last executing test programs: 1m34.383058897s ago: executing program 3 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000200), 0x0) 1m34.307936323s ago: executing program 3 (id=134): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) epoll_pwait2(r0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 1m34.208836811s ago: executing program 3 (id=135): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 1m33.568076643s ago: executing program 3 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) chdir(&(0x7f0000001180)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@shortname_lower}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@sys_immutable}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1m33.454558912s ago: executing program 3 (id=141): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000000c0), 0x0) fchown(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x0, 0x74, 0x7, 0x5, 0x21, @mcast1, @remote, 0x1, 0x87, 0x4, 0x1}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x4040010) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) unshare(0x60600) syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) r9 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000100)="3cd60d000000e4ff000000000000e3ff", 0x20) 1m33.109307541s ago: executing program 3 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000200), 0x0) 1m32.630233899s ago: executing program 32 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000200), 0x0) 4.956671349s ago: executing program 2 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) 4.783090883s ago: executing program 2 (id=497): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 4.70335897s ago: executing program 2 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x7) 4.420068662s ago: executing program 2 (id=499): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000000c0)=""/181, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e816952301090224"], 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000304f9fffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="059c01000750050008001300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4802}, 0x20040050) 3.976161478s ago: executing program 4 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 3.689655832s ago: executing program 4 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 3.548881043s ago: executing program 0 (id=504): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x6, 0x7a}, 0x8) 3.416092814s ago: executing program 0 (id=505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x3e, 0x301, 0x270bd26, 0x25dfdc00, {0x3}, [@typed={0x8, 0xfa, 0x0, 0x0, @pid}]}, 0x1c}}, 0x8004) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0xa, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000140)=0x2, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 3.333354201s ago: executing program 4 (id=506): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) getpriority(0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x1, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x40000002, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0x7f, 0x10000, 0x140000, 0xec0}, {0x2, 0x5, 0x401, 0xa, 0x7, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x7, 0xc}, {0x4, 0x6adc, 0x5a5, 0xe, 0xe, 0x9}, {0x9, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffff9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df7, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x1000800, 0x8, 0x2, 0x2}, {0xd28, 0xb1, 0x5, 0xe7, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x7, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1c7, 0x304, 0x4, 0x4002d04}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xd9b, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x2, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x69ad7fb1, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b8}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x0, 0x0, 0x9f, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x1, 0x5, 0x5, 0x2, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff39, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0xa, 0xffffff0f}, {0x7ffe, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0xc, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0x80000000}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0x7, 0x1, 0x7, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xec55, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x3, 0xcb, 0x0, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xfffffffc, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4, 0x4}, {0x3, 0x8a8, 0x8, 0x0, 0x8, 0xfffffffe}, {0x10001, 0x8, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x9, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x0, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0xa, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xf, 0x792c, 0xa4, 0x8, 0x3, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x401, 0x9, 0xe, 0xfffffff9}, {0x5, 0x4, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0x1, 0x800}, {0x9, 0x7, 0x7fff, 0x200, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0xfffffffd, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x0, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x8, 0x56c, 0xffff9586, 0xd, 0x9, 0xb}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x0, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x9, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x100, 0x4}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5, 0x0, 0x8}, {0x7, 0x7, 0x3, 0x9, 0x8, 0x7}, {0x1, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2.765653927s ago: executing program 2 (id=507): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 2.60562205s ago: executing program 2 (id=508): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, 0x0) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x1000}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) 2.366927609s ago: executing program 0 (id=509): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x120) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x2094, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(r5, 0x0, 0x20000090) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000900000004000000008000010c000280050001000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc6fb978b15a386028000000000000000000000000000001400007400000000008dbe7a0ddb09780bc880992ce8ff70bfdaf2fa781c36cfe0bc0616f86d8faae4187b94754704f8e5587d700ffe585e6c4965e21a9375c2190dc1d9ad2ceac57d06e17d74f9c38a3dc9f2b22d3d1f9a337e3e591b44385aaded8"], 0x9c}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x80800}) listen(r5, 0x5) io_uring_enter(r6, 0x13c9, 0xc2de, 0x9, 0x0, 0x0) 1.464215582s ago: executing program 0 (id=513): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, &(0x7f000000b480)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="0805c250a09347cb0bca3b9f8a8755b3945d3396e6eb14eb64426210d11830f13cb571b8967902d058a39cf86287f14c080fcb8d529bfcda2a3722d8dc8ebe2c29476750ec92bf56619454329e748b3549ba625812d4422958b334db652bd2b9492784354250a06d9b3f22846434889dbea72d8f13aa590030f83b62254e87e4230846ceffd18bc79e73a1a1fa67571c3ba78979edf79dfc3410b95c51ce90bcca297c2a6995b236c39c5ec957cf8717fa28a560525b50a3a689d2bc34038bc078356614f0c584b2ae572c025c4d8414161f1100073f6fee746c008cefce574d1c1e0333b07febbd41add7375c604f3c34b6606013a8172cea655aa6580601b3668ac91df25f684745c94ad9ffc15548d32a8608c5acb60bc437052b2dd51eea8957d673499f6f685feefb2332976ce89829d1cd967d7dd29336387ff12a", @ANYRES8], 0x1, 0x1f9, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.140134219s ago: executing program 0 (id=514): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000041c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @mcast2, 0x101}, 0x1c, 0x0, 0x0, &(0x7f00000018c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x1, 0x8}}}], 0x30}}], 0x2, 0x0) 1.139638558s ago: executing program 4 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 694.829174ms ago: executing program 1 (id=517): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000280)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)="8d", 0x1}], 0x1, &(0x7f0000000480)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}], 0x18, 0x40}, 0x24044845) 600.091612ms ago: executing program 0 (id=518): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x3, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010005000000401e0903003bd70102036f0902"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x4, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="020000f70ff30455074000010203010902240001010570060904000c01030102060921c6fd020122c10b09058103ff0306000ec20c54fa6d18e0f2d1b60e5cb23d319fad38b6b05fca113a4f05ac93b4041f64c04f2c8c486ab8"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001780)={0x0, 0x9005}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {0x0}], 0x2}, 0x44864) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000300), 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 570.172364ms ago: executing program 1 (id=519): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x3e, 0x301, 0x270bd26, 0x25dfdc00, {0x3}, [@typed={0x8, 0xfa, 0x0, 0x0, @pid}]}, 0x1c}}, 0x8004) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0xa, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000140)=0x2, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r7, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 449.009284ms ago: executing program 1 (id=520): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 398.979048ms ago: executing program 1 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7fffffff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) stat(0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 168.445607ms ago: executing program 4 (id=522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [], [0x6, 0x0, 0x0, 0x7], [0x0, 0x0, 0xe8, 0xfffffffc], [0x6, 0x4, 0x3]}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x2, 0x0, 0x0, [], [0x0, 0x1, 0x0, 0x4], [0x5, 0xb, 0x2], [0x2, 0x0, 0x2, 0x5]}) close_range(r0, 0xffffffffffffffff, 0x0) 72.733955ms ago: executing program 1 (id=523): mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @mcast1, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udplite6\x00') read$FUSE(r2, &(0x7f0000004600)={0x2020}, 0x2020) 71.469835ms ago: executing program 4 (id=524): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x9}}, 0x20) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="540100001b001300000000000000000075f9fcce8b15a7d200000000000000026e9d75790000000000000000000a0000005e00000000000000d9115ede12", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/264], 0x154}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x4804) sendfile(r5, r5, 0x0, 0xffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) 0s ago: executing program 1 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x62) read$FUSE(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000180)="8464f428", 0x4, 0x200980) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x36}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}}, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r3 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 50.508416][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.529474][ T5454] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.231' (ED25519) to the list of known hosts. syzkaller login: [ 69.178694][ T5777] cgroup: Unknown subsys name 'net' [ 69.312695][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.695099][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.124583][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.131515][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.261341][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.268704][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.272968][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.280689][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.297275][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.306907][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.308118][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.326330][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.326548][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.343842][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.345448][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.359190][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.362395][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.369447][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.378345][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.389478][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.396555][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.408800][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.410808][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.423738][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.434231][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.434882][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.453645][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.464228][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.920348][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 72.975900][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 73.036498][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 73.197684][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.205353][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.212989][ T5788] bridge_slave_0: entered allmulticast mode [ 73.220722][ T5788] bridge_slave_0: entered promiscuous mode [ 73.229120][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 73.241399][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.250101][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.258250][ T5791] bridge_slave_0: entered allmulticast mode [ 73.266610][ T5791] bridge_slave_0: entered promiscuous mode [ 73.285943][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.293630][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.301211][ T5787] bridge_slave_0: entered allmulticast mode [ 73.308417][ T5787] bridge_slave_0: entered promiscuous mode [ 73.317015][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.325219][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.333298][ T5788] bridge_slave_1: entered allmulticast mode [ 73.340838][ T5788] bridge_slave_1: entered promiscuous mode [ 73.365509][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.373616][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.381857][ T5791] bridge_slave_1: entered allmulticast mode [ 73.389987][ T5791] bridge_slave_1: entered promiscuous mode [ 73.398216][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.406958][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.415992][ T5787] bridge_slave_1: entered allmulticast mode [ 73.423027][ T5787] bridge_slave_1: entered promiscuous mode [ 73.446903][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.490615][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.550599][ T5788] team0: Port device team_slave_0 added [ 73.560628][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.573723][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.585842][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.600217][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.619932][ T5788] team0: Port device team_slave_1 added [ 73.715133][ T5791] team0: Port device team_slave_0 added [ 73.727034][ T5787] team0: Port device team_slave_0 added [ 73.735605][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.743343][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.752165][ T5790] bridge_slave_0: entered allmulticast mode [ 73.759561][ T5790] bridge_slave_0: entered promiscuous mode [ 73.768204][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.776504][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.804112][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.819248][ T5791] team0: Port device team_slave_1 added [ 73.839204][ T5787] team0: Port device team_slave_1 added [ 73.859160][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.867142][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.876038][ T5790] bridge_slave_1: entered allmulticast mode [ 73.882970][ T5790] bridge_slave_1: entered promiscuous mode [ 73.900304][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.907841][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.935546][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.975870][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.983215][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.011936][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.035851][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.043288][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.072038][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.085823][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.093844][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.121607][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.140763][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.149197][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.179101][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.252275][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.269052][ T5788] hsr_slave_0: entered promiscuous mode [ 74.276015][ T5788] hsr_slave_1: entered promiscuous mode [ 74.301044][ T5791] hsr_slave_0: entered promiscuous mode [ 74.307623][ T5791] hsr_slave_1: entered promiscuous mode [ 74.315019][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.325299][ T5791] Cannot create hsr debugfs directory [ 74.334603][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.378664][ T5787] hsr_slave_0: entered promiscuous mode [ 74.387265][ T5787] hsr_slave_1: entered promiscuous mode [ 74.397079][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.410546][ T5787] Cannot create hsr debugfs directory [ 74.454408][ T5790] team0: Port device team_slave_0 added [ 74.486064][ T5790] team0: Port device team_slave_1 added [ 74.506146][ T5798] Bluetooth: hci1: command tx timeout [ 74.512713][ T5789] Bluetooth: hci2: command tx timeout [ 74.512737][ T50] Bluetooth: hci0: command tx timeout [ 74.513141][ T5800] Bluetooth: hci3: command tx timeout [ 74.589815][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.598059][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.626105][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.671087][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.678797][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.707479][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.832990][ T5790] hsr_slave_0: entered promiscuous mode [ 74.840508][ T5790] hsr_slave_1: entered promiscuous mode [ 74.847491][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.856135][ T5790] Cannot create hsr debugfs directory [ 75.014981][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.028699][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.050813][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.061616][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.145702][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.167188][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.184974][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.203285][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.257404][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.289597][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.301059][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.313032][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.467809][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.478611][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.492647][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.511934][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.528458][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.602648][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.630313][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.639200][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.668164][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.676232][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.713323][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.731921][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.759560][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.791106][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.798645][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.829678][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.857208][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.889381][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.897237][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.907921][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.915397][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.968344][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.976312][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.097683][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.150409][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.193060][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.200533][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.238928][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.246231][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.362938][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.492680][ T5788] veth0_vlan: entered promiscuous mode [ 76.535583][ T5788] veth1_vlan: entered promiscuous mode [ 76.567667][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.584295][ T5789] Bluetooth: hci1: command tx timeout [ 76.584472][ T50] Bluetooth: hci3: command tx timeout [ 76.590010][ T5789] Bluetooth: hci2: command tx timeout [ 76.604364][ T5800] Bluetooth: hci0: command tx timeout [ 76.617918][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.659731][ T5788] veth0_macvtap: entered promiscuous mode [ 76.719674][ T5788] veth1_macvtap: entered promiscuous mode [ 76.762401][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.784112][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.805146][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.818200][ T5791] veth0_vlan: entered promiscuous mode [ 76.841237][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.850839][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.861063][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.871421][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.895218][ T5791] veth1_vlan: entered promiscuous mode [ 76.930839][ T5787] veth0_vlan: entered promiscuous mode [ 76.960451][ T5787] veth1_vlan: entered promiscuous mode [ 77.019242][ T5790] veth0_vlan: entered promiscuous mode [ 77.080790][ T5790] veth1_vlan: entered promiscuous mode [ 77.090402][ T5791] veth0_macvtap: entered promiscuous mode [ 77.101117][ T5787] veth0_macvtap: entered promiscuous mode [ 77.113145][ T5787] veth1_macvtap: entered promiscuous mode [ 77.120317][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.136228][ T5791] veth1_macvtap: entered promiscuous mode [ 77.146444][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.213251][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.233155][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.248162][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.261810][ T5790] veth0_macvtap: entered promiscuous mode [ 77.274027][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.274292][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.283357][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.307888][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.320813][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.335117][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.350788][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.361023][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.374735][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.387729][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.413137][ T5790] veth1_macvtap: entered promiscuous mode [ 77.445917][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.458249][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.474332][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.486944][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.499874][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.511712][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.524982][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.536856][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.549210][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.570081][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.579990][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.590769][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.600192][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.647152][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.661097][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.680647][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.701181][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.722315][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.740769][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.744627][ T5873] ======================================================= [ 77.744627][ T5873] WARNING: The mand mount option has been deprecated and [ 77.744627][ T5873] and is ignored by this kernel. Remove the mand [ 77.744627][ T5873] option from the mount to silence this warning. [ 77.744627][ T5873] ======================================================= [ 77.762652][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.800137][ T5873] 9pnet_virtio: no channels available for device ./file0 [ 77.855298][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.870757][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.894762][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.907636][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.918601][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.932170][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.946709][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.964127][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 77.971358][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 77.989532][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 77.997929][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 78.001216][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.014989][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.026156][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.037500][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.105736][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.114125][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.175238][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.200660][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.222998][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.231853][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.265925][ T55] libceph: connect (1)[c::]:6789 error -101 [ 78.272290][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 78.327709][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.352127][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.441470][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.455563][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.547198][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.587869][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.665187][ T5789] Bluetooth: hci2: command tx timeout [ 78.671157][ T5800] Bluetooth: hci0: command tx timeout [ 78.677833][ T5789] Bluetooth: hci3: command tx timeout [ 78.679335][ T50] Bluetooth: hci1: command tx timeout [ 78.774203][ T5875] ceph: No mds server is up or the cluster is laggy [ 78.979563][ T55] libceph: connect (1)[c::]:6789 error -101 [ 78.987085][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 79.258973][ T5844] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.474570][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 79.498770][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.519813][ T5844] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 79.555381][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.680248][ T5844] usb 1-1: config 0 descriptor?? [ 79.853054][ T5916] syz.3.17[5916]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.136932][ T5916] loop3: detected capacity change from 0 to 32768 [ 80.138135][ T5844] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 80.154383][ T5916] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.17 (5916) [ 80.180960][ T5916] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.192106][ T5916] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 80.202585][ T5916] BTRFS info (device loop3): enabling disk space caching [ 80.210053][ T5916] BTRFS info (device loop3): setting nodatasum [ 80.216964][ T5916] BTRFS info (device loop3): turning off barriers [ 80.224863][ T5916] BTRFS info (device loop3): turning on flush-on-commit [ 80.233615][ T5916] BTRFS info (device loop3): doing ref verification [ 80.241960][ T5916] BTRFS info (device loop3): force clearing of disk cache [ 80.247187][ T5844] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 80.250803][ T5916] BTRFS info (device loop3): enabling ssd optimizations [ 80.265988][ T5916] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 80.275865][ T5916] BTRFS info (device loop3): use lzo compression, level 0 [ 80.284118][ T5916] BTRFS info (device loop3): disk space caching is enabled [ 80.326351][ T5844] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 80.354334][ T5922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.359712][ T5844] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 80.375677][ T5844] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 80.442491][ T55] libceph: connect (1)[c::]:6789 error -101 [ 80.470784][ T5916] BTRFS info (device loop3): auto enabling async discard [ 80.474340][ T5844] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 80.487683][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 80.498594][ T5916] BTRFS info (device loop3): rebuilding free space tree [ 80.512556][ T5844] koneplus 0003:1E7D:2D51.0001: couldn't init struct koneplus_device [ 80.531759][ T5844] koneplus 0003:1E7D:2D51.0001: couldn't install mouse [ 80.556725][ T5916] BTRFS info (device loop3): disabling free space tree [ 80.564677][ T5916] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.576417][ T5916] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.617935][ T5844] koneplus: probe of 0003:1E7D:2D51.0001 failed with error -71 [ 80.698708][ T5844] usb 1-1: USB disconnect, device number 2 [ 80.744009][ T5798] Bluetooth: hci3: command tx timeout [ 80.749550][ T5798] Bluetooth: hci2: command tx timeout [ 80.755906][ T50] Bluetooth: hci0: command tx timeout [ 80.761516][ T5800] Bluetooth: hci1: command tx timeout [ 80.819051][ T5946] fido_id[5946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 80.856077][ T5788] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.873518][ T55] libceph: connect (1)[c::]:6789 error -101 [ 80.880598][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 81.109719][ T5782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop3 scanned by udevd (5782) [ 81.233719][ T5951] GUP no longer grows the stack in syz.0.21 (5951): 200000004000-20000000a000 (200000002000) [ 81.260177][ T5937] ceph: No mds server is up or the cluster is laggy [ 81.278238][ T5951] CPU: 1 PID: 5951 Comm: syz.0.21 Not tainted 6.6.102-syzkaller #0 [ 81.286836][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.299536][ T5951] Call Trace: [ 81.303977][ T5951] [ 81.307236][ T5951] dump_stack_lvl+0x16c/0x230 [ 81.312308][ T5951] ? show_regs_print_info+0x20/0x20 [ 81.318370][ T5951] ? load_image+0x3b0/0x3b0 [ 81.324463][ T5951] ? find_vma+0x12e/0x1b0 [ 81.329627][ T5951] __get_user_pages+0xfb9/0x1470 [ 81.336098][ T5951] ? populate_vma_page_range+0x370/0x370 [ 81.342777][ T5951] get_user_pages_remote+0x3de/0xc10 [ 81.348458][ T5951] ? get_dump_page+0x200/0x200 [ 81.353469][ T5951] __access_remote_vm+0x1ff/0x570 [ 81.359034][ T5951] ? generic_access_phys+0x650/0x650 [ 81.364585][ T5951] ? alloc_pages+0x4dc/0x740 [ 81.370156][ T5951] ? do_raw_spin_unlock+0x121/0x230 [ 81.376789][ T5951] proc_pid_cmdline_read+0x551/0x830 [ 81.382996][ T5951] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.394023][ T5951] ? comm_show+0x150/0x150 [ 81.399776][ T5951] do_iter_read+0x506/0xc80 [ 81.407039][ T5951] ? comm_show+0x150/0x150 [ 81.413887][ T5951] ? vfs_iter_read+0xa0/0xa0 [ 81.420460][ T5951] ? __import_iovec+0x5f2/0x860 [ 81.426228][ T5951] ? import_iovec+0x73/0xa0 [ 81.432183][ T5951] do_preadv+0x1fa/0x330 [ 81.437816][ T5951] ? do_writev+0x410/0x410 [ 81.442999][ T5951] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 81.449720][ T5951] ? lock_chain_count+0x20/0x20 [ 81.454916][ T5951] ? lockdep_hardirqs_on+0x98/0x150 [ 81.460494][ T5951] do_syscall_64+0x55/0xb0 [ 81.465299][ T5951] ? clear_bhb_loop+0x40/0x90 [ 81.470360][ T5951] ? clear_bhb_loop+0x40/0x90 [ 81.475928][ T5951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.481942][ T5951] RIP: 0033:0x7fbecd78ebe9 [ 81.486638][ T5951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.506861][ T5951] RSP: 002b:00007fbece687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 81.515477][ T5951] RAX: ffffffffffffffda RBX: 00007fbecd9b5fa0 RCX: 00007fbecd78ebe9 [ 81.523540][ T5951] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 81.532303][ T5951] RBP: 00007fbecd811e19 R08: 00000000fffffff9 R09: 0000000000000000 [ 81.540722][ T5951] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 81.548975][ T5951] R13: 00007fbecd9b6038 R14: 00007fbecd9b5fa0 R15: 00007ffd54932e88 [ 81.557444][ T5951] [ 81.702584][ T5956] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.416140][ T5922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.428365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.434007][ T5972] usb usb8: usbfs: process 5972 (syz.1.26) did not claim interface 0 before use [ 82.563287][ T5922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.717132][ T5922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.824984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 83.021632][ T5922] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.065103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.106390][ T5922] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.213676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.222917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.255306][ T5922] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.341907][ T5922] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.468627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.393328][ T6019] tipc: Started in network mode [ 84.413615][ T6019] tipc: Node identity f6bf5f92b964, cluster identity 4711 [ 84.423113][ T6019] tipc: Enabled bearer , priority 0 [ 84.439374][ T6019] syzkaller0: entered promiscuous mode [ 84.446070][ T6019] syzkaller0: entered allmulticast mode [ 84.510447][ T6019] tipc: Resetting bearer [ 84.594913][ T6023] usb usb8: usbfs: process 6023 (syz.1.45) did not claim interface 0 before use [ 84.810607][ T6024] tipc: Resetting bearer [ 84.915151][ T6024] tipc: Disabling bearer [ 84.982872][ T6031] loop2: detected capacity change from 0 to 256 [ 85.065819][ T6031] MINIX-fs: mounting file system with errors, running fsck is recommended [ 85.134013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 85.143580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.153117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.163455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.674475][ T6039] loop0: detected capacity change from 0 to 32768 [ 85.683349][ T6039] XFS (loop0): Invalid device [./file1], error=-15 [ 85.914385][ T5782] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.047858][ T6041] loop2: detected capacity change from 0 to 32768 [ 86.168089][ T6041] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.230116][ T6041] XFS (loop2): Ending clean mount [ 86.419179][ T6051] tipc: Enabled bearer , priority 0 [ 86.459329][ T6051] syzkaller0: entered promiscuous mode [ 86.491220][ T6051] syzkaller0: entered allmulticast mode [ 86.541383][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.559699][ T6051] tipc: Resetting bearer [ 86.854492][ T6054] tipc: Resetting bearer [ 86.936456][ T6054] tipc: Disabling bearer [ 87.317316][ T28] audit: type=1326 audit(1755741480.577:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.0.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbecd78ebe9 code=0x0 [ 87.480475][ T27] cfg80211: failed to load regulatory.db [ 88.201189][ T6090] tipc: Enabled bearer , priority 0 [ 88.210566][ T6090] syzkaller0: entered promiscuous mode [ 88.216934][ T6090] syzkaller0: entered allmulticast mode [ 88.234853][ T6090] tipc: Resetting bearer [ 88.494683][ T6091] tipc: Resetting bearer [ 88.571197][ T6091] tipc: Disabling bearer [ 89.406539][ T6104] pim6reg: entered allmulticast mode [ 89.419502][ T6103] pim6reg: left allmulticast mode [ 89.731957][ T6111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.766810][ T6111] bond_slave_0: entered promiscuous mode [ 89.772979][ T6111] bond_slave_1: entered promiscuous mode [ 89.780499][ T6111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.790894][ T6111] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 89.800437][ T6114] tipc: Started in network mode [ 89.815515][ T6114] tipc: Node identity 2ee39166e772, cluster identity 4711 [ 89.847884][ T6114] tipc: Enabled bearer , priority 0 [ 89.876302][ T6115] syzkaller0: entered promiscuous mode [ 89.900049][ T6115] syzkaller0: entered allmulticast mode [ 89.940699][ T6114] tipc: Resetting bearer [ 90.254375][ T6118] tipc: Resetting bearer [ 90.411645][ T6118] tipc: Disabling bearer [ 90.445886][ T6128] usb usb8: usbfs: process 6128 (syz.0.83) did not claim interface 0 before use [ 90.594557][ T6132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.749625][ T6132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.881151][ T6132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.898069][ T6144] tipc: Enabled bearer , priority 0 [ 90.924476][ T6140] syzkaller0: entered promiscuous mode [ 90.933711][ T6140] syzkaller0: entered allmulticast mode [ 91.019659][ T6132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.068841][ T6144] tipc: Resetting bearer [ 91.241493][ T6132] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.313998][ T9] libceph: connect (1)[c::]:6789 error -101 [ 91.321254][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 91.326503][ T6132] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.370540][ T6132] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.387230][ T6147] tipc: Resetting bearer [ 91.415520][ T6154] ceph: No mds server is up or the cluster is laggy [ 91.441388][ T6147] tipc: Disabling bearer [ 91.485509][ T6132] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.621281][ T6166] usb usb8: usbfs: process 6166 (syz.0.95) did not claim interface 0 before use [ 92.010937][ T6180] tipc: Enabled bearer , priority 0 [ 92.019474][ T6180] syzkaller0: entered promiscuous mode [ 92.025265][ T6180] syzkaller0: entered allmulticast mode [ 92.041621][ T6180] tipc: Resetting bearer [ 92.238107][ T6183] tipc: Resetting bearer [ 92.242309][ T23] libceph: connect (1)[c::]:6789 error -101 [ 92.253687][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 92.270805][ T6183] tipc: Disabling bearer [ 92.330472][ T6188] ceph: No mds server is up or the cluster is laggy [ 92.546448][ T6198] usb usb8: usbfs: process 6198 (syz.2.106) did not claim interface 0 before use [ 92.885842][ T6204] tipc: Enabled bearer , priority 0 [ 92.894794][ T6204] syzkaller0: entered promiscuous mode [ 92.905967][ T6204] syzkaller0: entered allmulticast mode [ 92.925203][ T6204] Zero length message leads to an empty skb [ 92.942377][ T6204] tipc: Resetting bearer [ 92.957321][ T6201] loop2: detected capacity change from 0 to 40427 [ 92.977318][ T6201] F2FS-fs (loop2): invalid crc value [ 92.989919][ T6201] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.039212][ T6201] F2FS-fs (loop2): Start checkpoint disabled! [ 93.070482][ T6201] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 93.190501][ T6211] tipc: Enabling of bearer rejected, already enabled [ 93.234314][ T6205] tipc: Resetting bearer [ 93.296693][ T6205] tipc: Disabling bearer [ 93.413024][ T11] kworker/u4:0: attempt to access beyond end of device [ 93.413024][ T11] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.422894][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 93.434845][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 93.451736][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 93.523258][ T6215] ceph: No mds server is up or the cluster is laggy [ 94.029565][ T6233] usb usb8: usbfs: process 6233 (syz.2.115) did not claim interface 0 before use [ 94.744553][ T6238] loop0: detected capacity change from 0 to 4096 [ 94.845355][ T6238] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 94.888103][ T6238] ntfs3: loop0: failed to convert "0080" to cp936 [ 94.914780][ T6238] ntfs3: loop0: failed to convert name for inode 1e. [ 95.040647][ T6242] loop2: detected capacity change from 0 to 4096 [ 95.125807][ T6244] tipc: Enabled bearer , priority 0 [ 95.214377][ T6245] syzkaller0: entered promiscuous mode [ 95.220253][ T6245] syzkaller0: entered allmulticast mode [ 95.314199][ T6244] tipc: Resetting bearer [ 95.351653][ T9] libceph: connect (1)[c::]:6789 error -101 [ 95.359058][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 95.447802][ T6247] ceph: No mds server is up or the cluster is laggy [ 95.664651][ T6250] tipc: Resetting bearer [ 95.712540][ T6250] tipc: Disabling bearer [ 95.920519][ T6272] usb usb8: usbfs: process 6272 (syz.2.126) did not claim interface 0 before use [ 96.648328][ T6283] tipc: Started in network mode [ 96.654733][ T6283] tipc: Node identity 0240d17aa5d3, cluster identity 4711 [ 96.663221][ T6283] tipc: Enabled bearer , priority 0 [ 96.675045][ T6283] syzkaller0: entered promiscuous mode [ 96.681580][ T6283] syzkaller0: entered allmulticast mode [ 96.702214][ T6283] tipc: Resetting bearer [ 96.869661][ T23] libceph: connect (1)[c::]:6789 error -101 [ 96.879958][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 96.940358][ T6284] tipc: Resetting bearer [ 96.961904][ T6284] tipc: Disabling bearer [ 96.977674][ T6288] ceph: No mds server is up or the cluster is laggy [ 97.159858][ T6300] Invalid ELF header type: 3 != 1 [ 97.469911][ T6310] usb usb8: usbfs: process 6310 (syz.1.139) did not claim interface 0 before use [ 97.548693][ T6312] loop3: detected capacity change from 0 to 128 [ 97.643601][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.843561][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 98.208695][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.426754][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.526915][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.787813][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.964846][ T27] libceph: connect (1)[c::]:6789 error -101 [ 98.975439][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 99.073587][ T6322] ceph: No mds server is up or the cluster is laggy [ 99.776241][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.805569][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.817025][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.846013][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.863731][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.876285][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.954863][ T6341] loop0: detected capacity change from 0 to 4096 [ 99.987184][ T6341] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 100.140046][ T6344] tipc: Enabled bearer , priority 0 [ 100.193028][ T6341] ntfs3: loop0: failed to convert "c46c" to cp737 [ 100.257815][ T6344] syzkaller0: entered promiscuous mode [ 100.308147][ T6344] syzkaller0: entered allmulticast mode [ 100.420678][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.468145][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 100.512641][ T23] usb 3-1: can't read configurations, error -71 [ 100.599231][ T6344] tipc: Resetting bearer [ 100.619400][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 100.843039][ T6357] tipc: Resetting bearer [ 100.882535][ T9] libceph: connect (1)[c::]:6789 error -101 [ 100.890611][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 100.910906][ T6357] tipc: Disabling bearer [ 100.973812][ T6365] ceph: No mds server is up or the cluster is laggy [ 101.558149][ T6392] loop1: detected capacity change from 0 to 512 [ 101.589434][ T6392] EXT4-fs: Ignoring removed nobh option [ 101.860726][ T6392] EXT4-fs (loop1): Test dummy encryption mode enabled [ 101.896583][ T6338] chnl_net:caif_netlink_parms(): no params data found [ 101.904462][ T6392] EXT4-fs error (device loop1): __ext4_iget:5053: inode #11: block 1: comm syz.1.158: invalid block [ 101.926578][ T6392] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.158: couldn't read orphan inode 11 (err -117) [ 101.949269][ T6401] tipc: Enabled bearer , priority 0 [ 101.961921][ T5800] Bluetooth: hci2: command tx timeout [ 101.986201][ T6392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.026542][ T6401] syzkaller0: entered promiscuous mode [ 102.037582][ T6401] syzkaller0: entered allmulticast mode [ 102.062272][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.227924][ T6401] tipc: Resetting bearer [ 102.533150][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.563644][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.581140][ T6338] bridge_slave_0: entered allmulticast mode [ 102.586969][ T23] libceph: connect (1)[c::]:6789 error -101 [ 102.598174][ T6338] bridge_slave_0: entered promiscuous mode [ 102.618735][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 102.686568][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.686654][ T6423] ceph: No mds server is up or the cluster is laggy [ 102.716884][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.728696][ T6338] bridge_slave_1: entered allmulticast mode [ 102.761408][ T6338] bridge_slave_1: entered promiscuous mode [ 102.849965][ T11] hsr_slave_0: left promiscuous mode [ 102.902251][ T11] hsr_slave_1: left promiscuous mode [ 102.942733][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.952015][ T23] tipc: Node number set to 2811482490 [ 102.976253][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.022513][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.043348][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.072232][ T11] bridge_slave_1: left allmulticast mode [ 103.080831][ T6442] loop2: detected capacity change from 0 to 512 [ 103.091262][ T11] bridge_slave_1: left promiscuous mode [ 103.102369][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.161796][ T6442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.180957][ T11] bridge_slave_0: left allmulticast mode [ 103.206320][ T11] bridge_slave_0: left promiscuous mode [ 103.208390][ T6442] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.244051][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.358832][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.390969][ T11] veth1_macvtap: left promiscuous mode [ 103.417901][ T11] veth0_macvtap: left promiscuous mode [ 103.431372][ T11] veth1_vlan: left promiscuous mode [ 103.448530][ T11] veth0_vlan: left promiscuous mode [ 103.635843][ T6452] loop2: detected capacity change from 0 to 128 [ 103.680874][ T6452] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 103.703987][ T6452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.106601][ T5800] Bluetooth: hci2: command tx timeout [ 104.493536][ T786] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.689631][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.722846][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.769811][ T5800] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 104.907389][ T11] team0 (unregistering): Port device team_slave_1 removed [ 104.961588][ T11] team0 (unregistering): Port device team_slave_0 removed [ 105.008577][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.053757][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.918167][ T11] bond0 (unregistering): Released all slaves [ 106.011715][ T6415] tipc: Resetting bearer [ 106.043145][ T6415] tipc: Disabling bearer [ 106.165718][ T6464] tipc: Enabling of bearer rejected, failed to enable media [ 106.196259][ T5800] Bluetooth: hci2: command tx timeout [ 106.216216][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.270520][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.380422][ T6338] team0: Port device team_slave_0 added [ 106.419684][ T6338] team0: Port device team_slave_1 added [ 106.490049][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.497921][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.506178][ T55] libceph: connect (1)[c::]:6789 error -101 [ 106.531758][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 106.583767][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.599668][ T6474] ceph: No mds server is up or the cluster is laggy [ 106.609775][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.642117][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.752071][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.906425][ T6487] usb usb8: usbfs: process 6487 (syz.1.175) did not claim interface 0 before use [ 106.979706][ T6338] hsr_slave_0: entered promiscuous mode [ 107.019500][ T6338] hsr_slave_1: entered promiscuous mode [ 107.258440][ T786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.294407][ T786] usb 1-1: too many configurations: 111, using maximum allowed: 8 [ 107.345552][ T786] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 107.367728][ T786] usb 1-1: can't read configurations, error -71 [ 107.756293][ T6338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.820997][ T6338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.882500][ T6338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.958879][ T6338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.263917][ T5800] Bluetooth: hci2: command tx timeout [ 108.446422][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.636693][ T6338] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.700263][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.708788][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.783249][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.791239][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.823010][ T6531] tipc: Enabled bearer , priority 0 [ 108.827864][ T6524] syzkaller0: entered promiscuous mode [ 108.827879][ T6524] syzkaller0: entered allmulticast mode [ 108.888935][ T6524] tipc: Resetting bearer [ 109.324501][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 109.331737][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 109.375611][ T6534] tipc: Resetting bearer [ 109.436039][ T6542] ceph: No mds server is up or the cluster is laggy [ 109.572374][ T6534] tipc: Disabling bearer [ 109.757003][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.104432][ T5779] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.268997][ T6571] bridge_slave_0: left allmulticast mode [ 110.289475][ T6571] bridge_slave_0: left promiscuous mode [ 110.306534][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.338688][ T6571] bridge_slave_1: left allmulticast mode [ 110.350190][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.364886][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.377452][ T6571] bridge_slave_1: left promiscuous mode [ 110.394857][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.417354][ T5800] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 110.447320][ T6571] bond0: (slave bond_slave_0): Releasing backup interface [ 110.461891][ T6571] bond_slave_0: left promiscuous mode [ 110.479028][ T6571] bond0: (slave bond_slave_1): Releasing backup interface [ 110.490792][ T6571] bond_slave_1: left promiscuous mode [ 110.545882][ T6571] team0: Port device team_slave_0 removed [ 110.569984][ T6571] team0: Port device team_slave_1 removed [ 110.588570][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.601237][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.620484][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.637111][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.683859][ T6571] bond1: (slave macvlan2): Removing an active aggregator [ 110.694647][ T6571] bond1: (slave macvlan2): Releasing backup interface [ 110.829054][ T6585] usb usb8: usbfs: process 6585 (syz.0.188) did not claim interface 0 before use [ 110.913408][ T6338] veth0_vlan: entered promiscuous mode [ 110.932136][ T6338] veth1_vlan: entered promiscuous mode [ 111.057225][ T6338] veth0_macvtap: entered promiscuous mode [ 111.091949][ T6338] veth1_macvtap: entered promiscuous mode [ 111.166913][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.204332][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.246278][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.282467][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.339638][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.419840][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.476063][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.521592][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.544656][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.587021][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.637521][ T6338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.657414][ T6338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.669711][ T6338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.681994][ T6338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.780220][ T6593] tipc: Enabled bearer , priority 0 [ 111.855699][ T6593] syzkaller0: entered promiscuous mode [ 111.903110][ T6593] syzkaller0: entered allmulticast mode [ 111.992361][ T6593] tipc: Resetting bearer [ 112.112783][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.141672][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.304560][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.342688][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.564433][ T6600] tipc: Resetting bearer [ 112.689388][ T6600] tipc: Disabling bearer [ 112.721253][ T5779] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.753997][ T5779] usb 2-1: too many configurations: 111, using maximum allowed: 8 [ 112.814059][ T5779] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 112.821970][ T5779] usb 2-1: can't read configurations, error -71 [ 112.870636][ T6608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.123627][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.159385][ T6615] loop1: detected capacity change from 0 to 32768 [ 113.204503][ T6615] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.260334][ T6615] XFS (loop1): Ending clean mount [ 113.326875][ T5844] usb 3-1: config 0 has an invalid interface number: 73 but max is 0 [ 113.345678][ T5790] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.370877][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.409878][ T5844] usb 3-1: config 0 has no interface number 0 [ 113.438000][ T5844] usb 3-1: New USB device found, idVendor=7ff8, idProduct=30ff, bcdDevice=39.64 [ 113.465386][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.475398][ T5844] usb 3-1: Product: syz [ 113.480007][ T5844] usb 3-1: Manufacturer: syz [ 113.485399][ T5844] usb 3-1: SerialNumber: syz [ 113.497565][ T5844] usb 3-1: config 0 descriptor?? [ 113.559396][ T5844] usb 3-1: Found UVC 0.00 device syz (7ff8:30ff) [ 113.581984][ T5844] usb 3-1: No valid video chain found. [ 113.667939][ T6608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.725944][ T786] usb 3-1: USB disconnect, device number 4 [ 113.792696][ T6638] loop1: detected capacity change from 0 to 64 [ 114.065884][ T6608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.275749][ T6608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.327631][ T6650] tipc: Enabled bearer , priority 0 [ 114.348341][ T6650] syzkaller0: entered promiscuous mode [ 114.369223][ T6650] syzkaller0: entered allmulticast mode [ 114.427131][ T6650] tipc: Resetting bearer [ 114.449035][ T6661] usb usb8: usbfs: process 6661 (syz.1.199) did not claim interface 0 before use [ 114.481034][ T6608] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.572115][ T6608] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.645186][ T6608] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.716012][ T6608] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.744996][ T6666] netlink: 148 bytes leftover after parsing attributes in process `syz.2.200'. [ 114.809655][ T6663] tipc: Resetting bearer [ 114.891311][ T6663] tipc: Disabling bearer [ 114.908404][ T6677] netlink: 76 bytes leftover after parsing attributes in process `syz.0.201'. [ 115.385086][ T8] tipc: Node number set to 1339776914 [ 115.413606][ T5779] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.706766][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.759407][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.777224][ T5800] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 116.199684][ T6691] loop0: detected capacity change from 0 to 32768 [ 116.220078][ T6691] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 116.558730][ T6696] bridge_slave_0: left allmulticast mode [ 116.602892][ T6696] bridge_slave_0: left promiscuous mode [ 116.606119][ T5782] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 116.623924][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.658051][ T6696] bridge_slave_1: left allmulticast mode [ 116.684843][ T6696] bridge_slave_1: left promiscuous mode [ 116.726262][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.790788][ T6696] bond0: (slave bond_slave_0): Releasing backup interface [ 116.904026][ T6696] bond0: (slave bond_slave_1): Releasing backup interface [ 117.182746][ T6700] loop2: detected capacity change from 0 to 32768 [ 117.201339][ T6700] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 117.337462][ T5780] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.349947][ T6696] team0: Port device team_slave_0 removed [ 117.405610][ T6696] team0: Port device team_slave_1 removed [ 117.438997][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.467362][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.477227][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.489843][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.677943][ T6710] tipc: Enabled bearer , priority 0 [ 117.690074][ T6710] syzkaller0: entered promiscuous mode [ 117.696337][ T6710] syzkaller0: entered allmulticast mode [ 117.959280][ T5779] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.986799][ T5779] usb 5-1: too many configurations: 111, using maximum allowed: 8 [ 118.016044][ T5779] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 118.024257][ T6712] tipc: Resetting bearer [ 118.033531][ T5779] usb 5-1: can't read configurations, error -71 [ 118.080186][ T6712] tipc: Disabling bearer [ 118.130129][ T6723] netlink: 76 bytes leftover after parsing attributes in process `syz.0.212'. [ 118.178386][ T6726] usb usb8: usbfs: process 6726 (syz.2.211) did not claim interface 0 before use [ 118.376825][ T6733] loop4: detected capacity change from 0 to 128 [ 118.429672][ T6733] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.453256][ T6733] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.695348][ T6738] loop1: detected capacity change from 0 to 32768 [ 118.731636][ T6738] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 118.741029][ T6738] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 118.756141][ T6338] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.772569][ T6738] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 118.787271][ T5854] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 118.794737][ T5854] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 118.857188][ T5854] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 62ms [ 118.876245][ T5854] gfs2: fsid=syz:syz.0: jid=0: Done [ 118.883781][ T6738] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 118.941891][ T6742] tipc: Started in network mode [ 118.953079][ T6742] tipc: Node identity d2e9c47fafdc, cluster identity 4711 [ 118.962099][ T6742] tipc: Enabled bearer , priority 0 [ 118.977863][ T6742] syzkaller0: entered promiscuous mode [ 119.005830][ T6742] syzkaller0: entered allmulticast mode [ 119.469685][ T6756] bridge_slave_0: left allmulticast mode [ 119.490890][ T6756] bridge_slave_0: left promiscuous mode [ 119.528114][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.547627][ T6756] bridge_slave_1: left allmulticast mode [ 119.561211][ T6756] bridge_slave_1: left promiscuous mode [ 119.563638][ T55] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.568495][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.594655][ T6756] bond0: (slave bond_slave_0): Releasing backup interface [ 119.613332][ T6756] bond0: (slave bond_slave_1): Releasing backup interface [ 119.681359][ T6756] team0: Port device team_slave_0 removed [ 119.748802][ T6756] team0: Port device team_slave_1 removed [ 119.774253][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.782350][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.793058][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.811661][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.857906][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.873290][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.890863][ T5800] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 119.919373][ T6757] batman_adv: batadv0: Adding interface: dummy0 [ 119.934921][ T6757] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.965781][ T5854] tipc: Node number set to 2100675711 [ 119.990271][ T6757] batman_adv: batadv0: Interface activated: dummy0 [ 120.064379][ T6758] batadv0: mtu less than device minimum [ 120.082618][ T6758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.096871][ T6758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.110349][ T6758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.123704][ T6758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.136761][ T6758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.149854][ T6758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.162733][ T6758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.175668][ T6758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.188777][ T6758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.231952][ T6747] tipc: Resetting bearer [ 120.296520][ T6747] tipc: Disabling bearer [ 120.947014][ T6772] loop1: detected capacity change from 0 to 32768 [ 120.990044][ T6772] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.089314][ T6772] XFS (loop1): Ending clean mount [ 121.107817][ T6772] XFS (loop1): Quotacheck needed: Please wait. [ 121.154847][ T6787] netlink: 76 bytes leftover after parsing attributes in process `syz.2.230'. [ 121.215793][ T6772] XFS (loop1): Quotacheck: Done. [ 121.320981][ T5790] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.782032][ T6794] tipc: Enabled bearer , priority 0 [ 121.791063][ T6794] syzkaller0: entered promiscuous mode [ 121.799784][ T6794] syzkaller0: entered allmulticast mode [ 122.093498][ T5844] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.247150][ T6797] tipc: Resetting bearer [ 122.327042][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 122.377909][ T55] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.394911][ T55] usb 1-1: too many configurations: 111, using maximum allowed: 8 [ 122.403169][ T5844] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.432693][ T6797] tipc: Disabling bearer [ 122.447354][ T55] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 122.466236][ T55] usb 1-1: can't read configurations, error -71 [ 122.513916][ T5844] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.544862][ T6808] syz.2.233 uses obsolete (PF_INET,SOCK_PACKET) [ 122.551388][ T5844] usb 5-1: config 1 interface 0 has no altsetting 0 [ 122.628693][ T5844] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 122.650431][ T6806] netlink: 148 bytes leftover after parsing attributes in process `syz.1.234'. [ 122.667364][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.683685][ T5844] usb 5-1: Product: syz [ 122.694581][ T5844] usb 5-1: Manufacturer: syz [ 122.702998][ T5844] usb 5-1: SerialNumber: syz [ 122.988654][ T6818] bridge_slave_0: left allmulticast mode [ 123.003970][ T6818] bridge_slave_0: left promiscuous mode [ 123.015903][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.051633][ T6818] bridge_slave_1: left allmulticast mode [ 123.074696][ T6818] bridge_slave_1: left promiscuous mode [ 123.119660][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.168542][ T6818] bond0: (slave bond_slave_0): Releasing backup interface [ 123.237265][ T6818] bond0: (slave bond_slave_1): Releasing backup interface [ 123.376444][ T6818] team0: Port device team_slave_0 removed [ 123.494162][ T6818] team0: Port device team_slave_1 removed [ 123.522772][ T6818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.562818][ T6818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.598103][ T6818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.621850][ T6818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.234011][ T6826] loop2: detected capacity change from 0 to 32768 [ 124.281893][ T6826] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.405367][ T6826] XFS (loop2): Ending clean mount [ 124.509461][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.752895][ T5844] usbhid 5-1:1.0: can't add hid device: -71 [ 124.773730][ T5844] usbhid: probe of 5-1:1.0 failed with error -71 [ 124.808638][ T5844] usb 5-1: USB disconnect, device number 4 [ 124.886254][ T6843] usb usb8: usbfs: process 6843 (syz.2.240) did not claim interface 0 before use [ 125.027853][ T6845] tipc: Enabled bearer , priority 0 [ 125.070122][ T6845] syzkaller0: entered promiscuous mode [ 125.104557][ T6845] syzkaller0: entered allmulticast mode [ 125.131511][ T6848] loop1: detected capacity change from 0 to 1024 [ 125.174674][ T6850] netlink: 48 bytes leftover after parsing attributes in process `syz.0.243'. [ 125.197237][ T6845] tipc: Resetting bearer [ 125.514576][ T1330] hfsplus: b-tree write err: -5, ino 4 [ 125.526112][ T6859] process 'syz.4.246' launched './file2' with NULL argv: empty string added [ 125.614630][ T6852] tipc: Resetting bearer [ 125.720033][ T6852] tipc: Disabling bearer [ 126.242100][ T6872] loop4: detected capacity change from 0 to 40427 [ 126.278030][ T6872] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 126.286179][ T6872] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 126.304792][ T6872] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x7ffff [ 126.314760][ T6872] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 126.331900][ T6872] F2FS-fs (loop4): invalid crc value [ 126.351420][ T6872] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.452504][ T6872] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 126.460442][ T6872] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.841899][ T6338] syz-executor: attempt to access beyond end of device [ 126.841899][ T6338] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.867171][ T6338] F2FS-fs (loop4): Remounting filesystem read-only [ 127.453636][ T5779] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.683513][ T5779] usb 3-1: Using ep0 maxpacket: 16 [ 127.749096][ T5779] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.825170][ T5779] usb 3-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.884041][ T5779] usb 3-1: config 1 interface 0 has no altsetting 0 [ 127.982660][ T5779] usb 3-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 128.066935][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.093023][ T5779] usb 3-1: Product: syz [ 128.138923][ T5779] usb 3-1: Manufacturer: syz [ 128.335757][ T6909] loop4: detected capacity change from 0 to 32768 [ 128.347612][ T5779] usb 3-1: SerialNumber: syz [ 128.390563][ T6909] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.495149][ T6909] XFS (loop4): Ending clean mount [ 128.512175][ T6909] XFS (loop4): Quotacheck needed: Please wait. [ 128.525964][ T6920] tipc: Enabled bearer , priority 0 [ 128.575898][ T6920] syzkaller0: entered promiscuous mode [ 128.581503][ T6920] syzkaller0: entered allmulticast mode [ 128.667390][ T6909] XFS (loop4): Quotacheck: Done. [ 128.776099][ T6920] tipc: Resetting bearer [ 128.900290][ T6338] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.222358][ T6933] tipc: Resetting bearer [ 129.380096][ T6933] tipc: Disabling bearer [ 129.815053][ T6943] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.897174][ T6943] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.040315][ T6943] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.051825][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.061239][ T5779] usbhid 3-1:1.0: can't add hid device: -71 [ 130.068058][ T5779] usbhid: probe of 3-1:1.0 failed with error -71 [ 130.119677][ T5779] usb 3-1: USB disconnect, device number 5 [ 130.152320][ T6943] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.236820][ T6967] netlink: 76 bytes leftover after parsing attributes in process `syz.0.262'. [ 130.275766][ T8] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 130.296053][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.299701][ T6943] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.320652][ T8] usb 5-1: Product: syz [ 130.335448][ T8] usb 5-1: Manufacturer: syz [ 130.350788][ T6943] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.363231][ T8] usb 5-1: SerialNumber: syz [ 130.372858][ T6943] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.393427][ T8] usb 5-1: config 0 descriptor?? [ 130.442026][ T6943] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.455625][ T8] ch341 5-1:0.0: ch341-uart converter detected [ 130.853248][ T6979] netlink: 'syz.1.265': attribute type 39 has an invalid length. [ 131.155768][ T6983] tipc: Enabled bearer , priority 0 [ 131.171548][ T6983] syzkaller0: entered promiscuous mode [ 131.182741][ T6983] syzkaller0: entered allmulticast mode [ 131.225556][ T6983] tipc: Resetting bearer [ 131.292729][ T8] usb 5-1: failed to send control message: -71 [ 131.299854][ T8] ch341-uart: probe of ttyUSB0 failed with error -71 [ 131.333531][ T8] usb 5-1: USB disconnect, device number 5 [ 131.369369][ T8] ch341 5-1:0.0: device disconnected [ 131.611340][ T6987] tipc: Resetting bearer [ 131.707330][ T6987] tipc: Disabling bearer [ 131.794531][ T6994] tipc: Enabled bearer , priority 0 [ 131.810603][ T6994] syzkaller0: entered promiscuous mode [ 131.816859][ T6994] syzkaller0: entered allmulticast mode [ 131.892969][ T6999] loop2: detected capacity change from 0 to 512 [ 131.917040][ T6995] tipc: Resetting bearer [ 131.970814][ T6999] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.136652][ T6999] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #17: comm syz.2.268: iget: bad i_size value: -6917529027641081756 [ 132.186198][ T7003] tipc: Resetting bearer [ 132.202354][ T6999] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.268: couldn't read orphan inode 17 (err -117) [ 132.216699][ T7003] tipc: Disabling bearer [ 132.241072][ T6999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.328640][ T6999] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.268: bg 0: block 65: padding at end of block bitmap is not set [ 132.401891][ T6999] Quota error (device loop2): write_blk: dquota write failed [ 132.472592][ T6999] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 132.477088][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 132.553691][ T7017] Quota error (device loop2): do_check_range: Getting block 144 out of range 0-5 [ 132.568932][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 132.582657][ T6999] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.268: Failed to acquire dquot type 0 [ 132.603605][ T5779] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.718263][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.796898][ T5779] usb 5-1: Using ep0 maxpacket: 16 [ 132.842498][ T5779] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.878351][ T5779] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.927619][ T5779] usb 5-1: config 1 interface 0 has no altsetting 0 [ 132.939780][ T5779] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 132.952769][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.966826][ T5779] usb 5-1: Product: syz [ 132.971876][ T5779] usb 5-1: Manufacturer: syz [ 132.981201][ T5779] usb 5-1: SerialNumber: syz [ 133.110949][ T7027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.222029][ T7037] netlink: 76 bytes leftover after parsing attributes in process `syz.2.275'. [ 133.309846][ T7027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.510128][ T7027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.549784][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.556879][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.650281][ T7027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.781244][ T7027] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.803740][ T7027] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.831351][ T7027] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.861825][ T7027] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.452115][ T7068] tipc: Enabled bearer , priority 0 [ 134.460963][ T7068] syzkaller0: entered promiscuous mode [ 134.467291][ T7068] syzkaller0: entered allmulticast mode [ 134.504391][ T7068] tipc: Resetting bearer [ 134.887299][ T7073] tipc: Resetting bearer [ 134.988593][ T7073] tipc: Disabling bearer [ 135.123738][ T7090] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.179293][ T5779] usbhid 5-1:1.0: can't add hid device: -71 [ 135.212145][ T5779] usbhid: probe of 5-1:1.0 failed with error -71 [ 135.252766][ T7090] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.282140][ T7093] loop2: detected capacity change from 0 to 1024 [ 135.285847][ T5779] usb 5-1: USB disconnect, device number 6 [ 135.400711][ T7090] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.465621][ T3537] hfsplus: b-tree write err: -5, ino 4 [ 135.479490][ T7099] netlink: 76 bytes leftover after parsing attributes in process `syz.4.286'. [ 135.558059][ T7090] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.085527][ T7110] loop2: detected capacity change from 0 to 32768 [ 136.099725][ T7110] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.288 (7110) [ 136.133482][ T7110] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 136.144950][ T7110] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 136.154586][ T7110] BTRFS info (device loop2): using free space tree [ 136.237905][ T7110] BTRFS info (device loop2): enabling ssd optimizations [ 136.246083][ T7110] BTRFS info (device loop2): auto enabling async discard [ 136.312578][ T7135] tipc: Enabled bearer , priority 0 [ 136.363851][ T7135] syzkaller0: entered promiscuous mode [ 136.380698][ T5787] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 136.404858][ T7135] syzkaller0: entered allmulticast mode [ 136.474128][ T7135] tipc: Resetting bearer [ 136.933563][ T7140] tipc: Resetting bearer [ 137.009773][ T7140] tipc: Disabling bearer [ 137.414276][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 137.607517][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 137.619928][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.646597][ T8] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.681631][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 137.717893][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 137.729404][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.739604][ T8] usb 5-1: Product: syz [ 137.747581][ T8] usb 5-1: Manufacturer: syz [ 137.752747][ T8] usb 5-1: SerialNumber: syz [ 137.879228][ T7163] netlink: 76 bytes leftover after parsing attributes in process `syz.2.297'. [ 138.015018][ T8] usbhid 5-1:1.0: can't add hid device: -71 [ 138.021779][ T8] usbhid: probe of 5-1:1.0 failed with error -71 [ 138.066376][ T8] usb 5-1: USB disconnect, device number 7 [ 138.855748][ T7177] usb usb8: usbfs: process 7177 (syz.4.300) did not claim interface 0 before use [ 138.890716][ T7179] mkiss: ax0: crc mode is auto. [ 139.197091][ T7181] loop2: detected capacity change from 0 to 4096 [ 139.226429][ T7181] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 139.289874][ T7181] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 139.318922][ T7181] ntfs3: loop2: mft corrupted [ 139.352906][ T7181] ntfs3: loop2: Failed to load $Extend (-22). [ 139.373563][ T7181] ntfs3: loop2: Failed to initialize $Extend. [ 139.410734][ T7090] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.506741][ T7181] ntfs3: loop2: ino=1e, "file1" failed to parse mft record [ 139.514380][ T7090] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.542031][ T7090] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.573458][ T7181] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 139.617214][ T7090] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.576428][ T7204] netlink: 76 bytes leftover after parsing attributes in process `syz.2.309'. [ 140.603458][ T786] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 140.843462][ T786] usb 5-1: Using ep0 maxpacket: 16 [ 140.862009][ T786] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.873246][ T786] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.903496][ T786] usb 5-1: config 1 interface 0 has no altsetting 0 [ 140.916690][ T786] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 140.943591][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.952570][ T786] usb 5-1: Product: syz [ 140.957711][ T786] usb 5-1: Manufacturer: syz [ 140.962920][ T786] usb 5-1: SerialNumber: syz [ 141.215008][ T786] usbhid 5-1:1.0: can't add hid device: -71 [ 141.221541][ T786] usbhid: probe of 5-1:1.0 failed with error -71 [ 141.242983][ T786] usb 5-1: USB disconnect, device number 8 [ 141.330246][ T7216] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.392180][ T7216] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.487419][ T7216] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.612466][ T7220] loop2: detected capacity change from 0 to 32768 [ 141.637113][ T7220] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.316 (7220) [ 141.662544][ T7216] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.674457][ T7220] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.674560][ T7220] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 141.674627][ T7220] BTRFS info (device loop2): using free space tree [ 141.739796][ T48] BTRFS warning (device loop2): checksum verify failed on logical 5328896 mirror 1 wanted 0xac8366d3d2e6f7dc04e332773638acafeccdac9b39be662d19e98924efedf548 found 0xa0ca4bcfbbf55919e00f39f0912ec76c6739b6a8fe74d76dc0eea38b9d4fed10 level 0 [ 141.781158][ T7220] BTRFS warning (device loop2): failed to read root (objectid=4): -5 [ 141.872629][ T7220] BTRFS error (device loop2): open_ctree failed: -5 [ 141.960032][ T7216] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.982185][ T28] audit: type=1326 audit(1755741535.237:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c1d8ebe9 code=0x7ffc0000 [ 142.001950][ T7216] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.057198][ T28] audit: type=1326 audit(1755741535.237:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c1d8ebe9 code=0x7ffc0000 [ 142.086624][ T7216] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.133693][ T28] audit: type=1326 audit(1755741535.287:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f60c1d8ebe9 code=0x7ffc0000 [ 142.214412][ T28] audit: type=1326 audit(1755741535.287:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c1d8ebe9 code=0x7ffc0000 [ 142.338417][ T28] audit: type=1326 audit(1755741535.287:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c1d8ebe9 code=0x7ffc0000 [ 142.413328][ T7216] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.453293][ T28] audit: type=1326 audit(1755741535.287:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f60c1d8ebe9 code=0x7ffc0000 [ 142.539155][ T28] audit: type=1326 audit(1755741535.287:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c1d8ebe9 code=0x7ffc0000 [ 142.585632][ T7242] usb usb8: usbfs: process 7242 (syz.0.317) did not claim interface 0 before use [ 142.923999][ T7259] netlink: 76 bytes leftover after parsing attributes in process `syz.1.323'. [ 143.949299][ T7275] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.985995][ T7271] loop1: detected capacity change from 0 to 32768 [ 144.051381][ T7271] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 144.051381][ T7271] [ 144.369171][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 144.573869][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 144.588914][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.618008][ T9] usb 1-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.663678][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 144.724461][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 144.745012][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.769552][ T9] usb 1-1: Product: syz [ 144.793661][ T9] usb 1-1: Manufacturer: syz [ 144.798500][ T9] usb 1-1: SerialNumber: syz [ 145.104718][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 145.154144][ T9] usbhid: probe of 1-1:1.0 failed with error -71 [ 145.164944][ T55] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.178056][ T9] usb 1-1: USB disconnect, device number 7 [ 145.372869][ T7297] netlink: 76 bytes leftover after parsing attributes in process `syz.2.336'. [ 145.453956][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.479133][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.594967][ T5800] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 146.473165][ T7312] tipc: Enabled bearer , priority 0 [ 146.482330][ T7312] syzkaller0: entered promiscuous mode [ 146.490246][ T7312] syzkaller0: entered allmulticast mode [ 146.528886][ T7312] tipc: Resetting bearer [ 146.814611][ T7313] tipc: Resetting bearer [ 146.916578][ T7313] tipc: Disabling bearer [ 146.977362][ T7317] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.107895][ T7317] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.222231][ T7317] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.306887][ T7323] netlink: 148 bytes leftover after parsing attributes in process `syz.0.346'. [ 147.319406][ T7317] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.528893][ T7317] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.558208][ T7317] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.582540][ T7317] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.615083][ T7317] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.893092][ T786] libceph: connect (1)[c::]:6789 error -101 [ 147.903835][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.912767][ T55] usb 2-1: too many configurations: 111, using maximum allowed: 8 [ 147.943829][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 147.949981][ T7328] ceph: No mds server is up or the cluster is laggy [ 147.952044][ T55] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 148.008662][ T55] usb 2-1: can't read configurations, error -71 [ 148.049917][ T7335] loop1: detected capacity change from 0 to 64 [ 148.329099][ T7343] netlink: 76 bytes leftover after parsing attributes in process `syz.2.350'. [ 148.485325][ T7339] loop4: detected capacity change from 0 to 32768 [ 148.515325][ T7339] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.590876][ T7339] XFS (loop4): Ending clean mount [ 148.609824][ T7339] XFS (loop4): Quotacheck needed: Please wait. [ 148.693682][ T7339] XFS (loop4): Quotacheck: Done. [ 148.823600][ T55] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.889003][ T6338] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.043646][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 149.071513][ T55] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 149.113426][ T55] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.154588][ T55] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.173879][ T55] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 149.223613][ T55] usb 2-1: config 7 interface 0 has no altsetting 0 [ 149.230485][ T55] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 149.253567][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.436557][ T7367] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.506013][ T7367] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.580261][ T7367] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.662610][ T7367] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.684985][ T55] hid (null): unknown global tag 0xd [ 149.690963][ T55] hid (null): unknown global tag 0xe [ 149.698269][ T55] hid (null): unknown global tag 0xc [ 149.705096][ T55] hid (null): global environment stack underflow [ 149.712123][ T55] hid (null): bogus close delimiter [ 149.719416][ T55] hid (null): unknown global tag 0xc [ 149.732976][ T55] hid (null): unknown global tag 0xd [ 149.749453][ T55] hid (null): unknown global tag 0xd [ 149.764777][ T55] hid (null): global environment stack underflow [ 149.772239][ T55] hid (null): global environment stack underflow [ 149.805879][ T55] hid (null): unknown global tag 0xb2 [ 149.827872][ T55] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0002/input/input5 [ 149.840708][ T7367] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.869075][ T7367] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.890485][ T7367] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.916183][ T7367] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.998373][ T55] kye 0003:0458:5010.0002: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 150.083703][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.108089][ T55] usb 2-1: USB disconnect, device number 5 [ 150.123033][ T5779] libceph: connect (1)[c::]:6789 error -101 [ 150.132001][ T5779] libceph: mon0 (1)[c::]:6789 connect error [ 150.162843][ T7375] ceph: No mds server is up or the cluster is laggy [ 150.241058][ T7379] fido_id[7379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 150.542671][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.822734][ T7382] loop4: detected capacity change from 0 to 32768 [ 150.912334][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.999153][ T5800] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 151.099503][ T7385] netlink: 148 bytes leftover after parsing attributes in process `syz.1.361'. [ 151.484511][ T7389] loop2: detected capacity change from 0 to 32768 [ 153.380588][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.413493][ T27] usb 1-1: too many configurations: 111, using maximum allowed: 8 [ 153.452684][ T27] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 153.461007][ T27] usb 1-1: can't read configurations, error -71 [ 153.759614][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 153.767309][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 153.805623][ T7416] ceph: No mds server is up or the cluster is laggy [ 153.873616][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.013591][ T28] audit: type=1326 audit(1755741547.267:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.2.372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc25458ebe9 code=0x0 [ 154.109158][ T7423] loop1: detected capacity change from 0 to 32768 [ 154.118011][ T7423] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 154.217618][ T5782] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 154.303939][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 154.318848][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 154.347738][ T27] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.373041][ T27] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.401449][ T27] usb 1-1: Product: syz [ 154.415469][ T27] usb 1-1: Manufacturer: syz [ 154.431001][ T27] usb 1-1: SerialNumber: syz [ 154.454853][ T27] usb 1-1: config 0 descriptor?? [ 154.470815][ T7428] loop1: detected capacity change from 0 to 32768 [ 154.479213][ T7428] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.373 (7428) [ 154.481369][ T7411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.512094][ T7428] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.522547][ T7428] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 154.529547][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 154.532367][ T7428] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.548379][ T7428] BTRFS info (device loop1): use zstd compression, level 3 [ 154.548535][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 154.556337][ T7428] BTRFS info (device loop1): use no compression [ 154.556363][ T7428] BTRFS info (device loop1): using free space tree [ 154.651222][ T7428] BTRFS info (device loop1): enabling ssd optimizations [ 154.659035][ T7428] BTRFS info (device loop1): auto enabling async discard [ 154.767590][ T27] usb 1-1: USB disconnect, device number 9 [ 154.942755][ T5790] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 155.293728][ T5854] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.383573][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.587809][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.632041][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.643637][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 155.660730][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.696517][ T5800] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 155.713110][ T27] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.734027][ T27] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.742784][ T27] usb 1-1: Product: syz [ 155.750549][ T27] usb 1-1: config 0 descriptor?? [ 155.757402][ T7411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.767022][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 155.775943][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 156.124626][ T23] usb 1-1: USB disconnect, device number 10 [ 156.743588][ T23] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 156.945385][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.967632][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.981134][ T23] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.997452][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 157.011711][ T786] libceph: connect (1)[c::]:6789 error -101 [ 157.018035][ T23] usb 3-1: string descriptor 0 read error: -22 [ 157.018962][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.037079][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.048966][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 157.057637][ T7472] ceph: No mds server is up or the cluster is laggy [ 157.064819][ T23] usb 3-1: bad CDC descriptors [ 157.286801][ T23] usb 3-1: USB disconnect, device number 6 [ 157.740518][ T7481] netlink: 148 bytes leftover after parsing attributes in process `syz.0.382'. [ 158.414895][ T7490] loop2: detected capacity change from 0 to 40427 [ 158.454820][ T7490] F2FS-fs (loop2): invalid crc value [ 158.464370][ T7490] F2FS-fs (loop2): Found nat_bits in checkpoint [ 158.533477][ T7490] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 158.568450][ T28] audit: type=1800 audit(1755741551.807:11): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.384" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 158.612385][ T7490] syz.2.384: attempt to access beyond end of device [ 158.612385][ T7490] loop2: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 158.717347][ T5787] syz-executor: attempt to access beyond end of device [ 158.717347][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.737849][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 158.759574][ T5854] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.793700][ T5854] usb 5-1: too many configurations: 111, using maximum allowed: 8 [ 158.803451][ T5854] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 158.811425][ T5854] usb 5-1: can't read configurations, error -71 [ 159.553006][ T5779] libceph: connect (1)[c::]:6789 error -101 [ 159.571134][ T5779] libceph: mon0 (1)[c::]:6789 connect error [ 159.602546][ T7512] ceph: No mds server is up or the cluster is laggy [ 160.020756][ T7522] loop4: detected capacity change from 0 to 128 [ 160.110972][ T7522] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.118806][ T28] audit: type=1326 audit(1755741553.367:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.2.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc25458ebe9 code=0x0 [ 160.321436][ T7522] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.549192][ T6338] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.001982][ T7534] loop2: detected capacity change from 0 to 7 [ 161.052298][ T7534] Dev loop2: unable to read RDB block 7 [ 161.073290][ T7534] loop2: unable to read partition table [ 161.081848][ T7534] loop2: partition table beyond EOD, truncated [ 161.091973][ T7534] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 161.420242][ T7539] loop1: detected capacity change from 0 to 4096 [ 161.431114][ T7539] ntfs3: Unknown parameter 'noacsrules' [ 161.514401][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.634321][ T7544] netlink: 148 bytes leftover after parsing attributes in process `syz.0.398'. [ 161.749068][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.770638][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.825240][ T5800] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 161.863741][ T5779] libceph: connect (1)[c::]:6789 error -101 [ 161.870996][ T5779] libceph: mon0 (1)[c::]:6789 connect error [ 161.936359][ T7548] ceph: No mds server is up or the cluster is laggy [ 162.590474][ T7557] loop1: detected capacity change from 0 to 32768 [ 162.614590][ T7557] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 162.764479][ T5782] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.580237][ T7571] loop0: detected capacity change from 0 to 47 [ 163.839916][ T7571] syz.0.404: attempt to access beyond end of device [ 163.839916][ T7571] loop0: rw=1, sector=48, nr_sectors = 2 limit=47 [ 163.890613][ T7571] Buffer I/O error on dev loop0, logical block 24, lost async page write [ 163.915112][ T7571] syz.0.404: attempt to access beyond end of device [ 163.915112][ T7571] loop0: rw=1, sector=50, nr_sectors = 2 limit=47 [ 163.976351][ T7571] Buffer I/O error on dev loop0, logical block 25, lost async page write [ 163.996324][ T7571] syz.0.404: attempt to access beyond end of device [ 163.996324][ T7571] loop0: rw=1, sector=52, nr_sectors = 2 limit=47 [ 164.025453][ T7571] Buffer I/O error on dev loop0, logical block 26, lost async page write [ 164.407226][ T7574] loop1: detected capacity change from 0 to 40427 [ 164.455786][ T7574] F2FS-fs (loop1): invalid crc value [ 164.504578][ T7574] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.568444][ T7574] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.629918][ T7574] syz.1.405: attempt to access beyond end of device [ 164.629918][ T7574] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 164.734060][ T5790] syz-executor: attempt to access beyond end of device [ 164.734060][ T5790] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 164.833709][ T5790] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 165.017723][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.045392][ T9] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 165.083721][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 165.092223][ T9] usb 3-1: can't read configurations, error -71 [ 165.119772][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 165.145658][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 165.151850][ T7582] ceph: No mds server is up or the cluster is laggy [ 165.152074][ T7587] loop2: detected capacity change from 0 to 1024 [ 165.307204][ T7587] hfsplus: xattr searching failed [ 165.338480][ T7588] hfsplus: catalog searching failed [ 165.493818][ T11] hfsplus: b-tree write err: -5, ino 4 [ 165.734943][ T7592] tipc: Enabled bearer , priority 0 [ 165.754599][ T7592] syzkaller0: entered promiscuous mode [ 165.760664][ T7592] syzkaller0: entered allmulticast mode [ 165.933752][ T7592] tipc: Resetting bearer [ 165.942071][ C1] net_ratelimit: 10 callbacks suppressed [ 165.942090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.075291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.248013][ T7597] tipc: Resetting bearer [ 166.489841][ T7597] tipc: Disabling bearer [ 166.567748][ T7614] loop4: detected capacity change from 0 to 2048 [ 166.581900][ T9] libceph: connect (1)[c::]:6789 error -101 [ 166.607125][ T7613] ceph: No mds server is up or the cluster is laggy [ 166.614833][ T7614] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.622441][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 166.796094][ T7446] udevd[7446]: incorrect nilfs2 checksum on /dev/loop4 [ 166.835172][ T7622] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.868243][ T7446] udevd[7446]: incorrect nilfs2 checksum on /dev/loop4 [ 167.007667][ T7614] NILFS (loop4): error -2 truncating bmap (ino=16) [ 167.054843][ T786] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.339471][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.351993][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.409941][ T7629] loop0: detected capacity change from 0 to 1024 [ 167.470587][ T5800] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 167.631745][ T1080] hfsplus: b-tree write err: -5, ino 4 [ 168.431211][ T7644] loop4: detected capacity change from 0 to 32768 [ 168.534740][ T7644] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 168.774235][ T6338] ocfs2: Unmounting device (7,4) on (node local) [ 169.158960][ T5779] libceph: connect (1)[c::]:6789 error -101 [ 169.177338][ T5779] libceph: mon0 (1)[c::]:6789 connect error [ 169.201622][ T7648] ceph: No mds server is up or the cluster is laggy [ 169.342002][ T7652] loop1: detected capacity change from 0 to 2048 [ 169.439699][ T7655] syz.4.430(7655): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 169.462901][ T7652] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.605904][ T7652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.717575][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.186620][ T786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 170.235741][ T786] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 170.257030][ T786] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 170.279049][ T786] usb 3-1: can't read configurations, error -71 [ 170.341789][ T7667] usb usb8: usbfs: process 7667 (syz.1.432) did not claim interface 0 before use [ 170.433452][ T5885] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.632785][ T7675] random: crng reseeded on system resumption [ 170.645469][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 170.715705][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.855758][ T5885] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.084655][ T5885] usb 5-1: config 1 interface 0 has no altsetting 0 [ 171.196161][ T5885] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 171.256655][ T7684] loop0: detected capacity change from 0 to 256 [ 171.294726][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.302902][ T5885] usb 5-1: Product: syz [ 171.314021][ T5885] usb 5-1: Manufacturer: syz [ 171.319704][ T5885] usb 5-1: SerialNumber: syz [ 171.339527][ T7684] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 171.629636][ T7691] loop0: detected capacity change from 0 to 128 [ 171.685093][ T7687] netlink: 148 bytes leftover after parsing attributes in process `syz.1.440'. [ 171.720066][ T7691] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.804599][ T7691] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.880150][ T7691] capability: warning: `syz.0.441' uses deprecated v2 capabilities in a way that may be insecure [ 171.949684][ T5791] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.653534][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 173.070458][ T7701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.086518][ T7701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.116564][ T5800] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 173.586385][ T5885] usbhid 5-1:1.0: can't add hid device: -71 [ 173.612580][ T5885] usbhid: probe of 5-1:1.0 failed with error -71 [ 173.682926][ T5885] usb 5-1: USB disconnect, device number 11 [ 174.094058][ T7726] usb usb8: usbfs: process 7726 (syz.4.448) did not claim interface 0 before use [ 174.539187][ T7729] netlink: 148 bytes leftover after parsing attributes in process `syz.1.451'. [ 175.930208][ T7736] loop4: detected capacity change from 0 to 32768 [ 176.053779][ T7735] find_entry called with index = 0 [ 176.180902][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 176.213560][ T9] usb 1-1: too many configurations: 111, using maximum allowed: 8 [ 176.235748][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 176.268406][ T9] usb 1-1: can't read configurations, error -71 [ 176.863569][ T786] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 176.961652][ T7761] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 176.991073][ T7761] overlayfs: missing 'lowerdir' [ 177.073505][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 177.111933][ T786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.116091][ T7759] netlink: 148 bytes leftover after parsing attributes in process `syz.0.461'. [ 177.151017][ T786] usb 2-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.194327][ T786] usb 2-1: config 1 interface 0 has no altsetting 0 [ 177.237047][ T786] usb 2-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 177.285657][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.339515][ T786] usb 2-1: Product: syz [ 177.345038][ T786] usb 2-1: Manufacturer: syz [ 177.349854][ T786] usb 2-1: SerialNumber: syz [ 178.033767][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 178.388198][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.414879][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.454764][ T5800] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 178.983837][ T7783] loop0: detected capacity change from 0 to 32768 [ 179.140609][ T7783] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 179.223469][ T28] audit: type=1800 audit(1755741572.427:13): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.466" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 179.481777][ T5791] ocfs2: Unmounting device (7,0) on (node local) [ 179.683266][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 179.981654][ T7792] loop0: detected capacity change from 0 to 256 [ 180.027063][ T7792] exfat: Deprecated parameter 'namecase' [ 180.066332][ T7792] exfat: Deprecated parameter 'namecase' [ 180.163010][ T7792] exfat: Deprecated parameter 'namecase' [ 180.233803][ T7792] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 180.379811][ T7792] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 180.763688][ T786] usbhid 2-1:1.0: can't add hid device: -71 [ 180.770569][ T786] usbhid: probe of 2-1:1.0 failed with error -71 [ 180.821476][ T786] usb 2-1: USB disconnect, device number 6 [ 180.973936][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 181.149518][ T7801] loop1: detected capacity change from 0 to 1024 [ 181.234885][ T7801] EXT4-fs: Ignoring removed nobh option [ 181.265919][ T7801] EXT4-fs: Ignoring removed bh option [ 181.299996][ T7801] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.419719][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.420631][ T7801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.435312][ T9] usb 5-1: too many configurations: 111, using maximum allowed: 8 [ 181.452828][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 181.471832][ T9] usb 5-1: can't read configurations, error -71 [ 181.691811][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.699969][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 182.333597][ T786] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 182.573468][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 182.719205][ T786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.805525][ T786] usb 3-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.824627][ T786] usb 3-1: config 1 interface 0 has no altsetting 0 [ 182.843479][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.862615][ T786] usb 3-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 182.864876][ T7844] netlink: 76 bytes leftover after parsing attributes in process `syz.0.484'. [ 182.878074][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.896057][ T786] usb 3-1: Product: syz [ 182.900274][ T786] usb 3-1: Manufacturer: syz [ 182.907036][ T786] usb 3-1: SerialNumber: syz [ 183.269408][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.279987][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.303682][ T5800] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 183.777927][ T7853] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 185.348819][ T786] usbhid 3-1:1.0: can't add hid device: -71 [ 185.435033][ T786] usbhid: probe of 3-1:1.0 failed with error -71 [ 185.452208][ T786] usb 3-1: USB disconnect, device number 11 [ 185.800782][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.819119][ T9] usb 5-1: too many configurations: 111, using maximum allowed: 8 [ 185.865398][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 185.874277][ T7873] loop4: detected capacity change from 0 to 128 [ 185.901180][ T9] usb 5-1: can't read configurations, error -71 [ 185.923289][ T7873] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.999332][ T7873] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.047749][ T7873] ipip0: entered promiscuous mode [ 186.124948][ T6338] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.383260][ T7889] netlink: 76 bytes leftover after parsing attributes in process `syz.4.495'. [ 186.514174][ T7892] sp0: Synchronizing with TNC [ 187.053547][ T23] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 187.274575][ T7900] batman_adv: batadv0: Adding interface: dummy0 [ 187.281188][ T7900] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.326792][ T7900] batman_adv: batadv0: Interface activated: dummy0 [ 187.334685][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.353389][ T23] usb 3-1: config 0 has no interfaces? [ 187.379271][ T23] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 187.402576][ T23] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 187.420502][ T23] usb 3-1: Product: syz [ 187.425435][ T23] usb 3-1: Manufacturer: syz [ 187.432444][ T23] usb 3-1: SerialNumber: syz [ 187.460213][ T23] usb 3-1: config 0 descriptor?? [ 187.693219][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'. [ 187.703871][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.708319][ T23] usb 3-1: USB disconnect, device number 12 [ 187.972224][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.982828][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.996954][ T5800] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 188.293903][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.301912][ T9] usb 2-1: too many configurations: 111, using maximum allowed: 8 [ 188.314026][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 188.360814][ T9] usb 2-1: can't read configurations, error -71 [ 188.911368][ T7934] netlink: 76 bytes leftover after parsing attributes in process `syz.0.509'. [ 189.181542][ T7940] netlink: 148 bytes leftover after parsing attributes in process `syz.1.512'. [ 189.746531][ T7944] loop0: detected capacity change from 0 to 64 [ 189.964792][ T5791] Trying to free block not in datazone [ 189.992695][ T5791] Trying to free block not in datazone [ 190.034597][ T5791] Trying to free block not in datazone [ 190.040893][ T5791] Trying to free block not in datazone [ 190.072256][ T5791] Trying to free block not in datazone [ 190.078970][ T5791] Trying to free block not in datazone [ 190.092785][ T5791] Trying to free block not in datazone [ 190.133473][ T5791] Trying to free block not in datazone [ 190.141012][ T5791] Trying to free block not in datazone [ 190.173848][ T5791] Trying to free block not in datazone [ 190.183436][ T5791] Trying to free block not in datazone [ 190.189210][ T5791] Trying to free block not in datazone [ 190.213987][ T5791] Trying to free block not in datazone [ 190.257111][ T5791] Trying to free block not in datazone [ 190.756072][ T7962] tipc: Enabled bearer , priority 0 [ 190.766882][ T7962] syzkaller0: entered promiscuous mode [ 190.773521][ T7962] syzkaller0: entered allmulticast mode [ 190.802587][ T7962] tipc: Resetting bearer [ 190.815274][ T7961] tipc: Resetting bearer [ 190.842585][ T7961] tipc: Disabling bearer [ 190.924124][ T786] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 191.295453][ T7970] loop1: detected capacity change from 0 to 32768 [ 191.335520][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.352698][ T7970] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 191.369683][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.385551][ T7970] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 191.418635][ T5800] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 191.479734][ T7970] [ 191.482105][ T7970] ====================================================== [ 191.489213][ T7970] WARNING: possible circular locking dependency detected [ 191.496639][ T7970] 6.6.102-syzkaller #0 Not tainted [ 191.502028][ T7970] ------------------------------------------------------ [ 191.509561][ T7970] syz.1.525/7970 is trying to acquire lock: [ 191.515887][ T7970] ffff88805fbd94a0 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 191.527123][ T7970] [ 191.527123][ T7970] but task is already holding lock: [ 191.534845][ T7970] ffff88805fbd9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 191.546225][ T7970] [ 191.546225][ T7970] which lock already depends on the new lock. [ 191.546225][ T7970] [ 191.556822][ T7970] [ 191.556822][ T7970] the existing dependency chain (in reverse order) is: [ 191.565874][ T7970] [ 191.565874][ T7970] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 191.573877][ T7970] down_read+0x46/0x2e0 [ 191.578736][ T7970] ocfs2_init_acl+0x2fa/0x720 [ 191.584596][ T7970] ocfs2_mknod+0x12e5/0x20f0 [ 191.589737][ T7970] ocfs2_create+0x196/0x410 [ 191.595149][ T7970] path_openat+0x1277/0x3190 [ 191.600396][ T7970] do_filp_open+0x1c5/0x3d0 [ 191.606083][ T7970] do_sys_openat2+0x12c/0x1c0 [ 191.611471][ T7970] __x64_sys_open+0x11f/0x140 [ 191.616702][ T7970] do_syscall_64+0x55/0xb0 [ 191.621735][ T7970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.628416][ T7970] [ 191.628416][ T7970] -> #1 (jbd2_handle){++++}-{0:0}: [ 191.635795][ T7970] jbd2_log_wait_commit+0x172/0x4a0 [ 191.641634][ T7970] ocfs2_try_to_free_truncate_log+0x314/0x360 [ 191.648221][ T7970] ocfs2_write_begin_nolock+0x2f6b/0x4190 [ 191.654570][ T7970] ocfs2_write_begin+0x1bc/0x310 [ 191.660293][ T7970] generic_perform_write+0x2fb/0x5b0 [ 191.666208][ T7970] ocfs2_file_write_iter+0x1582/0x1d00 [ 191.672642][ T7970] vfs_write+0x43b/0x940 [ 191.677680][ T7970] __x64_sys_pwrite64+0x195/0x220 [ 191.683371][ T7970] do_syscall_64+0x55/0xb0 [ 191.688443][ T7970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.695493][ T7970] [ 191.695493][ T7970] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}: [ 191.703786][ T7970] __lock_acquire+0x2ddb/0x7c80 [ 191.709351][ T7970] lock_acquire+0x197/0x410 [ 191.714632][ T7970] down_write+0x97/0x1f0 [ 191.719757][ T7970] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 191.726378][ T7970] ocfs2_truncate_file+0xd84/0x13a0 [ 191.732388][ T7970] ocfs2_setattr+0x150d/0x1b20 [ 191.737781][ T7970] notify_change+0xb0d/0xe10 [ 191.743288][ T7970] do_truncate+0x19b/0x220 [ 191.748506][ T7970] path_openat+0x298c/0x3190 [ 191.753739][ T7970] do_filp_open+0x1c5/0x3d0 [ 191.758948][ T7970] do_sys_openat2+0x12c/0x1c0 [ 191.764509][ T7970] __x64_sys_open+0x11f/0x140 [ 191.770629][ T7970] do_syscall_64+0x55/0xb0 [ 191.776194][ T7970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.782876][ T7970] [ 191.782876][ T7970] other info that might help us debug this: [ 191.782876][ T7970] [ 191.793713][ T7970] Chain exists of: [ 191.793713][ T7970] &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem [ 191.793713][ T7970] [ 191.807894][ T7970] Possible unsafe locking scenario: [ 191.807894][ T7970] [ 191.816686][ T7970] CPU0 CPU1 [ 191.822224][ T7970] ---- ---- [ 191.828480][ T7970] lock(&oi->ip_xattr_sem); [ 191.833277][ T7970] lock(jbd2_handle); [ 191.840665][ T7970] lock(&oi->ip_xattr_sem); [ 191.847880][ T7970] lock(&oi->ip_alloc_sem); [ 191.853350][ T7970] [ 191.853350][ T7970] *** DEADLOCK *** [ 191.853350][ T7970] [ 191.861685][ T7970] 3 locks held by syz.1.525/7970: [ 191.866881][ T7970] #0: ffff888025eb2418 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 191.876453][ T7970] #1: ffff88805fbd9818 (&sb->s_type->i_mutex_key#33){+.+.}-{3:3}, at: do_truncate+0x187/0x220 [ 191.887439][ T7970] #2: ffff88805fbd9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 191.898848][ T7970] [ 191.898848][ T7970] stack backtrace: [ 191.904912][ T7970] CPU: 0 PID: 7970 Comm: syz.1.525 Not tainted 6.6.102-syzkaller #0 [ 191.913189][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.923430][ T7970] Call Trace: [ 191.926727][ T7970] [ 191.929750][ T7970] dump_stack_lvl+0x16c/0x230 [ 191.934870][ T7970] ? load_image+0x3b0/0x3b0 [ 191.939471][ T7970] ? show_regs_print_info+0x20/0x20 [ 191.944858][ T7970] ? print_circular_bug+0x12b/0x1a0 [ 191.950403][ T7970] check_noncircular+0x2bd/0x3c0 [ 191.955626][ T7970] ? print_deadlock_bug+0x5d0/0x5d0 [ 191.961007][ T7970] ? lockdep_lock+0xe0/0x220 [ 191.965960][ T7970] ? lockdep_unlock+0x137/0x2d0 [ 191.971167][ T7970] ? _find_first_zero_bit+0xd3/0x100 [ 191.977359][ T7970] __lock_acquire+0x2ddb/0x7c80 [ 191.982407][ T7970] ? verify_lock_unused+0x140/0x140 [ 191.988333][ T7970] lock_acquire+0x197/0x410 [ 191.994168][ T7970] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 192.000615][ T7970] ? __might_sleep+0xe0/0xe0 [ 192.005472][ T7970] ? read_lock_is_recursive+0x20/0x20 [ 192.010853][ T7970] down_write+0x97/0x1f0 [ 192.015410][ T7970] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 192.022422][ T7970] ? down_read_killable+0x340/0x340 [ 192.028134][ T7970] ? ocfs2_truncate_file+0xcaa/0x13a0 [ 192.034034][ T7970] ? __lock_acquire+0x7c80/0x7c80 [ 192.039391][ T7970] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 192.045910][ T7970] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 192.052121][ T7970] ? up_write+0x1c3/0x410 [ 192.056463][ T7970] ocfs2_truncate_file+0xd84/0x13a0 [ 192.061936][ T7970] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 192.068229][ T7970] ? ocfs2_simple_size_update+0x470/0x470 [ 192.074299][ T7970] ? do_raw_spin_unlock+0x121/0x230 [ 192.079693][ T7970] ? _raw_spin_unlock+0x28/0x40 [ 192.084623][ T7970] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 192.090479][ T7970] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 192.096210][ T7970] ? ocfs2_rw_lock+0x138/0x240 [ 192.101057][ T7970] ? dquot_initialize+0x20/0x20 [ 192.105986][ T7970] ? ocfs2_create_new_inode_locks+0x640/0x640 [ 192.112382][ T7970] ? setattr_prepare+0x1e6/0xac0 [ 192.117413][ T7970] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 192.124356][ T7970] ocfs2_setattr+0x150d/0x1b20 [ 192.130095][ T7970] ? ocfs2_extend_allocation+0x1760/0x1760 [ 192.136656][ T7970] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 192.142770][ T7970] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 192.149377][ T7970] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 192.155447][ T7970] ? current_time+0x18e/0x270 [ 192.160128][ T7970] ? inode_set_ctime_current+0x2d0/0x2d0 [ 192.165777][ T7970] ? evm_inode_setattr+0x94/0x6a0 [ 192.170978][ T7970] ? bpf_lsm_inode_setattr+0x9/0x10 [ 192.176687][ T7970] ? try_break_deleg+0x79/0x120 [ 192.181784][ T7970] ? ocfs2_extend_allocation+0x1760/0x1760 [ 192.187777][ T7970] notify_change+0xb0d/0xe10 [ 192.192658][ T7970] do_truncate+0x19b/0x220 [ 192.197425][ T7970] ? put_page_bootmem+0x2c0/0x2c0 [ 192.202448][ T7970] ? apparmor_file_truncate+0x23f/0x2d0 [ 192.208179][ T7970] ? ima_bprm_check+0x1f0/0x1f0 [ 192.213393][ T7970] path_openat+0x298c/0x3190 [ 192.217996][ T7970] ? do_filp_open+0x3d0/0x3d0 [ 192.223192][ T7970] do_filp_open+0x1c5/0x3d0 [ 192.228057][ T7970] ? vfs_tmpfile+0x490/0x490 [ 192.232656][ T7970] ? _raw_spin_unlock+0x28/0x40 [ 192.237789][ T7970] ? alloc_fd+0x58f/0x630 [ 192.242233][ T7970] do_sys_openat2+0x12c/0x1c0 [ 192.247064][ T7970] ? do_sys_open+0xe0/0xe0 [ 192.251770][ T7970] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 192.257757][ T7970] ? lock_chain_count+0x20/0x20 [ 192.262726][ T7970] __x64_sys_open+0x11f/0x140 [ 192.267788][ T7970] do_syscall_64+0x55/0xb0 [ 192.272333][ T7970] ? clear_bhb_loop+0x40/0x90 [ 192.277224][ T7970] ? clear_bhb_loop+0x40/0x90 [ 192.282025][ T7970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.288298][ T7970] RIP: 0033:0x7fef03b8ebe9 [ 192.292819][ T7970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.314536][ T7970] RSP: 002b:00007fef04abe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 192.323379][ T7970] RAX: ffffffffffffffda RBX: 00007fef03db5fa0 RCX: 00007fef03b8ebe9 [ 192.332146][ T7970] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140 [ 192.340635][ T7970] RBP: 00007fef03c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 192.348973][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.357157][ T7970] R13: 00007fef03db6038 R14: 00007fef03db5fa0 R15: 00007ffcdd87a4c8 [ 192.367063][ T7970] [ 192.370587][ C0] sched: RT throttling activated [ 192.370624][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.417889][ T7972] netlink: 148 bytes leftover after parsing attributes in process `syz.4.524'. [ 192.590092][ T786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.652338][ T786] usb 1-1: too many configurations: 111, using maximum allowed: 8 [ 192.664023][ T786] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 192.671788][ T786] usb 1-1: can't read configurations, error -71 [ 192.755131][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 194.986696][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.064238][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 197.071166][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 197.071597][ T5789] Bluetooth: hci1: command 0x0406 tx timeout