last executing test programs: 5m28.974195952s ago: executing program 1 (id=211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000043c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa6c"], 0x0) 5m28.314140509s ago: executing program 1 (id=215): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a3000000000080041007369770014003300766972745f776966693000000000000047eaff84f3f4"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) unshare(0x22020400) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000001100)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, 0x0, &(0x7f0000001880)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f00000011c0)}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x10, 0x29, 0x3e}}, @ip_tos_u8={{0xd}}], 0x20}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0a0000000200"/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20040884) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) 5m28.027731154s ago: executing program 1 (id=217): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}]}, 0x24}}, 0x0) 5m25.880407764s ago: executing program 1 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x1c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 5m24.747597123s ago: executing program 1 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) munlockall() syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32], 0xff, 0x2c1, &(0x7f0000000a40)="$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") unshare(0x68040200) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008e11f5fa2152188052572e8d43474457468c93e548021adbec49f6a4714932a5d4e7c61aaf4bf380f66f13fd7f11175ced839d494760a206f4ad923bf4c0648def58ebe025d9ee0f5358b8aaf087934bfed187bae23c0a5eb6ec564d59ed9a23b199004365f18aae42e4146aa0ffa0e3683a31eb77872fda3b"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5m21.513465163s ago: executing program 1 (id=232): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 5m4.165827567s ago: executing program 32 (id=232): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 1m56.794210206s ago: executing program 2 (id=642): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x206) 1m56.609557498s ago: executing program 2 (id=643): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000005c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4200}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m56.111920982s ago: executing program 2 (id=648): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000580)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0x18, 0xffffa888}]}, 0x24}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) write$P9_RLCREATE(r2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) 1m52.433037438s ago: executing program 2 (id=652): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a76cf820d0062206f870010203010902240001000010000904b70002e266f200090502"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m44.823195581s ago: executing program 2 (id=673): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000580)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0x18, 0xffffa888}]}, 0x24}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) write$P9_RLCREATE(r2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) 1m42.552345543s ago: executing program 2 (id=677): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) 1m26.414750059s ago: executing program 33 (id=677): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) 21.942047181s ago: executing program 4 (id=813): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) epoll_create1(0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x105002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21.67803161s ago: executing program 4 (id=814): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0], 0x20) 20.202951395s ago: executing program 5 (id=816): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 17.02076217s ago: executing program 5 (id=820): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) socket(0x1e, 0x1, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x1}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f6b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15.314142977s ago: executing program 4 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_type(r2, &(0x7f0000000080), 0xfffffed8) 13.877753466s ago: executing program 3 (id=823): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r0}]) 13.80743172s ago: executing program 5 (id=824): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) unshare(0x22020400) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x9, 0x0, &(0x7f0000001880)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f00000011c0)}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x10, 0x29, 0x3e}}, @ip_tos_u8={{0xd}}], 0x20}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0a0000000200"/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20040884) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) 13.594719147s ago: executing program 5 (id=825): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0xa4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x200052, 0x0) creat(0x0, 0x6857b21ff1155d90) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000030000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 12.761916004s ago: executing program 3 (id=826): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket(0x8000000010, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}]}, 0x24}}, 0x0) 12.761476278s ago: executing program 4 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000050000000900000001", @ANYRES32=0x0], 0x50) open_tree(0xffffffffffffffff, &(0x7f00000008c0)='./bus\x00', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 10.153892162s ago: executing program 5 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") creat(&(0x7f0000000500)='./file0\x00', 0x86) 8.818252872s ago: executing program 4 (id=833): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) socket(0x1e, 0x1, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x1}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f6b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.349902295s ago: executing program 3 (id=834): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) unshare(0x22020400) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x9, 0x0, &(0x7f0000001880)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f00000011c0)}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x10, 0x29, 0x3e}}, @ip_tos_u8={{0xd}}], 0x20}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0a0000000200"/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20040884) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) 6.112454393s ago: executing program 0 (id=835): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x800002}], 0x1, 0x0, 0x0) 5.983650261s ago: executing program 3 (id=836): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x24a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setfsuid(0x0) close(0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 5.866447266s ago: executing program 0 (id=837): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timerfd_create(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 5.616717358s ago: executing program 5 (id=838): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd7000000000000100000008000300030000000800"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 4.551434745s ago: executing program 4 (id=839): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) clock_settime(0x0, &(0x7f00000002c0)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 3.141987908s ago: executing program 3 (id=840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='rxrpc_call_reset\x00', r0}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0), 0x0, 0x2000c044) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x600, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.67185694s ago: executing program 0 (id=841): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000800), 0x4) 2.49199848s ago: executing program 0 (id=842): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003380)) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.459886699s ago: executing program 3 (id=843): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000300)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'seclabel'}}]}, 0x4, 0x43d, &(0x7f0000000900)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa}) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.273904589s ago: executing program 0 (id=844): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000020000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 0s ago: executing program 0 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000540)="f60ebe67e9b62c3f672d2917cf89fe8da850ae6d656c099c290db9a8a91d68c014f084c605d123dd3dc54fb7b790ad9162bc531ed65341d5671fd6dcdc249c02251661ebf538861fa556e760151163da82d996546ffddf") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f447333de39c7095758218a68bc5142f0cb2229fa6"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) unshare(0x22020600) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x107f62, 0x80) kernel console output (not intermixed with test programs): 6: Failed to acquire dquot type 1 [ 147.123058][ T6341] EXT4-fs (loop1): 1 truncate cleaned up [ 147.144676][ T6341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.384691][ T6341] virt_wifi0 speed is unknown, defaulting to 1000 [ 149.840537][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.885318][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.739269][ T6358] siw: device registration error -23 [ 151.119008][ T5829] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.233975][ T6368] futex_wake_op: syz.3.147 tries to shift op by -1; fix this program [ 151.315492][ T5829] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 151.327903][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.344258][ T5829] usb 3-1: Product: syz [ 151.371120][ T5829] usb 3-1: Manufacturer: syz [ 151.392332][ T5829] usb 3-1: SerialNumber: syz [ 151.439103][ T5829] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 151.488710][ T5892] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 151.752908][ T5829] usb 3-1: USB disconnect, device number 6 [ 152.023645][ T6376] loop1: detected capacity change from 0 to 256 [ 152.137483][ T6376] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.149138][ T6376] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 152.285143][ T6376] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 152.876619][ T5892] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 152.890626][ T5892] ath9k_htc: Failed to initialize the device [ 152.908542][ T5829] usb 3-1: ath9k_htc: USB layer deinitialized [ 152.918722][ T976] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.218164][ T6383] Zero length message leads to an empty skb [ 154.431383][ T6390] netlink: 'syz.3.153': attribute type 12 has an invalid length. [ 154.730696][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 154.794306][ T976] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.818771][ T976] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.872301][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.924029][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.984919][ T976] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.028914][ T976] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.075955][ T976] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.167602][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.244545][ T976] usb 5-1: config 0 descriptor?? [ 155.665128][ T976] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 156.135582][ T5892] usb 5-1: USB disconnect, device number 5 [ 156.166537][ T6411] loop3: detected capacity change from 0 to 64 [ 156.199811][ T5892] usblp0: removed [ 156.237164][ T29] audit: type=1800 audit(1739516119.455:3): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 156.401290][ T6411] Trying to free block not in datazone [ 156.608600][ T976] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.803959][ T976] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 156.837687][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.856546][ T976] usb 2-1: Product: syz [ 156.862156][ T976] usb 2-1: Manufacturer: syz [ 156.874910][ T976] usb 2-1: SerialNumber: syz [ 156.882256][ T6420] siw: device registration error -23 [ 156.890827][ T976] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 156.908756][ T5829] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.928717][ T23] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 157.081019][ T5829] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.096243][ T5829] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.128547][ T5829] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.157365][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.175213][ T5829] usb 1-1: SerialNumber: syz [ 157.445587][ T5829] usb 1-1: 0:2 : does not exist [ 157.554127][ T5829] usb 1-1: USB disconnect, device number 3 [ 157.883992][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.070445][ T23] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 158.096901][ T23] ath9k_htc: Failed to initialize the device [ 158.545227][ T23] usb 2-1: ath9k_htc: USB layer deinitialized [ 159.200616][ T5892] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.338680][ T5892] usb 1-1: device descriptor read/64, error -71 [ 159.629923][ T5892] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.722371][ T6429] netlink: 'syz.4.168': attribute type 12 has an invalid length. [ 159.778789][ T5892] usb 1-1: device descriptor read/64, error -71 [ 159.897046][ T8] usb 2-1: USB disconnect, device number 5 [ 159.926605][ T5892] usb usb1-port1: attempt power cycle [ 161.943638][ T6440] loop3: detected capacity change from 0 to 40427 [ 161.980554][ T6440] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 162.010009][ T6440] F2FS-fs (loop3): invalid crc value [ 162.039643][ T6440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.244273][ T6440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 162.327492][ T5892] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.584044][ T6447] loop4: detected capacity change from 0 to 512 [ 162.627896][ T5892] usb 1-1: device descriptor read/8, error -71 [ 162.682887][ T6447] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.174: casefold flag without casefold feature [ 162.725399][ T6451] loop2: detected capacity change from 0 to 1024 [ 162.745559][ T6447] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.174: couldn't read orphan inode 15 (err -117) [ 162.777585][ T6451] EXT4-fs: Ignoring removed nobh option [ 162.796815][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.817974][ T6451] EXT4-fs: Ignoring removed bh option [ 162.837433][ T6453] siw: device registration error -23 [ 162.883780][ T6451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.363141][ T5837] syz-executor: attempt to access beyond end of device [ 163.363141][ T5837] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.150388][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.14.0-rc2-next-20250213-syzkaller #0 [ 164.150419][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 164.150439][ T5837] Call Trace: [ 164.150448][ T5837] [ 164.150457][ T5837] dump_stack_lvl+0x241/0x360 [ 164.150493][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.150519][ T5837] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 164.150551][ T5837] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 164.150588][ T5837] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 164.150631][ T5837] f2fs_handle_critical_error+0x38f/0x5a0 [ 164.150679][ T5837] f2fs_write_end_io+0x674/0x9a0 [ 164.150722][ T5837] __submit_merged_bio+0x2a9/0x710 [ 164.150767][ T5837] f2fs_submit_merged_write_cond+0x28a/0x360 [ 164.150818][ T5837] f2fs_write_data_pages+0x2c5e/0x3670 [ 164.150899][ T5837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 164.151060][ T5837] ? __pfx_lock_release+0x10/0x10 [ 164.151090][ T5837] ? do_raw_spin_lock+0x14f/0x370 [ 164.151133][ T5837] ? do_raw_spin_unlock+0x13c/0x8b0 [ 164.151168][ T5837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 164.151194][ T5837] do_writepages+0x35f/0x880 [ 164.151238][ T5837] ? __pfx_do_writepages+0x10/0x10 [ 164.151277][ T5837] ? filemap_fdatawrite+0x1e8/0x2a0 [ 164.151309][ T5837] ? do_raw_spin_lock+0x14f/0x370 [ 164.151336][ T5837] ? __pfx_lock_release+0x10/0x10 [ 164.151385][ T5837] ? do_raw_spin_unlock+0x13c/0x8b0 [ 164.151414][ T5837] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 164.151447][ T5837] filemap_fdatawrite+0x1f3/0x2a0 [ 164.151481][ T5837] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 164.151583][ T5837] ? do_raw_spin_unlock+0x13c/0x8b0 [ 164.151626][ T5837] f2fs_sync_dirty_inodes+0x348/0x860 [ 164.151677][ T5837] f2fs_write_checkpoint+0x8af/0x1de0 [ 164.151743][ T5837] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 164.151861][ T5837] ? kfree+0x196/0x430 [ 164.151889][ T5837] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 164.151917][ T5837] ? kill_f2fs_super+0x28e/0x6d0 [ 164.151951][ T5837] kill_f2fs_super+0x2b6/0x6d0 [ 164.151988][ T5837] ? __pfx_kill_f2fs_super+0x10/0x10 [ 164.152028][ T5837] ? shrinker_free+0x2ca/0x3d0 [ 164.152068][ T5837] deactivate_locked_super+0xc4/0x130 [ 164.152098][ T5837] cleanup_mnt+0x41f/0x4b0 [ 164.152124][ T5837] ? lockdep_hardirqs_on+0x99/0x150 [ 164.152164][ T5837] task_work_run+0x24f/0x310 [ 164.152201][ T5837] ? __pfx_task_work_run+0x10/0x10 [ 164.152221][ T5837] ? __x64_sys_umount+0x120/0x170 [ 164.152258][ T5837] ? syscall_exit_to_user_mode+0xa3/0x340 [ 164.152304][ T5837] syscall_exit_to_user_mode+0x13f/0x340 [ 164.152346][ T5837] do_syscall_64+0x100/0x230 [ 164.152369][ T5837] ? clear_bhb_loop+0x35/0x90 [ 164.152405][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.152443][ T5837] RIP: 0033:0x7f926a18e117 [ 164.152468][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 164.152485][ T5837] RSP: 002b:00007ffef874a728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 164.152507][ T5837] RAX: 0000000000000000 RBX: 00007f926a20e08c RCX: 00007f926a18e117 [ 164.152521][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef874a7e0 [ 164.152534][ T5837] RBP: 00007ffef874a7e0 R08: 0000000000000000 R09: 0000000000000000 [ 164.152546][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef874b870 [ 164.152560][ T5837] R13: 00007f926a20e08c R14: 0000000000027aaf R15: 00007ffef874b8b0 [ 164.152606][ T5837] [ 164.152615][ T5837] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 164.559735][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.150687][ T6469] overlayfs: failed to resolve './file1': -2 [ 165.883750][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.262249][ T6477] hub 6-0:1.0: USB hub found [ 166.268893][ T6477] hub 6-0:1.0: 1 port detected [ 166.328704][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.520527][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.540061][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.557794][ T8] usb 2-1: Product: syz [ 166.573062][ T8] usb 2-1: Manufacturer: syz [ 166.584238][ T8] usb 2-1: SerialNumber: syz [ 166.630348][ T8] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 166.773590][ T5829] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.873274][ T6482] loop2: detected capacity change from 0 to 2048 [ 166.881743][ T6482] ext4: Unknown parameter 'smackfsroot' [ 167.199812][ T6474] netlink: 'syz.0.184': attribute type 12 has an invalid length. [ 167.829426][ T6490] netlink: 72 bytes leftover after parsing attributes in process `syz.2.185'. [ 168.187628][ T5939] usb 2-1: USB disconnect, device number 6 [ 168.200012][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 168.221127][ T5829] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 168.221644][ T5829] ath9k_htc: Failed to initialize the device [ 168.228593][ T5939] usb 2-1: ath9k_htc: USB layer deinitialized [ 168.575360][ T6492] loop4: detected capacity change from 0 to 512 [ 168.589960][ T6492] EXT4-fs (loop4): Test dummy encryption mode enabled [ 168.650858][ T6492] EXT4-fs error (device loop4): __ext4_fill_super:5497: inode #2: comm syz.4.186: casefold flag without casefold feature [ 168.655199][ T6492] EXT4-fs (loop4): get root inode failed [ 168.655272][ T6492] EXT4-fs (loop4): mount failed [ 168.763379][ T6489] tty tty25: ldisc open failed (-12), clearing slot 24 [ 172.920532][ T6513] loop3: detected capacity change from 0 to 512 [ 172.957716][ T6513] EXT4-fs (loop3): Test dummy encryption mode enabled [ 172.968534][ T6513] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 173.027487][ T6513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.058321][ T6513] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.194: bad orphan inode 131083 [ 173.078136][ T6513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.330431][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.402642][ T6518] virt_wifi0 speed is unknown, defaulting to 1000 [ 174.605838][ T6528] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.891970][ T6532] futex_wake_op: syz.4.198 tries to shift op by -1; fix this program [ 175.018654][ T5829] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.196408][ T5829] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 175.228233][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.251162][ T5829] usb 1-1: Product: syz [ 175.272575][ T5829] usb 1-1: Manufacturer: syz [ 175.293363][ T5829] usb 1-1: SerialNumber: syz [ 175.319040][ T6545] siw: device registration error -23 [ 175.352490][ T5829] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.446551][ T6547] netlink: 'syz.3.203': attribute type 12 has an invalid length. [ 176.219158][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.406810][ T6551] loop3: detected capacity change from 0 to 128 [ 176.447606][ T23] usb 1-1: USB disconnect, device number 8 [ 176.678870][ T29] audit: type=1326 audit(1739516139.835:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2206d8cde9 code=0x7ffc0000 [ 176.767362][ T29] audit: type=1326 audit(1739516139.845:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f2206d8cde9 code=0x7ffc0000 [ 177.117453][ T29] audit: type=1326 audit(1739516139.845:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2206d8cde9 code=0x7ffc0000 [ 177.357978][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 177.366359][ T8] ath9k_htc: Failed to initialize the device [ 177.384599][ T23] usb 1-1: ath9k_htc: USB layer deinitialized [ 177.617601][ T6570] loop4: detected capacity change from 0 to 2048 [ 177.658728][ T6570] EXT4-fs: Ignoring removed bh option [ 177.710382][ T6570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.923554][ T29] audit: type=1804 audit(1739516141.135:7): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.214" name="/newroot/38/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 178.449704][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.489550][ T6585] overlayfs: failed to resolve './file0': -2 [ 179.247378][ T6583] netlink: 'syz.1.217': attribute type 12 has an invalid length. [ 179.617552][ T6593] loop3: detected capacity change from 0 to 512 [ 179.713337][ T6593] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.772509][ T6593] EXT4-fs (loop3): blocks per group (64) and clusters per group (32768) inconsistent [ 180.173771][ T5829] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.306699][ T6605] ./file0: Can't lookup blockdev [ 181.083809][ T5829] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.117392][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.137711][ T5829] usb 1-1: Product: syz [ 181.167802][ T5829] usb 1-1: Manufacturer: syz [ 181.180821][ T5829] usb 1-1: SerialNumber: syz [ 181.243266][ T5829] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.291336][ T5892] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.529378][ T23] usb 1-1: USB disconnect, device number 9 [ 181.626363][ T6613] loop1: detected capacity change from 0 to 128 [ 182.220758][ T6613] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.485586][ T5892] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 182.538026][ T5892] ath9k_htc: Failed to initialize the device [ 183.139660][ T6616] siw: device registration error -23 [ 183.497399][ T23] usb 1-1: ath9k_htc: USB layer deinitialized [ 183.717393][ T6621] loop4: detected capacity change from 0 to 512 [ 183.797699][ T6621] ext4: Unknown parameter 'permit_directio' [ 184.121093][ T6624] virt_wifi0 speed is unknown, defaulting to 1000 [ 185.363829][ T6637] loop3: detected capacity change from 0 to 256 [ 185.371356][ T6637] exfat: Deprecated parameter 'utf8' [ 185.376725][ T6637] exfat: Unknown parameter 'eraors' [ 187.236374][ T6637] loop3: detected capacity change from 0 to 2048 [ 189.454076][ T6014] Alternate GPT is invalid, using primary GPT. [ 189.477737][ T6014] loop3: p1 p2 p3 [ 189.596103][ T6647] loop1: detected capacity change from 0 to 512 [ 189.692711][ T6647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.707399][ T6647] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.239826][ T6014] udevd[6014]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 190.290898][ T5991] udevd[5991]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 190.298156][ T5993] udevd[5993]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 190.793016][ T6654] loop3: detected capacity change from 0 to 512 [ 190.950362][ T6654] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.238: casefold flag without casefold feature [ 191.068920][ T6654] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.238: couldn't read orphan inode 15 (err -117) [ 191.112446][ T6654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.368738][ T6662] loop2: detected capacity change from 0 to 512 [ 192.811610][ T6662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.826864][ T6662] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.651233][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.226998][ T6674] loop3: detected capacity change from 0 to 256 [ 194.612418][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.820899][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.708685][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.713373][ T6713] loop3: detected capacity change from 0 to 256 [ 204.553698][ T6718] loop4: detected capacity change from 0 to 64 [ 205.367475][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.399771][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.408028][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.501616][ T6732] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 206.409910][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.432905][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 206.440520][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.794001][ T6728] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.496177][ T6728] chnl_net:caif_netlink_parms(): no params data found [ 208.548849][ T5838] Bluetooth: hci5: command tx timeout [ 208.617653][ T6757] loop2: detected capacity change from 0 to 256 [ 209.223496][ T6759] kvm: kvm [6758]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x800000837 [ 209.236521][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.269166][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.286844][ T6728] bridge_slave_0: entered allmulticast mode [ 209.866342][ T6728] bridge_slave_0: entered promiscuous mode [ 209.936353][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.999838][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.007195][ T6728] bridge_slave_1: entered allmulticast mode [ 210.045460][ T6728] bridge_slave_1: entered promiscuous mode [ 210.230534][ T6728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.275511][ T6728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.547267][ T5838] Bluetooth: hci5: command tx timeout [ 211.723327][ T6728] team0: Port device team_slave_0 added [ 211.863397][ T6728] team0: Port device team_slave_1 added [ 212.009708][ T6787] siw: device registration error -23 [ 212.234276][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.250061][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.363071][ T6728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.394053][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.418612][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.617152][ T6728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.683441][ T6793] loop4: detected capacity change from 0 to 512 [ 212.774628][ T6793] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 214.190170][ T6728] hsr_slave_0: entered promiscuous mode [ 214.259129][ T6728] hsr_slave_1: entered promiscuous mode [ 214.291910][ T6728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.340288][ T6802] loop3: detected capacity change from 0 to 256 [ 214.366076][ T6728] Cannot create hsr debugfs directory [ 214.408042][ T5838] Bluetooth: hci5: command tx timeout [ 214.563470][ T29] audit: type=1326 audit(1739516177.785:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 214.758733][ T29] audit: type=1326 audit(1739516177.825:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 214.998604][ T29] audit: type=1326 audit(1739516177.825:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 215.088319][ T29] audit: type=1326 audit(1739516177.825:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 215.264630][ T29] audit: type=1326 audit(1739516177.825:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 215.560734][ T29] audit: type=1326 audit(1739516177.825:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 215.599123][ T29] audit: type=1326 audit(1739516177.825:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 215.694217][ T6814] hub 2-0:1.0: USB hub found [ 215.699345][ T6814] hub 2-0:1.0: 1 port detected [ 216.262202][ T29] audit: type=1326 audit(1739516177.865:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 216.448585][ T29] audit: type=1326 audit(1739516177.865:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 216.481608][ T5838] Bluetooth: hci5: command tx timeout [ 216.493038][ T6820] siw: device registration error -23 [ 216.646495][ T29] audit: type=1326 audit(1739516177.865:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 216.855163][ T6646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.883205][ T6824] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.378986][ T5890] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 217.445874][ T6728] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.536338][ T6728] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.591569][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.632745][ T5890] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.650612][ T6728] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.688076][ T5890] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 217.729317][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.796214][ T5890] usb 1-1: config 0 descriptor?? [ 218.001756][ T6728] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.026469][ T5890] usb 1-1: USB disconnect, device number 10 [ 220.408704][ T6728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.579244][ T6848] kvm: MONITOR instruction emulated as NOP! [ 220.717864][ T6728] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.737281][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.744582][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.400630][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.407902][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.908982][ T6861] siw: device registration error -23 [ 222.174904][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.490768][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 222.497345][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 222.504648][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 222.511992][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 223.435894][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.577125][ T6728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.720833][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.768721][ T5891] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 223.861859][ T6881] loop3: detected capacity change from 0 to 512 [ 223.971811][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 224.041721][ T6881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.055228][ T6881] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.264575][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 224.264614][ T29] audit: type=1800 audit(1739516187.435:21): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.304" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 225.065537][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 225.128386][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 225.138235][ T5891] usb 5-1: can't read configurations, error -71 [ 225.419167][ T54] Bluetooth: min 6 > max 0 [ 225.618868][ T5893] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.720456][ T6881] syz.3.304 (6881) used greatest stack depth: 18640 bytes left [ 225.745802][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.326612][ T6899] netlink: 'syz.4.308': attribute type 12 has an invalid length. [ 226.656076][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.001997][ T5893] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 227.042461][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.069647][ T5893] usb 1-1: Product: syz [ 227.073885][ T5893] usb 1-1: Manufacturer: syz [ 227.131223][ T5893] usb 1-1: SerialNumber: syz [ 227.163858][ T12] bridge_slave_1: left allmulticast mode [ 227.381127][ T6906] loop3: detected capacity change from 0 to 512 [ 227.472540][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 227.728580][ T12] bridge_slave_1: left promiscuous mode [ 228.161621][ T5893] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 228.181261][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.496942][ T6906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.549248][ T6906] EXT4-fs (loop3): orphan cleanup on readonly fs [ 228.583674][ T6906] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 228.594288][ T6906] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 228.604099][ T6906] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.310: Failed to acquire dquot type 1 [ 228.649201][ T6906] EXT4-fs (loop3): 1 truncate cleaned up [ 228.672848][ T6906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.031670][ T5893] usb 1-1: USB disconnect, device number 11 [ 229.042102][ T5892] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 229.103366][ T5893] usb 1-1: ath9k_htc: USB layer deinitialized [ 229.433648][ T12] bridge_slave_0: left allmulticast mode [ 229.478550][ T12] bridge_slave_0: left promiscuous mode [ 229.511729][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.588599][ T5893] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 229.770073][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.808955][ T5893] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.867375][ T5893] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 229.917599][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.970515][ T5893] usb 1-1: config 0 descriptor?? [ 230.586157][ T6911] loop4: detected capacity change from 0 to 32768 [ 230.603347][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.700287][ T6911] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.312 (6911) [ 230.805514][ T6913] loop2: detected capacity change from 0 to 32768 [ 230.861906][ T6911] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 230.889425][ T6911] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 230.922444][ T6913] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.941105][ T6911] BTRFS info (device loop4): using free-space-tree [ 231.413678][ T6913] XFS (loop2): Ending clean mount [ 232.177867][ T6913] XFS (loop2): Quotacheck needed: Please wait. [ 232.425846][ T5890] usb 1-1: USB disconnect, device number 12 [ 232.459409][ T6911] BTRFS error (device loop4): open_ctree failed: -4 [ 232.460371][ T54] Bluetooth: min 6 > max 0 [ 232.493569][ T6913] XFS (loop2): Quotacheck: Done. [ 232.719568][ T5840] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 232.745416][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.839309][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.225422][ T12] bond0 (unregistering): Released all slaves [ 233.238942][ T5890] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 234.314925][ T5890] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.331544][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.368408][ T5890] usb 4-1: Product: syz [ 234.374266][ T5890] usb 4-1: Manufacturer: syz [ 234.551871][ T5890] usb 4-1: SerialNumber: syz [ 234.559424][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 235.205627][ T5890] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.293325][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 235.439799][ T6728] veth0_vlan: entered promiscuous mode [ 235.546533][ T6728] veth1_vlan: entered promiscuous mode [ 235.616092][ T5892] usb 4-1: USB disconnect, device number 2 [ 235.905488][ T54] Bluetooth: min 6 > max 0 [ 235.968548][ T5890] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 236.113368][ T6728] veth0_macvtap: entered promiscuous mode [ 236.152651][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.176687][ T6728] veth1_macvtap: entered promiscuous mode [ 236.195161][ T5890] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 236.241606][ T5890] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 236.278492][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.312088][ T5890] usb 5-1: config 0 descriptor?? [ 236.474592][ T23] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 236.498750][ T23] ath9k_htc: Failed to initialize the device [ 236.509459][ T12] hsr_slave_0: left promiscuous mode [ 236.526904][ T5892] usb 4-1: ath9k_htc: USB layer deinitialized [ 236.585636][ T12] hsr_slave_1: left promiscuous mode [ 236.602171][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.637172][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.651946][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.683662][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.796446][ T12] veth1_macvtap: left promiscuous mode [ 236.827094][ T12] veth0_macvtap: left promiscuous mode [ 236.835029][ T12] veth1_vlan: left promiscuous mode [ 236.849358][ T12] veth0_vlan: left promiscuous mode [ 237.157134][ T6992] loop2: detected capacity change from 0 to 32768 [ 237.347667][ T6992] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.329 (6992) [ 237.916355][ T6992] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.961381][ T6992] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 237.972980][ T6992] BTRFS info (device loop2): using free-space-tree [ 237.991663][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 238.326418][ T6992] BTRFS info (device loop2): rebuilding free space tree [ 239.727360][ T5892] usb 5-1: USB disconnect, device number 8 [ 239.938273][ T6992] syz.2.329 (6992) used greatest stack depth: 18448 bytes left [ 240.916845][ T5840] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 241.338879][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 241.470266][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.555005][ T12] team0 (unregistering): Port device team_slave_0 removed [ 241.740784][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.751294][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 241.762266][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 241.772142][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.785694][ T23] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 241.795452][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.814357][ T7045] hub 2-0:1.0: USB hub found [ 241.819483][ T7045] hub 2-0:1.0: 1 port detected [ 241.856334][ T23] usb 1-1: config 0 descriptor?? [ 241.866711][ T23] gspca_main: spca561-2.14.0 probing abcd:cdee [ 242.078940][ T23] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 242.096812][ T23] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.116848][ T23] usb 1-1: MIDIStreaming interface descriptor not found [ 242.197843][ T23] usb 1-1: USB disconnect, device number 13 [ 243.026953][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.464757][ T5890] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 243.961938][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.972407][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.985191][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.005725][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.016707][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.027012][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.047960][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.048848][ T5890] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 244.061489][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.074500][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.074528][ T5890] usb 4-1: Product: syz [ 244.074545][ T5890] usb 4-1: Manufacturer: syz [ 244.074562][ T5890] usb 4-1: SerialNumber: syz [ 244.140234][ T5890] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 244.145847][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.199635][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.209627][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.223354][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.238840][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.239630][ T976] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 244.258882][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.274700][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.289307][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.304679][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.456177][ T7058] wg2: entered promiscuous mode [ 244.461260][ T7058] wg2: entered allmulticast mode [ 245.302173][ T6728] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.315429][ T6728] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.324822][ T6728] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.337736][ T6728] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.620475][ T976] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 245.627613][ T976] ath9k_htc: Failed to initialize the device [ 245.638881][ T5939] usb 4-1: USB disconnect, device number 3 [ 245.660726][ T5939] usb 4-1: ath9k_htc: USB layer deinitialized [ 245.965454][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 246.236706][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.839379][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.895257][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.923709][ T23] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 246.966560][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.026148][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.080388][ T23] usb 1-1: config 0 descriptor?? [ 247.182547][ T6101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.240517][ T6101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.360987][ T7081] loop4: detected capacity change from 0 to 2048 [ 247.413259][ T7081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.503750][ T12] IPVS: stop unused estimator thread 0... [ 247.591765][ T7070] loop2: detected capacity change from 0 to 32768 [ 247.634408][ T7070] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.345 (7070) [ 247.744354][ T7070] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 247.781478][ T7070] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 247.808068][ T7070] BTRFS info (device loop2): using free-space-tree [ 248.948784][ T7070] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 248.985295][ T7070] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 249.169591][ T7070] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 250.401651][ T7070] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 250.493730][ T7070] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 250.594879][ T7070] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 250.646274][ T23] usb 1-1: USB disconnect, device number 14 [ 250.656130][ T7070] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 250.656850][ T7070] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 250.657418][ T7070] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 250.740219][ T7070] BTRFS error (device loop2): open_ctree failed: -12 [ 250.888625][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 252.021504][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.012588][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 255.020046][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 255.058509][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.908530][ T5893] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 255.928461][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.960532][ T5893] usb 4-1: config 0 descriptor?? [ 256.008862][ T5893] usb 4-1: can't set config #0, error -71 [ 256.060408][ T5893] usb 4-1: USB disconnect, device number 4 [ 256.306192][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 256.470268][ T5893] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 256.731841][ T5893] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.747513][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.767853][ T5893] usb 4-1: Product: syz [ 256.788805][ T5893] usb 4-1: Manufacturer: syz [ 256.793465][ T5893] usb 4-1: SerialNumber: syz [ 256.843031][ T5893] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 256.867159][ T5892] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 257.135021][ T9] usb 4-1: USB disconnect, device number 5 [ 258.001400][ T5892] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 258.228537][ T5892] ath9k_htc: Failed to initialize the device [ 258.247552][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 258.559796][ T5939] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 258.760496][ T5939] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 259.201210][ T5939] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 260.251402][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.209808][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.216259][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.214153][ T5939] usb 5-1: config 0 descriptor?? [ 262.752975][ T7198] loop4: detected capacity change from 0 to 64 [ 262.869009][ T5829] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 262.885832][ T29] audit: type=1800 audit(1739516226.105:22): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.368" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 263.104851][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.166090][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 263.209133][ T5939] usb 5-1: can't set config #0, error -71 [ 263.238882][ T5939] usb 5-1: USB disconnect, device number 9 [ 263.245064][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.401223][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.521862][ T5829] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 263.560854][ T7207] loop5: detected capacity change from 0 to 2048 [ 263.620409][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.648403][ T7207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.709702][ T5829] usb 1-1: config 0 descriptor?? [ 263.790920][ T5829] gspca_main: spca561-2.14.0 probing abcd:cdee [ 263.932171][ T5829] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 263.962321][ T5829] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.988786][ T5829] usb 1-1: MIDIStreaming interface descriptor not found [ 264.152304][ T7220] loop3: detected capacity change from 0 to 512 [ 264.296639][ T7220] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.372: corrupted in-inode xattr: invalid ea_ino [ 264.318898][ T7220] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.372: couldn't read orphan inode 15 (err -117) [ 264.360691][ T7220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.952059][ T5829] usb 1-1: USB disconnect, device number 15 [ 266.701659][ T5939] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 266.968498][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 267.317622][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.730804][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 267.860823][ T5939] usb 5-1: device descriptor read/all, error -71 [ 268.049160][ T46] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.095614][ T46] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 268.106119][ T7250] loop4: detected capacity change from 0 to 64 [ 268.164904][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.258604][ T29] audit: type=1800 audit(1739516231.435:23): pid=7250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.381" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 268.313079][ T46] usb 3-1: config 0 descriptor?? [ 268.530222][ T7255] ipvlan2: entered promiscuous mode [ 268.585853][ T7255] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 268.631722][ T7255] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 270.442326][ T5829] usb 3-1: USB disconnect, device number 7 [ 270.449980][ T7264] udevd[7264]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.824408][ T7267] loop4: detected capacity change from 0 to 2048 [ 270.924782][ T7267] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.098654][ T5829] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 271.331419][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.415854][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 271.532720][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 271.600729][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.705971][ T5829] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 271.764969][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.819491][ T5829] usb 3-1: config 0 descriptor?? [ 272.833475][ T5829] gspca_main: spca561-2.14.0 probing abcd:cdee [ 272.843038][ T5829] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 273.832635][ T5829] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.833727][ T5829] usb 3-1: MIDIStreaming interface descriptor not found [ 276.267886][ T5829] usb 3-1: USB disconnect, device number 8 [ 276.332728][ T29] audit: type=1326 audit(1739516239.555:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98c58cde9 code=0x7ffc0000 [ 276.916917][ T7296] loop3: detected capacity change from 0 to 512 [ 277.220517][ T7296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.235843][ T7296] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.319946][ T29] audit: type=1326 audit(1739516239.605:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb98c58cde9 code=0x7ffc0000 [ 277.687348][ T29] audit: type=1326 audit(1739516239.605:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98c58cde9 code=0x7ffc0000 [ 277.717017][ T29] audit: type=1800 audit(1739516240.685:27): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.390" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 280.152510][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.236142][ T7269] udevd[7269]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.060121][ T5939] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 286.302142][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.320663][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 286.404096][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.439719][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.491039][ T5939] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 286.764293][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.791871][ T7338] loop5: detected capacity change from 0 to 32768 [ 286.809069][ T5939] usb 5-1: config 0 descriptor?? [ 286.814124][ T7338] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.401 (7338) [ 286.836985][ T5939] gspca_main: spca561-2.14.0 probing abcd:cdee [ 287.604071][ T5939] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 287.639936][ T5939] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.647089][ T5939] usb 5-1: MIDIStreaming interface descriptor not found [ 287.933411][ T5939] usb 5-1: USB disconnect, device number 12 [ 288.073822][ T7371] loop3: detected capacity change from 0 to 256 [ 288.116967][ T7371] exfat: Deprecated parameter 'namecase' [ 288.185217][ T7371] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 288.261316][ T7372] udevd[7372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.620887][ T7379] loop5: detected capacity change from 0 to 64 [ 289.529870][ T29] audit: type=1800 audit(1739516252.745:28): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.407" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 291.120430][ T7396] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 291.408986][ T7408] loop3: detected capacity change from 0 to 128 [ 291.524533][ T7408] xt_bpf: check failed: parse error [ 292.438448][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 294.410432][ T7426] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.417051][ T7426] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.424991][ T7426] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.449333][ T7426] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 294.542937][ T7424] overlayfs: conflicting lowerdir path [ 294.573567][ T7426] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.589497][ T7426] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.626004][ T7426] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.661793][ T7426] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.699864][ T7426] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.815496][ T7435] loop2: detected capacity change from 0 to 256 [ 296.698310][ T7439] loop4: detected capacity change from 0 to 64 [ 297.024956][ T5893] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 297.084091][ T29] audit: type=1800 audit(1739516260.295:29): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.422" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 297.221170][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.255038][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 297.765292][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.423'. [ 298.428552][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.514219][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.553326][ T5893] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 298.564590][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.709445][ T5893] usb 6-1: config 0 descriptor?? [ 298.768837][ T5893] usb 6-1: can't set config #0, error -71 [ 298.809161][ T5893] usb 6-1: USB disconnect, device number 2 [ 299.790171][ T7458] netlink: 'syz.3.428': attribute type 4 has an invalid length. [ 300.083146][ T7467] netlink: 'syz.3.428': attribute type 4 has an invalid length. [ 300.428564][ T7461] loop2: detected capacity change from 0 to 512 [ 300.723441][ T7461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.777553][ T7461] EXT4-fs (loop2): orphan cleanup on readonly fs [ 300.797071][ T7461] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 300.807164][ T7461] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 300.818795][ T7461] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.426: Failed to acquire dquot type 1 [ 300.851121][ T7461] EXT4-fs (loop2): 1 truncate cleaned up [ 300.890094][ T7461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.625039][ T7461] virt_wifi0 speed is unknown, defaulting to 1000 [ 303.591003][ T29] audit: type=1326 audit(1739516266.755:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 303.645033][ T7479] loop3: detected capacity change from 0 to 1024 [ 303.687880][ T7479] ext4: Unknown parameter 'nouser_xattr' [ 303.706855][ T29] audit: type=1326 audit(1739516266.755:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 303.872888][ T29] audit: type=1326 audit(1739516266.775:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 303.905451][ T29] audit: type=1326 audit(1739516266.775:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 304.402596][ T29] audit: type=1326 audit(1739516266.775:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 304.854766][ T29] audit: type=1326 audit(1739516266.785:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 304.958644][ T29] audit: type=1326 audit(1739516266.785:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 305.188901][ T29] audit: type=1326 audit(1739516266.785:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 305.252057][ T29] audit: type=1326 audit(1739516266.785:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 305.282005][ T29] audit: type=1326 audit(1739516266.795:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 306.586017][ T7491] loop3: detected capacity change from 0 to 4096 [ 307.078934][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.368505][ T5829] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 307.439567][ T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 307.543522][ T5829] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.573276][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.593523][ T5829] usb 6-1: Product: syz [ 307.597745][ T5829] usb 6-1: Manufacturer: syz [ 307.633696][ T5829] usb 6-1: SerialNumber: syz [ 307.676293][ T5829] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.735738][ T5891] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 307.881030][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.580754][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 308.664927][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.771414][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.814188][ T976] usb 6-1: USB disconnect, device number 3 [ 308.907719][ T46] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 308.974112][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.034827][ T46] usb 5-1: config 0 descriptor?? [ 309.075420][ T46] gspca_main: spca561-2.14.0 probing abcd:cdee [ 309.130367][ T7519] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 309.285858][ T46] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 309.327634][ T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.350188][ T46] usb 5-1: MIDIStreaming interface descriptor not found [ 309.528629][ T46] usb 5-1: USB disconnect, device number 13 [ 309.744159][ T7532] loop2: detected capacity change from 0 to 256 [ 309.831553][ T5891] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 309.874261][ T5891] ath9k_htc: Failed to initialize the device [ 310.039057][ T976] usb 6-1: ath9k_htc: USB layer deinitialized [ 310.063153][ T7532] FAT-fs (loop2): Directory bread(block 64) failed [ 310.097840][ T7386] udevd[7386]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.118610][ T7532] FAT-fs (loop2): Directory bread(block 65) failed [ 310.143513][ T7532] FAT-fs (loop2): Directory bread(block 66) failed [ 310.152637][ T7532] FAT-fs (loop2): Directory bread(block 67) failed [ 310.181503][ T7532] FAT-fs (loop2): Directory bread(block 68) failed [ 310.195646][ T7532] FAT-fs (loop2): Directory bread(block 69) failed [ 310.230423][ T7532] FAT-fs (loop2): Directory bread(block 70) failed [ 310.263289][ T7532] FAT-fs (loop2): Directory bread(block 71) failed [ 310.278223][ T7532] FAT-fs (loop2): Directory bread(block 72) failed [ 310.300369][ T7532] FAT-fs (loop2): Directory bread(block 73) failed [ 310.315818][ T7540] loop5: detected capacity change from 0 to 2048 [ 310.337351][ T7540] ext4: Unknown parameter 'smackfsroot' [ 311.926159][ T7558] loop5: detected capacity change from 0 to 4096 [ 313.887281][ T7580] pim6reg1: entered promiscuous mode [ 313.968619][ T7580] pim6reg1: entered allmulticast mode [ 315.163408][ T7589] loop4: detected capacity change from 0 to 64 [ 315.300396][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 315.300415][ T29] audit: type=1800 audit(1739516278.525:64): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.459" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 321.691227][ T7660] loop3: detected capacity change from 0 to 64 [ 321.762689][ T29] audit: type=1800 audit(1739516284.985:65): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.475" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 322.822447][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.830025][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.111959][ T5939] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 326.528557][ T7699] loop2: detected capacity change from 0 to 256 [ 326.561095][ T5939] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 326.573999][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.586132][ T5939] usb 5-1: config 0 descriptor?? [ 326.830829][ T7699] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 328.076517][ T5939] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 329.748541][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 330.182737][ T5891] usb 5-1: USB disconnect, device number 14 [ 332.570794][ T7765] hub 2-0:1.0: USB hub found [ 332.578520][ T7765] hub 2-0:1.0: 1 port detected [ 334.484530][ T7779] loop3: detected capacity change from 0 to 64 [ 334.582798][ T29] audit: type=1800 audit(1739516297.805:66): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.503" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 334.912021][ T5939] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 335.079028][ T5939] usb 5-1: device descriptor read/64, error -71 [ 335.248495][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 335.326158][ T5939] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 335.431061][ T9] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 335.450075][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.468797][ T5939] usb 5-1: device descriptor read/64, error -71 [ 335.469003][ T5891] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 335.490025][ T9] usb 6-1: config 0 descriptor?? [ 335.579103][ T5939] usb usb5-port1: attempt power cycle [ 335.671613][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.695679][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 335.716472][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 335.733111][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.746672][ T5891] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 335.757826][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.782486][ T5891] usb 4-1: config 0 descriptor?? [ 335.804024][ T5891] gspca_main: spca561-2.14.0 probing abcd:cdee [ 335.950212][ T5939] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 335.970939][ T5939] usb 5-1: device descriptor read/8, error -71 [ 336.036123][ T5891] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 336.063281][ T5891] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.088571][ T5891] usb 4-1: MIDIStreaming interface descriptor not found [ 336.175196][ T5891] usb 4-1: USB disconnect, device number 6 [ 336.211864][ T5939] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 336.301101][ T5939] usb 5-1: device descriptor read/8, error -71 [ 336.324718][ T9] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 336.409339][ T5939] usb usb5-port1: unable to enumerate USB device [ 336.550627][ T7335] udevd[7335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.781535][ T7815] hub 2-0:1.0: USB hub found [ 337.787972][ T7815] hub 2-0:1.0: 1 port detected [ 339.611347][ T5939] usb 6-1: USB disconnect, device number 4 [ 343.930680][ T7870] lo speed is unknown, defaulting to 1000 [ 344.019321][ T5891] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 344.036775][ T7870] lo speed is unknown, defaulting to 1000 [ 344.198530][ T5891] usb 1-1: device descriptor read/64, error -71 [ 344.497539][ T5891] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 344.820009][ T7870] lo speed is unknown, defaulting to 1000 [ 345.071851][ T5891] usb 1-1: device descriptor read/64, error -71 [ 345.199106][ T5891] usb usb1-port1: attempt power cycle [ 345.300163][ T7870] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 345.411383][ T7892] devpts: Unknown parameter 'g' [ 345.494619][ T7870] lo speed is unknown, defaulting to 1000 [ 345.520534][ T7870] lo speed is unknown, defaulting to 1000 [ 345.588534][ T7870] lo speed is unknown, defaulting to 1000 [ 345.613544][ T7870] lo speed is unknown, defaulting to 1000 [ 345.646792][ T5891] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 345.656578][ T7870] lo speed is unknown, defaulting to 1000 [ 345.708662][ T5891] usb 1-1: device descriptor read/8, error -71 [ 345.797281][ T7900] loop2: detected capacity change from 0 to 64 [ 345.861150][ T7885] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 345.918826][ T29] audit: type=1800 audit(1739516309.135:67): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.534" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 345.970115][ T5891] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 346.039136][ T5891] usb 1-1: device descriptor read/8, error -71 [ 346.067235][ T7885] usb 6-1: Using ep0 maxpacket: 8 [ 346.077506][ T7885] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 346.101666][ T7885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.159112][ T5891] usb usb1-port1: unable to enumerate USB device [ 346.170310][ T7885] usb 6-1: config 0 has no interface number 0 [ 346.224031][ T7885] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 346.264155][ T7885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.304667][ T7885] usb 6-1: Product: syz [ 346.313332][ T7885] usb 6-1: Manufacturer: syz [ 346.333215][ T7885] usb 6-1: SerialNumber: syz [ 346.387273][ T7885] usb 6-1: config 0 descriptor?? [ 346.982554][ T7892] Cannot find add_set index 0 as target [ 347.407603][ T7885] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 347.432444][ T7885] usb 6-1: No valid video chain found. [ 347.440579][ T7885] usb 6-1: USB disconnect, device number 5 [ 350.951731][ T7950] siw: device registration error -23 [ 351.956534][ T7886] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 352.118692][ T7886] usb 4-1: device descriptor read/64, error -71 [ 352.138246][ T7974] ipvlan2: entered promiscuous mode [ 352.145913][ T7974] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 352.168236][ T7974] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.380880][ T7886] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 352.602591][ T7981] netlink: 'syz.4.555': attribute type 6 has an invalid length. [ 353.328486][ T7886] usb 4-1: device descriptor read/64, error -71 [ 353.477236][ T7886] usb usb4-port1: attempt power cycle [ 353.898871][ T7886] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 353.988669][ T7886] usb 4-1: device descriptor read/8, error -71 [ 354.269259][ T7886] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 354.352107][ T7886] usb 4-1: device descriptor read/8, error -71 [ 354.499308][ T7886] usb usb4-port1: unable to enumerate USB device [ 354.935971][ T8001] siw: device registration error -23 [ 355.310374][ T8000] syzkaller0: entered promiscuous mode [ 355.352282][ T8000] syzkaller0: entered allmulticast mode [ 355.773723][ T7988] loop4: detected capacity change from 0 to 40427 [ 355.943397][ T7988] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 355.983197][ T7988] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 356.076344][ T7988] F2FS-fs (loop4): invalid crc value [ 356.902988][ T7988] F2FS-fs (loop4): Found nat_bits in checkpoint [ 357.252721][ T8015] loop5: detected capacity change from 0 to 40427 [ 357.261306][ T8015] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 357.280124][ T8015] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 357.310439][ T8015] F2FS-fs (loop5): invalid crc value [ 357.377739][ T8015] F2FS-fs (loop5): Found nat_bits in checkpoint [ 357.549374][ T8015] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 357.556470][ T8015] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 357.806833][ T8015] syz.5.566: attempt to access beyond end of device [ 357.806833][ T8015] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 357.893009][ T29] audit: type=1800 audit(1739516321.115:68): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.566" name=7EBB4FEA777CF663BB4F1505ED79730C45BC86E488A13F924377A8E2EE6670A02CA52874AE1C42A35D55B9765757047B2CC3742AA51FA3E43FB2C113C92AD213BAD252C1A82966DD016F12A7F1C3900C0F1AB455035163F31899BDD30F3FF43AD17D9E45BB7438C1C986712736F24BE14F71AB1BFE92A25EC07F086EE8C7971B8077A13E58A8E8BEA39C8E06B251909F02CB dev="loop5" ino=457 res=0 errno=0 [ 358.047949][ T11] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 358.084212][ T11] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 358.438782][ T8036] netlink: 'syz.3.569': attribute type 6 has an invalid length. [ 361.213352][ T8042] loop5: detected capacity change from 0 to 32768 [ 361.222516][ T8042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.572 (8042) [ 361.258200][ T8042] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 361.302160][ T8042] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 361.319859][ T8042] BTRFS info (device loop5): using free-space-tree [ 361.416833][ T8042] BTRFS info (device loop5): rebuilding free space tree [ 361.539317][ T29] audit: type=1800 audit(1739516324.765:69): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.572" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 361.892705][ T6728] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 362.469880][ T8062] siw: device registration error -23 [ 363.162586][ T8072] virt_wifi0 speed is unknown, defaulting to 1000 [ 363.247020][ T8072] lo speed is unknown, defaulting to 1000 [ 364.939204][ T7886] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 365.025053][ T8084] loop5: detected capacity change from 0 to 32768 [ 365.067123][ T8084] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.573 (8084) [ 365.158640][ T7886] usb 5-1: Using ep0 maxpacket: 32 [ 365.186814][ T7886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.243698][ T8084] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 365.405342][ T8084] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 365.507416][ T29] audit: type=1326 audit(1739516328.615:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 365.850262][ T8084] BTRFS info (device loop5): using free-space-tree [ 365.905208][ T29] audit: type=1326 audit(1739516328.615:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 366.024393][ T7886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.043777][ T7886] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 366.053012][ T7886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.065664][ T7886] usb 5-1: config 0 descriptor?? [ 366.133742][ T7886] hub 5-1:0.0: USB hub found [ 366.148694][ T8084] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 366.149242][ T8084] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 366.213469][ T8084] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 366.225796][ T8084] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 366.286824][ T7886] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 366.362101][ T8084] BTRFS error (device loop5): open_ctree failed: -12 [ 366.521052][ T7886] usbhid 5-1:0.0: can't add hid device: -71 [ 366.528453][ T7075] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 366.530029][ T7886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 366.622646][ T7886] usb 5-1: USB disconnect, device number 19 [ 366.910829][ T7075] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 366.928829][ T7075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.981158][ T7075] usb 3-1: config 0 descriptor?? [ 367.934470][ T8138] ipvlan2: entered promiscuous mode [ 367.947804][ T8101] loop3: detected capacity change from 0 to 32768 [ 367.959487][ T8138] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 367.977398][ T8138] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 368.232143][ T7075] pegasus 3-1:0.0: probe with driver pegasus failed with error -121 [ 368.335672][ T8140] virt_wifi0 speed is unknown, defaulting to 1000 [ 368.449487][ T8140] lo speed is unknown, defaulting to 1000 [ 368.962338][ T8134] loop5: detected capacity change from 0 to 32768 [ 369.003594][ T8134] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 369.608889][ T5894] usb 3-1: USB disconnect, device number 9 [ 369.961325][ T8134] XFS (loop5): Ending clean mount [ 369.997862][ T8134] XFS (loop5): Quotacheck needed: Please wait. [ 370.196752][ T8134] XFS (loop5): Quotacheck: Done. [ 370.594565][ T6728] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 372.957198][ T8206] ipvlan2: entered promiscuous mode [ 373.009177][ T8206] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 373.078290][ T8206] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 374.275415][ T8215] loop4: detected capacity change from 0 to 512 [ 374.505878][ T8215] EXT4-fs (loop4): Test dummy encryption mode enabled [ 374.539236][ T8215] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 374.663856][ T8215] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.605: bad orphan inode 131083 [ 374.791470][ T8230] loop2: detected capacity change from 0 to 512 [ 375.032578][ T8230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.045732][ T8230] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.300327][ T5894] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 375.355756][ T8215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.671286][ T5894] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 376.683999][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.580443][ T5894] usb 1-1: config 0 descriptor?? [ 377.601331][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.801952][ T5894] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 377.853086][ T5894] usb 1-1: USB disconnect, device number 20 [ 377.929236][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.069343][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.075718][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.613892][ T8289] netlink: 'syz.5.622': attribute type 29 has an invalid length. [ 384.930485][ T8291] netlink: 36 bytes leftover after parsing attributes in process `syz.4.628'. [ 385.198596][ T5894] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 385.369310][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 385.380823][ T5894] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 385.397706][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.429020][ T5894] usb 4-1: config 0 has no interface number 0 [ 385.439207][ T5894] usb 4-1: config 0 interface 183 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 385.451357][ T5894] usb 4-1: config 0 interface 183 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.479286][ T5894] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 385.496564][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.541909][ T5894] usb 4-1: Product: syz [ 385.541934][ T5894] usb 4-1: Manufacturer: syz [ 385.541951][ T5894] usb 4-1: SerialNumber: syz [ 385.547502][ T5894] usb 4-1: config 0 descriptor?? [ 385.559768][ T5894] net1080 4-1:0.183: probe with driver net1080 failed with error -22 [ 385.749301][ T29] audit: type=1326 audit(1739516348.975:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d258cde9 code=0x7ffc0000 [ 385.843391][ T29] audit: type=1326 audit(1739516348.975:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d258cde9 code=0x7ffc0000 [ 386.125748][ T29] audit: type=1326 audit(1739516349.005:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d258cde9 code=0x7ffc0000 [ 386.149437][ T29] audit: type=1326 audit(1739516349.005:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d258cde9 code=0x7ffc0000 [ 386.188503][ T29] audit: type=1326 audit(1739516349.015:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d258cde9 code=0x7ffc0000 [ 386.249731][ T29] audit: type=1326 audit(1739516349.015:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d258cde9 code=0x7ffc0000 [ 386.799888][ T29] audit: type=1326 audit(1739516349.015:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d258cde9 code=0x7ffc0000 [ 387.015379][ T29] audit: type=1326 audit(1739516349.015:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d258cde9 code=0x7ffc0000 [ 387.133634][ T29] audit: type=1326 audit(1739516349.015:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d258cde9 code=0x7ffc0000 [ 387.167054][ T29] audit: type=1326 audit(1739516349.015:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d258cde9 code=0x7ffc0000 [ 388.779667][ T5939] usb 4-1: USB disconnect, device number 11 [ 389.033881][ T8324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.640'. [ 389.622050][ T8338] siw: device registration error -23 [ 396.458237][ T8366] loop5: detected capacity change from 0 to 32768 [ 396.538673][ T8366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.655 (8366) [ 397.194722][ T8382] loop4: detected capacity change from 0 to 40427 [ 397.217115][ T8382] F2FS-fs (loop4): invalid crc value [ 397.237163][ T8382] F2FS-fs (loop4): Found nat_bits in checkpoint [ 397.356752][ T8347] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 397.520879][ T8347] usb 3-1: Using ep0 maxpacket: 32 [ 397.604333][ T8347] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 397.671211][ T8347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.770869][ T8347] usb 3-1: config 0 has no interface number 0 [ 398.077552][ T8382] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 398.558902][ T8347] usb 3-1: config 0 interface 183 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.594462][ T8347] usb 3-1: config 0 interface 183 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.854034][ T8347] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 399.168424][ T8347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.176622][ T8347] usb 3-1: Product: syz [ 399.198784][ T8347] usb 3-1: Manufacturer: syz [ 399.203522][ T8347] usb 3-1: SerialNumber: syz [ 399.333177][ T8347] usb 3-1: config 0 descriptor?? [ 399.764839][ T8347] net1080 3-1:0.183: probe with driver net1080 failed with error -22 [ 400.902926][ T8347] usb 3-1: USB disconnect, device number 10 [ 405.565242][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 405.565260][ T29] audit: type=1326 audit(1739516368.775:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 405.721739][ T29] audit: type=1326 audit(1739516368.775:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 406.658583][ T29] audit: type=1326 audit(1739516368.775:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 406.701483][ T7885] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 406.729700][ T29] audit: type=1326 audit(1739516368.785:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 406.833657][ T29] audit: type=1326 audit(1739516368.785:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 406.902665][ T7885] usb 5-1: Using ep0 maxpacket: 32 [ 406.932842][ T7885] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 406.988463][ T29] audit: type=1326 audit(1739516368.785:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 407.012479][ T7885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.069972][ T7885] usb 5-1: config 0 has no interface number 0 [ 407.078951][ T8465] netlink: 'syz.0.686': attribute type 12 has an invalid length. [ 407.100928][ T7885] usb 5-1: config 0 interface 183 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 408.077836][ T29] audit: type=1326 audit(1739516368.785:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 409.060969][ T7885] usb 5-1: config 0 interface 183 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.078676][ T29] audit: type=1326 audit(1739516368.785:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 409.101251][ T29] audit: type=1326 audit(1739516368.785:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 409.411371][ T29] audit: type=1326 audit(1739516368.785:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10318cde9 code=0x7ffc0000 [ 410.019509][ T7885] usb 5-1: string descriptor 0 read error: -71 [ 410.025913][ T7885] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 410.044458][ T7885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.085800][ T7885] usb 5-1: config 0 descriptor?? [ 410.140316][ T7885] usb 5-1: can't set config #0, error -71 [ 411.127555][ T7885] usb 5-1: USB disconnect, device number 20 [ 411.378603][ T8476] loop3: detected capacity change from 0 to 512 [ 411.496095][ T8476] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 415.583531][ T8503] loop3: detected capacity change from 0 to 128 [ 415.905947][ T5891] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 416.854926][ T8514] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 416.939759][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 417.625659][ T8518] loop5: detected capacity change from 0 to 1024 [ 417.633900][ T8518] EXT4-fs: Ignoring removed orlov option [ 417.642376][ T8518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.654681][ T5891] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 417.665759][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.675798][ T5891] usb 3-1: Product: syz [ 417.680628][ T5891] usb 3-1: Manufacturer: syz [ 417.685501][ T5891] usb 3-1: SerialNumber: syz [ 417.694161][ T5891] usb 3-1: config 0 descriptor?? [ 417.719649][ T5891] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 417.732139][ T5891] usb 3-1: Detected FT-X [ 417.752518][ T8518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.779314][ T8347] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 417.913099][ T5891] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 417.957669][ T8347] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 417.974765][ T8347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.070074][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 418.109596][ T8528] loop4: detected capacity change from 0 to 512 [ 418.208414][ T8528] EXT4-fs (loop4): Test dummy encryption mode enabled [ 418.215471][ T8528] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 418.225754][ T8528] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 418.282225][ T5891] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 418.698291][ T5891] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 418.956356][ T8528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.964084][ T8528] IPv6: NLM_F_CREATE should be set when creating new route [ 418.981113][ T8347] usb 4-1: config 0 descriptor?? [ 418.985793][ T5891] usb 3-1: USB disconnect, device number 11 [ 419.221445][ T5891] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 419.335211][ T5891] ftdi_sio 3-1:0.0: device disconnected [ 419.493888][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.434104][ T8534] loop5: detected capacity change from 0 to 512 [ 420.480851][ T8534] ext4: Unknown parameter 'permit_directio' [ 420.755266][ T8347] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 420.815733][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.704'. [ 421.313110][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.323462][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.334856][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.346177][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.356214][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 421.363973][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.468853][ T6643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.495119][ T976] usb 4-1: USB disconnect, device number 12 [ 421.809845][ T6643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.974810][ T8556] loop5: detected capacity change from 0 to 512 [ 423.000419][ T8556] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.711: corrupted in-inode xattr: invalid ea_ino [ 423.017184][ T8542] virt_wifi0 speed is unknown, defaulting to 1000 [ 423.018543][ T8556] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.711: couldn't read orphan inode 15 (err -117) [ 423.272917][ T8556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.487203][ T54] Bluetooth: hci0: command tx timeout [ 423.657526][ T6643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.789390][ T8542] lo speed is unknown, defaulting to 1000 [ 424.102024][ T6643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.543987][ T8570] loop3: detected capacity change from 0 to 128 [ 424.674939][ T8570] xt_bpf: check failed: parse error [ 425.346467][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.468888][ T6643] bridge_slave_1: left allmulticast mode [ 425.474604][ T6643] bridge_slave_1: left promiscuous mode [ 425.510744][ T54] Bluetooth: hci0: command tx timeout [ 425.574341][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.654739][ T6643] bridge_slave_0: left allmulticast mode [ 425.681541][ T6643] bridge_slave_0: left promiscuous mode [ 425.690073][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.729048][ T8577] loop5: detected capacity change from 0 to 512 [ 425.798248][ T8577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 425.918794][ T8577] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.013423][ T8588] netlink: 165 bytes leftover after parsing attributes in process `syz.5.718'. [ 428.026502][ T54] Bluetooth: hci0: command tx timeout [ 428.803342][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 429.902358][ T8608] loop5: detected capacity change from 0 to 512 [ 429.976297][ T8608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.989357][ T8608] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.070709][ T54] Bluetooth: hci0: command tx timeout [ 430.734800][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.101601][ T6643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.120359][ T6643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.158314][ T6643] bond0 (unregistering): Released all slaves [ 431.375931][ T8620] overlayfs: failed to resolve './file0': -2 [ 431.946692][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.956320][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.143070][ T8618] bridge_slave_1: left allmulticast mode [ 432.149569][ T8618] bridge_slave_1: left promiscuous mode [ 432.157070][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.177913][ T8623] loop3: detected capacity change from 0 to 1024 [ 432.186338][ T8623] EXT4-fs: Ignoring removed orlov option [ 432.192959][ T8623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.240351][ T8623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.252700][ T8618] bridge_slave_0: left allmulticast mode [ 432.296102][ T8618] bridge_slave_0: left promiscuous mode [ 432.338762][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.526193][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.559721][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 432.941337][ T8640] loop3: detected capacity change from 0 to 256 [ 437.004887][ T8678] loop5: detected capacity change from 0 to 1024 [ 437.023890][ T8678] EXT4-fs: Ignoring removed orlov option [ 437.032562][ T8678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 437.631920][ T8678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.970725][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.080222][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.087477][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.158641][ T8542] bridge_slave_0: entered allmulticast mode [ 438.462789][ T8542] bridge_slave_0: entered promiscuous mode [ 438.500666][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.507910][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.578474][ T8697] loop4: detected capacity change from 0 to 512 [ 438.659402][ T8697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.672295][ T8697] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.722770][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 438.722789][ T29] audit: type=1326 audit(1739516401.785:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98c58cde9 code=0x7ffc0000 [ 439.001655][ T29] audit: type=1326 audit(1739516401.785:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98c58cde9 code=0x7ffc0000 [ 439.194719][ T29] audit: type=1326 audit(1739516401.785:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb98c58cde9 code=0x7ffc0000 [ 439.335157][ T29] audit: type=1326 audit(1739516401.795:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb98c58ce23 code=0x7ffc0000 [ 439.440851][ T29] audit: type=1326 audit(1739516401.795:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb98c58b89f code=0x7ffc0000 [ 439.465080][ T8542] bridge_slave_1: entered allmulticast mode [ 439.473133][ T8542] bridge_slave_1: entered promiscuous mode [ 439.538175][ T29] audit: type=1326 audit(1739516401.795:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb98c58ce77 code=0x7ffc0000 [ 439.570965][ T6643] hsr_slave_0: left promiscuous mode [ 439.590170][ T6643] hsr_slave_1: left promiscuous mode [ 439.621262][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.642852][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.658632][ T29] audit: type=1326 audit(1739516401.795:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb98c58b750 code=0x7ffc0000 [ 439.697725][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.707829][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.725330][ T29] audit: type=1326 audit(1739516401.795:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb98c58c9eb code=0x7ffc0000 [ 439.787671][ T6643] veth1_macvtap: left promiscuous mode [ 439.793478][ T6643] veth0_macvtap: left promiscuous mode [ 439.811803][ T29] audit: type=1326 audit(1739516401.805:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb98c58ba4a code=0x7ffc0000 [ 439.843830][ T6643] veth1_vlan: left promiscuous mode [ 439.851712][ T6643] veth0_vlan: left promiscuous mode [ 439.885016][ T29] audit: type=1326 audit(1739516401.805:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8688 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb98c58ba4a code=0x7ffc0000 [ 441.271495][ T6643] team0 (unregistering): Port device team_slave_1 removed [ 441.693545][ T6643] team0 (unregistering): Port device team_slave_0 removed [ 443.113852][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.714894][ T8723] loop4: detected capacity change from 0 to 32768 [ 443.724030][ T8723] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.750 (8723) [ 443.808446][ T8723] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 443.846877][ T8723] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 443.856634][ T8723] BTRFS info (device loop4): using free-space-tree [ 444.014511][ T8723] BTRFS info (device loop4): rebuilding free space tree [ 444.431142][ T5848] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 444.595892][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.735230][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.343054][ T8542] team0: Port device team_slave_0 added [ 445.435196][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.446673][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.150278][ T8542] team0: Port device team_slave_1 added [ 446.451083][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.512577][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.578534][ T8754] loop4: detected capacity change from 0 to 1024 [ 446.586155][ T8754] EXT4-fs: Ignoring removed orlov option [ 446.592217][ T8754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.498156][ T8542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.537657][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.537718][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.537787][ T8542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.072249][ T8754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.392258][ T8770] loop3: detected capacity change from 0 to 128 [ 449.080345][ T8542] hsr_slave_0: entered promiscuous mode [ 449.102501][ T8542] hsr_slave_1: entered promiscuous mode [ 449.195390][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.664705][ T8780] virt_wifi0 speed is unknown, defaulting to 1000 [ 449.934371][ T8780] lo speed is unknown, defaulting to 1000 [ 451.028487][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 451.028506][ T29] audit: type=1326 audit(1739516414.235:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 451.067808][ T8801] syz.3.764 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 451.147198][ T29] audit: type=1326 audit(1739516414.235:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 451.238076][ T29] audit: type=1326 audit(1739516414.285:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 452.262957][ T29] audit: type=1326 audit(1739516414.315:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926a18cde9 code=0x7ffc0000 [ 452.800816][ T8542] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 453.532756][ T8823] loop5: detected capacity change from 0 to 128 [ 454.284485][ T8826] loop3: detected capacity change from 0 to 1024 [ 454.312880][ T8542] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 454.357146][ T8826] EXT4-fs: Ignoring removed orlov option [ 454.397441][ T8826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.445209][ T8542] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 455.051541][ T8542] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 455.150658][ T8826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.361089][ T8836] loop5: detected capacity change from 0 to 256 [ 455.504363][ T8836] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 455.699302][ T8836] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 455.905490][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.946025][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.189920][ T8843] ipvlan2: entered promiscuous mode [ 456.696545][ T8843] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 456.729322][ T8843] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 458.284351][ T8542] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.392562][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.399828][ T6643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.750943][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.759752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.893009][ T8877] loop4: detected capacity change from 0 to 128 [ 460.322894][ T8542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.333546][ T8542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.955870][ T8896] loop5: detected capacity change from 0 to 1024 [ 461.994288][ T8896] EXT4-fs: Ignoring removed orlov option [ 462.023721][ T8896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 462.096302][ T8896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.241072][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.292022][ T8904] loop3: detected capacity change from 0 to 256 [ 463.660898][ T8904] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 464.265245][ T8904] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 466.908032][ T8923] wg2: entered promiscuous mode [ 466.918558][ T8923] wg2: entered allmulticast mode [ 467.069209][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.951930][ T8937] loop3: detected capacity change from 0 to 256 [ 468.029638][ T8937] exfat: Deprecated parameter 'utf8' [ 468.054529][ T8937] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 468.337164][ T29] audit: type=1326 audit(1739516431.555:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98c58cde9 code=0x7ffc0000 [ 468.496856][ T29] audit: type=1326 audit(1739516431.605:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb98c58b750 code=0x7ffc0000 [ 468.619868][ T29] audit: type=1326 audit(1739516431.605:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb98c58c9eb code=0x7ffc0000 [ 468.667290][ T974] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 468.738538][ T29] audit: type=1326 audit(1739516431.605:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb98c58c9eb code=0x7ffc0000 [ 468.795876][ T29] audit: type=1326 audit(1739516431.615:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb98c58c9eb code=0x7ffc0000 [ 468.868404][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 468.885533][ T974] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 468.911787][ T974] usb 5-1: config 0 has no interface number 0 [ 468.932186][ T29] audit: type=1326 audit(1739516431.615:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb98c58c9eb code=0x7ffc0000 [ 468.978962][ T974] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 469.001927][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.028064][ T29] audit: type=1326 audit(1739516431.755:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb98c58c9eb code=0x7ffc0000 [ 469.070791][ T974] usb 5-1: Product: syz [ 469.075009][ T974] usb 5-1: Manufacturer: syz [ 469.098368][ T974] usb 5-1: SerialNumber: syz [ 469.119650][ T974] usb 5-1: config 0 descriptor?? [ 469.140240][ T974] smsc95xx v2.0.0 [ 469.143924][ T974] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 469.160481][ T29] audit: type=1326 audit(1739516431.825:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb98c58c9eb code=0x7ffc0000 [ 469.191135][ T974] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 469.205352][ T29] audit: type=1326 audit(1739516431.925:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb98c58c9eb code=0x7ffc0000 [ 469.256985][ T29] audit: type=1326 audit(1739516431.925:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb98c58c9eb code=0x7ffc0000 [ 469.393928][ T46] usb 5-1: USB disconnect, device number 21 [ 469.568951][ T8542] veth0_vlan: entered promiscuous mode [ 469.628123][ T8542] veth1_vlan: entered promiscuous mode [ 469.888089][ T8542] veth0_macvtap: entered promiscuous mode [ 469.942643][ T8542] veth1_macvtap: entered promiscuous mode [ 470.085462][ T8963] ipvlan2: entered promiscuous mode [ 470.094213][ T8963] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 470.149343][ T8963] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 471.961392][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.048663][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.096404][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.168394][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.227368][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.284882][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.312039][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.333011][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.650490][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.303186][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.373343][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.438549][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.503020][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.826256][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.848225][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.768510][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.780783][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.796048][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.889408][ T8542] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.898257][ T8542] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.925251][ T8542] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.934333][ T8542] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.002507][ T8987] loop3: detected capacity change from 0 to 256 [ 476.056538][ T8987] exfat: Bad value for 'errors' [ 476.348694][ T5891] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 477.267713][ T5891] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 477.282342][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.323206][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.338789][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.353254][ T5891] usb 5-1: Product: syz [ 477.380379][ T5891] usb 5-1: Manufacturer: syz [ 477.385120][ T5891] usb 5-1: SerialNumber: syz [ 477.443397][ T5891] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 477.486787][ T7886] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 477.754381][ T9008] netlink: 'syz.5.803': attribute type 12 has an invalid length. [ 478.037673][ T8347] usb 5-1: USB disconnect, device number 22 [ 478.698440][ T7886] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 478.705594][ T7886] ath9k_htc: Failed to initialize the device [ 478.732236][ T8347] usb 5-1: ath9k_htc: USB layer deinitialized [ 478.758513][ T6643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.766376][ T6643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.044212][ T9032] loop3: detected capacity change from 0 to 1024 [ 481.149187][ T9032] EXT4-fs: Ignoring removed orlov option [ 481.154909][ T9032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 481.371006][ T9032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.148136][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.310087][ T9065] loop3: detected capacity change from 0 to 256 [ 486.062043][ T5890] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 487.083393][ T5890] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 487.104663][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.138451][ T5890] usb 5-1: Product: syz [ 487.148795][ T5890] usb 5-1: Manufacturer: syz [ 487.163163][ T5890] usb 5-1: SerialNumber: syz [ 487.200124][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 487.275646][ T5890] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 487.388659][ T8347] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 487.793649][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 487.873746][ T5891] usb 5-1: USB disconnect, device number 23 [ 488.728818][ T8347] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 488.733280][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 488.736095][ T8347] ath9k_htc: Failed to initialize the device [ 488.761790][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 488.772523][ T9088] loop3: detected capacity change from 0 to 512 [ 488.801660][ T9088] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 488.845982][ T5891] usb 5-1: ath9k_htc: USB layer deinitialized [ 488.929089][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 488.941687][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 489.807679][ T9088] loop3: detected capacity change from 0 to 1024 [ 489.814915][ T9088] EXT4-fs: Ignoring removed oldalloc option [ 489.851210][ T9088] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 490.063408][ T9088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.201373][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.401558][ T5844] Bluetooth: hci3: command tx timeout [ 491.866970][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.927579][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.537056][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.607951][ T9110] loop3: detected capacity change from 0 to 128 [ 492.713112][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 492.713132][ T29] audit: type=1800 audit(1739516455.935:171): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.823" name="bus" dev="loop3" ino=24 res=0 errno=0 [ 492.749205][ T9074] virt_wifi0 speed is unknown, defaulting to 1000 [ 492.888651][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.926674][ T9074] lo speed is unknown, defaulting to 1000 [ 493.426591][ T9119] hub 9-0:1.0: USB hub found [ 493.433923][ T9119] hub 9-0:1.0: 1 port detected [ 493.490529][ T5844] Bluetooth: hci3: command tx timeout [ 494.130228][ T9123] netlink: 'syz.3.826': attribute type 12 has an invalid length. [ 495.508583][ T5844] Bluetooth: hci3: command tx timeout [ 497.000734][ T9135] loop5: detected capacity change from 0 to 40427 [ 497.071055][ T9135] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1fffff [ 497.093586][ T9135] F2FS-fs (loop5): invalid crc value [ 497.146838][ T9135] F2FS-fs (loop5): Found nat_bits in checkpoint [ 497.500400][ T9135] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 497.670367][ T5844] Bluetooth: hci3: command tx timeout [ 500.128913][ T6728] syz-executor: attempt to access beyond end of device [ 500.128913][ T6728] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 500.204314][ T9074] chnl_net:caif_netlink_parms(): no params data found [ 500.917582][ T6728] CPU: 1 UID: 0 PID: 6728 Comm: syz-executor Not tainted 6.14.0-rc2-next-20250213-syzkaller #0 [ 500.917617][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 500.917635][ T6728] Call Trace: [ 500.917645][ T6728] [ 500.917655][ T6728] dump_stack_lvl+0x241/0x360 [ 500.917705][ T6728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.917732][ T6728] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 500.917766][ T6728] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 500.917805][ T6728] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 500.917850][ T6728] f2fs_handle_critical_error+0x38f/0x5a0 [ 500.917900][ T6728] f2fs_write_end_io+0x674/0x9a0 [ 500.917947][ T6728] __submit_merged_bio+0x2a9/0x710 [ 500.917993][ T6728] f2fs_submit_merged_write_cond+0x28a/0x360 [ 500.918048][ T6728] f2fs_write_data_pages+0x2c5e/0x3670 [ 500.918134][ T6728] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 500.918185][ T6728] ? validate_chain+0x11e/0x5920 [ 500.918323][ T6728] ? __pfx_lock_release+0x10/0x10 [ 500.918361][ T6728] ? do_raw_spin_lock+0x14f/0x370 [ 500.918407][ T6728] ? do_raw_spin_unlock+0x13c/0x8b0 [ 500.918444][ T6728] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 500.918472][ T6728] do_writepages+0x35f/0x880 [ 500.918519][ T6728] ? __pfx_do_writepages+0x10/0x10 [ 500.918560][ T6728] ? filemap_fdatawrite+0x1e8/0x2a0 [ 500.918587][ T6728] ? do_raw_spin_lock+0x14f/0x370 [ 500.918615][ T6728] ? __pfx_lock_release+0x10/0x10 [ 500.918667][ T6728] ? do_raw_spin_unlock+0x13c/0x8b0 [ 500.918698][ T6728] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 500.918733][ T6728] filemap_fdatawrite+0x1f3/0x2a0 [ 500.918769][ T6728] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 500.918877][ T6728] ? do_raw_spin_unlock+0x13c/0x8b0 [ 500.918924][ T6728] f2fs_sync_dirty_inodes+0x348/0x860 [ 500.918978][ T6728] f2fs_write_checkpoint+0x8af/0x1de0 [ 500.919047][ T6728] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 500.919151][ T6728] ? kfree+0x196/0x430 [ 500.919179][ T6728] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 500.919207][ T6728] ? kill_f2fs_super+0x28e/0x6d0 [ 500.919242][ T6728] kill_f2fs_super+0x2b6/0x6d0 [ 500.919281][ T6728] ? __pfx_kill_f2fs_super+0x10/0x10 [ 500.919321][ T6728] ? shrinker_free+0x2ca/0x3d0 [ 500.919367][ T6728] deactivate_locked_super+0xc4/0x130 [ 500.919397][ T6728] cleanup_mnt+0x41f/0x4b0 [ 500.919424][ T6728] ? lockdep_hardirqs_on+0x99/0x150 [ 500.919465][ T6728] task_work_run+0x24f/0x310 [ 500.919502][ T6728] ? __pfx_task_work_run+0x10/0x10 [ 500.919524][ T6728] ? __x64_sys_umount+0x120/0x170 [ 500.919562][ T6728] ? syscall_exit_to_user_mode+0xa3/0x340 [ 500.919604][ T6728] syscall_exit_to_user_mode+0x13f/0x340 [ 500.919647][ T6728] do_syscall_64+0x100/0x230 [ 500.919671][ T6728] ? clear_bhb_loop+0x35/0x90 [ 500.919708][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.919746][ T6728] RIP: 0033:0x7f40d258e117 [ 500.919771][ T6728] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 500.919790][ T6728] RSP: 002b:00007ffc0a838f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 500.919816][ T6728] RAX: 0000000000000000 RBX: 00007f40d260e08c RCX: 00007f40d258e117 [ 500.919831][ T6728] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0a839050 [ 500.919844][ T6728] RBP: 00007ffc0a839050 R08: 0000000000000000 R09: 0000000000000000 [ 500.919858][ T6728] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0a83a0e0 [ 500.919872][ T6728] R13: 00007f40d260e08c R14: 00000000000799ba R15: 00007ffc0a83a120 [ 500.919919][ T6728] [ 501.597979][ T11] bridge_slave_1: left allmulticast mode [ 501.603774][ T11] bridge_slave_1: left promiscuous mode [ 501.609685][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.564506][ T11] bridge_slave_0: left allmulticast mode [ 502.756178][ T11] bridge_slave_0: left promiscuous mode [ 502.776466][ T6728] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 502.823570][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.912302][ T9167] loop4: detected capacity change from 0 to 512 [ 502.953414][ T9167] EXT4-fs: Ignoring removed nobh option [ 503.033449][ T9167] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 504.425496][ T9182] loop3: detected capacity change from 0 to 512 [ 504.509611][ T9182] ext2: Unknown parameter 'smackfsfloor' [ 505.030063][ T9190] hub 2-0:1.0: USB hub found [ 505.033002][ T9190] hub 2-0:1.0: 1 port detected [ 610.988281][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 610.995280][ C0] rcu: 1-...!: (1 GPs behind) idle=bff4/1/0x4000000000000000 softirq=31739/31740 fqs=1 [ 611.006300][ C0] rcu: (detected by 0, t=10505 jiffies, g=32325, q=256 ncpus=2) [ 611.014048][ C0] Sending NMI from CPU 0 to CPUs 1: [ 611.014078][ C1] NMI backtrace for cpu 1 [ 611.014092][ C1] CPU: 1 UID: 0 PID: 9191 Comm: syz.4.839 Not tainted 6.14.0-rc2-next-20250213-syzkaller #0 [ 611.014111][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 611.014123][ C1] RIP: 0010:kasan_check_range+0x1be/0x290 [ 611.014156][ C1] Code: 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b 41 5c 41 5e 41 5f <5d> c3 cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00 00 75 5c f7 c5 00 [ 611.014183][ C1] RSP: 0018:ffffc900001f0920 EFLAGS: 00000056 [ 611.014198][ C1] RAX: 0000000000000001 RBX: 0000000000000070 RCX: ffffffff819cfd22 [ 611.014210][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff94568048 [ 611.014220][ C1] RBP: 0000000000000000 R08: ffffffff9456804f R09: 1ffffffff28ad009 [ 611.014232][ C1] R10: dffffc0000000000 R11: fffffbfff28ad00a R12: 0000000000000001 [ 611.014253][ C1] R13: ffff88807dc1e538 R14: 0000000000000001 R15: ffff88807dc1e538 [ 611.014264][ C1] FS: 00007fb98d3c16c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 611.014276][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.014286][ C1] CR2: ffffffffffffffe8 CR3: 000000007a4de000 CR4: 00000000003526f0 [ 611.014299][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 611.014308][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 611.014316][ C1] Call Trace: [ 611.014323][ C1] [ 611.014331][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 611.014352][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 611.014375][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 611.014403][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 611.014421][ C1] ? nmi_handle+0x14f/0x5a0 [ 611.014444][ C1] ? nmi_handle+0x2a/0x5a0 [ 611.014466][ C1] ? kasan_check_range+0x1be/0x290 [ 611.014486][ C1] ? default_do_nmi+0x63/0x160 [ 611.014505][ C1] ? exc_nmi+0x123/0x1f0 [ 611.014522][ C1] ? end_repeat_nmi+0xf/0x53 [ 611.014546][ C1] ? __lock_acquire+0x8a2/0x2100 [ 611.014569][ C1] ? kasan_check_range+0x1be/0x290 [ 611.014590][ C1] ? kasan_check_range+0x1be/0x290 [ 611.014612][ C1] ? kasan_check_range+0x1be/0x290 [ 611.014633][ C1] [ 611.014637][ C1] [ 611.014642][ C1] __lock_acquire+0x8a2/0x2100 [ 611.014672][ C1] lock_acquire+0x1ed/0x550 [ 611.014692][ C1] ? debug_object_deactivate+0x158/0x390 [ 611.014718][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 611.014743][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 611.014769][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 611.014791][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 611.014810][ C1] ? debug_object_deactivate+0x158/0x390 [ 611.014830][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 611.014855][ C1] debug_object_deactivate+0x158/0x390 [ 611.014875][ C1] ? advance_sched+0xa02/0xca0 [ 611.014895][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 611.014923][ C1] debug_deactivate+0x1b/0x220 [ 611.014941][ C1] __hrtimer_run_queues+0x305/0xd30 [ 611.014965][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 611.014980][ C1] ? sched_clock+0x4a/0x70 [ 611.014997][ C1] ? read_tsc+0x9/0x20 [ 611.015013][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 611.015038][ C1] hrtimer_interrupt+0x403/0xa40 [ 611.015064][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 611.015090][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 611.015111][ C1] [ 611.015116][ C1] [ 611.015121][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.015141][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 611.015162][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 be 81 18 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 13 8a 7e f5 65 8b 05 14 be f2 73 85 c0 74 43 48 c7 04 24 0e 36 [ 611.015174][ C1] RSP: 0018:ffffc9000b76fba0 EFLAGS: 00000206 [ 611.015186][ C1] RAX: 5d62ff48da578400 RBX: 1ffff920016edf78 RCX: ffffffff819d672a [ 611.015197][ C1] RDX: dffffc0000000000 RSI: ffffffff8c2a9ee0 RDI: 0000000000000001 [ 611.015207][ C1] RBP: ffffc9000b76fc30 R08: ffffffff94568047 R09: 1ffffffff28ad008 [ 611.015218][ C1] R10: dffffc0000000000 R11: fffffbfff28ad009 R12: dffffc0000000000 [ 611.015228][ C1] R13: 1ffff920016edf74 R14: ffffc9000b76fbc0 R15: 0000000000000246 [ 611.015242][ C1] ? mark_lock+0x9a/0x360 [ 611.015259][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 611.015280][ C1] ? read_tsc+0x9/0x20 [ 611.015300][ C1] clock_was_set+0x686/0x810 [ 611.015314][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 611.015337][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 611.015352][ C1] ? do_settimeofday64+0x328/0x5e0 [ 611.015371][ C1] ? timekeeping_update_from_shadow+0x2b6/0x350 [ 611.015393][ C1] do_settimeofday64+0x343/0x5e0 [ 611.015415][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 611.015433][ C1] ? __commit_transaction+0xd39/0xf00 [ 611.015449][ C1] ? capable+0x89/0xe0 [ 611.015466][ C1] ? security_settime64+0x74/0x280 [ 611.015487][ C1] __x64_sys_clock_settime+0x23a/0x280 [ 611.015512][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 611.015535][ C1] ? do_syscall_64+0x100/0x230 [ 611.015550][ C1] ? do_syscall_64+0xb6/0x230 [ 611.015565][ C1] do_syscall_64+0xf3/0x230 [ 611.015579][ C1] ? clear_bhb_loop+0x35/0x90 [ 611.015600][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.015620][ C1] RIP: 0033:0x7fb98c58cde9 [ 611.015634][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.015645][ C1] RSP: 002b:00007fb98d3c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 611.015659][ C1] RAX: ffffffffffffffda RBX: 00007fb98c7a6160 RCX: 00007fb98c58cde9 [ 611.015670][ C1] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 0000000000000000 [ 611.015679][ C1] RBP: 00007fb98c60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 611.015688][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.015696][ C1] R13: 0000000000000000 R14: 00007fb98c7a6160 R15: 00007ffd4e963c28 [ 611.015713][ C1] [ 611.016071][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g32325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 611.620514][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 611.630498][ C0] rcu: RCU grace-period kthread stack dump: [ 611.636404][ C0] task:rcu_preempt state:R running task stack:26104 pid:15 tgid:15 ppid:2 task_flags:0x208040 flags:0x00004000 [ 611.649931][ C0] Call Trace: [ 611.653226][ C0] [ 611.656182][ C0] __schedule+0x190e/0x4c90 [ 611.660717][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 611.666661][ C0] ? __pfx___schedule+0x10/0x10 [ 611.671551][ C0] ? __pfx_lock_release+0x10/0x10 [ 611.676619][ C0] ? __pfx___mod_timer+0x10/0x10 [ 611.681581][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 611.687935][ C0] ? schedule+0x90/0x320 [ 611.692204][ C0] schedule+0x14b/0x320 [ 611.696393][ C0] schedule_timeout+0x15a/0x290 [ 611.701265][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 611.706661][ C0] ? __pfx_process_timeout+0x10/0x10 [ 611.711977][ C0] ? prepare_to_swait_event+0x330/0x350 [ 611.717567][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 611.722441][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 611.727696][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 611.733611][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 611.738919][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 611.744854][ C0] ? finish_swait+0xd4/0x1e0 [ 611.749488][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 611.754704][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 611.759317][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 611.764535][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 611.770480][ C0] ? __kthread_parkme+0x169/0x1d0 [ 611.775536][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 611.780751][ C0] kthread+0x7a9/0x920 [ 611.784840][ C0] ? __pfx_kthread+0x10/0x10 [ 611.789455][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 611.794673][ C0] ? __pfx_kthread+0x10/0x10 [ 611.799294][ C0] ? __pfx_kthread+0x10/0x10 [ 611.803907][ C0] ? __pfx_kthread+0x10/0x10 [ 611.808601][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.813829][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 611.819067][ C0] ? __pfx_kthread+0x10/0x10 [ 611.823705][ C0] ret_from_fork+0x4b/0x80 [ 611.828149][ C0] ? __pfx_kthread+0x10/0x10 [ 611.832765][ C0] ret_from_fork_asm+0x1a/0x30 [ 611.837581][ C0] [ 611.840613][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 611.846951][ C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.14.0-rc2-next-20250213-syzkaller #0 [ 611.857204][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 611.867279][ C0] Workqueue: events_unbound toggle_allocation_gate [ 611.873819][ C0] RIP: 0010:smp_call_function_many_cond+0x1ba4/0x2d30 [ 611.880606][ C0] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 10 f5 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 c0 f0 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 611.900230][ C0] RSP: 0018:ffffc90000abf640 EFLAGS: 00000293 [ 611.906339][ C0] RAX: ffffffff81b60dc5 RBX: 1ffff110170e88f9 RCX: ffff888140ec1e00 [ 611.914335][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 611.922319][ C0] RBP: ffffc90000abf840 R08: ffffffff81b60d90 R09: 1ffffffff28ad008 [ 611.930306][ C0] R10: dffffc0000000000 R11: fffffbfff28ad009 R12: ffff8880b863fb48 [ 611.938290][ C0] R13: ffff8880b87447c8 R14: ffff8880b863fb40 R15: 0000000000000001 [ 611.946275][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 611.955214][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.961804][ C0] CR2: ffffffffffffffe8 CR3: 000000000e938000 CR4: 00000000003526f0 [ 611.969791][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 611.977777][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 611.985761][ C0] Call Trace: [ 611.989054][ C0] [ 611.991918][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 611.998280][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 612.003975][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 612.009841][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 612.016113][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 612.021619][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 612.027294][ C0] ? update_process_times+0x242/0x2f0 [ 612.032704][ C0] ? tick_nohz_handler+0x37c/0x500 [ 612.037870][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 612.043383][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 612.048825][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 612.054585][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 612.059553][ C0] ? read_tsc+0x9/0x20 [ 612.063648][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 612.069759][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 612.074937][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 612.081130][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 612.086986][ C0] [ 612.089931][ C0] [ 612.092877][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 612.099156][ C0] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 612.105330][ C0] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 612.111524][ C0] ? smp_call_function_many_cond+0x1ba4/0x2d30 [ 612.117713][ C0] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 612.123821][ C0] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 612.129951][ C0] ? __pfx___text_poke+0x10/0x10 [ 612.134931][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 612.141276][ C0] ? __pfx___might_resched+0x10/0x10 [ 612.146589][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 612.152515][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 612.157578][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 612.162711][ C0] text_poke_bp_batch+0x352/0xb30 [ 612.167764][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 612.173781][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 612.180049][ C0] ? __pfx_lock_release+0x10/0x10 [ 612.185103][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 612.190684][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 612.196993][ C0] text_poke_finish+0x30/0x50 [ 612.201704][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 612.207716][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 612.213654][ C0] static_key_enable+0x1a/0x20 [ 612.218479][ C0] toggle_allocation_gate+0xbc/0x260 [ 612.223804][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 612.229735][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 612.236119][ C0] ? process_scheduled_works+0x9c6/0x18e0 [ 612.241871][ C0] process_scheduled_works+0xabe/0x18e0 [ 612.247492][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.253516][ C0] ? assign_work+0x364/0x3d0 [ 612.258143][ C0] worker_thread+0x870/0xd30 [ 612.262782][ C0] ? __kthread_parkme+0x169/0x1d0 [ 612.267834][ C0] ? __pfx_worker_thread+0x10/0x10 [ 612.272969][ C0] kthread+0x7a9/0x920 [ 612.277055][ C0] ? __pfx_kthread+0x10/0x10 [ 612.281670][ C0] ? __pfx_worker_thread+0x10/0x10 [ 612.286811][ C0] ? __pfx_kthread+0x10/0x10 [ 612.291420][ C0] ? __pfx_kthread+0x10/0x10 [ 612.296050][ C0] ? __pfx_kthread+0x10/0x10 [ 612.300654][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.305888][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 612.311112][ C0] ? __pfx_kthread+0x10/0x10 [ 612.315742][ C0] ret_from_fork+0x4b/0x80 [ 612.320208][ C0] ? __pfx_kthread+0x10/0x10 [ 612.324836][ C0] ret_from_fork_asm+0x1a/0x30 [ 612.329659][ C0]