825][T16511] loop3: detected capacity change from 0 to 4096 [ 1314.566941][T16511] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1314.587283][T16511] NILFS (loop3): trying rollback from an earlier position [ 1314.617457][T16511] NILFS (loop3): recovery complete [ 1314.625932][T16512] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1316.346244][T16533] loop2: detected capacity change from 0 to 4096 [ 1316.431058][T16533] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1316.462525][T16533] NILFS (loop2): trying rollback from an earlier position [ 1316.552798][T16533] NILFS (loop2): recovery complete [ 1316.607624][T16544] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1316.901726][T16552] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2828'. [ 1317.736410][T16573] loop3: detected capacity change from 0 to 512 [ 1317.794186][T16573] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1317.804133][T10318] Bluetooth: hci4: command 0x0406 tx timeout [ 1317.871846][T16573] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1317.924039][T16573] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.2836: Invalid inode table block 1 in block_group 0 [ 1317.948228][T16573] EXT4-fs (loop3): get root inode failed [ 1317.953953][T16573] EXT4-fs (loop3): mount failed [ 1318.840934][ T5784] Bluetooth: hci0: command tx timeout [ 1318.962836][ T5784] Bluetooth: hci0: link tx timeout [ 1318.971579][ T5784] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1318.984226][ T5784] Bluetooth: hci0: link tx timeout [ 1318.989713][ T5784] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1319.070437][T16616] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input14 [ 1319.387781][T16625] loop1: detected capacity change from 0 to 512 [ 1319.419187][T16625] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1319.457862][T16625] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1319.484972][T16625] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.2853: Invalid inode table block 1 in block_group 0 [ 1319.533188][T16625] EXT4-fs (loop1): get root inode failed [ 1319.542204][T16625] EXT4-fs (loop1): mount failed [ 1320.726832][T16639] loop2: detected capacity change from 0 to 4096 [ 1320.790477][T16639] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1320.818313][T16639] NILFS (loop2): trying rollback from an earlier position [ 1320.858240][T16639] NILFS (loop2): recovery complete [ 1320.877000][T16652] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1321.077931][T10318] Bluetooth: hci0: command 0x0406 tx timeout [ 1321.391556][T16663] loop2: detected capacity change from 0 to 512 [ 1321.407407][T16663] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1321.425088][T16663] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1321.445650][T16663] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.2868: Invalid inode table block 1 in block_group 0 [ 1321.484224][T16663] EXT4-fs (loop2): get root inode failed [ 1321.513970][T16663] EXT4-fs (loop2): mount failed [ 1322.918017][T10318] Bluetooth: hci2: command 0x0406 tx timeout [ 1324.788065][T16711] loop3: detected capacity change from 0 to 65536 [ 1324.795748][T16711] XFS: ikeep mount option is deprecated. [ 1324.887934][T16711] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1324.994295][T16711] XFS (loop3): Ending clean mount [ 1325.014334][T11977] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1325.043037][T11977] XFS (loop3): Unmount and run xfs_repair [ 1325.077438][T16739] xfs: Unknown parameter 'tù!F``fDy1ñlÏra' [ 1325.095722][T11977] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1325.123445][T11977] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1325.144858][T11977] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1325.155721][T11977] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1325.182777][T11977] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1325.193595][T11977] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1325.203524][T11977] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1325.213656][T11977] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1325.223083][T11977] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1325.233180][T16711] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1325.245913][T16711] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1325.261565][T16711] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1325.328894][T15474] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1326.131499][T10318] Bluetooth: hci0: command 0x0406 tx timeout [ 1328.904294][T16752] loop1: detected capacity change from 0 to 512 [ 1328.930979][T16752] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1328.941695][T16752] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1328.953911][T16752] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.2891: Invalid inode table block 1 in block_group 0 [ 1328.972675][T16752] EXT4-fs (loop1): get root inode failed [ 1329.008461][T16752] EXT4-fs (loop1): mount failed [ 1329.040293][T16749] netlink: 'syz.2.2890': attribute type 3 has an invalid length. [ 1329.064450][T16749] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2890'. [ 1329.289834][T16757] loop3: detected capacity change from 0 to 16 [ 1329.308415][T16757] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615ÿÿÿÿÿÿÿ000000000000000000000x0000000000000000ÿÿÿÿÿÿÿÿÿ18446744073709551615#' [ 1329.336520][T16757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2894'. [ 1329.878177][ T5841] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1330.038438][ T5841] usb 4-1: device descriptor read/64, error -71 [ 1330.317880][ T5841] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1330.488246][ T5841] usb 4-1: device descriptor read/64, error -71 [ 1330.638257][ T5841] usb usb4-port1: attempt power cycle [ 1331.067876][ T5841] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1331.130223][ T5841] usb 4-1: device descriptor read/8, error -71 [ 1331.427775][ T5841] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1331.471561][ T5841] usb 4-1: device descriptor read/8, error -71 [ 1331.598921][ T5841] usb usb4-port1: unable to enumerate USB device [ 1331.865651][T16787] loop1: detected capacity change from 0 to 16 [ 1331.876145][T16787] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615ÿÿÿÿÿÿÿ000000000000000000000x0000000000000000ÿÿÿÿÿÿÿÿÿ18446744073709551615#' [ 1331.904628][T16787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2903'. [ 1332.323642][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'. [ 1332.895373][T16815] loop1: detected capacity change from 0 to 16 [ 1332.909893][T16815] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615ÿÿÿÿÿÿÿ000000000000000000000x0000000000000000ÿÿÿÿÿÿÿÿÿ18446744073709551615#' [ 1332.964220][T16815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2913'. [ 1333.842302][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2917'. [ 1334.504152][T16832] loop1: detected capacity change from 0 to 65536 [ 1334.511784][T16832] XFS: ikeep mount option is deprecated. [ 1334.571868][T16832] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1334.672505][T16832] XFS (loop1): Ending clean mount [ 1334.689016][ T5877] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1334.703776][ T5877] XFS (loop1): Unmount and run xfs_repair [ 1334.709709][ T5877] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1334.717850][ T5877] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1334.726704][ T5877] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1334.735728][ T5877] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1334.744806][ T5877] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1334.768803][ T5877] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1334.807529][ T5877] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1334.850448][ T5877] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1334.893457][ T5877] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1334.913784][T16832] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1334.926173][T16832] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1334.940890][T16832] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1335.057534][ T5814] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1335.090663][T14942] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1335.219243][ T5814] usb 4-1: device descriptor read/64, error -71 [ 1335.567876][ T5814] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1335.721970][ T5814] usb 4-1: device descriptor read/64, error -71 [ 1335.888248][ T5814] usb usb4-port1: attempt power cycle [ 1335.988214][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 1336.080398][T16868] loop2: detected capacity change from 0 to 512 [ 1336.131672][T16868] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1336.158838][T16868] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1336.183400][T16868] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.2928: Invalid inode table block 1 in block_group 0 [ 1336.243545][T16868] EXT4-fs (loop2): get root inode failed [ 1336.265799][T16868] EXT4-fs (loop2): mount failed [ 1336.283148][T16873] net_ratelimit: 18 callbacks suppressed [ 1336.283165][T16873] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1336.327905][ T5814] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1336.359725][ T5814] usb 4-1: device descriptor read/8, error -71 [ 1336.777840][ T5814] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1336.832613][ T5814] usb 4-1: device descriptor read/8, error -71 [ 1336.968023][ T5814] usb usb4-port1: unable to enumerate USB device [ 1337.365090][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1337.385757][T16900] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1338.127936][T16920] batman_adv: batadv0: Adding interface: dummy0 [ 1338.151974][T16920] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1338.211690][T16920] batman_adv: batadv0: Interface activated: dummy0 [ 1338.254899][T16924] batadv0: mtu less than device minimum [ 1338.274216][T16924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.286968][T16924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.299622][T16924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.312415][T16924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.324602][T16924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.337390][T16924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.350162][T16924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.486842][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'. [ 1338.929799][ T5814] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1339.104983][ T5814] usb 4-1: device descriptor read/64, error -71 [ 1339.393771][ T5814] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1339.581545][ T5814] usb 4-1: device descriptor read/64, error -71 [ 1339.710554][ T5814] usb usb4-port1: attempt power cycle [ 1340.157875][ T5814] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1340.235852][ T5814] usb 4-1: device descriptor read/8, error -71 [ 1340.518311][ T5814] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1340.567894][ T5814] usb 4-1: device descriptor read/8, error -71 [ 1340.699139][ T5814] usb usb4-port1: unable to enumerate USB device [ 1342.999734][T16975] net_ratelimit: 12 callbacks suppressed [ 1342.999752][T16975] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1343.205168][T16982] loop1: detected capacity change from 0 to 512 [ 1343.235439][T16986] syzkaller0: entered promiscuous mode [ 1343.247791][T16986] syzkaller0: entered allmulticast mode [ 1343.259138][T16982] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1343.270484][T16982] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1343.304851][T16982] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.2964: Invalid inode table block 1 in block_group 0 [ 1343.375557][T16982] EXT4-fs (loop1): get root inode failed [ 1343.404413][T16982] EXT4-fs (loop1): mount failed [ 1344.445135][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 1344.667073][T17009] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1344.839324][T17017] loop2: detected capacity change from 0 to 512 [ 1344.898656][T17017] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1344.923310][T17017] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1344.952891][T17017] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.2979: Invalid inode table block 1 in block_group 0 [ 1344.984419][T17017] EXT4-fs (loop2): get root inode failed [ 1344.993741][T17017] EXT4-fs (loop2): mount failed [ 1346.733075][T17030] syzkaller0: entered promiscuous mode [ 1346.748022][T17030] syzkaller0: entered allmulticast mode [ 1347.094156][T17046] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1348.301669][T17057] loop1: detected capacity change from 0 to 65536 [ 1348.311423][T17057] XFS: ikeep mount option is deprecated. [ 1348.349017][T17057] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1348.594474][T17057] XFS (loop1): Ending clean mount [ 1348.607897][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 1348.633503][ T42] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1348.792813][ T42] XFS (loop1): Unmount and run xfs_repair [ 1348.807811][ T42] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1348.815262][ T42] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1348.849782][ T42] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1348.882456][ T42] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1348.904975][ T42] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1348.933232][ T42] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1348.957181][ T42] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1349.011372][ T42] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1349.031321][ T42] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1349.040811][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2999'. [ 1349.051411][T17057] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1349.063538][T17057] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1349.078391][T17057] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1349.112312][T14942] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1349.232723][T17086] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1349.502130][T17090] syzkaller0: entered promiscuous mode [ 1349.510576][T17090] syzkaller0: entered allmulticast mode [ 1350.993935][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'. [ 1351.802345][T17120] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1352.287446][T17136] loop1: detected capacity change from 0 to 65 [ 1352.331070][T17136] BFS-fs: bfs_iget(): Bad inode number loop1:00000002 [ 1354.190216][T17147] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1354.205640][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'. [ 1354.511811][T17152] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15 [ 1355.004999][T17163] loop3: detected capacity change from 0 to 16 [ 1355.027049][T17163] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615ÿÿÿÿÿÿÿ000000000000000000000x0000000000000000ÿÿÿÿÿÿÿÿÿ18446744073709551615#' [ 1355.038881][T17165] loop1: detected capacity change from 0 to 512 [ 1355.131344][T17165] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1355.170362][T17165] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1355.219060][T17165] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.3030: Invalid inode table block 1 in block_group 0 [ 1355.443084][T17165] EXT4-fs (loop1): get root inode failed [ 1355.462401][T17165] EXT4-fs (loop1): mount failed [ 1355.735777][T17177] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1355.983167][T17181] loop1: detected capacity change from 0 to 512 [ 1355.994928][T17181] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1356.020981][T17181] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1356.036475][T17181] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.3035: Invalid inode table block 1 in block_group 0 [ 1356.087064][T17181] EXT4-fs (loop1): get root inode failed [ 1356.100038][T17181] EXT4-fs (loop1): mount failed [ 1356.553512][T17190] loop2: detected capacity change from 0 to 16 [ 1356.579128][T17190] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615ÿÿÿÿÿÿÿ000000000000000000000x0000000000000000ÿÿÿÿÿÿÿÿÿ18446744073709551615#' [ 1356.739123][T15332] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1357.116133][T17197] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1359.132331][T17220] loop1: detected capacity change from 0 to 16 [ 1359.159147][T17220] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615ÿÿÿÿÿÿÿ000000000000000000000x0000000000000000ÿÿÿÿÿÿÿÿÿ18446744073709551615#' [ 1359.209986][T17222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1359.490475][T17231] loop1: detected capacity change from 0 to 512 [ 1359.531039][T17231] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1359.545111][T17231] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1359.600877][T17231] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.3054: Invalid inode table block 1 in block_group 0 [ 1359.627051][T17231] EXT4-fs (loop1): get root inode failed [ 1359.678016][T17231] EXT4-fs (loop1): mount failed [ 1361.327441][T17255] loop1: detected capacity change from 0 to 16 [ 1361.341773][T17255] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615ÿÿÿÿÿÿÿ000000000000000000000x0000000000000000ÿÿÿÿÿÿÿÿÿ18446744073709551615#' [ 1361.618043][ T42] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1361.626362][T17259] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:40:00:00:00:63 [ 1361.803922][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.810683][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.833009][ T42] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1361.842495][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.842595][ T42] usb 4-1: Product: syz [ 1361.842685][ T42] usb 4-1: Manufacturer: syz [ 1361.842777][ T42] usb 4-1: SerialNumber: syz [ 1361.864541][ T42] usb 4-1: config 0 descriptor?? [ 1362.185178][T17269] loop1: detected capacity change from 0 to 512 [ 1362.231233][T17269] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1362.251450][T17269] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1362.298833][T17269] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.3069: Invalid inode table block 1 in block_group 0 [ 1362.351013][T17269] EXT4-fs (loop1): get root inode failed [ 1362.356770][T17269] EXT4-fs (loop1): mount failed [ 1362.409253][T17274] xt_hashlimit: size too large, truncated to 1048576 [ 1362.501907][ T42] usb 4-1: Firmware version (0.0) predates our first public release. [ 1362.539741][ T42] usb 4-1: Please update to version 0.2 or newer [ 1362.645976][ T42] usb 4-1: USB disconnect, device number 44 [ 1363.211548][T17280] [ 1363.213964][T17280] ====================================================== [ 1363.221008][T17280] WARNING: possible circular locking dependency detected [ 1363.228050][T17280] syzkaller #0 Not tainted [ 1363.232484][T17280] ------------------------------------------------------ [ 1363.239631][T17280] syz.2.3071/17280 is trying to acquire lock: [ 1363.245712][T17280] ffff88807a861f98 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x118/0xaa0 [ 1363.257251][T17280] [ 1363.257251][T17280] but task is already holding lock: [ 1363.264634][T17280] ffff88807a860c70 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x530 [ 1363.273742][T17280] [ 1363.273742][T17280] which lock already depends on the new lock. [ 1363.273742][T17280] [ 1363.284362][T17280] [ 1363.284362][T17280] the existing dependency chain (in reverse order) is: [ 1363.293447][T17280] [ 1363.293447][T17280] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1363.301241][T17280] lock_sock_nested+0x48/0x100 [ 1363.306633][T17280] smc_listen_out+0x109/0x3d0 [ 1363.311859][T17280] smc_listen_work+0x581/0xf40 [ 1363.317171][T17280] process_scheduled_works+0xa5d/0x15d0 [ 1363.323276][T17280] worker_thread+0xa55/0xfc0 [ 1363.328422][T17280] kthread+0x2fa/0x390 [ 1363.333037][T17280] ret_from_fork+0x48/0x80 [ 1363.338007][T17280] ret_from_fork_asm+0x11/0x20 [ 1363.343325][T17280] [ 1363.343325][T17280] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1363.353531][T17280] __lock_acquire+0x2df1/0x7d40 [ 1363.358942][T17280] lock_acquire+0x19e/0x420 [ 1363.363995][T17280] __flush_work+0x64e/0xaa0 [ 1363.369045][T17280] __cancel_work_timer+0x3f8/0x560 [ 1363.374791][T17280] smc_clcsock_release+0x60/0xf0 [ 1363.380291][T17280] __smc_release+0x661/0x7d0 [ 1363.385495][T17280] smc_close_non_accepted+0xd5/0x1f0 [ 1363.391431][T17280] smc_close_active+0xb61/0xf00 [ 1363.396875][T17280] __smc_release+0x8d/0x7d0 [ 1363.401944][T17280] smc_release+0x2ce/0x530 [ 1363.406920][T17280] sock_close+0xbd/0x230 [ 1363.411720][T17280] __fput+0x234/0x970 [ 1363.416291][T17280] __se_sys_close+0x15f/0x220 [ 1363.421586][T17280] do_syscall_64+0x55/0xb0 [ 1363.426555][T17280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1363.433063][T17280] [ 1363.433063][T17280] other info that might help us debug this: [ 1363.433063][T17280] [ 1363.443310][T17280] Possible unsafe locking scenario: [ 1363.443310][T17280] [ 1363.450779][T17280] CPU0 CPU1 [ 1363.456164][T17280] ---- ---- [ 1363.461552][T17280] lock(sk_lock-AF_SMC/1); [ 1363.466129][T17280] lock((work_completion)(&new_smc->smc_listen_work)); [ 1363.475628][T17280] lock(sk_lock-AF_SMC/1); [ 1363.482725][T17280] lock((work_completion)(&new_smc->smc_listen_work)); [ 1363.489712][T17280] [ 1363.489712][T17280] *** DEADLOCK *** [ 1363.489712][T17280] [ 1363.497972][T17280] 3 locks held by syz.2.3071/17280: [ 1363.503196][T17280] #0: ffff88805e189420 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 1363.513436][T17280] #1: ffff88807a860c70 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x530 [ 1363.522898][T17280] #2: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: __flush_work+0x118/0xaa0 [ 1363.532170][T17280] [ 1363.532170][T17280] stack backtrace: [ 1363.538079][T17280] CPU: 0 PID: 17280 Comm: syz.2.3071 Not tainted syzkaller #0 [ 1363.545743][T17280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1363.555829][T17280] Call Trace: [ 1363.559135][T17280] [ 1363.562089][T17280] dump_stack_lvl+0x18c/0x250 [ 1363.566806][T17280] ? load_image+0x420/0x420 [ 1363.571349][T17280] ? show_regs_print_info+0x20/0x20 [ 1363.576578][T17280] ? print_circular_bug+0x12b/0x1a0 [ 1363.581817][T17280] check_noncircular+0x2fc/0x400 [ 1363.586796][T17280] ? look_up_lock_class+0x75/0x140 [ 1363.591959][T17280] ? print_deadlock_bug+0x5d0/0x5d0 [ 1363.597205][T17280] ? lockdep_lock+0xf5/0x230 [ 1363.601837][T17280] ? _find_first_zero_bit+0xd3/0x100 [ 1363.607213][T17280] __lock_acquire+0x2df1/0x7d40 [ 1363.612118][T17280] ? verify_lock_unused+0x140/0x140 [ 1363.617363][T17280] ? debug_object_activate+0x304/0x4f0 [ 1363.622891][T17280] ? __lock_acquire+0x7d40/0x7d40 [ 1363.627951][T17280] ? __rwlock_init+0x150/0x150 [ 1363.632773][T17280] lock_acquire+0x19e/0x420 [ 1363.637316][T17280] ? __flush_work+0x118/0xaa0 [ 1363.642031][T17280] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1363.648052][T17280] ? read_lock_is_recursive+0x20/0x20 [ 1363.653464][T17280] ? _raw_spin_unlock_irq+0x23/0x50 [ 1363.658717][T17280] ? __flush_work+0x118/0xaa0 [ 1363.663439][T17280] __flush_work+0x64e/0xaa0 [ 1363.667978][T17280] ? __flush_work+0x118/0xaa0 [ 1363.672692][T17280] ? __flush_work+0x118/0xaa0 [ 1363.677399][T17280] ? verify_lock_unused+0x140/0x140 [ 1363.682642][T17280] ? flush_work+0x20/0x20 [ 1363.687008][T17280] ? move_linked_works+0x250/0x250 [ 1363.692167][T17280] ? lock_chain_count+0x20/0x20 [ 1363.697053][T17280] ? __cancel_work_timer+0x36e/0x560 [ 1363.702374][T17280] __cancel_work_timer+0x3f8/0x560 [ 1363.707544][T17280] ? cancel_work_sync+0x20/0x20 [ 1363.712432][T17280] ? __smc_release+0x659/0x7d0 [ 1363.717246][T17280] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1363.722742][T17280] ? lockdep_hardirqs_on+0x98/0x150 [ 1363.727987][T17280] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1363.733399][T17280] ? _local_bh_enable+0xa0/0xa0 [ 1363.738293][T17280] smc_clcsock_release+0x60/0xf0 [ 1363.743272][T17280] __smc_release+0x661/0x7d0 [ 1363.747905][T17280] ? do_raw_spin_unlock+0x121/0x230 [ 1363.753151][T17280] smc_close_non_accepted+0xd5/0x1f0 [ 1363.758488][T17280] smc_close_active+0xb61/0xf00 [ 1363.763469][T17280] ? __receive_sock+0x90/0x90 [ 1363.768197][T17280] __smc_release+0x8d/0x7d0 [ 1363.772746][T17280] ? do_raw_spin_unlock+0x121/0x230 [ 1363.777985][T17280] smc_release+0x2ce/0x530 [ 1363.782442][T17280] sock_close+0xbd/0x230 [ 1363.786818][T17280] ? sock_mmap+0xa0/0xa0 [ 1363.791183][T17280] __fput+0x234/0x970 [ 1363.795204][T17280] __se_sys_close+0x15f/0x220 [ 1363.799924][T17280] do_syscall_64+0x55/0xb0 [ 1363.804555][T17280] ? clear_bhb_loop+0x40/0x90 [ 1363.809394][T17280] ? clear_bhb_loop+0x40/0x90 [ 1363.814108][T17280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1363.820042][T17280] RIP: 0033:0x7fb4c2f9ce59 [ 1363.824506][T17280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.844161][T17280] RSP: 002b:00007fb4c3e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1363.852628][T17280] RAX: ffffffffffffffda RBX: 00007fb4c3215fa0 RCX: 00007fb4c2f9ce59 [ 1363.860641][T17280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1363.868647][T17280] RBP: 00007fb4c3032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1363.876744][T17280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1363.884775][T17280] R13: 00007fb4c3216038 R14: 00007fb4c3215fa0 R15: 00007ffe7e105a98 [ 1363.892797][T17280] [ 1364.100391][T17283] loop3: detected capacity change from 0 to 65536 [ 1364.107873][T17283] XFS: ikeep mount option is deprecated. [ 1364.138199][T17283] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1364.161425][T17283] XFS (loop3): Ending clean mount [ 1364.184471][T15180] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 1364.197602][T15180] XFS (loop3): Unmount and run xfs_repair [ 1364.205712][T15180] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1364.215632][T15180] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1364.229481][T15180] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1364.241443][T15180] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1364.252715][T15180] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1364.262823][T15180] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1364.271773][T15180] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1364.281264][T15180] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1364.290181][T15180] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1364.299094][T17283] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 1364.311033][T17283] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1364.325924][T17283] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1364.370856][T15474] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3