last executing test programs: 3m50.768950991s ago: executing program 1 (id=390): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x2, 0x62, 0x0, r1}) 3m50.297487618s ago: executing program 1 (id=394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)) 3m49.986115907s ago: executing program 1 (id=398): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2c, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x2c}}, 0x0) 3m49.579467148s ago: executing program 1 (id=400): syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m48.680394757s ago: executing program 1 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x6c, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x38}}, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}]]}, 0x6c}}, 0x0) 3m47.613953328s ago: executing program 1 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") 3m46.837919581s ago: executing program 32 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") 3m39.518806495s ago: executing program 0 (id=476): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) 3m39.290688063s ago: executing program 0 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "a8"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 3m38.942520119s ago: executing program 0 (id=479): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000c00)=""/206, 0xce}, {&(0x7f0000000700)=""/108, 0x6c}], 0x8}, 0x40012100) 3m37.670802134s ago: executing program 0 (id=484): syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m36.96436858s ago: executing program 0 (id=489): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1, 0x0, 0xc, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) 3m35.802575778s ago: executing program 0 (id=499): capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x3f60}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) 3m35.00696269s ago: executing program 33 (id=499): capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x3f60}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) 2m55.206187519s ago: executing program 4 (id=826): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2m53.784650701s ago: executing program 4 (id=831): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000000)={[{@part={'part', 0x3d, 0x10ffff}}, {@umask={'umask', 0x3d, 0x4ffff}}, {@codepage={'codepage', 0x3d, 'cp861'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}]}, 0x4, 0x343, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/239, 0xef) 2m52.758538286s ago: executing program 4 (id=836): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, r1, 0x2, 0x0, &(0x7f0000000080)=[{0x40000000007fff, 0xffffffffffffffff}, {0x3fffe, 0x501b6456}]}) 2m51.806478901s ago: executing program 4 (id=841): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m49.003100821s ago: executing program 4 (id=849): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a80)={[{@part={'part', 0x3d, 0x4}}, {@uid}, {@umask={'umask', 0x3d, 0x800}}, {@nodecompose}, {@nls={'nls', 0x3d, 'ascii'}}, {@nodecompose}]}, 0x3, 0x6b2, &(0x7f0000000280)="$eJzs3U+IHFkdB/BvdSY96QjZ2X/ZKEKGDSy6wWQmzZoIwkYRySFI0Mteh2SyGTLJLpNZyS5iOuoqePIke/CwIvGwIoiIsJ4W17MgePGUe8CbhxzUkfrTMz0znUlPkpkedz8fqK73+r1671e/VFV3V2foAJ9a517L/l6KnDt+/mZZv3unu3j3Tvdav5xkMkkrmahXKTpJ8XFyNvWSz5ZPNsMVD5rnlXsfFhPvfdCtaxPNUvVvbbXdJkN79pIDq5V9Sabr4r9HHnbTeNVSjXNxbbxHVKzGXSbsWD9xMG4rm/TWGlsP3Xz08xbYs27Vr5ubTCUHU7+6lu8D0lwdHn5lGIfOutqW16beTscCAAAAO2/oZ/lBT93P/dzMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Zivo3A4tmafXL0yn6v//fHvhN/faYw31M716uVt9+atyBAAAAAAAAAMBjOXo/93Mzh/r1laL6zv/FqvJc9fiZvJUbmc9STuRm5rKc5SxlNsnUwEDtm3PLy0uzm7f8ecotV1ZWbjVbnhq65an1cfU2Bjrsfxps6gQAAAAAAAAAn1o/yLm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvKJJ99apanuuXp9KaSHIgSbuYXu3eHmuwj6UO/aNxhwEAAAC751Dx37qwUlSf+Q9Xn/sP5K1cz3IWspzFzOdSdS+g/ujc+luvu3j3TvdauWwe8Gv/3Nb81Yip7z0Mn3mm6vH86hbn8s18J8cznQtZykK+m7ksZz7T+UZVmkuRqebuxdTdO530Y90c79l1tQsbYzs6UC7jO1JF0snlLFSxncjFdj/0VtPvyMBsf2wnG2a8XWaneLUxYo4uNetyj37WrPeGqWrP969mZKbJfZmNpwfzvjn32zxONs40m9bqPajn1mYpqxtneqScH2zWu5Drbd5KW5+J3k/LWv/oO7x1zpMv/v3PF660rl+9cvnG8b1zGD2ijcdEdyATL4yUicUyE73HyMSBx4n/yWk32aivotu7Wr5YbXsoC/lW3silzOd0ZjKbM5nJV3Iq3ZwayOvzW+e1Otda2zvXjn2hKXSS/KRZ76rJBzWUeX16IK+DV7qpqm3wmbUsPTNClop2hmfpH0NDmfhcUyjn+OHAK874bczE7EAmnt06E7/8z0qSG4vXry5dmXtzxPleatblafvu+mv0r57IDm1fs7vl8fJM+Y9VVn6cdUdH2fZsv21DvtrNNy4TzWDr2tqpzue67WFnajnS4dvDRqrbXhg6S7dqOzLQtu5dTt7I4uq7EAD2rFYOvnyw3bnX+Wvn/c6POlc65w98ffLM5Ofb2f+XiT/t+13r162vFi/n/Xw/h8YdKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBLcePudq3OLi/NLe7CQ1gidf5vRB7w9tKmfivqZ9k7vVz3ZR78Ze3qfaKF/IE1udUT9PskW47THEXwnyc5OcXS0zpnYhV2ezJCm86vPdJLWajxJru6RH7gDdsLJ5Wtvnrzx9jtfWrg29/r86/PXT505/erp7pdnb528vLA4P1M/jjtKYCdsfF8KAAAAAAAAAAAA7H278VcWQ6YtemPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/07nXsr+XIrMzJ2bK+t073cVy6ZfXek4kaSUpvpcUHydnUy+ZGhiueNA8r9z78BcvvfdBd22siX7/1obt/vCvlZVt7kWvWTKdZF+zfrjJkca7ODBeb5uB1YrVPSwTdqyfOBi3/wUAAP//0koEbg==") lsetxattr$trusted_overlay_upper(&(0x7f0000000a00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000940), 0x0, 0x0, 0x1) mount$afs(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x100a012, 0x0) 2m47.919045923s ago: executing program 4 (id=850): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000180)="00214717a7070000", 0x8}, {0x0}], 0x2, 0x7, 0x80007) 2m35.547619601s ago: executing program 3 (id=893): madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 2m34.466916148s ago: executing program 3 (id=898): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') getdents64(r0, &(0x7f0000000100)=""/80, 0x2f) getdents(r0, 0x0, 0x3b) 2m33.806904052s ago: executing program 3 (id=901): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x9) 2m33.181173704s ago: executing program 3 (id=905): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000040)) 2m32.720233379s ago: executing program 34 (id=850): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000180)="00214717a7070000", 0x8}, {0x0}], 0x2, 0x7, 0x80007) 2m32.415166382s ago: executing program 3 (id=907): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b0000009232bcab2b2157b73e"], 0x0}, 0x0) 2m29.514158063s ago: executing program 3 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 2m24.059370089s ago: executing program 2 (id=924): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 2m23.353654875s ago: executing program 2 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x8013, 0x1922b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 2m22.997977135s ago: executing program 7 (id=931): io_setup(0x66, &(0x7f0000000400)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f0000000640)='-0', 0x2}]) 2m22.567446698s ago: executing program 2 (id=932): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000180)=@md5={0x1, "5070204fe20dff60ed3d4ff1d49635aa"}, 0x11, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m22.297679985s ago: executing program 6 (id=933): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 2m21.91628119s ago: executing program 7 (id=935): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) 2m21.843410228s ago: executing program 2 (id=936): syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5965, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81009431, 0xfffffffffffffffe) 2m21.575367889s ago: executing program 6 (id=937): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_notify(r0, &(0x7f00000001c0)={0x0, 0x2a, 0x1}) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) 2m21.333424166s ago: executing program 5 (id=938): setuid(0xee01) r0 = semget$private(0x0, 0x4000000009, 0x232) semop(r0, &(0x7f00000003c0)=[{0x2, 0xf, 0x1000}], 0x1f4) 2m21.103639441s ago: executing program 7 (id=939): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGUaOocdTkX1o/hDM5HvVdbTebarvbHvZF29P2sr1tH9vXvmT72Zdtf/uKHWAH2kH2VTvYvmaH2NftUDvMDrdv2BF2pB1lR9sxdqwdZ9+04+1bdoJ92060k+xkO8VOtdPsdPuOnWFn2ln2XTvbvmfn2Ll2np1vF9j37UK7yC62H9gl9kO71C6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9V+ZLfZ7XaH3Wl32d12j/3Y7rWf2H32U7vffmYP2D/ag/Zze8h+YQ/bL+0R+5U9ar+2x+w39rj91p6wJ+0p+509bb+3Z+xZe87+YM/bH+0F+5O9aMOli/tLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUlbJSNspG2Sk75aSclJtyU17KS5cwMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWSpLt9FtdDvdThWpIt1Bd9CddCdVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ2kYDac3aASNpFE0msbQWBpH42g8jacJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2kbbaMdtIN20S7aQ3toL+2lfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIyO03E6QSfoFJ2i03SaztAZOkfn6Dz9SBfoJ7pIgVKcgozuKpfJXe0yuywuxWVwl+IIAC7FOV0ul9vlcXmdddldjr+IyTlX0BVyhV0R511RV8zd+Ju4tCvjyrpy7jZX3t3uKvwmrubudtXdPa6Gu9dVdXf9RVzT3edquYdcbfewq+MaurqusavnHnL13cOugWvoGrnGrqV73LVyT7jW7knXxj31m3ihW+TWunVuvdvg9rpP3Dn3gzvqvnbn3Y+uq+vm+rqXXD/3suvvXnED3MDfxMPdG26EG+lGudFujBv7m3iym+KmumluunvHzXAzfxMvcO+72W6xm+Pmunlu/s/xpZ4Wuw/cEvehW+qWueVuhVvpVrnVbs3/73WF2+Q2uy1uj/vYbXPb3Q630+1yu3+OL53HPvep2+8+c0fcV+6g+9wdcsfcYfflz/Gl8zvmvnHH3bfuhDvpTrnv3Gn3vTvjzv58/pfO/Tv3k7voggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5AlfkSnwHVw6Bq3BVvour8d1cne/hGnwv1+T7uBbfz7X5D1yHH+C6/CDX44e4Pj/MDbghN+LG3IQf4ab8KDfj5tyCH+OW/Di34ie4NT/JbfgpbstPczt+htvzs9yBn+OO3Ik78/PchV/grtyNU7k79+AXuSf34t7ch/vyS9yPX+b+/AoP4IE8iF/lwfwaD+HXeSgP4+H8Bo/gkTyKR/MYHsvj+E0ez2/xBH6bJ/IknsxTeCpP4+n8Ds/gmTyL3+XZ/B7P4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4jH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPF6eOUOEOcMb4qzhRfHWeOs8SJ+Jo4a3xtnC2+Ls4e54hzxrni3HGeOG9sY4pdzHEc54vzx8n4+rhAfENcMC4UF46LxD4uGheLb4yLxzfFJeKb45LxLXGp+NYYUsvED91bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8R/iOvEDcd34wbhe/FBcP344bhA3jBvFjeMm8SNx0/jRuFncPG4RPxa3jB+PW8VPxK3jJ+M28VO/+3hq3D3uEb8YvxiHcI/65T4xuTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD+74Gw/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/hD/sv/RH/lT/qv/bH/Df+uP/Wn/An/Sn/nT/tv/dn/Fl/zv/gz/sf/QX/k7/ogx+XeDMxPvFWYkLi7cTExKTE5MSUxNTEtMT0xDuJGYmZiVmJdxOzE+8l5iTmJuYl5icWJN5PLEwsSixOfJBYkvgwsTSxLLE8sSKxMrEqEUKebXHIF/KHZLg+FAg3hIKhUCgcigQfioZi4cZQPNwUSoSbQ8lwSygVbg2lQ5lQNjwcGoSGoVFoHJqER0LT8GhoFpqHFuGx0DI8HlqFJ0Lr8GRoE54KbcPToV14JrQPz4YO4bnQMXQKncPzoUt4IXQN3UJq6B56hBdDz9Ar9A59Qt/wUugXXg79wythQBgYBoVXw+DwWhgSXg9Dw7AwPLwRRoSRYVQYHcaEsWFceDOMD2+FCeHtMDFMCpPDlDA1TAvTwzthRpgZZoV3w+zwXpgT5oZ5YX5YEN4PC8OisDh8EJaED8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hgOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M2aEEIIIcQ/RP/O493/xufSAcCvt0Q9AODq7bkO/3XNjdn/tO6lcrdMAMCT3To88OtRuXJqauovz12qIco/FwASf1n/13gZtIDHoTU0h+J/s79eqtN5/p36yVsAMv5ZTgpcji/Xv+m/qP/IY8MXlorPZf079ecCFMx/OScDXI4v1y/xX9TP0fR3+s/w+TiAZn+Wkwkux5frF4NH4Slo/RfPFEIIIYQQQggh/qSXKtvu9+6fL92f5zaXc9LD5fj37s+FEEIIIYQQQghx5T3TqfMTj7Ru3bzdP7bAX/YF/ntZspDFf84iwy8/Ov9X+vk3La7kbyUhhBBCCCHEv8Pli/4r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W/8O7ErfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfb/AgAA//+wBDLo") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x101042, 0x1) rename(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000300)='./file1\x00') 2m20.976600523s ago: executing program 6 (id=940): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000100030003da"], 0xa) 2m20.746682583s ago: executing program 5 (id=941): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2m20.358421142s ago: executing program 6 (id=942): r0 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x24020400) getsockopt$bt_hci(r0, 0x11e, 0x1, 0x0, &(0x7f0000000740)=0xfffffffffffffff1) 2m20.184283951s ago: executing program 5 (id=943): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x8c80, &(0x7f0000000340)={[{@namecase}, {@zero_size_dir}, {@utf8}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@errors_continue}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@errors_remount}]}, 0x3, 0x1510, &(0x7f0000003640)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 2m19.710250455s ago: executing program 7 (id=944): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x28043) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0xd0) 2m19.687081814s ago: executing program 6 (id=945): r0 = add_key$user(&(0x7f00000006c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000008c0)="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", 0x1f9, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000780)=""/86, 0x56, &(0x7f0000000400)={&(0x7f00000002c0)={'crc32c\x00'}}) 2m18.984329324s ago: executing program 5 (id=946): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x43, 0xce, 0x60, 0x40, 0x1943, 0x2257, 0x1e52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xc0, 0xc, 0x40, 0xe, [{{0x9, 0x4, 0x8e, 0x5, 0x2, 0x0, 0xc5, 0x80, 0x14, [], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x3, 0xb, 0x2}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x4, 0x6, 0x4}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x0}) 2m18.936785589s ago: executing program 6 (id=947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030007000000080002400000000708000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2m18.906260365s ago: executing program 7 (id=948): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={[{@umask}, {@umask={'umask', 0x3d, 0xad460ad}}, {@nls={'nls', 0x3d, 'maccyrillic'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@uid}]}, 0x20, 0x6de, &(0x7f0000000840)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file1\x00', 0x0, 0x1a39143, 0x0) 2m18.171857396s ago: executing program 7 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001"], 0x24}}, 0x40004) 2m17.60237108s ago: executing program 2 (id=950): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008d1e632039102021a702f9ff0301090212000100ffc0000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 2m16.820787611s ago: executing program 5 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd25, 0x0, {0xa}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008864}, 0x800) 2m16.555343868s ago: executing program 5 (id=952): io_setup(0x200, &(0x7f0000000140)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r1, 0x0, 0x0, 0x3000}]) 2m14.891268184s ago: executing program 2 (id=953): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x5, 0xb57}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 2m14.294027615s ago: executing program 35 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 2m3.767631242s ago: executing program 36 (id=947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030007000000080002400000000708000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2m2.800745618s ago: executing program 37 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001"], 0x24}}, 0x40004) 2m1.262284435s ago: executing program 38 (id=952): io_setup(0x200, &(0x7f0000000140)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r1, 0x0, 0x0, 0x3000}]) 1m59.781471143s ago: executing program 39 (id=953): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x5, 0xb57}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 16.512090853s ago: executing program 9 (id=963): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x2, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004"], 0x1c}, 0x1, 0x0, 0x0, 0x480a0}, 0x0) 16.292889351s ago: executing program 9 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r0, &(0x7f00000006c0), &(0x7f0000000700)=""/235}, 0x20) 16.111699159s ago: executing program 9 (id=965): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x2040600) select(0x40, &(0x7f0000000680)={0x7, 0x800, 0x80, 0x6, 0xfffffffffffffffb, 0x34, 0x3}, 0x0, &(0x7f0000000700)={0xf, 0x8, 0x40, 0x5, 0x1, 0xac, 0xed6f, 0xe21}, &(0x7f0000000740)={0x0, 0xea60}) 15.856625509s ago: executing program 9 (id=966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030007000000080002400000000b08000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 15.585462437s ago: executing program 9 (id=967): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 15.392621753s ago: executing program 9 (id=968): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 0s ago: executing program 40 (id=968): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) kernel console output (not intermixed with test programs): ting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.972347][ T6556] loop2: detected capacity change from 0 to 4096 [ 123.039968][ T6024] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.056249][ T6556] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 123.175278][ T6556] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 123.200608][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 123.263374][ T6565] netlink: 56 bytes leftover after parsing attributes in process `syz.3.241'. [ 123.275061][ T6024] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 123.309565][ T6024] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 123.328054][ T6091] udevd[6091]: incorrect nilfs2 checksum on /dev/loop2 [ 123.335232][ T6565] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 123.354248][ T6569] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.415425][ T6024] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 123.424816][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.455460][ T6024] usb 2-1: Product: syz [ 123.510292][ T6024] usb 2-1: Manufacturer: syz [ 123.514910][ T6024] usb 2-1: SerialNumber: syz [ 123.577901][ T6024] usb 2-1: config 0 descriptor?? [ 123.620245][ T6571] loop4: detected capacity change from 0 to 4096 [ 123.669669][ T6571] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 123.772762][ T6571] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 123.975350][ T5860] udevd[5860]: incorrect nilfs2 checksum on /dev/loop4 [ 124.034310][ T6024] mos7840 2-1:0.0: required endpoints missing [ 124.081147][ T6024] usb 2-1: USB disconnect, device number 3 [ 124.155633][ T6584] loop2: detected capacity change from 0 to 512 [ 124.204481][ T6584] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.225789][ T5860] udevd[5860]: incorrect nilfs2 checksum on /dev/loop4 [ 124.250669][ T6584] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.320214][ T6588] netlink: 36 bytes leftover after parsing attributes in process `syz.4.251'. [ 124.353540][ T6584] EXT4-fs (loop2): 1 truncate cleaned up [ 124.371251][ T6584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.439926][ T6584] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #15: comm syz.2.248: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 124.739195][ T6601] loop4: detected capacity change from 0 to 128 [ 124.758230][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.864301][ T6603] loop5: detected capacity change from 0 to 2048 [ 124.971764][ T6603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.048269][ T6603] EXT4-fs error (device loop5): ext4_ext_precache:649: inode #2: comm syz.5.256: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 125.112590][ T6615] loop1: detected capacity change from 0 to 256 [ 125.132928][ T6615] exfat: Deprecated parameter 'utf8' [ 125.145181][ T6603] EXT4-fs (loop5): Remounting filesystem read-only [ 125.238440][ T6615] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 125.430694][ T5857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.581060][ T30] audit: type=1326 audit(1752837349.315:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77158e9a9 code=0x7ffc0000 [ 126.719885][ T30] audit: type=1326 audit(1752837349.345:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77158e9a9 code=0x7ffc0000 [ 126.812218][ T30] audit: type=1326 audit(1752837349.345:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff77158e9a9 code=0x7ffc0000 [ 126.910371][ T30] audit: type=1326 audit(1752837349.345:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77158e9a9 code=0x7ffc0000 [ 127.037014][ T30] audit: type=1326 audit(1752837349.345:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77158e9a9 code=0x7ffc0000 [ 127.072420][ T30] audit: type=1326 audit(1752837349.355:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77158e9a9 code=0x7ffc0000 [ 127.074862][ T6630] loop5: detected capacity change from 0 to 32768 [ 127.109525][ T30] audit: type=1326 audit(1752837349.355:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff77158e9a9 code=0x7ffc0000 [ 127.159326][ T6664] loop3: detected capacity change from 0 to 4096 [ 127.218338][ T30] audit: type=1326 audit(1752837349.355:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff77158e9a9 code=0x7ffc0000 [ 127.240727][ T6664] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 127.484458][ T6675] loop4: detected capacity change from 0 to 1024 [ 127.752666][ T13] hfsplus: b-tree write err: -5, ino 4 [ 128.117129][ T6691] loop0: detected capacity change from 0 to 2048 [ 128.159935][ T5848] IPVS: starting estimator thread 0... [ 128.194092][ T6698] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.261656][ T5862] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.311628][ T6697] IPVS: using max 23 ests per chain, 55200 per kthread [ 128.415762][ T6702] loop3: detected capacity change from 0 to 512 [ 128.430289][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 128.453473][ T5862] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.499547][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.506214][ T5862] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 128.581482][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.625970][ T5862] usb 3-1: config 0 descriptor?? [ 128.672042][ T6702] EXT4-fs (loop3): 1 orphan inode deleted [ 128.694117][ T1142] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 128.710306][ T6708] loop4: detected capacity change from 0 to 128 [ 128.710626][ T6707] loop0: detected capacity change from 0 to 2048 [ 128.749665][ T6702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.774014][ T1142] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 128.799477][ T6707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.808978][ T6702] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.115975][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.125894][ T5862] corsair-cpro 0003:1B1C:0C10.0007: item fetching failed at offset 2/5 [ 129.187983][ T5862] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -22 [ 129.241221][ T6715] loop5: detected capacity change from 0 to 8 [ 129.382540][ T5862] usb 3-1: USB disconnect, device number 4 [ 129.401970][ T6715] SQUASHFS error: Unable to read directory block [2c0:35] [ 129.598270][ T6692] loop1: detected capacity change from 0 to 32768 [ 129.616975][ T6724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.648443][ T6692] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.300 (6692) [ 129.763701][ T6692] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.819719][ T6692] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.832749][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.314'. [ 129.873660][ T6692] BTRFS info (device loop1): using free-space-tree [ 130.015209][ T6749] loop3: detected capacity change from 0 to 8 [ 130.160343][ T6692] BTRFS info (device loop1): rebuilding free space tree [ 130.273773][ T6758] loop4: detected capacity change from 0 to 256 [ 130.305416][ T6755] loop2: detected capacity change from 0 to 4096 [ 130.504769][ T6692] BTRFS info (device loop1): balance: start -susage=34359738372,drange=7..526332,limit=10..0 [ 130.561550][ T6761] loop0: detected capacity change from 0 to 4096 [ 130.618317][ T6761] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 130.653526][ T6692] BTRFS info (device loop1): balance: ended with status: 0 [ 130.769728][ T5848] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 130.871080][ T6761] ntfs3(loop0): failed to convert "c46c" to cp866 [ 130.915421][ T5844] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 131.001814][ T6772] loop3: detected capacity change from 0 to 512 [ 131.003707][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 131.065436][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.159555][ T6772] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.328: casefold flag without casefold feature [ 131.178770][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.231326][ T6772] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.328: couldn't read orphan inode 15 (err -117) [ 131.266971][ T6772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.271101][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.415760][ T5848] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 131.489742][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.537510][ T5848] usb 6-1: config 0 descriptor?? [ 131.618014][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.871097][ T6791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.008762][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 132.036643][ T5848] waltop 0003:172F:0501.0008: unknown main item tag 0x0 [ 132.051692][ T5848] waltop 0003:172F:0501.0008: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.5-1/input0 [ 132.112871][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.112978][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.292733][ T6802] loop3: detected capacity change from 0 to 1024 [ 132.368316][ T9] usb 6-1: USB disconnect, device number 4 [ 132.666031][ T6814] loop4: detected capacity change from 0 to 1024 [ 132.692383][ T6815] vlan2: entered promiscuous mode [ 132.697434][ T6815] macvlan1: entered promiscuous mode [ 132.864176][ T6817] loop3: detected capacity change from 0 to 4096 [ 132.955481][ T6817] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 133.166379][ T6823] [U] [ 133.215984][ T6829] loop1: detected capacity change from 0 to 512 [ 133.299486][ T6829] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.396655][ T6829] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.410027][ T5901] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.467744][ T6829] EXT4-fs (loop1): 1 truncate cleaned up [ 133.516474][ T6829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.627664][ T5901] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 133.641174][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.687374][ T5901] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 133.715768][ T5901] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 133.736658][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.756156][ T5901] usb 3-1: Manufacturer: syz [ 133.797740][ T5901] usb 3-1: config 0 descriptor?? [ 133.987456][ T6844] loop4: detected capacity change from 0 to 16 [ 134.062085][ T6844] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 134.088144][ T5860] udevd[5860]: incorrect cramfs checksum on /dev/loop4 [ 134.099520][ T5901] rc_core: IR keymap rc-hauppauge not found [ 134.126964][ T5901] Registered IR keymap rc-empty [ 134.145455][ T5901] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 134.213658][ T5901] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 134.331233][ T6820] loop0: detected capacity change from 0 to 32768 [ 134.342087][ T6852] loop1: detected capacity change from 0 to 1024 [ 134.354733][ T6852] EXT4-fs: Ignoring removed orlov option [ 134.361862][ T5211] udevd[5211]: worker [6091] terminated by signal 33 (Unknown signal 33) [ 134.364301][ T6852] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.382730][ T6820] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.348 (6820) [ 134.390969][ T6852] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 134.400001][ T5211] udevd[5211]: worker [6091] failed while handling '/devices/virtual/block/loop4' [ 134.429115][ T6850] rc rc0: two consecutive events of type space [ 134.462168][ T6820] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.499603][ T6820] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 134.539969][ T6820] BTRFS info (device loop0): using free-space-tree [ 134.556504][ T6852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.638625][ T5862] usb 3-1: USB disconnect, device number 5 [ 134.740933][ T6820] BTRFS info (device loop0): rebuilding free space tree [ 135.046510][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.291336][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 135.368621][ T5841] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.559093][ T6890] loop5: detected capacity change from 0 to 256 [ 135.794700][ T6890] FAT-fs (loop5): Directory bread(block 64) failed [ 135.824801][ T6890] FAT-fs (loop5): Directory bread(block 65) failed [ 135.869109][ T6890] FAT-fs (loop5): Directory bread(block 66) failed [ 135.891151][ T6898] netlink: 92 bytes leftover after parsing attributes in process `syz.4.374'. [ 135.912997][ T6890] FAT-fs (loop5): Directory bread(block 67) failed [ 135.947274][ T6890] FAT-fs (loop5): Directory bread(block 68) failed [ 136.017637][ T6890] FAT-fs (loop5): Directory bread(block 69) failed [ 136.039670][ T6890] FAT-fs (loop5): Directory bread(block 70) failed [ 136.076729][ T6890] FAT-fs (loop5): Directory bread(block 71) failed [ 136.091771][ T6899] loop1: detected capacity change from 0 to 2048 [ 136.131727][ T6890] FAT-fs (loop5): Directory bread(block 72) failed [ 136.138260][ T6890] FAT-fs (loop5): Directory bread(block 73) failed [ 136.210324][ T6899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.310067][ T6899] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 136.577398][ T6024] kernel write not supported for file /stat (pid: 6024 comm: kworker/1:6) [ 136.747099][ T30] audit: type=1326 audit(1752837359.475:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.5.384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa10ab8e9a9 code=0x0 [ 136.894736][ T6921] loop1: detected capacity change from 0 to 512 [ 136.980273][ T6921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.044370][ T6921] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.247345][ T6928] delete_channel: no stack [ 137.288310][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.300170][ T6927] delete_channel: no stack [ 137.474892][ T6930] loop4: detected capacity change from 0 to 4096 [ 137.533032][ T6930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.638404][ T6930] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 137.900927][ T6909] loop2: detected capacity change from 0 to 32768 [ 137.921569][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.940381][ T6913] loop3: detected capacity change from 0 to 32768 [ 137.953171][ T6909] XFS: noikeep mount option is deprecated. [ 138.018511][ T6913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.382 (6913) [ 138.091345][ T6909] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.101575][ T6951] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 138.101575][ T6951] The task syz.5.396 (6951) triggered the difference, watch for misbehavior. [ 138.157590][ T6913] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.206338][ T6913] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 138.236073][ T6913] BTRFS info (device loop3): using free-space-tree [ 138.310264][ T6909] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 138.355678][ T6959] loop4: detected capacity change from 0 to 2048 [ 138.420744][ T6909] XFS (loop2): Starting recovery (logdev: internal) [ 138.427647][ T6913] BTRFS info (device loop3): rebuilding free space tree [ 138.438306][ T6959] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.526876][ T6959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.568877][ T6959] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.573982][ T6909] XFS (loop2): Ending recovery (logdev: internal) [ 138.586401][ T6977] loop0: detected capacity change from 0 to 256 [ 138.601988][ T6977] exfat: Deprecated parameter 'namecase' [ 138.655140][ T6977] exfat: Deprecated parameter 'utf8' [ 138.719100][ T6982] loop1: detected capacity change from 0 to 512 [ 138.749210][ T6977] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 138.809733][ T6959] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.395: bg 0: block 345: padding at end of block bitmap is not set [ 138.852496][ T6982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.865866][ T6959] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 138.879005][ T6959] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.879005][ T6959] [ 138.896147][ T6982] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.966611][ T5843] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.968354][ T5840] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.037662][ T6982] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #12: block 32: comm syz.1.400: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 139.137614][ T6982] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 139.201354][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.262688][ T6988] loop0: detected capacity change from 0 to 256 [ 139.316125][ T5844] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 139.462663][ T6988] FAT-fs (loop0): Directory bread(block 64) failed [ 139.469233][ T6988] FAT-fs (loop0): Directory bread(block 65) failed [ 139.506523][ T6988] FAT-fs (loop0): Directory bread(block 66) failed [ 139.519789][ T5844] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 139.568381][ T6988] FAT-fs (loop0): Directory bread(block 67) failed [ 139.608696][ T6988] FAT-fs (loop0): Directory bread(block 68) failed [ 139.657926][ T6988] FAT-fs (loop0): Directory bread(block 69) failed [ 139.678407][ T6988] FAT-fs (loop0): Directory bread(block 70) failed [ 139.695222][ T6988] FAT-fs (loop0): Directory bread(block 71) failed [ 139.710694][ T6988] FAT-fs (loop0): Directory bread(block 72) failed [ 139.731688][ T6988] FAT-fs (loop0): Directory bread(block 73) failed [ 140.107534][ T6992] loop4: detected capacity change from 0 to 8192 [ 140.145352][ T6992] msdos: Unknown parameter 'appraise_type' [ 140.175010][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.588586][ T7008] loop2: detected capacity change from 0 to 1024 [ 140.694687][ T1156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.748510][ T7008] afs: Unexpected value for 'dyn' [ 140.889265][ T6991] loop5: detected capacity change from 0 to 32768 [ 141.041813][ T6991] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 141.063936][ T1156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.473137][ T1156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.505260][ T5857] ocfs2: Unmounting device (7,5) on (node local) [ 141.675195][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 142.539721][ T1156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.635815][ T7035] sp0: Synchronizing with TNC [ 142.849018][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.884346][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.895463][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.905135][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.915430][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.206631][ T1156] bridge_slave_1: left allmulticast mode [ 143.228319][ T1156] bridge_slave_1: left promiscuous mode [ 143.248543][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.253682][ T7059] netlink: 'syz.3.435': attribute type 5 has an invalid length. [ 143.352230][ T1156] bridge_slave_0: left allmulticast mode [ 143.389510][ T1156] bridge_slave_0: left promiscuous mode [ 143.395318][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.705607][ T7071] loop3: detected capacity change from 0 to 2048 [ 143.796747][ T7071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.041062][ T7081] loop0: detected capacity change from 0 to 128 [ 144.166260][ T7081] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 144.281568][ T7081] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.484287][ T5841] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.733158][ T7095] loop0: detected capacity change from 0 to 4096 [ 144.828616][ T7064] loop2: detected capacity change from 0 to 32768 [ 144.860207][ T7064] XFS: ikeep mount option is deprecated. [ 144.873851][ T7097] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.921760][ T7064] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.972455][ T5853] Bluetooth: hci2: command tx timeout [ 145.042489][ T7064] XFS (loop2): Ending clean mount [ 145.082892][ T7064] XFS (loop2): Quotacheck needed: Please wait. [ 145.189152][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.206140][ T7064] XFS (loop2): Quotacheck: Done. [ 145.264580][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.291683][ T1156] bond0 (unregistering): Released all slaves [ 145.373889][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 145.376086][ T5843] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.663639][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 145.727942][ T7114] loop5: detected capacity change from 0 to 1024 [ 145.752782][ T7115] loop4: detected capacity change from 0 to 64 [ 145.779524][ T7115] hfs: unable to locate alternate MDB [ 145.819716][ T7115] hfs: continuing without an alternate MDB [ 145.854743][ T7114] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 146.359208][ T7130] loop5: detected capacity change from 0 to 256 [ 146.408721][ T7130] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 146.429615][ T7133] netlink: 'syz.3.458': attribute type 4 has an invalid length. [ 146.467965][ T7133] netlink: 17 bytes leftover after parsing attributes in process `syz.3.458'. [ 146.479767][ T30] audit: type=1800 audit(1752837369.195:20): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.457" name="file1" dev="loop5" ino=1048654 res=0 errno=0 [ 146.503947][ T7136] Zero length message leads to an empty skb [ 146.858111][ T7046] chnl_net:caif_netlink_parms(): no params data found [ 147.049570][ T5853] Bluetooth: hci2: command tx timeout [ 147.245619][ T1156] hsr_slave_0: left promiscuous mode [ 147.307832][ T7154] loop0: detected capacity change from 0 to 4096 [ 147.336605][ T1156] hsr_slave_1: left promiscuous mode [ 147.351598][ T7154] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 147.370921][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.378347][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.467973][ T7154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.488381][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.534941][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.623291][ T7168] loop3: detected capacity change from 0 to 128 [ 147.684949][ T7168] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 147.697303][ T1156] veth1_macvtap: left promiscuous mode [ 147.715024][ T7168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.730675][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.739932][ T1156] veth0_macvtap: left promiscuous mode [ 147.765847][ T1156] veth1_vlan: left promiscuous mode [ 147.780107][ T1156] veth0_vlan: left promiscuous mode [ 148.205508][ T7151] loop2: detected capacity change from 0 to 32768 [ 148.366787][ T7179] loop3: detected capacity change from 0 to 1024 [ 148.421562][ T7179] EXT4-fs: Ignoring removed oldalloc option [ 148.427598][ T7179] EXT4-fs: Ignoring removed orlov option [ 148.547368][ T7179] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 148.682701][ T7179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.865182][ T7179] EXT4-fs warning (device loop3): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 149.018419][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.131279][ T5853] Bluetooth: hci2: command tx timeout [ 149.422270][ T7200] loop2: detected capacity change from 0 to 1024 [ 149.469676][ T6050] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 149.553090][ T59] hfsplus: b-tree write err: -5, ino 4 [ 149.645110][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 149.659918][ T6050] usb 4-1: Using ep0 maxpacket: 8 [ 149.679006][ T6050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.700541][ T6050] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 149.710749][ T6050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.722396][ T6050] usb 4-1: config 0 descriptor?? [ 149.740587][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 150.163076][ T6050] hid (null): invalid report_size -1281265923 [ 150.195886][ T6050] uclogic 0003:28BD:0075.0009: interface is invalid, ignoring [ 150.244527][ T7193] netlink: 'syz.0.479': attribute type 29 has an invalid length. [ 150.414300][ T7213] loop5: detected capacity change from 0 to 512 [ 150.441733][ T9] usb 4-1: USB disconnect, device number 3 [ 150.446321][ T7209] loop0: detected capacity change from 0 to 512 [ 150.476850][ T7213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.489867][ T7213] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.528535][ T7209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.572722][ T7209] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.596999][ T30] audit: type=1800 audit(1752837373.325:21): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.483" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 150.704042][ T7209] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 32: comm syz.0.484: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 150.760255][ T5857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.787356][ T7209] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 150.803043][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.827154][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.827202][ T7221] loop2: detected capacity change from 0 to 4096 [ 150.860326][ T7046] bridge_slave_0: entered allmulticast mode [ 150.868348][ T7046] bridge_slave_0: entered promiscuous mode [ 150.928408][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.992555][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.012298][ T5841] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 151.041393][ T7046] bridge_slave_1: entered allmulticast mode [ 151.055041][ T7046] bridge_slave_1: entered promiscuous mode [ 151.140021][ T5841] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 151.217596][ T5853] Bluetooth: hci2: command tx timeout [ 151.451712][ T7046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.568448][ T7046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.579819][ T7236] loop5: detected capacity change from 0 to 256 [ 151.637327][ T7236] FAT-fs (loop5): Directory bread(block 1285) failed [ 151.678511][ T7234] loop3: detected capacity change from 0 to 4096 [ 151.748476][ T7236] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 151.759622][ T7234] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 151.899064][ T7234] ntfs3(loop3): ino=1a, mi_enum_attr [ 151.924041][ T7234] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 151.979406][ T7234] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 151.999670][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.015693][ T7046] team0: Port device team_slave_0 added [ 152.070976][ T7046] team0: Port device team_slave_1 added [ 152.149817][ T30] audit: type=1800 audit(1752837374.865:22): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.493" name="file1" dev="loop3" ino=24 res=0 errno=0 [ 152.160780][ T7234] ntfs3(loop3): ino=18, "file1" fallocate(0x11) is not supported [ 152.462017][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.479195][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.558690][ T7046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.595041][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.609790][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.694170][ T7046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.957668][ T7046] hsr_slave_0: entered promiscuous mode [ 152.993352][ T7046] hsr_slave_1: entered promiscuous mode [ 153.013687][ T7046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.059642][ T7046] Cannot create hsr debugfs directory [ 153.163438][ T1156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.344991][ T7271] netlink: 212 bytes leftover after parsing attributes in process `syz.2.506'. [ 153.678198][ T1156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.059028][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.091259][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.100221][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.108196][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.116669][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.152959][ T1156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.174096][ T7287] loop4: detected capacity change from 0 to 256 [ 154.252329][ T7287] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 154.296024][ T7263] loop5: detected capacity change from 0 to 32768 [ 154.311576][ T1156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.336196][ T7263] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 154.370465][ T7263] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.546398][ T7263] XFS (loop5): Ending clean mount [ 154.629787][ T7263] XFS (loop5): Quotacheck needed: Please wait. [ 154.640744][ T7303] loop3: detected capacity change from 0 to 1024 [ 154.656852][ T7303] EXT4-fs: inline encryption not supported [ 154.726114][ T7303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.802665][ T7263] XFS (loop5): Quotacheck: Done. [ 154.869632][ T30] audit: type=1800 audit(1752837377.595:23): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.504" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 155.002617][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.023282][ T5857] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.408034][ T7318] can0: slcan on ptm0. [ 155.592315][ T7317] can0 (unregistered): slcan off ptm0. [ 155.760380][ T7331] loop3: detected capacity change from 0 to 128 [ 155.845883][ T7331] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.981552][ T7331] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.029780][ T1156] bridge_slave_1: left allmulticast mode [ 156.035443][ T1156] bridge_slave_1: left promiscuous mode [ 156.090320][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.170709][ T5851] Bluetooth: hci1: command tx timeout [ 156.228238][ T1156] bridge_slave_0: left allmulticast mode [ 156.266172][ T1156] bridge_slave_0: left promiscuous mode [ 156.291497][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.347435][ T5840] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.412036][ T6006] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.507602][ T7358] loop3: detected capacity change from 0 to 128 [ 156.547693][ T7358] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 156.570157][ T6006] usb 5-1: Using ep0 maxpacket: 32 [ 156.587101][ T6006] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.609944][ T6006] usb 5-1: config 0 has no interface number 0 [ 156.616056][ T6006] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.638510][ T7358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.655600][ T6006] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.676859][ T7362] loop5: detected capacity change from 0 to 128 [ 156.684130][ T6006] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 156.714254][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.803883][ T6006] usb 5-1: config 0 descriptor?? [ 157.237441][ T6006] ft260 0003:0403:6030.000A: item fetching failed at offset 0/2 [ 157.271665][ T6006] ft260 0003:0403:6030.000A: failed to parse HID [ 157.283388][ T6006] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -22 [ 157.433506][ T6006] usb 5-1: USB disconnect, device number 4 [ 157.511183][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.528839][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.546000][ T1156] bond0 (unregistering): Released all slaves [ 157.590894][ T7046] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.675658][ T7046] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.931013][ T7046] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.990629][ T7046] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.115460][ T7284] chnl_net:caif_netlink_parms(): no params data found [ 158.250135][ T5851] Bluetooth: hci1: command tx timeout [ 158.634910][ T7390] loop3: detected capacity change from 0 to 32768 [ 158.641549][ T6006] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 158.656910][ T1156] hsr_slave_0: left promiscuous mode [ 158.663165][ T1156] hsr_slave_1: left promiscuous mode [ 158.671581][ T7390] bcachefs: bch2_fs_parse_param() Error parsing option allocator_stuck_timeout: option_value [ 158.674157][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.690718][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 158.700533][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.713974][ T7390] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 158.714479][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.732692][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.759243][ T1156] veth1_macvtap: left promiscuous mode [ 158.766138][ T1156] veth0_macvtap: left promiscuous mode [ 158.772975][ T1156] veth1_vlan: left promiscuous mode [ 158.778387][ T1156] veth0_vlan: left promiscuous mode [ 158.804720][ T7389] loop2: detected capacity change from 0 to 32768 [ 158.813587][ T6006] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 158.849552][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.867189][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.902266][ T7389] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.912006][ T6006] usb 6-1: config 0 descriptor?? [ 158.918916][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 158.942963][ T6006] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 158.949815][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 158.958854][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.994675][ T9] usb 5-1: config 0 descriptor?? [ 159.013438][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 159.042911][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 159.073596][ T7389] XFS (loop2): Ending clean mount [ 159.106131][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 159.116844][ T7389] XFS (loop2): Quotacheck needed: Please wait. [ 159.159972][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 159.185489][ T7389] XFS (loop2): Quotacheck: Done. [ 159.198997][ T9] usb 5-1: media controller created [ 159.217882][ T7403] dvb-usb: bulk message failed: -22 (2/0) [ 159.221608][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.283644][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 159.310688][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 159.335162][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 159.351434][ T6006] gspca_cpia1: usb_control_msg 03, error -32 [ 159.370245][ T6006] gspca_cpia1: usb_control_msg 03, error -71 [ 159.394510][ T6006] gspca_cpia1: usb_control_msg 01, error -71 [ 159.410259][ T5843] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 159.416974][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 159.426143][ T6006] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 159.437682][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 159.448604][ T6006] usb 6-1: USB disconnect, device number 5 [ 159.464387][ T9] usb 5-1: USB disconnect, device number 5 [ 159.630987][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 160.055984][ T7427] loop2: detected capacity change from 0 to 512 [ 160.077259][ T7427] EXT4-fs: Ignoring removed i_version option [ 160.094629][ T7427] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.131430][ T7427] EXT4-fs (loop2): 1 truncate cleaned up [ 160.217484][ T7427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.331015][ T5851] Bluetooth: hci1: command tx timeout [ 160.340594][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.423332][ T7436] loop4: detected capacity change from 0 to 4096 [ 160.499296][ T7436] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 160.588426][ T7436] ntfs3(loop4): Failed to load $Extend (-22). [ 160.624317][ T7436] ntfs3(loop4): Failed to initialize $Extend. [ 160.653761][ T7439] loop2: detected capacity change from 0 to 4096 [ 160.765208][ T7439] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 160.830588][ T7439] ntfs3(loop2): ino=1e, "file1" attr_set_size [ 160.848318][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 160.849286][ T7438] ntfs3(loop2): ino=1e, "file1" attr_set_size [ 161.225931][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 161.463667][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.570'. [ 161.473205][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.570'. [ 161.906361][ T7465] loop3: detected capacity change from 0 to 4096 [ 161.967704][ T7465] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 161.999250][ T7465] ntfs3(loop3): Failed to load $Extend (-22). [ 162.007859][ T7465] ntfs3(loop3): Failed to initialize $Extend. [ 162.324598][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.363143][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.399995][ T7284] bridge_slave_0: entered allmulticast mode [ 162.409762][ T5851] Bluetooth: hci1: command tx timeout [ 162.439522][ T7284] bridge_slave_0: entered promiscuous mode [ 162.496349][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.532512][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.575944][ T7284] bridge_slave_1: entered allmulticast mode [ 162.648485][ T7284] bridge_slave_1: entered promiscuous mode [ 163.056916][ T7284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.105156][ T7284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.113500][ T7495] loop2: detected capacity change from 0 to 512 [ 163.548356][ T7284] team0: Port device team_slave_0 added [ 163.640192][ T6024] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 163.693593][ T7284] team0: Port device team_slave_1 added [ 163.843479][ T6024] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.894281][ T6024] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.950245][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.952517][ T6024] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.969491][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.020284][ T6024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 164.029028][ T6024] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 164.050365][ T7284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.054225][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.077487][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.098806][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.106088][ T6024] usb 6-1: config 0 descriptor?? [ 164.127838][ T7284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.270903][ T6006] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.439110][ T7284] hsr_slave_0: entered promiscuous mode [ 164.446032][ T7284] hsr_slave_1: entered promiscuous mode [ 164.455790][ T6006] usb 3-1: Using ep0 maxpacket: 16 [ 164.467684][ T7284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.476825][ T6006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.482230][ T7527] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.597'. [ 164.498785][ T7284] Cannot create hsr debugfs directory [ 164.516540][ T6006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.547289][ T7046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.560570][ T6006] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 164.609792][ T6006] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.613149][ T6024] hid (null): usage index exceeded [ 164.618850][ T6006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.655720][ T6006] usb 3-1: config 0 descriptor?? [ 164.696894][ T6024] uclogic 0003:28BD:0042.000B: interface is invalid, ignoring [ 164.915125][ T5901] usb 6-1: USB disconnect, device number 6 [ 164.967146][ T7046] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.099661][ T6006] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 165.140116][ T6006] microsoft 0003:045E:07DA.000C: no inputs found [ 165.156930][ T6006] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 165.227230][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.234469][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.305487][ T6050] usb 3-1: USB disconnect, device number 6 [ 165.325906][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.333082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.385559][ T7538] fido_id[7538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 165.677492][ T7284] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 165.725285][ T7284] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 165.776569][ T7284] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 165.785114][ T7551] loop4: detected capacity change from 0 to 1024 [ 165.838717][ T7046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.901738][ T7551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.000221][ T7284] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 166.098848][ T7562] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 166.220952][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.679704][ T7284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.748314][ T7284] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.752134][ T7585] loop5: detected capacity change from 0 to 64 [ 166.807115][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.814315][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.915397][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 167.027985][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.035213][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.361137][ T7046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.569269][ T7609] loop4: detected capacity change from 0 to 256 [ 168.443026][ T7284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.459749][ T7637] use of bytesused == 0 is deprecated and will be removed in the future, [ 168.504584][ T7637] use the actual size instead. [ 168.855259][ T7046] veth0_vlan: entered promiscuous mode [ 168.899143][ T7046] veth1_vlan: entered promiscuous mode [ 169.088233][ T7656] loop3: detected capacity change from 0 to 128 [ 169.098663][ T7046] veth0_macvtap: entered promiscuous mode [ 169.161412][ T7046] veth1_macvtap: entered promiscuous mode [ 169.269266][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.335837][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.441155][ T7046] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.462194][ T7661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.635'. [ 169.499952][ T7046] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.508664][ T7046] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.554880][ T7046] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.922427][ T7668] netlink: 'syz.4.638': attribute type 3 has an invalid length. [ 169.968812][ T7284] veth0_vlan: entered promiscuous mode [ 170.029624][ T7640] loop5: detected capacity change from 0 to 32768 [ 170.044963][ T7284] veth1_vlan: entered promiscuous mode [ 170.100686][ T7640] JBD2: Ignoring recovery information on journal [ 170.158325][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.240542][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.329993][ T7640] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 170.515994][ T5857] ocfs2: Unmounting device (7,5) on (node local) [ 170.526090][ T7681] tipc: Enabled bearer , priority 10 [ 170.543312][ T7284] veth0_macvtap: entered promiscuous mode [ 170.592334][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.593426][ T7284] veth1_macvtap: entered promiscuous mode [ 170.644175][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.793802][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.882323][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.906780][ T7284] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.942094][ T7284] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.966478][ T7284] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.039960][ T7284] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.520847][ T6050] tipc: Node number set to 1593835521 [ 171.619590][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.649674][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.839969][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.847828][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.977813][ T7719] loop2: detected capacity change from 0 to 1024 [ 172.000700][ T7719] EXT4-fs: Ignoring removed orlov option [ 172.166113][ T7719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.596140][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.909946][ T7757] loop5: detected capacity change from 0 to 256 [ 173.005322][ T7761] loop2: detected capacity change from 0 to 512 [ 173.065544][ T7757] FAT-fs (loop5): Directory bread(block 64) failed [ 173.083988][ T7761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.105349][ T7757] FAT-fs (loop5): Directory bread(block 65) failed [ 173.112575][ T7757] FAT-fs (loop5): Directory bread(block 66) failed [ 173.119207][ T7757] FAT-fs (loop5): Directory bread(block 67) failed [ 173.131794][ T7757] FAT-fs (loop5): Directory bread(block 68) failed [ 173.138326][ T7757] FAT-fs (loop5): Directory bread(block 69) failed [ 173.145352][ T7757] FAT-fs (loop5): Directory bread(block 70) failed [ 173.152846][ T7757] FAT-fs (loop5): Directory bread(block 71) failed [ 173.159776][ T7757] FAT-fs (loop5): Directory bread(block 72) failed [ 173.166297][ T7757] FAT-fs (loop5): Directory bread(block 73) failed [ 173.185591][ T7761] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.248779][ T7761] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 173.537767][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.857575][ T1085] kworker/u8:6: attempt to access beyond end of device [ 173.857575][ T1085] loop5: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 173.917397][ T1085] kworker/u8:6: attempt to access beyond end of device [ 173.917397][ T1085] loop5: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 174.012874][ T1085] kworker/u8:6: attempt to access beyond end of device [ 174.012874][ T1085] loop5: rw=1, sector=1960, nr_sectors = 1472 limit=256 [ 174.416515][ T7801] process 'syz.2.685' launched './file0' with NULL argv: empty string added [ 174.785236][ T7815] loop7: detected capacity change from 0 to 64 [ 175.168801][ T7832] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.696'. [ 175.240770][ T7830] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.696'. [ 175.820208][ T7851] loop2: detected capacity change from 0 to 1024 [ 176.161020][ T7866] loop9: detected capacity change from 0 to 1024 [ 176.169808][ T6050] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 176.359522][ T6050] usb 7-1: Using ep0 maxpacket: 16 [ 176.386318][ T6050] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 176.441506][ T6050] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 176.478648][ T6050] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.524724][ T6050] usb 7-1: Product: syz [ 176.548793][ T6050] usb 7-1: Manufacturer: syz [ 176.571565][ T6050] usb 7-1: SerialNumber: syz [ 176.632578][ T6050] usb 7-1: config 0 descriptor?? [ 176.681560][ T6050] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 177.140729][ T7859] loop6: detected capacity change from 0 to 4096 [ 177.337981][ T6050] usb 7-1: USB disconnect, device number 2 [ 177.344027][ T36] usb 7-1: Failed to submit usb control message: -71 [ 177.381648][ T36] usb 7-1: unable to send the bmi data to the device: -71 [ 177.423669][ T36] usb 7-1: unable to get target info from device [ 177.449525][ T36] usb 7-1: could not get target info (-71) [ 177.455593][ T36] usb 7-1: could not probe fw (-71) [ 177.744585][ T7861] loop7: detected capacity change from 0 to 32768 [ 177.750337][ T7902] loop3: detected capacity change from 0 to 1024 [ 177.797400][ T7861] XFS (loop7): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 177.875794][ T7902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.021711][ T7902] EXT4-fs error (device loop3): ext4_lookup:1787: comm syz.3.723: inode #12: comm syz.3.723: iget: illegal inode # [ 178.090580][ T7906] loop5: detected capacity change from 0 to 8192 [ 178.093500][ T7861] XFS (loop7): Ending clean mount [ 178.186263][ T7902] EXT4-fs (loop3): Remounting filesystem read-only [ 178.417966][ T7284] XFS (loop7): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 178.450963][ T2148] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 178.537538][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.642453][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 178.710379][ T2148] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 178.793215][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.859112][ T2148] usb 5-1: config 0 descriptor?? [ 178.896771][ T7922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.159105][ T7929] loop7: detected capacity change from 0 to 8192 [ 179.285369][ T7937] loop5: detected capacity change from 0 to 2048 [ 179.350195][ T7929] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 179.375888][ T2148] stadia 0003:18D1:9400.000D: item fetching failed at offset 3/5 [ 179.412960][ T2148] stadia 0003:18D1:9400.000D: parse failed [ 179.424634][ T7929] FAT-fs (loop7): Filesystem has been set read-only [ 179.445606][ T2148] stadia 0003:18D1:9400.000D: probe with driver stadia failed with error -22 [ 179.513210][ T7943] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 179.574203][ T7937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.652156][ T6050] usb 5-1: USB disconnect, device number 6 [ 179.977129][ T5857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.035474][ T30] audit: type=1326 audit(1752837402.755:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.7.734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb98fd8e9a9 code=0x0 [ 180.072881][ T7949] loop3: detected capacity change from 0 to 4096 [ 180.122025][ T7949] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 180.170669][ T7924] loop6: detected capacity change from 0 to 32768 [ 180.239320][ T7949] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 180.282929][ T7924] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.638866][ T7924] XFS (loop6): Ending clean mount [ 181.049219][ T7924] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.438102][ T7991] tipc: Enabling of bearer rejected, failed to enable media [ 181.452484][ T7990] loop5: detected capacity change from 0 to 512 [ 181.610261][ T7990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.642174][ T7984] loop7: detected capacity change from 0 to 8192 [ 181.715688][ T7984] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.785384][ T7990] fs-verity: sha512 using implementation "sha512-avx2" [ 181.796324][ T7996] netlink: 64 bytes leftover after parsing attributes in process `syz.3.747'. [ 181.852714][ T7999] IPVS: wlc: TCP 172.20.20.170:0 - no destination available [ 181.869963][ T7990] EXT4-fs warning (device loop5): ext4_begin_enable_verity:135: inode #15: comm syz.5.745: verity is only allowed on extent-based files [ 182.185815][ T5857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.607724][ T8018] loop3: detected capacity change from 0 to 1764 [ 182.805669][ T8018] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 182.973535][ T8028] tipc: Started in network mode [ 182.987956][ T8028] tipc: Node identity ac14140f, cluster identity 4711 [ 183.011401][ T8028] tipc: New replicast peer: 255.255.255.255 [ 183.048428][ T8028] tipc: Enabled bearer , priority 10 [ 183.101712][ T5901] kernel write not supported for file /vcsu (pid: 5901 comm: kworker/0:4) [ 183.306191][ T5949] usb 5-1: [UEAGLE-ATM] firmware is not available [ 183.313304][ T972] usb 5-1: [UEAGLE-ATM] firmware is not available [ 183.485120][ T8050] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 183.529742][ T8050] netlink: 168 bytes leftover after parsing attributes in process `syz.2.769'. [ 183.549005][ T8041] loop6: detected capacity change from 0 to 4096 [ 184.209558][ T2148] tipc: Node number set to 2886997007 [ 184.313845][ T8074] loop7: detected capacity change from 0 to 64 [ 185.259198][ T8105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.519552][ T972] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 185.701735][ T972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 185.745485][ T972] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 185.749611][ T8116] loop5: detected capacity change from 0 to 4096 [ 185.810933][ T972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 185.854575][ T972] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 185.885844][ T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.924896][ T972] usb 7-1: Product: syz [ 185.929087][ T972] usb 7-1: Manufacturer: syz [ 185.950230][ T972] usb 7-1: SerialNumber: syz [ 186.007466][ T972] usb 7-1: config 0 descriptor?? [ 186.037903][ T8107] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 186.068478][ T8107] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 186.100898][ T972] usb 7-1: ucan: probing device on interface #0 [ 186.879521][ T2148] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 187.075077][ T2148] usb 6-1: Using ep0 maxpacket: 16 [ 187.119716][ T2148] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.179394][ T2148] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.242192][ T2148] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.338414][ T2148] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 187.396901][ T2148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.449885][ T972] ucan 7-1:0.0: probe with driver ucan failed with error -71 [ 187.464655][ T2148] usb 6-1: config 0 descriptor?? [ 188.016069][ T2148] shield 0003:0955:7214.000E: item fetching failed at offset 0/5 [ 188.117936][ T2148] shield 0003:0955:7214.000E: Parse failed [ 188.168425][ T2148] shield 0003:0955:7214.000E: probe with driver shield failed with error -22 [ 188.332302][ T2148] usb 6-1: USB disconnect, device number 7 [ 188.440670][ T972] usb 7-1: USB disconnect, device number 3 [ 188.860605][ T8136] loop3: detected capacity change from 0 to 262144 [ 188.881697][ T8136] F2FS-fs (loop3): invalid crc value [ 188.976293][ T8136] F2FS-fs (loop3): Start checkpoint disabled! [ 188.999593][ T8136] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 190.026701][ T8182] loop7: detected capacity change from 0 to 256 [ 190.073489][ T8181] loop6: detected capacity change from 0 to 512 [ 190.182229][ T8181] EXT4-fs: Ignoring removed i_version option [ 190.279187][ T8181] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 190.412970][ T8182] FAT-fs (loop7): Directory bread(block 64) failed [ 190.478927][ T8182] FAT-fs (loop7): Directory bread(block 65) failed [ 190.501643][ T8181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 190.544696][ T8182] FAT-fs (loop7): Directory bread(block 66) failed [ 190.573880][ T8181] System zones: 1-12 [ 190.578071][ T8181] EXT4-fs (loop6): orphan cleanup on readonly fs [ 190.603426][ T8182] FAT-fs (loop7): Directory bread(block 67) failed [ 190.670341][ T8182] FAT-fs (loop7): Directory bread(block 68) failed [ 190.676916][ T8182] FAT-fs (loop7): Directory bread(block 69) failed [ 190.690600][ T8181] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.815: invalid indirect mapped block 12 (level 1) [ 190.767019][ T8182] FAT-fs (loop7): Directory bread(block 70) failed [ 190.803052][ T8181] EXT4-fs (loop6): Remounting filesystem read-only [ 190.849042][ T8182] FAT-fs (loop7): Directory bread(block 71) failed [ 190.886331][ T8181] EXT4-fs (loop6): 1 truncate cleaned up [ 190.897107][ T8182] FAT-fs (loop7): Directory bread(block 72) failed [ 190.936360][ T8181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 190.954010][ T8182] FAT-fs (loop7): Directory bread(block 73) failed [ 192.031692][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 192.559257][ T8197] loop7: detected capacity change from 0 to 2048 [ 192.584529][ T8201] loop6: detected capacity change from 0 to 16 [ 192.704199][ T8197] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 192.732805][ T8201] erofs (device loop6): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 192.822622][ T8197] NILFS (loop7): mounting unchecked fs [ 192.866703][ T8201] erofs (device loop6): mounted with root inode @ nid 36. [ 192.990512][ T8197] NILFS (loop7): recovery complete [ 193.115252][ T8206] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.536490][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.543174][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.945820][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.6.828'. [ 194.080678][ T8215] netlink: 152 bytes leftover after parsing attributes in process `syz.6.828'. [ 194.301061][ T8215] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 194.621190][ T8222] loop4: detected capacity change from 0 to 64 [ 194.759553][ T972] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 194.999608][ T972] usb 6-1: Using ep0 maxpacket: 8 [ 195.114285][ T972] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 195.202647][ T972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.253509][ T8228] sit0: entered promiscuous mode [ 195.309365][ T972] usb 6-1: Product: syz [ 195.326740][ T8228] netlink: 'syz.6.834': attribute type 1 has an invalid length. [ 195.379005][ T972] usb 6-1: Manufacturer: syz [ 195.425410][ T972] usb 6-1: SerialNumber: syz [ 195.519669][ T8228] netlink: 1 bytes leftover after parsing attributes in process `syz.6.834'. [ 195.553921][ T972] usb 6-1: config 0 descriptor?? [ 195.630715][ T972] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 196.181415][ T972] gspca_sonixj: reg_w1 err -71 [ 196.236052][ T972] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 196.360828][ T972] usb 6-1: USB disconnect, device number 8 [ 196.823617][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 197.080223][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 197.182117][ T9] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 197.233106][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.316622][ T9] usb 5-1: Product: syz [ 197.373680][ T9] usb 5-1: Manufacturer: syz [ 197.429042][ T9] usb 5-1: SerialNumber: syz [ 197.949339][ T9] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 197.993254][ T9] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 198.260010][ T9] usb 5-1: USB disconnect, device number 7 [ 198.958353][ T8263] loop5: detected capacity change from 0 to 4096 [ 199.165708][ T8263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.449213][ T8270] loop4: detected capacity change from 0 to 1024 [ 199.569206][ T8263] EXT4-fs error (device loop5): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.5.846: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 199.838256][ T8263] EXT4-fs error (device loop5): ext4_get_first_dir_block:3547: inode #12: comm syz.5.846: directory missing '..' [ 200.153816][ T36] hfsplus: b-tree write err: -5, ino 4 [ 200.532044][ T5857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.190236][ T8271] loop7: detected capacity change from 0 to 32768 [ 202.257978][ T8271] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.848 (8271) [ 202.464740][ T8271] BTRFS error (device loop7): open_ctree failed: -4 [ 204.418066][ T8289] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.850048][ T8304] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3946 [ 205.171312][ T8309] loop6: detected capacity change from 0 to 256 [ 205.228787][ T8309] exfat: Deprecated parameter 'utf8' [ 205.285297][ T8309] exfat: Deprecated parameter 'utf8' [ 205.409534][ T5848] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 205.510603][ T8309] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 205.623441][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 205.694369][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 205.818068][ T5848] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 205.892565][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.973341][ T5848] usb 6-1: config 0 descriptor?? [ 206.512309][ T5848] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 206.609679][ T5848] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 206.680864][ T5848] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 206.770796][ T5848] zydacron 0003:13EC:0006.000F: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 206.944282][ T5848] usb 6-1: USB disconnect, device number 9 [ 207.409212][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 207.619911][ T8332] fido_id[8332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 207.649760][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.758598][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.868265][ T9] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 207.999902][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.113886][ T9] usb 7-1: config 0 descriptor?? [ 208.608292][ T9] hid-steam 0003:28DE:1142.0010: unbalanced delimiter at end of report description [ 208.666043][ T8346] loop5: detected capacity change from 0 to 16 [ 208.723025][ T9] hid-steam 0003:28DE:1142.0010: steam_probe:parse of hid interface failed [ 208.767171][ T8346] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 208.799377][ T9] hid-steam 0003:28DE:1142.0010: probe with driver hid-steam failed with error -22 [ 208.941977][ T9] usb 7-1: USB disconnect, device number 4 [ 209.005495][ T6093] udevd[6093]: incorrect cramfs checksum on /dev/loop5 [ 209.288825][ T6093] udevd[6093]: incorrect cramfs checksum on /dev/loop5 [ 209.709430][ C1] sched: DL replenish lagged too much [ 209.931621][ T5848] kernel write not supported for file /vcs (pid: 5848 comm: kworker/0:3) [ 210.786185][ T8371] loop6: detected capacity change from 0 to 1024 [ 210.862037][ T8374] loop3: detected capacity change from 0 to 64 [ 210.876966][ T8371] EXT4-fs: Ignoring removed nobh option [ 210.956357][ T8371] EXT4-fs: Ignoring removed bh option [ 210.965323][ T8374] hfs: unable to locate alternate MDB [ 211.039645][ T8374] hfs: continuing without an alternate MDB [ 211.194057][ T8371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.059193][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.829641][ T8422] loop7: detected capacity change from 0 to 512 [ 214.919551][ T8422] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 215.087562][ T8422] EXT4-fs (loop7): 1 truncate cleaned up [ 215.181564][ T8422] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.842540][ T7284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.094855][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 216.101398][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 216.136007][ T8439] nbd: must specify at least one socket [ 216.179606][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 216.419610][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 216.479076][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.609898][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.719523][ T9] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 216.837666][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.980628][ T9] usb 4-1: config 0 descriptor?? [ 217.024580][ T8445] loop6: detected capacity change from 0 to 1024 [ 217.129365][ T8448] loop7: detected capacity change from 0 to 64 [ 217.443850][ T9] betop 0003:20BC:5500.0011: unbalanced delimiter at end of report description [ 217.610494][ T9] betop 0003:20BC:5500.0011: parse failed [ 217.710766][ T9] betop 0003:20BC:5500.0011: probe with driver betop failed with error -22 [ 217.889928][ T9] usb 4-1: USB disconnect, device number 4 [ 219.099638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 219.509969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 219.919677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 220.390067][ T8468] bridge0: port 3(vlan3) entered blocking state [ 220.444958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39a!!! [ 220.583962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!! [ 220.680060][ T8468] bridge0: port 3(vlan3) entered disabled state [ 220.686591][ T8468] vlan3: entered allmulticast mode [ 220.749925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 220.800385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 220.809931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 220.840531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 221.060060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 221.401458][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 221.410936][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 221.419583][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 221.427655][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 221.435771][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.517205][ T8468] bridge0: entered allmulticast mode [ 223.151488][ T8468] vlan3: left allmulticast mode [ 223.156400][ T8468] bridge0: left allmulticast mode [ 223.547978][ T5851] Bluetooth: hci6: command tx timeout [ 223.590596][ T8480] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.921'. [ 225.261345][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.929'. [ 225.616969][ T5851] Bluetooth: hci6: command tx timeout [ 226.059870][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.934'. [ 226.166427][ T8510] openvswitch: netlink: nsh attr 0 has unexpected len 2044 expected 0 [ 226.289783][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.779914][ T8470] chnl_net:caif_netlink_parms(): no params data found [ 227.356749][ T8525] loop7: detected capacity change from 0 to 256 [ 227.471856][ T8525] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.573772][ T8525] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 227.714293][ T5851] Bluetooth: hci6: command tx timeout [ 227.754886][ T8525] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 228.103335][ T8470] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.148199][ T8538] loop5: detected capacity change from 0 to 256 [ 228.177572][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.230602][ T8538] exfat: Deprecated parameter 'namecase' [ 228.236274][ T8538] exfat: Deprecated parameter 'utf8' [ 228.248051][ T8470] bridge_slave_0: entered allmulticast mode [ 228.342131][ T8470] bridge_slave_0: entered promiscuous mode [ 228.443232][ T8470] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.489648][ T8538] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 228.548722][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.626642][ T8470] bridge_slave_1: entered allmulticast mode [ 228.728998][ T8470] bridge_slave_1: entered promiscuous mode [ 229.475728][ T8552] loop7: detected capacity change from 0 to 1024 [ 229.629541][ T5949] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 229.770997][ T5851] Bluetooth: hci6: command tx timeout [ 229.870140][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 229.897293][ T5949] usb 6-1: config 192 has an invalid interface number: 142 but max is 0 [ 229.945204][ T5949] usb 6-1: config 192 has no interface number 0 [ 229.985629][ T5949] usb 6-1: config 192 interface 142 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 230.075043][ T5949] usb 6-1: config 192 interface 142 has no altsetting 0 [ 230.111830][ T5949] usb 6-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1e.52 [ 230.156383][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.203842][ T5949] usb 6-1: Product: syz [ 230.228316][ T5949] usb 6-1: Manufacturer: syz [ 230.255783][ T5949] usb 6-1: SerialNumber: syz [ 230.535383][ T5949] s2255 6-1:192.142: Could not find bulk-in endpoint [ 230.590848][ T5949] Sensoray 2255 driver load failed: 0xfffffff4 [ 230.642858][ T5949] s2255 6-1:192.142: probe with driver s2255 failed with error -12 [ 230.730794][ T5949] usb 6-1: USB disconnect, device number 10 [ 230.820073][ T5848] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 230.979644][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 231.005413][ T5848] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 231.032324][ T5848] usb 3-1: New USB device strings: Mfr=249, Product=255, SerialNumber=3 [ 231.069611][ T5848] usb 3-1: Product: syz [ 231.073790][ T5848] usb 3-1: Manufacturer: syz [ 231.121533][ T5848] usb 3-1: SerialNumber: syz [ 231.139168][ T5848] usb 3-1: config 0 descriptor?? [ 231.408355][ T5848] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 232.080097][ T5848] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 232.491380][ T5848] usb 3-1: [UEAGLE-ATM] interface 1 not found [ 232.519916][ T5848] ueagle-atm 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 232.546983][ T5848] usb 3-1: USB disconnect, device number 7 [ 234.338867][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.350004][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.360684][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.382682][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.393481][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.494331][ T5861] Bluetooth: hci4: command tx timeout [ 238.569600][ T5861] Bluetooth: hci4: command tx timeout [ 240.650127][ T5861] Bluetooth: hci4: command tx timeout [ 242.730020][ T5861] Bluetooth: hci4: command tx timeout [ 244.956773][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.966931][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.975278][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.992792][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 245.003436][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.812234][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 245.821769][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 245.831788][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 245.840037][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 245.848009][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 247.051811][ T5851] Bluetooth: hci7: command tx timeout [ 247.378968][ T5861] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 247.393477][ T5861] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 247.404560][ T5861] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 247.416378][ T5861] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 247.425361][ T5861] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 247.929724][ T5861] Bluetooth: hci8: command tx timeout [ 248.854498][ T5851] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 248.870390][ T5851] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 248.878665][ T5851] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 248.889399][ T5851] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 248.903477][ T5851] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 249.129877][ T5861] Bluetooth: hci7: command tx timeout [ 249.532077][ T5861] Bluetooth: hci9: command tx timeout [ 250.010121][ T5861] Bluetooth: hci8: command tx timeout [ 250.970024][ T5861] Bluetooth: hci10: command tx timeout [ 251.213605][ T5861] Bluetooth: hci7: command tx timeout [ 251.610208][ T5861] Bluetooth: hci9: command tx timeout [ 252.089939][ T5861] Bluetooth: hci8: command tx timeout [ 253.049788][ T5861] Bluetooth: hci10: command tx timeout [ 253.294431][ T5861] Bluetooth: hci7: command tx timeout [ 253.690048][ T5861] Bluetooth: hci9: command tx timeout [ 254.170101][ T5861] Bluetooth: hci8: command tx timeout [ 254.990015][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.996352][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.130107][ T5861] Bluetooth: hci10: command tx timeout [ 255.771281][ T5861] Bluetooth: hci9: command tx timeout [ 257.209751][ T5861] Bluetooth: hci10: command tx timeout [ 263.629662][ T59] hfsplus: b-tree write err: -5, ino 4 [ 267.297304][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 267.303987][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 276.942922][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 276.957709][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 276.970255][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 276.978950][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 276.986801][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 279.479011][ T8568] vlan3: entered promiscuous mode [ 279.516425][ T8568] bridge0: entered promiscuous mode [ 281.292186][ T5851] Bluetooth: hci11: command tx timeout [ 283.370182][ T5851] Bluetooth: hci11: command tx timeout [ 285.449752][ T5851] Bluetooth: hci11: command tx timeout [ 287.529714][ T5851] Bluetooth: hci11: command tx timeout [ 292.239114][ T8570] chnl_net:caif_netlink_parms(): no params data found [ 295.995741][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.013957][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.024377][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.033668][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.041494][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.116910][ T8587] chnl_net:caif_netlink_parms(): no params data found [ 297.266490][ T8578] chnl_net:caif_netlink_parms(): no params data found [ 297.634377][ T8581] chnl_net:caif_netlink_parms(): no params data found [ 297.699930][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 297.797703][ T8573] chnl_net:caif_netlink_parms(): no params data found [ 298.090103][ T5851] Bluetooth: hci0: command tx timeout [ 298.908619][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.919705][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.926893][ T8587] bridge_slave_0: entered allmulticast mode [ 298.947029][ T8587] bridge_slave_0: entered promiscuous mode [ 299.469681][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.476847][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.499017][ T8587] bridge_slave_1: entered allmulticast mode [ 299.520022][ T8587] bridge_slave_1: entered promiscuous mode [ 299.923005][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.939644][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.946846][ T8578] bridge_slave_0: entered allmulticast mode [ 299.966505][ T8578] bridge_slave_0: entered promiscuous mode [ 299.987228][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.009767][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.016963][ T8584] bridge_slave_0: entered allmulticast mode [ 300.036616][ T8584] bridge_slave_0: entered promiscuous mode [ 300.163908][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.172308][ T5851] Bluetooth: hci0: command tx timeout [ 300.188885][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.212162][ T8573] bridge_slave_0: entered allmulticast mode [ 300.230564][ T8573] bridge_slave_0: entered promiscuous mode [ 300.256914][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.272756][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.322973][ T8573] bridge_slave_1: entered allmulticast mode [ 300.368786][ T8573] bridge_slave_1: entered promiscuous mode [ 300.596314][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.616540][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.642220][ T8581] bridge_slave_0: entered allmulticast mode [ 300.664726][ T8581] bridge_slave_0: entered promiscuous mode [ 300.686683][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.720447][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.727743][ T8581] bridge_slave_1: entered allmulticast mode [ 300.790077][ T8581] bridge_slave_1: entered promiscuous mode [ 300.817108][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.839792][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.847195][ T8578] bridge_slave_1: entered allmulticast mode [ 300.880469][ T8578] bridge_slave_1: entered promiscuous mode [ 301.003837][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.021849][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.029325][ T8584] bridge_slave_1: entered allmulticast mode [ 301.049326][ T8584] bridge_slave_1: entered promiscuous mode [ 301.321176][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.354664][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.806767][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.194239][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.223465][ T8578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.266185][ T5851] Bluetooth: hci0: command tx timeout [ 302.311973][ T8578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.353553][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.417912][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.470488][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.587409][ T8587] team0: Port device team_slave_0 added [ 302.608916][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.355914][ T8587] team0: Port device team_slave_1 added [ 303.801874][ T8578] team0: Port device team_slave_0 added [ 303.900167][ T8584] team0: Port device team_slave_0 added [ 303.913769][ T8573] team0: Port device team_slave_0 added [ 303.946122][ T8573] team0: Port device team_slave_1 added [ 304.111794][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.118782][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.156785][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.202668][ T8581] team0: Port device team_slave_0 added [ 304.256133][ T8578] team0: Port device team_slave_1 added [ 304.336545][ T5851] Bluetooth: hci0: command tx timeout [ 304.418290][ T8584] team0: Port device team_slave_1 added [ 304.658390][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.673517][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.758982][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.815688][ T8581] team0: Port device team_slave_1 added [ 304.989063][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.019484][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.117363][ T8578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.430735][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.437716][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.610338][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.311985][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.360272][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.520003][ T8578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.532510][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.544336][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.561369][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.578109][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.585941][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.677236][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.726256][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.910813][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.012359][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.019350][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.271119][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.536615][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.545624][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.554578][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.566234][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.577309][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.655241][ T8587] hsr_slave_0: entered promiscuous mode [ 307.694834][ T8587] hsr_slave_1: entered promiscuous mode [ 307.740698][ T8587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.748281][ T8587] Cannot create hsr debugfs directory [ 307.825554][ T8620] chnl_net:caif_netlink_parms(): no params data found [ 307.886806][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.956643][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.178588][ T8581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.659284][ T5853] Bluetooth: hci1: command tx timeout [ 309.223015][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.249679][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.259557][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.267587][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.276864][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.710746][ T5853] Bluetooth: hci2: command tx timeout [ 310.479240][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.491460][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.509955][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.520049][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.527981][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.736455][ T5853] Bluetooth: hci1: command tx timeout [ 311.370362][ T5853] Bluetooth: hci3: command tx timeout [ 311.773404][ T5853] Bluetooth: hci2: command tx timeout [ 311.842350][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.870511][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.911166][ T8620] bridge_slave_0: entered allmulticast mode [ 311.933825][ T8620] bridge_slave_0: entered promiscuous mode [ 311.962443][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.003804][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.030082][ T8620] bridge_slave_1: entered allmulticast mode [ 312.060187][ T8620] bridge_slave_1: entered promiscuous mode [ 312.571059][ T5853] Bluetooth: hci4: command tx timeout [ 312.813223][ T5853] Bluetooth: hci1: command tx timeout [ 312.847087][ T8620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.913964][ T8620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.450037][ T5853] Bluetooth: hci3: command tx timeout [ 313.856753][ T5853] Bluetooth: hci2: command tx timeout [ 314.649708][ T5853] Bluetooth: hci4: command tx timeout [ 314.896170][ T5853] Bluetooth: hci1: command tx timeout [ 315.529918][ T5853] Bluetooth: hci3: command tx timeout [ 315.936313][ T5853] Bluetooth: hci2: command tx timeout [ 316.416830][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.423390][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.729918][ T5853] Bluetooth: hci4: command tx timeout [ 316.954434][ T8620] team0: Port device team_slave_0 added [ 316.996424][ T8620] team0: Port device team_slave_1 added [ 317.407239][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.442185][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.485076][ T8620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.510008][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.516956][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.567891][ T8620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.610948][ T5853] Bluetooth: hci3: command tx timeout [ 318.600250][ T8587] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 318.656664][ T8587] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 318.811063][ T5853] Bluetooth: hci4: command tx timeout [ 318.862022][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 318.982577][ T8620] hsr_slave_0: entered promiscuous mode [ 319.014785][ T8620] hsr_slave_1: entered promiscuous mode [ 319.040714][ T8620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.070135][ T8620] Cannot create hsr debugfs directory [ 319.075999][ T8587] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 319.245203][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 319.427836][ T8587] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 319.561143][ T8689] chnl_net:caif_netlink_parms(): no params data found [ 320.400660][ T8680] chnl_net:caif_netlink_parms(): no params data found [ 321.798310][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.828369][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.856201][ T8689] bridge_slave_0: entered allmulticast mode [ 321.883912][ T8689] bridge_slave_0: entered promiscuous mode [ 321.940825][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.948025][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.980335][ T8693] bridge_slave_0: entered allmulticast mode [ 322.023534][ T8693] bridge_slave_0: entered promiscuous mode [ 322.042940][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.070217][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.078013][ T8693] bridge_slave_1: entered allmulticast mode [ 322.142445][ T8693] bridge_slave_1: entered promiscuous mode [ 322.257592][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.295559][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.317422][ T8674] bridge_slave_0: entered allmulticast mode [ 322.370861][ T8674] bridge_slave_0: entered promiscuous mode [ 322.391606][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.398808][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.417622][ T8674] bridge_slave_1: entered allmulticast mode [ 322.449266][ T8674] bridge_slave_1: entered promiscuous mode [ 322.472190][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.479330][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.500880][ T8689] bridge_slave_1: entered allmulticast mode [ 322.525150][ T8689] bridge_slave_1: entered promiscuous mode [ 323.222782][ T8689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.269132][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.301909][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.602574][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.679031][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.760334][ T8689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.028616][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.057677][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.099839][ T8680] bridge_slave_0: entered allmulticast mode [ 324.107799][ T8680] bridge_slave_0: entered promiscuous mode [ 324.166217][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.200109][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.207337][ T8680] bridge_slave_1: entered allmulticast mode [ 324.259287][ T8680] bridge_slave_1: entered promiscuous mode [ 324.778237][ T8693] team0: Port device team_slave_0 added [ 325.073516][ T8674] team0: Port device team_slave_0 added [ 325.114263][ T8674] team0: Port device team_slave_1 added [ 325.268579][ T8689] team0: Port device team_slave_0 added [ 325.310548][ T8693] team0: Port device team_slave_1 added [ 325.323079][ T8680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.371171][ T8680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.842568][ T8689] team0: Port device team_slave_1 added [ 326.252715][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.269835][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.342255][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.375389][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.390729][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.458045][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.588008][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.609737][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.690078][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.726522][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.749944][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.805950][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.957964][ T8680] team0: Port device team_slave_0 added [ 327.134660][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.159922][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.249672][ T8689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.344320][ T8680] team0: Port device team_slave_1 added [ 327.487411][ T8620] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 327.714983][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.739746][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.859949][ T8689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.148047][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.179896][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.279609][ T8680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.326751][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.362737][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.489695][ T8680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.520408][ T8620] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 328.551346][ T8620] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 328.751679][ T8674] hsr_slave_0: entered promiscuous mode [ 328.790095][ T8674] hsr_slave_1: entered promiscuous mode [ 328.819600][ T8674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.827170][ T8674] Cannot create hsr debugfs directory [ 329.006812][ T8693] hsr_slave_0: entered promiscuous mode [ 329.016481][ T8693] hsr_slave_1: entered promiscuous mode [ 329.049410][ T8693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.057908][ T8693] Cannot create hsr debugfs directory [ 329.090410][ T8620] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 329.182103][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.500723][ T8689] hsr_slave_0: entered promiscuous mode [ 333.507510][ T8689] hsr_slave_1: entered promiscuous mode [ 333.550726][ T8689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.558296][ T8689] Cannot create hsr debugfs directory [ 333.805233][ T8680] hsr_slave_0: entered promiscuous mode [ 333.838864][ T8680] hsr_slave_1: entered promiscuous mode [ 333.864857][ T8680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.899547][ T8680] Cannot create hsr debugfs directory [ 335.494843][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.899926][ T1156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.674048][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.681249][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.161776][ T8693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.359921][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.368955][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.381036][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.392586][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.416462][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.490759][ T5853] Bluetooth: hci5: command tx timeout [ 340.711729][ T8620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.847065][ T8620] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.969142][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.976340][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.022833][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.030044][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.471499][ T8620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.800155][ T8848] chnl_net:caif_netlink_parms(): no params data found [ 342.569814][ T5853] Bluetooth: hci5: command tx timeout [ 342.609329][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.643383][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.670494][ T8848] bridge_slave_0: entered allmulticast mode [ 342.714183][ T8848] bridge_slave_0: entered promiscuous mode [ 342.743775][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.780101][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.787399][ T8848] bridge_slave_1: entered allmulticast mode [ 342.842837][ T8848] bridge_slave_1: entered promiscuous mode [ 342.911277][ T8620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.692579][ T8848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.792759][ T8848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.152143][ T8848] team0: Port device team_slave_0 added [ 344.226007][ T8848] team0: Port device team_slave_1 added [ 344.568456][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.596132][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.652222][ T5853] Bluetooth: hci5: command tx timeout [ 344.700808][ T8848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.840915][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.880564][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.967572][ T8848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.348623][ T8848] hsr_slave_0: entered promiscuous mode [ 345.390734][ T8848] hsr_slave_1: entered promiscuous mode [ 345.397194][ T8848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.429763][ T8848] Cannot create hsr debugfs directory [ 345.935772][ T8620] veth0_vlan: entered promiscuous mode [ 346.074145][ T8620] veth1_vlan: entered promiscuous mode [ 346.486921][ T8620] veth0_macvtap: entered promiscuous mode [ 346.521505][ T8620] veth1_macvtap: entered promiscuous mode [ 346.601333][ T8620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.667934][ T8620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.703710][ T8620] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.731645][ T5853] Bluetooth: hci5: command tx timeout [ 346.752310][ T8620] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.770691][ T8620] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.779395][ T8620] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.077313][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.105204][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.213510][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.233202][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.635137][ T8916] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 348.063177][ T8919] loop9: detected capacity change from 0 to 4096 [ 348.131235][ T8919] ntfs3(loop9): ino=3, Correct links count -> 2. [ 348.315877][ T8919] ntfs3(loop9): ino=1a, mi_enum_attr [ 348.344626][ T8919] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 348.470391][ T8919] ntfs3(loop9): failed to convert "0080" to cp863 [ 348.511883][ T8919] ntfs3(loop9): failed to convert name for inode 1e. [ 348.543011][ T8919] ntfs3(loop9): ino=1f, mi_enum_attr [ 348.576628][ T8919] ntfs3(loop9): ino=1f, mi_enum_attr [ 349.020027][ T30] audit: type=1326 audit(1752837571.725:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.9.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebb78e9a9 code=0x7ffc0000 [ 349.155996][ T30] audit: type=1326 audit(1752837571.725:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.9.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebb78e9a9 code=0x7ffc0000 [ 349.312193][ T30] audit: type=1326 audit(1752837571.745:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.9.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8ebb78e9a9 code=0x7ffc0000 [ 349.422706][ T30] audit: type=1326 audit(1752837571.745:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.9.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebb78e9a9 code=0x7ffc0000 [ 349.513919][ T30] audit: type=1326 audit(1752837571.745:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.9.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebb78e9a9 code=0x7ffc0000 [ 349.605538][ T30] audit: type=1326 audit(1752837571.745:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.9.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f8ebb78e9a9 code=0x7ffc0000 [ 349.628421][ T5949] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 349.699523][ T30] audit: type=1326 audit(1752837571.745:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.9.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebb78e9a9 code=0x7ffc0000 [ 349.792980][ T30] audit: type=1326 audit(1752837571.745:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.9.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebb78e9a9 code=0x7ffc0000 [ 349.830298][ T5949] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.862370][ T5949] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 349.929982][ T5949] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 349.960218][ T5949] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.020563][ T5949] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 350.053192][ T5949] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.089984][ T5949] usb 10-1: Product: syz [ 350.094244][ T5949] usb 10-1: Manufacturer: syz [ 350.129350][ T5949] usb 10-1: SerialNumber: syz [ 350.153535][ T5949] usb 10-1: config 0 descriptor?? [ 350.209660][ T5949] input: KB Gear Tablet as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input10 [ 350.445297][ C0] kbtab 10-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 350.653743][ T5949] usb 10-1: USB disconnect, device number 2 [ 351.380826][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.962'. [ 351.404425][ T8945] IPVS: Error joining to the multicast group [ 352.722517][ T8958] netlink: 20 bytes leftover after parsing attributes in process `syz.9.968'. [ 366.975928][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.986284][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.994052][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 367.003618][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.031439][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.091392][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.100213][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.107831][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.115965][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.124539][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.482829][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 368.491577][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 368.504609][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 368.516159][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 368.525317][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 369.090193][ T5853] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 369.109714][ T5853] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 369.137574][ T5853] Bluetooth: hci6: command tx timeout [ 369.143588][ T5861] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 369.152065][ T5853] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 369.160360][ T5853] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 369.221505][ T5851] Bluetooth: hci7: command tx timeout [ 369.897055][ T5853] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 369.912825][ T5853] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 369.921108][ T5853] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 369.931280][ T5853] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 369.949039][ T5853] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 370.570248][ T5853] Bluetooth: hci8: command tx timeout [ 371.210110][ T5851] Bluetooth: hci6: command tx timeout [ 371.216936][ T5853] Bluetooth: hci9: command tx timeout [ 371.297410][ T5853] Bluetooth: hci7: command tx timeout [ 372.010408][ T5853] Bluetooth: hci10: command tx timeout [ 372.649887][ T5853] Bluetooth: hci8: command tx timeout [ 373.289842][ T5851] Bluetooth: hci6: command tx timeout [ 373.298597][ T5853] Bluetooth: hci9: command tx timeout [ 373.370950][ T5853] Bluetooth: hci7: command tx timeout [ 374.089956][ T5853] Bluetooth: hci10: command tx timeout [ 374.729885][ T5853] Bluetooth: hci8: command tx timeout [ 375.370399][ T5853] Bluetooth: hci9: command tx timeout [ 375.375850][ T5853] Bluetooth: hci6: command tx timeout [ 375.450474][ T5853] Bluetooth: hci7: command tx timeout [ 376.170269][ T5853] Bluetooth: hci10: command tx timeout [ 376.810210][ T5853] Bluetooth: hci8: command tx timeout [ 377.450122][ T5853] Bluetooth: hci9: command tx timeout [ 377.880297][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.886643][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.250452][ T5853] Bluetooth: hci10: command tx timeout [ 399.082899][ T5851] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 399.092057][ T5851] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 399.100689][ T5851] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 399.110513][ T5851] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 399.126640][ T5851] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 401.210142][ T5851] Bluetooth: hci11: command tx timeout [ 403.290052][ T5851] Bluetooth: hci11: command tx timeout [ 405.370706][ T5851] Bluetooth: hci11: command tx timeout [ 407.449974][ T5851] Bluetooth: hci11: command tx timeout [ 420.897358][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 427.255636][ T5851] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 427.264296][ T5851] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 427.274885][ T5851] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 427.288589][ T5851] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 427.297136][ T5851] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 427.412738][ T5853] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 427.421400][ T5853] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 427.429098][ T5853] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 427.438130][ T5853] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 427.445992][ T5853] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 428.358746][ T5851] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 428.369218][ T5851] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 428.377496][ T5851] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 428.387284][ T5851] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 428.398042][ T5851] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 429.371179][ T51] Bluetooth: hci12: command tx timeout [ 429.511594][ T5861] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 429.520575][ T5861] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 429.528284][ T5861] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 429.541321][ T5861] Bluetooth: hci13: command tx timeout [ 429.548442][ T5861] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 429.566954][ T5861] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 430.193708][ T51] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 430.202727][ T51] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 430.217781][ T51] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 430.231025][ T51] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 430.238771][ T51] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 430.490372][ T51] Bluetooth: hci14: command tx timeout [ 431.142325][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 431.148399][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 431.450271][ T5853] Bluetooth: hci12: command tx timeout [ 431.610363][ T5853] Bluetooth: hci15: command tx timeout [ 431.616738][ T5853] Bluetooth: hci13: command tx timeout [ 432.330928][ T5853] Bluetooth: hci16: command tx timeout [ 432.569793][ T5853] Bluetooth: hci14: command tx timeout [ 433.531418][ T5853] Bluetooth: hci12: command tx timeout [ 433.689801][ T5851] Bluetooth: hci15: command tx timeout [ 433.696747][ T5853] Bluetooth: hci13: command tx timeout [ 434.409940][ T5853] Bluetooth: hci16: command tx timeout [ 434.649866][ T5853] Bluetooth: hci14: command tx timeout [ 435.610174][ T5853] Bluetooth: hci12: command tx timeout [ 435.770416][ T5853] Bluetooth: hci13: command tx timeout [ 435.775945][ T5853] Bluetooth: hci15: command tx timeout [ 436.264571][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 436.270728][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 436.490458][ T5853] Bluetooth: hci16: command tx timeout [ 436.730495][ T5853] Bluetooth: hci14: command tx timeout [ 437.849850][ T5853] Bluetooth: hci15: command tx timeout [ 438.570101][ T5853] Bluetooth: hci16: command tx timeout [ 439.300849][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.307187][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.090535][ T31] INFO: task syz-executor:7284 blocked for more than 143 seconds. [ 452.098398][ T31] Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 [ 452.131655][ T31] Blocked by coredump. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 452.159684][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.199845][ T31] task:syz-executor state:D stack:21960 pid:7284 tgid:7284 ppid:1 task_flags:0x40054c flags:0x00004006 [ 452.259989][ T31] Call Trace: [ 452.263331][ T31] [ 452.340581][ T31] __schedule+0x16f5/0x4d00 [ 452.345137][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.481668][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.486594][ T31] ? schedule+0x165/0x360 [ 452.542971][ T31] ? __pfx___schedule+0x10/0x10 [ 452.547902][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.619550][ T31] ? schedule+0x91/0x360 [ 452.623857][ T31] schedule+0x165/0x360 [ 452.628028][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.682612][ T31] __mutex_lock+0x724/0xe80 [ 452.687197][ T31] ? __mutex_lock+0x51b/0xe80 [ 452.743555][ T31] ? rcu_barrier+0x4c/0x570 [ 452.748136][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.792556][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.798245][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 452.827275][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 452.840138][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 452.845321][ T31] rcu_barrier+0x4c/0x570 [ 452.882777][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 452.887938][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 452.920461][ T31] netdev_run_todo+0x327/0xea0 [ 452.925259][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 452.949845][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 452.955160][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 452.977227][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.997225][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.012574][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.018244][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.039748][ T31] ? netdev_state_change+0x1ca/0x220 [ 453.045070][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 453.059647][ T31] tun_chr_close+0x13c/0x1c0 [ 453.064275][ T31] __fput+0x44c/0xa70 [ 453.068291][ T31] task_work_run+0x1d4/0x260 [ 453.100635][ T31] ? __pfx_task_work_run+0x10/0x10 [ 453.105790][ T31] ? kmem_cache_free+0x18f/0x400 [ 453.122570][ T31] do_exit+0x6b5/0x22e0 [ 453.126771][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.149685][ T31] ? do_raw_spin_lock+0x121/0x290 [ 453.154753][ T31] ? __pfx_do_exit+0x10/0x10 [ 453.159390][ T31] do_group_exit+0x21c/0x2d0 [ 453.174898][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.200356][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.205586][ T31] get_signal+0x1286/0x1340 [ 453.221785][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 453.227381][ T31] ? __pfx_path_umount+0x10/0x10 [ 453.250371][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 453.256576][ T31] ? __x64_sys_umount+0x122/0x160 [ 453.277399][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 453.291723][ T31] exit_to_user_mode_loop+0x75/0x110 [ 453.297037][ T31] do_syscall_64+0x2bd/0x3b0 [ 453.321174][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.326399][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.350019][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.355678][ T31] ? exc_page_fault+0x9f/0xf0 [ 453.370004][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.375921][ T31] RIP: 0033:0x7fb98fd8fcd7 [ 453.389493][ T31] RSP: 002b:00007ffe78099e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 453.419798][ T31] RAX: 0000000000000000 RBX: 00007fb98fe10a8d RCX: 00007fb98fd8fcd7 [ 453.427797][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe78099ee0 [ 453.457571][ T31] RBP: 00007ffe78099ee0 R08: 0000000000000000 R09: 0000000000000000 [ 453.480037][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7809af70 [ 453.489934][ T31] R13: 00007fb98fe10a8d R14: 0000000000038108 R15: 00007ffe7809afb0 [ 453.516862][ T31] [ 453.522550][ T31] INFO: task syz.3.917:8468 blocked for more than 144 seconds. [ 453.558772][ T31] Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 [ 453.589490][ T31] Blocked by coredump. [ 453.594086][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.671031][ T31] task:syz.3.917 state:D stack:22488 pid:8468 tgid:8465 ppid:5840 task_flags:0x40054c flags:0x00004002 [ 453.700897][ T31] Call Trace: [ 453.704193][ T31] [ 453.707135][ T31] __schedule+0x16f5/0x4d00 [ 453.722286][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.727961][ T31] ? __lock_acquire+0xab9/0xd20 [ 453.749938][ T31] ? schedule+0x165/0x360 [ 453.754308][ T31] ? __pfx___schedule+0x10/0x10 [ 453.759189][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.783722][ T31] ? schedule+0x91/0x360 [ 453.803191][ T31] schedule+0x165/0x360 [ 453.807504][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.819901][ T31] __mutex_lock+0x724/0xe80 [ 453.824690][ T31] ? __mutex_lock+0x51b/0xe80 [ 453.829396][ T31] ? rcu_barrier+0x4c/0x570 [ 453.844478][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.859552][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.865226][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 453.890819][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 453.906538][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 453.919777][ T31] rcu_barrier+0x4c/0x570 [ 453.924143][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 453.929276][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 453.950115][ T31] netdev_run_todo+0x327/0xea0 [ 453.954908][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 453.975638][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 453.991164][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 453.996481][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 454.031055][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.036287][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 454.059680][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 454.065430][ T31] ? netdev_state_change+0x1ca/0x220 [ 454.080149][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 454.085290][ T31] tun_chr_close+0x13c/0x1c0 [ 454.101122][ T31] __fput+0x44c/0xa70 [ 454.105151][ T31] task_work_run+0x1d4/0x260 [ 454.129709][ T31] ? __pfx_task_work_run+0x10/0x10 [ 454.134870][ T31] ? kmem_cache_free+0x18f/0x400 [ 454.157483][ T31] do_exit+0x6b5/0x22e0 [ 454.162451][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 454.168113][ T31] ? do_raw_spin_lock+0x121/0x290 [ 454.196428][ T31] ? __pfx_do_exit+0x10/0x10 [ 454.202256][ T31] do_group_exit+0x21c/0x2d0 [ 454.206884][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 454.239873][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.245125][ T31] get_signal+0x1286/0x1340 [ 454.260386][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 454.265976][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 454.282885][ T31] ? __x64_sys_sendmsg+0x230/0x260 [ 454.288046][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 454.309634][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 454.336874][ T31] exit_to_user_mode_loop+0x75/0x110 [ 454.349863][ T31] do_syscall_64+0x2bd/0x3b0 [ 454.354507][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.376022][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.389984][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 454.395650][ T31] ? exc_page_fault+0x9f/0xf0 [ 454.409918][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.431683][ T31] RIP: 0033:0x7ff77158e9a9 [ 454.436118][ T31] RSP: 002b:00007ff772372038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.461361][ T31] RAX: 000000000000004c RBX: 00007ff7717b5fa0 RCX: 00007ff77158e9a9 [ 454.469353][ T31] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 454.500277][ T31] RBP: 00007ff771610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 454.508280][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.538411][ T31] R13: 0000000000000000 R14: 00007ff7717b5fa0 R15: 00007ffd9cb4d5d8 [ 454.563095][ T31] [ 454.566281][ T31] INFO: task syz-executor:8470 blocked for more than 145 seconds. [ 454.593263][ T31] Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 [ 454.609486][ T31] Blocked by coredump. [ 454.614255][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.654523][ T31] task:syz-executor state:D stack:22632 pid:8470 tgid:8470 ppid:1 task_flags:0x40054c flags:0x00004006 [ 454.680026][ T31] Call Trace: [ 454.683322][ T31] [ 454.686265][ T31] __schedule+0x16f5/0x4d00 [ 454.706657][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 454.720075][ T31] ? __lock_acquire+0xab9/0xd20 [ 454.740837][ T31] ? schedule+0x165/0x360 [ 454.745210][ T31] ? __pfx___schedule+0x10/0x10 [ 454.761668][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 454.767353][ T31] ? schedule+0x91/0x360 [ 454.799997][ T31] schedule+0x165/0x360 [ 454.804202][ T31] schedule_preempt_disabled+0x13/0x30 [ 454.815095][ T31] __mutex_lock+0x724/0xe80 [ 454.827491][ T31] ? __mutex_lock+0x51b/0xe80 [ 454.839646][ T31] ? rcu_barrier+0x4c/0x570 [ 454.844190][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 454.849264][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 454.872064][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 454.877744][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 454.909735][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 454.914884][ T31] rcu_barrier+0x4c/0x570 [ 454.919245][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 454.949362][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 454.955736][ T31] netdev_run_todo+0x327/0xea0 [ 454.969828][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 454.975412][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 454.997040][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 455.019567][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.025239][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.040080][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.045749][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.067719][ T31] ? netdev_state_change+0x1ca/0x220 [ 455.075510][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 455.094586][ T31] tun_chr_close+0x13c/0x1c0 [ 455.099221][ T31] __fput+0x44c/0xa70 [ 455.119614][ T31] task_work_run+0x1d4/0x260 [ 455.124259][ T31] ? __pfx_task_work_run+0x10/0x10 [ 455.129403][ T31] ? kmem_cache_free+0x18f/0x400 [ 455.154944][ T31] do_exit+0x6b5/0x22e0 [ 455.159137][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.180185][ T31] ? do_raw_spin_lock+0x121/0x290 [ 455.185250][ T31] ? __pfx_do_exit+0x10/0x10 [ 455.201800][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.207487][ T31] do_group_exit+0x21c/0x2d0 [ 455.236432][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.250215][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.255485][ T31] get_signal+0x1286/0x1340 [ 455.270199][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 455.275832][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.299669][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 455.305868][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 455.330152][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 455.337891][ T31] exit_to_user_mode_loop+0x75/0x110 [ 455.360055][ T31] do_syscall_64+0x2bd/0x3b0 [ 455.364676][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.387675][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.394305][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.409726][ T31] ? exc_page_fault+0x9f/0xf0 [ 455.414435][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.441513][ T31] RIP: 0033:0x7f769279083c [ 455.445953][ T31] RSP: 002b:00007ffe42541800 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 455.470039][ T31] RAX: 0000000000000068 RBX: 00007f76934e4620 RCX: 00007f769279083c [ 455.478032][ T31] RDX: 0000000000000068 RSI: 00007f76934e4670 RDI: 0000000000000003 [ 455.504992][ T31] RBP: 0000000000000000 R08: 00007ffe42541854 R09: 000000000000000c [ 455.520366][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 455.528356][ T31] R13: 0000000000000000 R14: 00007f76934e4670 R15: 0000000000000000 [ 455.564003][ T31] [ 455.567279][ T31] INFO: task syz.5.952:8564 blocked for more than 146 seconds. [ 455.590355][ T31] Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 [ 455.597997][ T31] Blocked by coredump. [ 455.638281][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.674096][ T31] task:syz.5.952 state:D stack:26408 pid:8564 tgid:8564 ppid:5857 task_flags:0x40004c flags:0x00004002 [ 455.699939][ T31] Call Trace: [ 455.703236][ T31] [ 455.706182][ T31] __schedule+0x16f5/0x4d00 [ 455.720046][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.725718][ T31] ? __lock_acquire+0xab9/0xd20 [ 455.739778][ T31] ? schedule+0x165/0x360 [ 455.749850][ T31] ? __pfx___schedule+0x10/0x10 [ 455.754748][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.783999][ T31] ? schedule+0x91/0x360 [ 455.788281][ T31] schedule+0x165/0x360 [ 455.800672][ T31] schedule_preempt_disabled+0x13/0x30 [ 455.806160][ T31] __mutex_lock+0x724/0xe80 [ 455.828089][ T31] ? __mutex_lock+0x51b/0xe80 [ 455.833413][ T31] ? rcu_barrier+0x4c/0x570 [ 455.837954][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 455.872833][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.878510][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 455.899652][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 455.905671][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 455.932205][ T31] rcu_barrier+0x4c/0x570 [ 455.936580][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 455.949528][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 455.969952][ T31] netdev_run_todo+0x327/0xea0 [ 455.974754][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 455.989551][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 455.994856][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 456.024216][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.040010][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.045238][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.070090][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.075752][ T31] ? netdev_state_change+0x1ca/0x220 [ 456.093186][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 456.098336][ T31] tun_chr_close+0x13c/0x1c0 [ 456.116987][ T31] __fput+0x44c/0xa70 [ 456.130530][ T31] task_work_run+0x1d4/0x260 [ 456.135165][ T31] ? __pfx_task_work_run+0x10/0x10 [ 456.150399][ T31] ? kmem_cache_free+0x18f/0x400 [ 456.171541][ T31] do_exit+0x6b5/0x22e0 [ 456.175743][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.189569][ T31] ? preempt_schedule_common+0x83/0xd0 [ 456.195054][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.223486][ T31] ? preempt_schedule+0xae/0xc0 [ 456.228400][ T31] ? __pfx_do_exit+0x10/0x10 [ 456.241206][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 456.246645][ T31] do_group_exit+0x21c/0x2d0 [ 456.265630][ T31] __x64_sys_exit_group+0x3f/0x40 [ 456.279791][ T31] x64_sys_call+0x21ba/0x21c0 [ 456.284503][ T31] do_syscall_64+0xfa/0x3b0 [ 456.289024][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.312845][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.318951][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.348236][ T31] ? exc_page_fault+0x9f/0xf0 [ 456.363535][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.379644][ T31] RIP: 0033:0x7fa10ab8e9a9 [ 456.384078][ T31] RSP: 002b:00007ffd62a0d3c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 456.409721][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa10ab8e9a9 [ 456.417717][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 456.445660][ T31] RBP: 00007ffd62a0d42c R08: 0000000362a0d4bf R09: 00000000000927c0 [ 456.480952][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000b5 [ 456.488945][ T31] R13: 00000000000927c0 R14: 00000000000387a8 R15: 00007ffd62a0d480 [ 456.510509][ T31] [ 456.513610][ T31] INFO: task syz.2.953:8568 blocked for more than 147 seconds. [ 456.540260][ T31] Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 [ 456.548903][ T31] Blocked by coredump. [ 456.572359][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.591304][ T31] task:syz.2.953 state:D stack:22856 pid:8568 tgid:8567 ppid:5843 task_flags:0x40054c flags:0x00004002 [ 456.620194][ T31] Call Trace: [ 456.623547][ T31] [ 456.626495][ T31] __schedule+0x16f5/0x4d00 [ 456.642787][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.648462][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.690086][ T31] ? schedule+0x165/0x360 [ 456.694455][ T31] ? __pfx___schedule+0x10/0x10 [ 456.699333][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.720010][ T31] ? schedule+0x91/0x360 [ 456.724286][ T31] schedule+0x165/0x360 [ 456.728463][ T31] schedule_preempt_disabled+0x13/0x30 [ 456.753846][ T31] __mutex_lock+0x724/0xe80 [ 456.758386][ T31] ? __mutex_lock+0x51b/0xe80 [ 456.789612][ T31] ? rcu_barrier+0x4c/0x570 [ 456.794161][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 456.799204][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.819757][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 456.825432][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 456.840337][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 456.845490][ T31] rcu_barrier+0x4c/0x570 [ 456.870074][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 456.877530][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 456.899999][ T31] netdev_run_todo+0x327/0xea0 [ 456.904799][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 456.920103][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 456.925420][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 456.948260][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.977801][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.984976][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.000710][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.006369][ T31] ? netdev_state_change+0x1ca/0x220 [ 457.029813][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 457.034964][ T31] tun_chr_close+0x13c/0x1c0 [ 457.050367][ T31] __fput+0x44c/0xa70 [ 457.054393][ T31] task_work_run+0x1d4/0x260 [ 457.059020][ T31] ? __pfx_task_work_run+0x10/0x10 [ 457.085409][ T31] ? kmem_cache_free+0x18f/0x400 [ 457.102894][ T31] do_exit+0x6b5/0x22e0 [ 457.107098][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.131333][ T31] ? do_raw_spin_lock+0x121/0x290 [ 457.136409][ T31] ? __pfx_do_exit+0x10/0x10 [ 457.149536][ T31] do_group_exit+0x21c/0x2d0 [ 457.154164][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.170009][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.175236][ T31] get_signal+0x1286/0x1340 [ 457.200161][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 457.205749][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.230223][ T31] ? __x64_sys_sendmsg+0x230/0x260 [ 457.235380][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 457.260150][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 457.265659][ T31] exit_to_user_mode_loop+0x75/0x110 [ 457.279974][ T31] do_syscall_64+0x2bd/0x3b0 [ 457.303173][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.308406][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.330721][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.336379][ T31] ? exc_page_fault+0x9f/0xf0 [ 457.354900][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.366907][ T31] RIP: 0033:0x7f7a5758e9a9 [ 457.380075][ T31] RSP: 002b:00007f7a58324038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.399769][ T31] RAX: 0000000000000060 RBX: 00007f7a577b5fa0 RCX: 00007f7a5758e9a9 [ 457.407760][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 457.441163][ T31] RBP: 00007f7a57610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 457.449157][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.477403][ T31] R13: 0000000000000000 R14: 00007f7a577b5fa0 R15: 00007fff2e152b78 [ 457.500066][ T31] [ 457.503168][ T31] INFO: task syz-executor:8570 blocked for more than 148 seconds. [ 457.521808][ T31] Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 [ 457.543631][ T31] Blocked by coredump. [ 457.548227][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.599988][ T31] task:syz-executor state:D stack:22632 pid:8570 tgid:8570 ppid:1 task_flags:0x40054c flags:0x00004006 [ 457.620738][ T31] Call Trace: [ 457.624036][ T31] [ 457.626982][ T31] __schedule+0x16f5/0x4d00 [ 457.654442][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.669491][ T31] ? __lock_acquire+0xab9/0xd20 [ 457.674376][ T31] ? schedule+0x165/0x360 [ 457.678812][ T31] ? __pfx___schedule+0x10/0x10 [ 457.711909][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.717589][ T31] ? schedule+0x91/0x360 [ 457.738088][ T31] schedule+0x165/0x360 [ 457.743338][ T31] schedule_preempt_disabled+0x13/0x30 [ 457.748822][ T31] __mutex_lock+0x724/0xe80 [ 457.771323][ T31] ? __mutex_lock+0x51b/0xe80 [ 457.776887][ T31] ? rcu_barrier+0x4c/0x570 [ 457.790762][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 457.809706][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.815373][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 457.837303][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 457.850010][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 457.855158][ T31] rcu_barrier+0x4c/0x570 [ 457.875399][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 457.889969][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 457.895109][ T31] netdev_run_todo+0x327/0xea0 [ 457.920031][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 457.925611][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 457.939798][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 457.945118][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.966866][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.972724][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.978389][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.011265][ T31] ? netdev_state_change+0x1ca/0x220 [ 458.016598][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 458.040197][ T31] tun_chr_close+0x13c/0x1c0 [ 458.044824][ T31] __fput+0x44c/0xa70 [ 458.048847][ T31] task_work_run+0x1d4/0x260 [ 458.059679][ T31] ? __pfx_task_work_run+0x10/0x10 [ 458.064833][ T31] ? kmem_cache_free+0x18f/0x400 [ 458.081788][ T31] do_exit+0x6b5/0x22e0 [ 458.085996][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.120917][ T31] ? do_raw_spin_lock+0x121/0x290 [ 458.125988][ T31] ? __pfx_do_exit+0x10/0x10 [ 458.148921][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.155095][ T31] do_group_exit+0x21c/0x2d0 [ 458.170390][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.176050][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.202499][ T31] get_signal+0x1286/0x1340 [ 458.217328][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 458.230554][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.236216][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 458.260124][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 458.266338][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 458.280635][ T31] exit_to_user_mode_loop+0x75/0x110 [ 458.285993][ T31] do_syscall_64+0x2bd/0x3b0 [ 458.299708][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.304934][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.337069][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.359772][ T31] ? exc_page_fault+0x9f/0xf0 [ 458.364488][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.382821][ T31] RIP: 0033:0x7fd82b39083c [ 458.387271][ T31] RSP: 002b:00007fff97bf09c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 458.418954][ T31] RAX: 000000000000006c RBX: 00007fd82c0e4620 RCX: 00007fd82b39083c [ 458.440728][ T31] RDX: 000000000000006c RSI: 00007fd82c0e4670 RDI: 0000000000000003 [ 458.448727][ T31] RBP: 0000000000000000 R08: 00007fff97bf0a14 R09: 000000000000000c [ 458.477307][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 458.492232][ T31] R13: 0000000000000000 R14: 00007fd82c0e4670 R15: 0000000000000000 [ 458.514057][ T31] [ 458.521183][ T31] [ 458.521183][ T31] Showing all locks held in the system: [ 458.528915][ T31] 3 locks held by kworker/u8:1/13: [ 458.560692][ T31] #0: ffff88814ca0c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 458.589719][ T31] #1: ffffc90000127bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 458.620045][ T31] #2: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 458.642802][ T31] 3 locks held by kworker/1:0/24: [ 458.647845][ T31] 1 lock held by khungtaskd/31: [ 458.679940][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 458.700096][ T31] 2 locks held by kworker/u8:2/36: [ 458.705225][ T31] 2 locks held by kworker/1:1/44: [ 458.718490][ T31] 4 locks held by kworker/u8:5/73: [ 458.736664][ T31] #0: ffff88804c4c2948 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 458.767606][ T31] #1: ffffc900023afbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 458.799327][ T31] #2: ffff888029425308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 458.836274][ T31] #3: ffff8880636bb4c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 458.860659][ T31] 6 locks held by kworker/u8:8/1156: [ 458.865961][ T31] #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 458.899833][ T31] #1: ffffc90003c4fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 458.923177][ T31] #2: ffffffff8f50f050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 458.949764][ T31] #3: ffff88805a1ca0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 458.971140][ T31] #4: ffff88805a1cb250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 459.002503][ T31] #5: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.030134][ T31] 2 locks held by kworker/1:2/2148: [ 459.035360][ T31] 1 lock held by dhcpcd/5506: [ 459.049791][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 459.059260][ T31] 2 locks held by getty/5599: [ 459.080673][ T31] #0: ffff88814cb390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 459.111675][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 459.139755][ T31] 3 locks held by kworker/0:4/5901: [ 459.144966][ T31] #0: ffff88801a479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 459.180024][ T31] #1: ffffc900042efbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 459.201117][ T31] #2: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00 [ 459.240410][ T31] 5 locks held by kworker/1:4/5920: [ 459.245626][ T31] 3 locks held by kworker/1:5/5939: [ 459.270128][ T31] 3 locks held by kworker/0:6/5949: [ 459.275346][ T31] #0: ffff88801a478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 459.301210][ T31] #1: ffffc90004f07bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 459.335265][ T31] #2: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 459.359966][ T31] 1 lock held by syz-executor/7284: [ 459.365176][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.390439][ T31] 1 lock held by syz.3.917/8468: [ 459.395401][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.437785][ T31] 1 lock held by syz-executor/8470: [ 459.450198][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.469853][ T31] 1 lock held by syz.6.947/8551: [ 459.474809][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.508272][ T31] 1 lock held by syz.5.952/8564: [ 459.520884][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.553990][ T31] 1 lock held by syz.2.953/8568: [ 459.558947][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.589763][ T31] 1 lock held by syz-executor/8570: [ 459.594974][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.619607][ T31] 1 lock held by syz-executor/8573: [ 459.624815][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.662375][ T31] 1 lock held by syz-executor/8578: [ 459.667587][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.697825][ T31] 1 lock held by syz-executor/8581: [ 459.709753][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.729813][ T31] 1 lock held by syz-executor/8584: [ 459.735026][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.789679][ T31] 1 lock held by syz-executor/8587: [ 459.794897][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 459.829705][ T31] 2 locks held by kworker/1:9/8594: [ 459.834964][ T31] 4 locks held by syz-executor/8674: [ 459.850094][ T31] #0: ffff888031218428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 459.859074][ T31] #1: ffff88807ca04c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 459.898379][ T31] #2: ffff888026e915a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 459.915938][ T31] #3: ffffffff8eda9428 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 459.939553][ T31] 4 locks held by syz-executor/8680: [ 459.960090][ T31] #0: ffff888031218428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 459.969059][ T31] #1: ffff8880539a4c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 460.001912][ T31] #2: ffff888026e915a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 460.025353][ T31] #3: ffffffff8eda9428 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 460.050014][ T31] 4 locks held by syz-executor/8689: [ 460.055312][ T31] #0: ffff888031218428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 460.080501][ T31] #1: ffff888052948088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 460.111838][ T31] #2: ffff888026e915a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 460.139998][ T31] #3: ffffffff8eda9428 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 460.159869][ T31] 7 locks held by syz-executor/8693: [ 460.165165][ T31] #0: ffff888031218428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 460.197873][ T31] #1: ffff888035a40888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 460.221754][ T31] #2: ffff888026e915a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 460.254298][ T31] #3: ffffffff8eda9428 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 460.279758][ T31] #4: ffff888059b620e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 460.299888][ T31] #5: ffff888059b63250 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 460.326896][ T31] #6: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 460.356585][ T31] 2 locks held by kworker/1:11/8814: [ 460.369538][ T31] 4 locks held by syz-executor/8848: [ 460.374833][ T31] #0: ffff888031218428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 460.399929][ T31] #1: ffff888082949488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 460.438124][ T31] #2: ffff888026e915a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 460.470092][ T31] #3: ffffffff8eda9428 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 460.489768][ T31] 3 locks held by syz.9.968/8958: [ 460.494803][ T31] #0: ffffffff8fa3bd58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 460.519721][ T31] #1: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 460.546401][ T31] #2: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 460.579599][ T31] 1 lock held by syz-executor/8962: [ 460.584819][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 460.607903][ T31] 1 lock held by syz-executor/8963: [ 460.620018][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 460.639991][ T31] 1 lock held by syz-executor/8971: [ 460.645225][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 460.689775][ T31] 1 lock held by syz-executor/8974: [ 460.695019][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 460.719647][ T31] 1 lock held by syz-executor/8976: [ 460.724872][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 460.749787][ T31] 4 locks held by kworker/u8:9/8978: [ 460.755089][ T31] #0: ffff88804d652948 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 460.807735][ T31] #1: ffffc900044afbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 460.839689][ T31] #2: ffff88804d3f9308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 460.868413][ T31] #3: ffff888059494890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 460.899749][ T31] 1 lock held by syz-executor/8980: [ 460.904960][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 460.937242][ T31] 1 lock held by syz-executor/8987: [ 460.943051][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 460.964877][ T31] 1 lock held by syz-executor/8990: [ 460.979989][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 461.019643][ T31] 1 lock held by syz-executor/8995: [ 461.024858][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 461.050744][ T31] 1 lock held by syz-executor/8999: [ 461.055958][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 461.088670][ T31] 1 lock held by syz-executor/9003: [ 461.094424][ T31] #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 461.130829][ T31] 3 locks held by kworker/1:12/9005: [ 461.136199][ T31] [ 461.138534][ T31] ============================================= [ 461.138534][ T31] [ 461.160515][ T31] NMI backtrace for cpu 0 [ 461.160532][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 461.160562][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.160578][ T31] Call Trace: [ 461.160587][ T31] [ 461.160598][ T31] dump_stack_lvl+0x189/0x250 [ 461.160631][ T31] ? __wake_up_klogd+0xd9/0x110 [ 461.160667][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.160700][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.160731][ T31] ? __pfx__printk+0x10/0x10 [ 461.160783][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 461.160825][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 461.160860][ T31] ? _printk+0xcf/0x120 [ 461.160904][ T31] ? __pfx__printk+0x10/0x10 [ 461.160943][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 461.160971][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 461.161013][ T31] watchdog+0xfee/0x1030 [ 461.161038][ T31] ? watchdog+0x1de/0x1030 [ 461.161073][ T31] kthread+0x711/0x8a0 [ 461.161113][ T31] ? __pfx_watchdog+0x10/0x10 [ 461.161135][ T31] ? __pfx_kthread+0x10/0x10 [ 461.161167][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.161201][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.161240][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.161269][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.161293][ T31] ? __pfx_kthread+0x10/0x10 [ 461.161331][ T31] ret_from_fork+0x3fc/0x770 [ 461.161362][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 461.161397][ T31] ? __switch_to_asm+0x39/0x70 [ 461.161429][ T31] ? __switch_to_asm+0x33/0x70 [ 461.161462][ T31] ? __pfx_kthread+0x10/0x10 [ 461.161499][ T31] ret_from_fork_asm+0x1a/0x30 [ 461.161553][ T31] [ 461.161562][ T31] Sending NMI from CPU 0 to CPUs 1: [ 461.345049][ C1] NMI backtrace for cpu 1 [ 461.345067][ C1] CPU: 1 UID: 0 PID: 8566 Comm: kworker/1:8 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 461.345095][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.345110][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 461.345144][ C1] RIP: 0010:arch_stack_walk+0xf4/0x150 [ 461.345174][ C1] Code: 78 ff ff ff 00 00 00 00 48 8d bd 78 ff ff ff 4c 89 e6 4c 89 fa e8 9c 53 09 00 83 bd 78 ff ff ff 00 74 38 4c 8d bd 78 ff ff ff <4c> 89 ff e8 e4 29 09 00 48 85 c0 74 24 48 89 df 48 89 c6 4d 89 f3 [ 461.345192][ C1] RSP: 0018:ffffc90000a08268 EFLAGS: 00000202 [ 461.345211][ C1] RAX: 000000009032c501 RBX: ffffc90000a08320 RCX: 559834cbe5d20300 [ 461.345227][ C1] RDX: 0000000000000004 RSI: ffffffff8db83ad9 RDI: ffff888031c38000 [ 461.345243][ C1] RBP: ffffc90000a082f0 R08: ffffc9000b66fd90 R09: ffffc90000a082b8 [ 461.345260][ C1] R10: dffffc0000000000 R11: fffff52000141059 R12: ffff888031c38000 [ 461.345277][ C1] R13: ffff88809a589180 R14: ffffffff81ad0050 R15: ffffc90000a08268 [ 461.345297][ C1] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 461.345316][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.345334][ C1] CR2: 000000110c3f7c37 CR3: 000000000df38000 CR4: 0000000000350ef0 [ 461.345351][ C1] Call Trace: [ 461.345359][ C1] [ 461.345373][ C1] ? kthread+0x711/0x8a0 [ 461.345408][ C1] stack_trace_save+0x9c/0xe0 [ 461.345439][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 461.345471][ C1] ? stack_trace_save+0x9c/0xe0 [ 461.345502][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.345528][ C1] ? stack_depot_save_flags+0x40/0x900 [ 461.345553][ C1] kasan_save_track+0x3e/0x80 [ 461.345581][ C1] ? kasan_save_track+0x3e/0x80 [ 461.345608][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 461.345638][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 461.345669][ C1] ? kmem_cache_free+0x166/0x400 [ 461.345698][ C1] ? nf_conntrack_free+0x2f7/0x380 [ 461.345731][ C1] ? nf_conntrack_in+0xa24/0x1600 [ 461.345764][ C1] ? nf_hook_slow+0xc5/0x220 [ 461.345792][ C1] ? NF_HOOK+0x206/0x3a0 [ 461.345820][ C1] ? __netif_receive_skb+0x143/0x380 [ 461.345845][ C1] ? process_backlog+0x60e/0x14f0 [ 461.345878][ C1] ? __napi_poll+0xc7/0x480 [ 461.345901][ C1] ? net_rx_action+0x707/0xe30 [ 461.345928][ C1] ? handle_softirqs+0x286/0x870 [ 461.345952][ C1] ? do_softirq+0xec/0x180 [ 461.345975][ C1] ? __local_bh_enable_ip+0x17d/0x1c0 [ 461.345999][ C1] ? wg_packet_decrypt_worker+0xc6f/0xd10 [ 461.346026][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 461.346051][ C1] ? worker_thread+0x8a0/0xda0 [ 461.346106][ C1] __kasan_kmalloc+0x93/0xb0 [ 461.346137][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 461.346169][ C1] ? kmem_cache_free+0x166/0x400 [ 461.346202][ C1] ? nf_conntrack_free+0x2f7/0x380 [ 461.346233][ C1] kmem_cache_free+0x166/0x400 [ 461.346263][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 461.346291][ C1] nf_conntrack_free+0x2f7/0x380 [ 461.346326][ C1] nf_conntrack_in+0xa24/0x1600 [ 461.346377][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 461.346419][ C1] ? ipt_do_table+0x2a3/0x1640 [ 461.346452][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.346480][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.346505][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.346531][ C1] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 461.346553][ C1] ? ip_sabotage_in+0x57/0x270 [ 461.346580][ C1] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 461.346614][ C1] nf_hook_slow+0xc5/0x220 [ 461.346646][ C1] NF_HOOK+0x206/0x3a0 [ 461.346676][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 461.346706][ C1] ? NF_HOOK+0x9a/0x3a0 [ 461.346733][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 461.346761][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 461.346792][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 461.346828][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 461.346856][ C1] __netif_receive_skb+0x143/0x380 [ 461.346889][ C1] ? process_backlog+0x2d5/0x14f0 [ 461.346920][ C1] process_backlog+0x60e/0x14f0 [ 461.346960][ C1] ? __pfx_process_backlog+0x10/0x10 [ 461.346989][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.347015][ C1] ? do_raw_spin_lock+0x121/0x290 [ 461.347052][ C1] __napi_poll+0xc7/0x480 [ 461.347076][ C1] ? net_rx_action+0x46d/0xe30 [ 461.347107][ C1] net_rx_action+0x707/0xe30 [ 461.347140][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.347174][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 461.347229][ C1] handle_softirqs+0x286/0x870 [ 461.347256][ C1] ? do_softirq+0xec/0x180 [ 461.347285][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 461.347314][ C1] ? wg_packet_decrypt_worker+0xc6f/0xd10 [ 461.347344][ C1] do_softirq+0xec/0x180 [ 461.347367][ C1] [ 461.347374][ C1] [ 461.347383][ C1] ? __pfx_do_softirq+0x10/0x10 [ 461.347414][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.347440][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 461.347463][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 461.347488][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 461.347515][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.347543][ C1] ? wg_packet_decrypt_worker+0xc6f/0xd10 [ 461.347573][ C1] wg_packet_decrypt_worker+0xc6f/0xd10 [ 461.347616][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 461.347708][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.347735][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.347763][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.347798][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 461.347823][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 461.347850][ C1] process_scheduled_works+0xae1/0x17b0 [ 461.347907][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 461.347938][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.347970][ C1] worker_thread+0x8a0/0xda0 [ 461.348015][ C1] kthread+0x711/0x8a0 [ 461.348049][ C1] ? __pfx_worker_thread+0x10/0x10 [ 461.348075][ C1] ? __pfx_kthread+0x10/0x10 [ 461.348104][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.348133][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.348167][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.348193][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.348215][ C1] ? __pfx_kthread+0x10/0x10 [ 461.348247][ C1] ret_from_fork+0x3fc/0x770 [ 461.348272][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 461.348300][ C1] ? __switch_to_asm+0x39/0x70 [ 461.348330][ C1] ? __switch_to_asm+0x33/0x70 [ 461.348359][ C1] ? __pfx_kthread+0x10/0x10 [ 461.348391][ C1] ret_from_fork_asm+0x1a/0x30 [ 461.348432][ C1]