last executing test programs: 1m31.589310676s ago: executing program 0: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000001ac0)={[{@gid}, {@discard}, {@umask={'umask', 0x3d, 0x2}}, {@namecase}, {@namecase}, {@errors_continue}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x12}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@namecase}]}, 0x3, 0x1507, &(0x7f0000000440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001280)='./file2\x00', 0x0, 0x0) 1m31.16627673s ago: executing program 0: r0 = fanotify_init(0x2, 0x101000) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth1_to_hsr\x00', @random="629865518ad9"}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000000c0)) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000100)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8001, '\x00', 0x0, r2, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x22, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf384}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x5a, &(0x7f00000002c0)=""/90, 0x41000, 0x22, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000340)={0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[r4, r5, r2, r2, r2, r2, r2, r2, 0xffffffffffffffff, r2], &(0x7f0000000500)=[{0x3, 0x1, 0x8, 0xa}, {0x0, 0x3, 0x0, 0x9}, {0x0, 0x5, 0xe, 0x2}, {0x1, 0x4, 0x7, 0xa}], 0x10, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='rpcgss_seqno\x00', r2}, 0x10) fcntl$addseals(0xffffffffffffffff, 0x409, 0x6) r7 = open(0x0, 0x508240, 0x80) bind$rds(r2, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000700)={0xffffffffffffffff, 0x1, 0x2, 0x8, @vifc_lcl_addr=@remote, @rand_addr=0x64010101}, 0x10) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x24081, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000780)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000001840)={0xf4, 0xffff, 0x0, 0x0, 0x1, 0x4, 0x200, 0xe9d}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001900)={{}, &(0x7f0000001880), &(0x7f00000018c0)=r6}, 0x20) getsockopt(r7, 0x97c, 0x310, &(0x7f0000001940)=""/193, &(0x7f0000001a40)=0xc1) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80), 0x400000, 0x0) r10 = socket$netlink(0x10, 0x3, 0x7) write$binfmt_elf64(r10, &(0x7f0000001b00)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x2, 0x0, 0x6, 0x2, 0x2, 0x6, 0x101, 0x1d2, 0x40, 0x154, 0xfffffbff, 0xae, 0x38, 0x1, 0x0, 0x0, 0x7}, [{0x3, 0x1e, 0x6, 0x0, 0xffffffff00000001, 0x2, 0x100, 0x6}, {0x474e552, 0x9, 0x1, 0xffffffffffffffff, 0x6, 0x1, 0x4182c9f2, 0x5}], "ec474c7677c09d2d31c431f94bdccca7ea588d3624471cd1c80bcf2f917f7facebcfab901414ef997148ae43ade02b3717d29dc05d834caf556775c576c377419f91f3c8c813dd8b03a610fedb3231e221aced7385a01b14d10dba5908e3ef227c52b29d67a39d51c14005a05007711868", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb21) ioctl$sock_x25_SIOCDELRT(r9, 0x890c, &(0x7f0000002640)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xb, 'ip_vti0\x00'}) 1m30.863589808s ago: executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x3, {0x0, 0x0, 0x1ff, 0x6}}) 1m30.697489721s ago: executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 1m30.572478052s ago: executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 1m30.388549459s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c69666163650000140007800800064000000000080008"], 0x60}}, 0x0) 1m30.202385131s ago: executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) init_module(0x0, 0x0, 0x0) 1m30.021884283s ago: executing program 3: syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000005dc0)='./file1\x00', 0x800000, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x1, 0x5db0, &(0x7f0000005e00)="$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") syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='./bus\x00', r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1m28.721755203s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}}, 0x0) 1m28.521814805s ago: executing program 0: r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000000)='K', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r0, r0}, 0x0, 0x0, 0x0) 1m28.406032118s ago: executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f00000001c0)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 1m28.38403516s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef000100ffffff88"], 0x280) 1m28.169494506s ago: executing program 2: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000b40), &(0x7f0000000180)=@tcp=r2}, 0x20) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/238, 0xee}], 0x1}}], 0x2, 0x41, 0x0) dup(0xffffffffffffffff) 1m27.980940468s ago: executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f00000003c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000440)="8f", 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aee1b65e3babc7ae5897", 0xa}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2d}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000000), 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000), 0x26) 1m27.706896094s ago: executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)={0x74, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x50, 0x33, @probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @void, @void}}]}, 0x74}}, 0x0) 1m27.329886722s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000060000000000000001000004000000000300000002000000000000000000000000000005000004000000005f"], &(0x7f0000000280)=""/265, 0x42, 0x109, 0x1}, 0x20) 1m3.590968608s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}}, 0x0) 1m3.321008503s ago: executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1210b9, 0x0) mount(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1020, 0x0) 1m2.751683258s ago: executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0xde97, @remote, 0x6}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x10000000000001) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff02}, 0x0, r1}) 58.022155984s ago: executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r0, 0x82000000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af14, &(0x7f0000000040)) 57.625536662s ago: executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x200020000000]}, 0x8, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xffb, &(0x7f0000000fc0)=""/4091}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x36}, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000640)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) rmdir(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) chmod(&(0x7f0000000040)='./file0\x00', 0x0) 56.49244915s ago: executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)='t', 0x1}], 0x2}}], 0x1, 0x0) 55.77770508s ago: executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x40045304, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) tkill(r0, 0x7) 39.164373352s ago: executing program 1: r0 = socket(0xa, 0x801, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x29, 0x4a, 0x0, 0x20000000) 38.820038225s ago: executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)='t', 0x1}], 0x2}}], 0x1, 0x0) 38.819744143s ago: executing program 1: syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2a00014, &(0x7f0000001680)={[{@gid={'gid', 0x3d, 0xee01}}, {@nostrict}, {@lastblock={'lastblock', 0x3d, 0x22}}, {@gid_forget}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0x4}}, {@undelete}, {@unhide}, {@unhide}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fileset={'fileset', 0x3d, 0x7}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 38.297012981s ago: executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000e00)={0x28}, 0x28) 37.165072623s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f80000001800090900000000000000000200000000000000000000000800070000000000b200088052f387ab146d3923650d000000000000982e7e29c29618fa98e069e7d3967b139562f120376371b408cb7f2a57a5c3b88d082956c99ae1eba3bdf123a6494010ccbf4e7196fc253191dd5c624b2e196ed93bc96947bb8b19eda8d4f54731adb2997ef1377bfb875f57aee8ead1f86b3c3997a47efaf8b87ba98d398553439ac5ff959f8ec8b2bd8d6c357188bc2a878417a5f581a9aaba2f810c4c5da5b7c9aaab3f7b30feeb1fea2f2396e165390000080005"], 0xf8}}, 0x0) 34.925875758s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2000001, &(0x7f0000000140), 0x0, 0x528, &(0x7f0000000540)="$eJzs3V1rZGcdAPD/mWR2N7vRRO1FFfqCrWSL7kzS2DZ40VYQ7wpKvRTWkExCyCQTMpO6CUWy+AEEES3e9cobwQ8gSD+CCAW98UpUlKJbveiFeuTMnNnspGeSGTczI8nvByfnOa///zMvZ845z7N7Ariyno2I1yNiKiJeiIi5fH4pH+K4M2Trffjg7bVsSCJN3/xbEkk+L1steWSft/LNbnRGhZqHR9ur9XptP5+utnb2qs3DoztbO6ubtc3a7vLy0ssrr6y8tLJYsPX00PXM6vXq1/784x/87Ouv/upL3/3D3b/e/l6W82y+vFuPi9Z5XcrZa/FQlv3+KIJNwFRen/KkEwEAYCDZOf6nI+Lz7fP/uZg6+9z6249OJCPPDgAAALgI6Wuz8a8kIgUAAAAurVK7D2xSquR9AWajVKpUOn14n4ibpXqj2friRuNgd73TV3Y+yqWNrXpt8VqnT+18lJNseqldPpl+8eF00tMH+EdzM+3llbVGfX1ytz0AAADgSrl16vr/n3Od6/8z3B9bcgAAAMDFmZ90AgAAAMDIffz6/92J5AEAAACMjvZ/AAAAuNS+8cYb2ZB2n3+9/tbhwXbjrTvrteZ2ZedgrbLW2N+rbDYam/X0esTOefurNxp7X47dg3vVVq3ZqjYPj+7uNA52W3e3eh6BDQAAAIzRp55573dJRBx/ZaY9ZK5lf6b6bKCvAFwapWFW/tPo8gDGr9/P/MdNjzQPYPx8q+HqKndGyaTzACbnvANA3847v774XAAAgNFY+Gxx+//0yb0B4JIaqv0fuFQGb/8HLhvt/3B1lZ0BwJU2M8A6p9r/T7oLDNz+n6Z99gUAAIzJbHtISpW8LXA2Sh+lHTEf5WRjq15bjIhPRsRv58rXs+ml9paJfzQAAAAAAAAAAAAAAAAAAAAAAAAAAANK0yRSAAAA4FKLKP0lyR/otTD3/Ozp+wPXko/m2uP20wHe/Mm91VZrfymb//d8fkTrnXz+i8PcefDkcQAAABiV7nV69zoeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7Shw/eXusO44z7wVcjYr4o/nTcaI9vRDkibv4jienuRs9EJBExdQHxj+9HxJNF8ZMsrZjPs+iJHxGliJhpZzHy+E+laVoY/9ZjR4er7b3s+PN60fevFM+2x8Xf/+l8eFz9j3+lh8e/qYL42ZHnEwPG+Nz7v6gWL7neWT5dfPzpxk/6xH+uaJcFL8p3vnV01C+39N2IhcLfn6QnVrW1s1dtHh7d2dpZ3axt1naXl5deXnll5aWVxerGVr2W/y2M8cOnfvmffvE/uB9xs0/8+d76r56u//NZodxvzyf+/f69B5/pFMundtGOf/u54vf/yd74PS9t9pn4Qv47kC1f6JaPO+VHPf3z3zx9Vv3X+9T/vPf/9vlVb3vhm9//44CrAgBj0Dw82l6t12v7wxdmhtvqnTRN/+dYQxays6M+i37/007Fx5HGYIUn+qX6/1x4bZiV0+uP/WFT6C2U+n/CL6gw0cMSAAAwAicn/ZPOBAAAAAAAAAAAAAAAAAAAAK6ucfyPZadjHk+mqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ/pvAAAA//+J6tXA") lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) 33.852833128s ago: executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000005c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 32.976108565s ago: executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0xfff8, 0x0, 0x0, 0x0, 0x0, "8595701a4fb562f1"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800042, &(0x7f0000001480)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1d1, &(0x7f0000000580)="$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") timer_create(0x0, &(0x7f0000000140)={0x0, 0xa}, 0xfffffffffffffffc) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000200)={0x1, 0x0, 0x11, 0x16, 0x1cd, &(0x7f0000000580)}) waitid(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x0, "d2c4924dc64c3b6e6f00", 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0xfb43abc2aa13d2f7}) epoll_pwait(r4, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 31.746411862s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="8b", 0x1}], 0x1) 30.93699842s ago: executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r3, 0x0, 0x3) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r1}, 0x18) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x32040c2, &(0x7f0000002200)={[{@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@type={'type', 0x3d, "ec1fe973"}}]}, 0x4, 0x34d, &(0x7f0000000880)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000580), 0x1, 0x257, &(0x7f00000002c0)="$eJzs3TGIHFUcBvBvZneTXLJF1EYQVBARXThiJ9jERiEgQSwEFSIiNkoixAS7XSsbC61VUtkEsTNaSppgowhWUa+4StDDwsNCi5HdnZUTF+64udvRm98P5uZm7r35z9zM92buYNgAnXU6ydkkvSSjJIMkxc4G98+n0/XitbVbF5KqevbXYtZuvjy36HcqySTJY0lulkVe6ydXb7yw+fvtpx5698rgwY9vPL+20oOsbW1uPL390fl3Pjv36NVvvvv5fJGzGf7juA5esWRdv0juPIxi/xFFv+09INn9JDzz1qffT3N/V5IHql5GGaSs+713+djNQR75cHnPavz+L9/ec9B7DKxWVQ2m98BJBXROmWRYP6TOvk9Zrq/Pn+F/6J0sX790+c3Rq5euXHyl7ZEKOCDTv783nvzi+OenZpkvyvU6/z/15vkHjqpxPb/+4/Trdq/dvQFWa5hsjF4aPxz5h86Rf+iuOv8nIv/w/3Vsf93c/6G75B+6S/6hu+Qfukv+4Qia7K2Z/EN3yT901878AwDdUh3f44vCi/8rHPL7yMDqtDz8AAAAAAAAAAAAAAAAAAAAS1xbu3VhMR3C5k8sW/nVB8nWE0n6y+r3Zp9HvOh68rdi2uxvxbxbIy/e13ADDX3S8tvXRdNfYENf39tu/fHFZPJ2kjP9/r+vv6K+/vbvjl1+Pni5YYGGHn+u3fp/Xm+3/rnbyZfT8efMsvGnzN2z+fLxZzg9fw3rv/FHww0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwMn8FAAD//yO6ZnI=") quotactl$Q_QUOTAON(0x0, &(0x7f0000000400), 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvfrom$unix(r3, &(0x7f0000000c00)=""/107, 0x6b, 0x2122, &(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb266, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000140), 0x9) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) 30.548173849s ago: executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)={0x74, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x50, 0x33, @probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @void, @void}}]}, 0x74}}, 0x0) 25.447711022s ago: executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x400448c9, 0x0) 0s ago: executing program 5: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) kernel console output (not intermixed with test programs): [ 472.912339][T12982] ERROR: (device loop1): txCommit: [ 472.912339][T12982] [ 472.917323][T12944] syz-executor.4: attempt to access beyond end of device [ 472.917323][T12944] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 472.921379][T12949] jfs_rmdir: dtDelete returned -2 [ 472.958507][ T5449] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.958546][ T5449] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.958593][ T5449] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 472.958624][ T5449] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.962234][ T5449] usb 6-1: config 0 descriptor?? [ 473.004887][T12944] syz-executor.4: attempt to access beyond end of device [ 473.004887][T12944] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 473.056754][T12944] syz-executor.4: attempt to access beyond end of device [ 473.056754][T12944] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 473.121207][T11868] ERROR: (device loop1): diFree: numfree > numinos [ 473.121207][T11868] [ 473.139070][T11868] ERROR: (device loop1): diFree: numfree > numinos [ 473.139070][T11868] [ 473.173036][T11331] syz-executor.4: attempt to access beyond end of device [ 473.173036][T11331] loop4: rw=2049, sector=45112, nr_sectors = 16 limit=40427 [ 473.223739][T11331] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 473.252703][T11331] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 473.557402][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 473.597884][ T5449] usbhid 6-1:0.0: can't add hid device: -71 [ 473.628774][ T5449] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 473.669616][ T5449] usb 6-1: USB disconnect, device number 6 [ 473.875739][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.203821][T13002] loop1: detected capacity change from 0 to 2048 [ 474.266960][T13002] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 475.217412][T12999] loop2: detected capacity change from 0 to 32768 [ 475.293469][T13019] loop5: detected capacity change from 0 to 512 [ 475.332206][T13019] EXT4-fs: Cannot specify journal on remount [ 475.333344][T12999] ERROR: (device loop2): diRead: i_ino != di_number [ 475.333344][T12999] [ 475.366841][T13021] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 475.455682][T13022] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 476.325500][T13034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 476.708371][T13017] loop4: detected capacity change from 0 to 32768 [ 476.773025][T13017] read_mapping_page failed! [ 476.773046][T13017] ERROR: (device loop4): txCommit: [ 476.773046][T13017] [ 476.800556][T13017] read_mapping_page failed! [ 476.800576][T13017] ERROR: (device loop4): txCommit: [ 476.800576][T13017] [ 476.802572][T13017] find_entry called with index = 0 [ 476.802646][T13017] read_mapping_page failed! [ 476.802672][T13017] ERROR: (device loop4): txCommit: [ 476.802672][T13017] [ 476.811394][T13017] jfs_rmdir: dtDelete returned -2 [ 476.873924][T13051] loop2: detected capacity change from 0 to 64 [ 476.921289][T11331] ERROR: (device loop4): diFree: numfree > numinos [ 476.921289][T11331] [ 476.921617][T11331] ERROR: (device loop4): diFree: numfree > numinos [ 476.921617][T11331] [ 476.958051][ T5179] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 477.137966][ T5179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.172144][ T5179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.193701][ T5179] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 477.215639][ T5179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.252007][ T5179] usb 2-1: config 0 descriptor?? [ 477.595385][T13058] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 477.682107][T13058] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 477.762787][ T5179] usbhid 2-1:0.0: can't add hid device: -71 [ 477.779739][ T5179] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 477.839713][ T5179] usb 2-1: USB disconnect, device number 8 [ 478.534930][T13075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.599206][T13075] loop5: detected capacity change from 0 to 64 [ 479.673609][T13097] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 479.709868][T13061] loop4: detected capacity change from 0 to 40427 [ 479.726600][T13100] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 479.745838][T13061] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 479.777566][T13061] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 479.821149][T13061] F2FS-fs (loop4): Found nat_bits in checkpoint [ 480.044584][T13061] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 480.077588][T13061] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 480.232910][T13101] f2fs_ckpt-7:4: attempt to access beyond end of device [ 480.232910][T13101] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 480.325744][T13101] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 480.592675][T13093] loop5: detected capacity change from 0 to 32768 [ 480.616826][T13115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.686632][T13115] loop0: detected capacity change from 0 to 64 [ 480.717652][T13093] read_mapping_page failed! [ 480.750553][T13093] ERROR: (device loop5): txCommit: [ 480.750553][T13093] [ 480.824195][T13119] read_mapping_page failed! [ 480.844388][T13119] ERROR: (device loop5): txCommit: [ 480.844388][T13119] [ 480.874759][T13093] find_entry called with index = 0 [ 480.899910][T13093] read_mapping_page failed! [ 480.927290][T13093] ERROR: (device loop5): txCommit: [ 480.927290][T13093] [ 480.942760][T13123] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 480.961499][T13119] jfs_rmdir: dtDelete returned -2 [ 480.973137][T13123] loop2: detected capacity change from 0 to 64 [ 481.050513][T11363] ERROR: (device loop5): diFree: numfree > numinos [ 481.050513][T11363] [ 481.066392][T11363] ERROR: (device loop5): diFree: numfree > numinos [ 481.066392][T11363] [ 481.178870][T13126] cifs: Unknown parameter 'T­3' [ 481.909148][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 482.516066][ T29] audit: type=1326 audit(1716847121.597:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc636a7cee9 code=0x7ffc0000 [ 482.631109][ T29] audit: type=1326 audit(1716847121.627:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc636a7cee9 code=0x7ffc0000 [ 482.744800][ T29] audit: type=1326 audit(1716847121.648:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fc636a7cee9 code=0x7ffc0000 [ 482.776895][T13158] loop1: detected capacity change from 0 to 1024 [ 482.848772][ T29] audit: type=1326 audit(1716847121.648:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc636a7cee9 code=0x7ffc0000 [ 482.969622][ T29] audit: type=1326 audit(1716847121.648:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc636a7cee9 code=0x7ffc0000 [ 483.610069][T13171] cifs: Unknown parameter 'T­3' [ 483.612555][T13158] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 483.815452][T13175] loop3: detected capacity change from 0 to 8 [ 483.837284][T13175] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 484.179035][T13143] loop0: detected capacity change from 0 to 40427 [ 484.215691][T13143] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 484.246327][T13143] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 484.302964][T13143] F2FS-fs (loop0): Found nat_bits in checkpoint [ 484.570224][T13143] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 484.595631][T13143] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 484.675613][T13188] f2fs_ckpt-7:0: attempt to access beyond end of device [ 484.675613][T13188] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 484.697269][T13156] loop4: detected capacity change from 0 to 40427 [ 484.733510][T13156] F2FS-fs (loop4): invalid crc value [ 484.753539][T13188] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 484.755084][ T29] audit: type=1326 audit(1716847123.857:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13194 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abd47cee9 code=0x7ffc0000 [ 484.858545][ T29] audit: type=1326 audit(1716847123.857:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13194 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abd47cee9 code=0x7ffc0000 [ 484.923617][T13156] F2FS-fs (loop4): Found nat_bits in checkpoint [ 484.967040][ T29] audit: type=1326 audit(1716847123.907:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13194 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2abd47cee9 code=0x7ffc0000 [ 485.068460][ T29] audit: type=1326 audit(1716847123.907:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13194 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abd47cee9 code=0x7ffc0000 [ 485.280226][T13156] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 485.433226][T13156] syz-executor.4: attempt to access beyond end of device [ 485.433226][T13156] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 485.519681][T13156] syz-executor.4: attempt to access beyond end of device [ 485.519681][T13156] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 485.578109][T13156] syz-executor.4: attempt to access beyond end of device [ 485.578109][T13156] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 485.605567][T13209] loop5: detected capacity change from 0 to 1024 [ 485.660986][T11331] syz-executor.4: attempt to access beyond end of device [ 485.660986][T11331] loop4: rw=2049, sector=45112, nr_sectors = 16 limit=40427 [ 485.735289][T11331] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 485.833235][T11331] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 485.874364][T13209] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 486.174241][ T29] audit: type=1326 audit(1716847125.304:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13217 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57347cee9 code=0x7ffc0000 [ 486.472563][T13229] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 486.580763][T13233] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 486.768816][T13238] loop2: detected capacity change from 0 to 64 [ 486.933220][T13243] loop3: detected capacity change from 0 to 1024 [ 487.182997][T13248] loop5: detected capacity change from 0 to 1024 [ 487.210450][T13246] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 487.446915][T13248] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 487.670828][T13269] sp0: Synchronizing with TNC [ 487.753768][T13274] loop2: detected capacity change from 0 to 64 [ 487.895490][T13281] loop1: detected capacity change from 0 to 64 [ 487.931895][T13280] loop0: detected capacity change from 0 to 1024 [ 487.998808][T13283] loop3: detected capacity change from 0 to 64 [ 488.014192][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 488.014209][ T29] audit: type=1800 audit(1716847127.166:829): pid=13280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 488.132869][T13285] loop2: detected capacity change from 0 to 2048 [ 488.198418][T13288] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.320585][T13291] loop0: detected capacity change from 0 to 1024 [ 488.408357][T13291] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 488.425624][T13291] System zones: 0-1, 3-12 [ 488.436662][T13291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.449142][T13263] loop4: detected capacity change from 0 to 32768 [ 488.462836][T13263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13263) [ 488.491657][T13263] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 488.502309][T13263] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 488.513310][T13263] BTRFS info (device loop4): using free-space-tree [ 488.544829][ T29] audit: type=1804 audit(1716847127.712:830): pid=13291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2481369766/syzkaller.2Lw3s6/50/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 488.590163][ T29] audit: type=1804 audit(1716847127.712:831): pid=13291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2481369766/syzkaller.2Lw3s6/50/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 488.661611][T13291] loop0: detected capacity change from 1024 to 0 [ 488.661724][ T29] audit: type=1804 audit(1716847127.722:832): pid=13291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2481369766/syzkaller.2Lw3s6/50/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 488.675347][T13290] syz-executor.0: attempt to access beyond end of device [ 488.675347][T13290] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 488.730925][ T29] audit: type=1804 audit(1716847127.722:833): pid=13291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2481369766/syzkaller.2Lw3s6/50/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 488.773127][T13324] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 488.790849][T13290] syz-executor.0: attempt to access beyond end of device [ 488.790849][T13290] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 488.811948][T13324] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 488.870393][T11405] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 488.881886][T13290] syz-executor.0: attempt to access beyond end of device [ 488.881886][T13290] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 488.886883][T11405] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 488.912868][T11405] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 488.922321][T13290] syz-executor.0: attempt to access beyond end of device [ 488.922321][T13290] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 488.951282][T11331] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 488.960953][T13290] syz-executor.0: attempt to access beyond end of device [ 488.960953][T13290] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 489.024277][T13290] syz-executor.0: attempt to access beyond end of device [ 489.024277][T13290] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 489.073741][T13290] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #18: block 9: comm syz-executor.0: unable to read itable block [ 489.113871][T13332] loop3: detected capacity change from 0 to 64 [ 489.134008][T13290] buffer_io_error: 10 callbacks suppressed [ 489.134027][T13290] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 489.145081][T13336] loop2: detected capacity change from 0 to 64 [ 489.161806][T13338] loop1: detected capacity change from 0 to 64 [ 489.231544][T13290] EXT4-fs (loop0): I/O error while writing superblock [ 489.273668][T13290] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure [ 489.332554][T13290] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 489.371362][T13290] EXT4-fs (loop0): I/O error while writing superblock [ 489.396377][T13290] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #18: comm syz-executor.0: mark_inode_dirty error [ 489.453170][T13290] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 489.478160][T13290] EXT4-fs (loop0): I/O error while writing superblock [ 489.499020][T13340] loop5: detected capacity change from 0 to 2048 [ 489.529903][T13290] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #18: block 9: comm syz-executor.0: unable to read itable block [ 489.556311][T13340] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 489.574086][T13290] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 489.607356][T13290] EXT4-fs (loop0): I/O error while writing superblock [ 489.647014][T13290] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure [ 489.677895][T13348] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 489.703920][T13290] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 489.728360][T13290] EXT4-fs (loop0): I/O error while writing superblock [ 489.754286][T13290] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #18: comm syz-executor.0: mark_inode_dirty error [ 489.793991][T13290] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 489.822659][T13290] EXT4-fs (loop0): I/O error while writing superblock [ 489.856521][T13290] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #18: block 9: comm syz-executor.0: unable to read itable block [ 489.878138][T13353] loop1: detected capacity change from 0 to 64 [ 489.885032][T13290] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 489.916803][T13290] EXT4-fs (loop0): I/O error while writing superblock [ 489.925326][T13290] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure [ 489.953820][T13355] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 489.970429][T13290] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 489.979097][T13355] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 490.015372][T13290] EXT4-fs (loop0): I/O error while writing superblock [ 490.046892][T13290] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #18: comm syz-executor.0: mark_inode_dirty error [ 490.053167][T11405] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 490.078855][T11405] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 490.093299][T11405] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 490.198341][T13290] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 490.233107][T13290] EXT4-fs (loop0): I/O error while writing superblock [ 490.271050][T13290] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #18: block 9: comm syz-executor.0: unable to read itable block [ 490.384676][T13290] bio_check_eod: 42 callbacks suppressed [ 490.388923][T13290] syz-executor.0: attempt to access beyond end of device [ 490.388923][T13290] loop0: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 490.552007][T13290] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 490.641764][T13290] syz-executor.0: attempt to access beyond end of device [ 490.641764][T13290] loop0: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 490.675156][T13290] syz-executor.0: attempt to access beyond end of device [ 490.675156][T13290] loop0: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 490.689482][T13290] syz-executor.0: attempt to access beyond end of device [ 490.689482][T13290] loop0: rw=2057, sector=232, nr_sectors = 8 limit=0 [ 490.703645][T13290] syz-executor.0: attempt to access beyond end of device [ 490.703645][T13290] loop0: rw=2049, sector=232, nr_sectors = 8 limit=0 [ 490.721393][T13290] syz-executor.0: attempt to access beyond end of device [ 490.721393][T13290] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 490.738922][T13290] syz-executor.0: attempt to access beyond end of device [ 490.738922][T13290] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 490.752699][T13290] syz-executor.0: attempt to access beyond end of device [ 490.752699][T13290] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 490.756133][T13374] loop5: detected capacity change from 0 to 64 [ 490.766427][T13290] syz-executor.0: attempt to access beyond end of device [ 490.766427][T13290] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 490.766622][T13290] syz-executor.0: attempt to access beyond end of device [ 490.766622][T13290] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 491.036926][ T7680] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 112) [ 491.079478][ T7680] Buffer I/O error on device loop0, logical block 112 [ 491.086840][ T7680] Buffer I/O error on device loop0, logical block 113 [ 491.093616][ T7680] Buffer I/O error on device loop0, logical block 114 [ 491.100388][ T7680] Buffer I/O error on device loop0, logical block 115 [ 491.435156][T13391] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 491.442169][T13391] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 491.464048][T13395] loop1: detected capacity change from 0 to 64 [ 491.492686][T13391] vhci_hcd vhci_hcd.0: Device attached [ 491.529126][T13396] loop5: detected capacity change from 0 to 256 [ 491.563462][T13396] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 491.615905][T13396] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 491.619509][T13400] loop4: detected capacity change from 0 to 2048 [ 491.669315][T13396] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 491.674259][T13358] loop3: detected capacity change from 0 to 32768 [ 491.731878][T13396] UDF-fs: Scanning with blocksize 512 failed [ 491.741010][T13358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13358) [ 491.761180][T13396] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 491.784454][T13358] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 491.788558][T13396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.795452][T13358] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 491.804468][ T5174] usb 20-1: SetAddress Request (2) to port 0 [ 491.829017][T13400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.866622][T13358] BTRFS info (device loop3): using free-space-tree [ 491.869086][ T5174] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 491.882525][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.991542][T13393] vhci_hcd: connection reset by peer [ 492.024037][ T1084] vhci_hcd: stop threads [ 492.061825][ T1084] vhci_hcd: release socket [ 492.119020][ T1084] vhci_hcd: disconnect device [ 492.173368][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.238083][T13427] loop1: detected capacity change from 0 to 64 [ 492.253903][T12374] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 492.504185][ T5133] Bluetooth: hci0: command 0x0406 tx timeout [ 492.556919][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.652559][T13433] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 492.713344][T13431] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 492.916025][T13441] loop5: detected capacity change from 0 to 2048 [ 492.965576][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.019214][T13446] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 493.254662][ T5133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.269733][ T5133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.296522][ T5133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.307539][ T5133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.318113][ T5133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 493.331354][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.420713][ T11] bridge_slave_1: left allmulticast mode [ 493.447036][ T11] bridge_slave_1: left promiscuous mode [ 493.473737][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.514635][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.604889][T13465] loop3: detected capacity change from 0 to 64 [ 493.822044][T13472] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 493.828611][T13472] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 493.863908][T13476] loop1: detected capacity change from 0 to 256 [ 493.886674][T13472] vhci_hcd vhci_hcd.0: Device attached [ 493.904625][T13477] loop3: detected capacity change from 0 to 256 [ 493.939995][T13477] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 494.013207][T13477] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 494.045952][T13477] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 494.066125][T13477] UDF-fs: Scanning with blocksize 512 failed [ 494.072940][T13481] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.098778][T13477] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 494.142378][T13477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.206189][ T5395] usb 16-1: SetAddress Request (2) to port 0 [ 494.219560][ T5395] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 494.250432][T13473] vhci_hcd: connection closed [ 494.251015][ T51] vhci_hcd: stop threads [ 494.271808][ T51] vhci_hcd: release socket [ 494.294655][ T51] vhci_hcd: disconnect device [ 494.606125][T13499] loop1: detected capacity change from 0 to 64 [ 495.028782][T13505] loop2: detected capacity change from 0 to 1764 [ 495.090267][T13484] loop5: detected capacity change from 0 to 32768 [ 495.127144][T13484] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (13484) [ 495.197295][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.206567][T13484] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 495.229231][T13484] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 495.251079][T13484] BTRFS info (device loop5): using free-space-tree [ 495.278760][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.332681][ T11] bond0 (unregistering): Released all slaves [ 495.346662][ T5133] Bluetooth: hci3: command tx timeout [ 495.463782][T13484] BTRFS info (device loop5): rebuilding free space tree [ 495.732328][T11363] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 495.896619][T13508] loop3: detected capacity change from 0 to 32768 [ 496.297287][T13539] loop4: detected capacity change from 0 to 1024 [ 496.333242][T13539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 496.370359][T13539] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 496.429414][T13539] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 496.539388][T13539] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 496.628282][T13539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.712710][T13539] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 496.740025][ T11] hsr_slave_0: left promiscuous mode [ 496.763726][T13539] Quota error (device loop4): write_blk: dquota write failed [ 496.786675][ T11] hsr_slave_1: left promiscuous mode [ 496.797135][T13539] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 496.812019][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.819620][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.841364][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.842118][T13539] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 0 [ 496.853666][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.931263][ T5174] usb 20-1: device descriptor read/8, error -110 [ 496.956782][T11331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.969824][ T11] veth1_macvtap: left promiscuous mode [ 496.975714][ T2799] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 496.982758][ T11] veth0_macvtap: left promiscuous mode [ 496.991651][ T11] veth1_vlan: left promiscuous mode [ 496.997317][ T11] veth0_vlan: left promiscuous mode [ 497.022844][ T2799] EXT4-fs error (device loop4): ext4_release_dquot:6883: comm kworker/u8:7: Failed to release dquot type 0 [ 497.360449][ T5174] usb usb20-port1: attempt power cycle [ 497.370980][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.382063][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.390288][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.399156][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.408551][ T5123] Bluetooth: hci3: command tx timeout [ 497.415059][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 497.603566][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.352393][T13564] loop4: detected capacity change from 0 to 4096 [ 498.484501][T13564] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 498.865971][ T5174] usb usb20-port1: unable to enumerate USB device [ 499.107593][T13564] ntfs3: loop4: Failed to load $Secure (-22). [ 499.121601][T13564] ntfs3: loop4: Failed to initialize $Secure (-22). [ 499.310806][ T5395] usb 16-1: device descriptor read/8, error -110 [ 499.417336][T13580] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 499.423900][T13580] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 499.464066][T13580] vhci_hcd vhci_hcd.0: Device attached [ 499.477711][ T5123] Bluetooth: hci3: command tx timeout [ 499.508497][T13583] loop4: detected capacity change from 0 to 256 [ 499.555321][T13583] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 499.587954][T13583] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 499.597543][T13583] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 499.635119][T13583] UDF-fs: Scanning with blocksize 512 failed [ 499.675926][T13583] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 499.721584][ T5123] Bluetooth: hci2: command tx timeout [ 499.747993][ T5395] usb usb16-port1: attempt power cycle [ 499.769684][T13583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 499.796117][ T5177] usb 18-1: SetAddress Request (2) to port 0 [ 499.802177][ T5177] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 499.819688][T13572] loop1: detected capacity change from 0 to 32768 [ 499.835869][T13572] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (13572) [ 499.898956][T13572] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 499.913526][T13572] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 499.922340][T13572] BTRFS info (device loop1): using free-space-tree [ 499.942582][T13581] vhci_hcd: connection reset by peer [ 499.964382][ T1084] vhci_hcd: stop threads [ 499.973597][ T1084] vhci_hcd: release socket [ 499.976633][T13591] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 499.978403][ T1084] vhci_hcd: disconnect device [ 499.984488][T13591] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 499.995270][T13591] vhci_hcd vhci_hcd.0: Device attached [ 500.036275][T13591] loop3: detected capacity change from 0 to 256 [ 500.046670][T13591] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 500.071967][T13591] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 500.079793][T13572] BTRFS info (device loop1): rebuilding free space tree [ 500.086166][T13591] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 500.102170][T13591] UDF-fs: Scanning with blocksize 512 failed [ 500.120913][T13591] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 500.145734][T13591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.203034][ T5395] usb 16-1: SetAddress Request (4) to port 0 [ 500.214779][ T5395] usb 16-1: new SuperSpeed USB device number 4 using vhci_hcd [ 500.269454][T13594] vhci_hcd: connection reset by peer [ 500.271777][T11868] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 500.277692][ T68] vhci_hcd: stop threads [ 500.299335][ T68] vhci_hcd: release socket [ 500.309839][ T68] vhci_hcd: disconnect device [ 500.321030][ T11] team0 (unregistering): Port device team_slave_1 removed [ 500.437959][ T11] team0 (unregistering): Port device team_slave_0 removed [ 500.595482][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.710799][T13612] loop1: detected capacity change from 0 to 1024 [ 500.720231][T13612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 500.730034][T13612] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 500.744857][T13612] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 500.771192][T13612] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 500.793103][T13612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.914566][T13612] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz-executor.1: Invalid block bitmap block 0 in block_group 0 [ 500.955670][T13612] Quota error (device loop1): write_blk: dquota write failed [ 500.982339][T13612] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 500.995194][T13612] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz-executor.1: Failed to acquire dquot type 0 [ 501.088965][T11868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.117103][ T7680] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 501.131545][ T7680] EXT4-fs error (device loop1): ext4_release_dquot:6883: comm kworker/u8:9: Failed to release dquot type 0 [ 501.552697][ T5123] Bluetooth: hci3: command tx timeout [ 501.771064][ T5123] Bluetooth: hci2: command tx timeout [ 502.372462][T13454] chnl_net:caif_netlink_parms(): no params data found [ 502.431427][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 502.646913][T13649] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 502.653568][T13649] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 502.678872][T13655] loop4: detected capacity change from 0 to 256 [ 502.698540][T13653] loop1: detected capacity change from 0 to 1024 [ 502.706212][T13649] vhci_hcd vhci_hcd.0: Device attached [ 502.732347][T13655] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 502.743394][T13653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 502.755340][T13655] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 502.765211][T13655] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 502.772934][T13655] UDF-fs: Scanning with blocksize 512 failed [ 502.781328][T13653] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 502.805302][T13655] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 502.820576][T13653] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 502.843248][T13655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 502.866748][T13454] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.874707][T13653] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 502.891981][T13653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.892555][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.949008][T13454] bridge_slave_0: entered allmulticast mode [ 502.958029][T13454] bridge_slave_0: entered promiscuous mode [ 502.973474][T13653] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz-executor.1: Invalid block bitmap block 0 in block_group 0 [ 502.981315][T13657] vhci_hcd: connection closed [ 502.999811][ T4252] vhci_hcd: stop threads [ 503.011976][ T4252] vhci_hcd: release socket [ 503.016733][ T4252] vhci_hcd: disconnect device [ 503.037358][T13653] Quota error (device loop1): write_blk: dquota write failed [ 503.052362][T13653] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 503.089706][T13653] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz-executor.1: Failed to acquire dquot type 0 [ 503.131610][T13454] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.138796][T13454] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.184527][T13454] bridge_slave_1: entered allmulticast mode [ 503.201898][T13454] bridge_slave_1: entered promiscuous mode [ 503.210120][T11868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.220602][ T4252] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 503.229612][ T4252] EXT4-fs error (device loop1): ext4_release_dquot:6883: comm kworker/u8:8: Failed to release dquot type 0 [ 503.437428][T13454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.500447][T13454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.720233][T13454] team0: Port device team_slave_0 added [ 503.777312][T13454] team0: Port device team_slave_1 added [ 503.836223][ T5123] Bluetooth: hci2: command tx timeout [ 503.878560][T13679] loop4: detected capacity change from 0 to 64 [ 504.010935][T13454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.029695][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.121813][T13454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.205587][T13454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.212563][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.253829][T13670] loop3: detected capacity change from 0 to 40427 [ 504.291859][T13670] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 504.313752][T13670] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 504.332797][T13454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.346728][T13670] F2FS-fs (loop3): invalid crc value [ 504.359583][T13670] F2FS-fs (loop3): Found nat_bits in checkpoint [ 504.538828][T13670] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 504.550866][T13670] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 504.603315][ T29] audit: type=1800 audit(1716847143.904:834): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 504.630604][ T29] audit: type=1804 audit(1716847143.924:835): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir733952586/syzkaller.9oK6Cs/79/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 504.660145][ T29] audit: type=1804 audit(1716847143.955:836): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir733952586/syzkaller.9oK6Cs/79/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 504.755758][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.775600][ T5133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 504.785792][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 504.794064][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 504.802862][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 504.820649][ T5133] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 504.840486][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 504.869325][ T5177] usb 18-1: device descriptor read/8, error -110 [ 505.189058][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.266820][ T5395] usb 16-1: device descriptor read/8, error -110 [ 505.309384][ T5177] usb usb18-port1: attempt power cycle [ 505.317858][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.392911][T13454] hsr_slave_0: entered promiscuous mode [ 505.446668][T13454] hsr_slave_1: entered promiscuous mode [ 505.453170][T13454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.467481][T13454] Cannot create hsr debugfs directory [ 505.507827][T13558] chnl_net:caif_netlink_parms(): no params data found [ 505.619400][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.661955][T13706] loop3: detected capacity change from 0 to 64 [ 505.705252][ T5395] usb usb16-port1: unable to enumerate USB device [ 505.902528][ T5123] Bluetooth: hci2: command tx timeout [ 505.975889][ T5177] usb usb18-port1: unable to enumerate USB device [ 506.275171][ T5133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 506.286542][ T5133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 506.294596][ T5133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 506.308784][ T5133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 506.325955][ T5133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 506.333402][ T5133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 506.356887][T13558] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.365232][T13558] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.394244][T13558] bridge_slave_0: entered allmulticast mode [ 506.402286][T13558] bridge_slave_0: entered promiscuous mode [ 506.424633][T13558] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.434293][T13558] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.441603][T13558] bridge_slave_1: entered allmulticast mode [ 506.448956][T13558] bridge_slave_1: entered promiscuous mode [ 506.599262][T13558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.646420][T13558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.764924][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.924551][T13558] team0: Port device team_slave_0 added [ 506.937202][ T5133] Bluetooth: hci4: command tx timeout [ 507.044176][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.106998][T13558] team0: Port device team_slave_1 added [ 507.406355][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.422116][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.434165][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.445054][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.478291][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.485804][T13742] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 507.492327][T13742] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 507.506117][ T5123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 507.510669][T13558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.513625][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.527739][T13558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.552191][T13742] vhci_hcd vhci_hcd.0: Device attached [ 507.559316][T13558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.589651][T13742] loop3: detected capacity change from 0 to 256 [ 507.600905][T13742] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 507.619158][T13742] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 507.641454][T13742] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 507.649106][T13742] UDF-fs: Scanning with blocksize 512 failed [ 507.668836][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.671748][T13742] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 507.713942][T13742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.724174][T13558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.737916][T13558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.768085][T13743] vhci_hcd: connection closed [ 507.768341][ T1084] vhci_hcd: stop threads [ 507.768460][T13558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.784134][ T1084] vhci_hcd: release socket [ 507.795089][ T1084] vhci_hcd: disconnect device [ 507.860271][ T5395] usb 16-1: enqueue for inactive port 0 [ 507.891818][T13696] chnl_net:caif_netlink_parms(): no params data found [ 508.177916][T13558] hsr_slave_0: entered promiscuous mode [ 508.196460][T13558] hsr_slave_1: entered promiscuous mode [ 508.202930][T13558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.211174][T13558] Cannot create hsr debugfs directory [ 508.325547][T13696] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.333090][T13696] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.340844][T13696] bridge_slave_0: entered allmulticast mode [ 508.348973][T13696] bridge_slave_0: entered promiscuous mode [ 508.379733][ T5395] usb usb16-port1: attempt power cycle [ 508.438036][T13696] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.445263][T13696] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.452868][ T5123] Bluetooth: hci5: command tx timeout [ 508.475950][T13696] bridge_slave_1: entered allmulticast mode [ 508.493155][T13696] bridge_slave_1: entered promiscuous mode [ 508.562585][ T11] bridge_slave_1: left allmulticast mode [ 508.568510][ T11] bridge_slave_1: left promiscuous mode [ 508.574211][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.612971][ T11] bridge_slave_0: left allmulticast mode [ 508.621454][ T11] bridge_slave_0: left promiscuous mode [ 508.628521][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.642257][ T11] bridge_slave_1: left allmulticast mode [ 508.649025][ T11] bridge_slave_1: left promiscuous mode [ 508.654738][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.664827][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.003421][ T5123] Bluetooth: hci4: command tx timeout [ 509.034831][ T5395] usb usb16-port1: unable to enumerate USB device [ 509.556725][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.560495][ T5123] Bluetooth: hci0: command tx timeout [ 509.584904][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.606425][ T11] bond0 (unregistering): Released all slaves [ 509.885362][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.905011][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.921636][ T11] bond0 (unregistering): Released all slaves [ 509.947345][T13454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 510.097771][T13696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.125225][T13454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 510.140625][T13454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 510.159632][T13454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 510.177757][ T11] tipc: Left network mode [ 510.185143][T13696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.254973][T13725] chnl_net:caif_netlink_parms(): no params data found [ 510.481731][T13696] team0: Port device team_slave_0 added [ 510.515246][ T5123] Bluetooth: hci5: command tx timeout [ 510.546201][T13739] chnl_net:caif_netlink_parms(): no params data found [ 510.563699][T13696] team0: Port device team_slave_1 added [ 510.844543][T13696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.851524][T13696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.912600][T13696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.938506][T13696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.952105][T13696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.995334][T13696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.071994][ T5123] Bluetooth: hci4: command tx timeout [ 511.085154][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.111546][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.118710][T13725] bridge_slave_0: entered allmulticast mode [ 511.142911][T13725] bridge_slave_0: entered promiscuous mode [ 511.268049][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.276576][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.288358][T13725] bridge_slave_1: entered allmulticast mode [ 511.302170][T13725] bridge_slave_1: entered promiscuous mode [ 511.621472][T13775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.630011][ T5123] Bluetooth: hci0: command tx timeout [ 511.710900][T13777] loop3: detected capacity change from 0 to 64 [ 511.806344][T13696] hsr_slave_0: entered promiscuous mode [ 511.820995][T13696] hsr_slave_1: entered promiscuous mode [ 511.827908][T13696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.835470][T13696] Cannot create hsr debugfs directory [ 511.876703][T13739] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.884688][T13739] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.892076][T13739] bridge_slave_0: entered allmulticast mode [ 511.899992][T13739] bridge_slave_0: entered promiscuous mode [ 511.906383][T13779] loop3: detected capacity change from 0 to 128 [ 511.933240][T13725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.993327][T13739] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.003139][T13739] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.017018][T13739] bridge_slave_1: entered allmulticast mode [ 512.025220][T13739] bridge_slave_1: entered promiscuous mode [ 512.055934][T13725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.065217][T13779] *: renamed from veth1_vlan (while UP) [ 512.128811][ T11] hsr_slave_0: left promiscuous mode [ 512.134823][ T11] hsr_slave_1: left promiscuous mode [ 512.142273][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.159448][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.178991][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.187280][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.200903][ T11] hsr_slave_0: left promiscuous mode [ 512.214305][ T11] hsr_slave_1: left promiscuous mode [ 512.230814][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.238376][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.246725][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.254137][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.346423][ T11] veth1_macvtap: left promiscuous mode [ 512.351992][ T11] veth0_macvtap: left promiscuous mode [ 512.358040][ T11] veth1_vlan: left promiscuous mode [ 512.364052][ T11] veth0_vlan: left promiscuous mode [ 512.371066][ T11] veth1_macvtap: left promiscuous mode [ 512.379132][ T11] veth0_macvtap: left promiscuous mode [ 512.385108][ T11] veth1_vlan: left promiscuous mode [ 512.390473][ T11] veth0_vlan: left promiscuous mode [ 512.583951][ T5123] Bluetooth: hci5: command tx timeout [ 513.140718][ T5123] Bluetooth: hci4: command tx timeout [ 513.179632][ T11] team0 (unregistering): Port device team_slave_1 removed [ 513.231840][ T11] team0 (unregistering): Port device team_slave_0 removed [ 513.707829][ T5123] Bluetooth: hci0: command tx timeout [ 513.801995][ T11] veth3 (unregistering): left allmulticast mode [ 514.289929][ T11] team0 (unregistering): Port device team_slave_1 removed [ 514.345054][ T11] team0 (unregistering): Port device team_slave_0 removed [ 514.653230][ T5123] Bluetooth: hci5: command tx timeout [ 514.968511][T13725] team0: Port device team_slave_0 added [ 515.070133][T13739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.084870][T13739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.153371][T13725] team0: Port device team_slave_1 added [ 515.343244][T13725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.362539][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.399227][T13725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.421033][T13725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.427988][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.467562][T13725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.502190][T13739] team0: Port device team_slave_0 added [ 515.613116][T13739] team0: Port device team_slave_1 added [ 515.778632][ T5123] Bluetooth: hci0: command tx timeout [ 515.785718][T13739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.811724][T13739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.853650][T13739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.943654][T13454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.969418][T13739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.976373][T13739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.036120][T13739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.070642][ T5133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 516.083581][ T5133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 516.099196][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 516.112845][T13725] hsr_slave_0: entered promiscuous mode [ 516.114952][ T5133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 516.126586][T13725] hsr_slave_1: entered promiscuous mode [ 516.135601][T13725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.135733][ T5133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 516.143249][T13725] Cannot create hsr debugfs directory [ 516.160255][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 516.172844][T13558] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 516.220366][T13558] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 516.302573][T13558] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 516.344275][T13454] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.392591][T13558] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.498738][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.505940][ T5174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.523168][T13739] hsr_slave_0: entered promiscuous mode [ 516.529976][T13739] hsr_slave_1: entered promiscuous mode [ 516.538093][T13739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.545902][T13739] Cannot create hsr debugfs directory [ 516.676547][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.683755][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.153706][T13696] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 517.198579][T13725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.273421][T13696] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 517.288374][T13696] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 517.334811][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.393729][T13725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.474624][T13696] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 517.505518][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.552843][T13725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.632213][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.676826][T13558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.727204][T13725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.800685][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.817423][T13784] chnl_net:caif_netlink_parms(): no params data found [ 517.885996][T13558] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.034331][T13739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.062986][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.070181][ T5432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.080645][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.087831][ T5432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.197022][T13739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.236543][ T5123] Bluetooth: hci1: command tx timeout [ 518.306953][T13739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.322060][T13784] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.331183][T13784] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.338546][T13784] bridge_slave_0: entered allmulticast mode [ 518.346225][T13784] bridge_slave_0: entered promiscuous mode [ 518.355617][T13784] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.362915][T13784] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.376210][T13784] bridge_slave_1: entered allmulticast mode [ 518.388466][T13784] bridge_slave_1: entered promiscuous mode [ 518.421847][T13454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.451719][T13739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.534258][T13784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.588738][T13784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.680663][ T11] bridge_slave_1: left allmulticast mode [ 518.702321][ T11] bridge_slave_1: left promiscuous mode [ 518.708904][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.727344][ T11] bridge_slave_0: left allmulticast mode [ 518.733091][ T11] bridge_slave_0: left promiscuous mode [ 518.750323][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.769394][ T11] bridge_slave_1: left allmulticast mode [ 518.781621][ T11] bridge_slave_1: left promiscuous mode [ 518.787586][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.798839][ T11] bridge_slave_0: left allmulticast mode [ 518.804968][ T11] bridge_slave_0: left promiscuous mode [ 518.810720][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.822093][ T11] bridge_slave_1: left allmulticast mode [ 518.827997][ T11] bridge_slave_1: left promiscuous mode [ 518.833876][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.845288][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.276533][ T11] ip6_vti0 (unregistering): left allmulticast mode [ 519.926991][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.939771][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.953061][ T11] bond0 (unregistering): Released all slaves [ 520.106992][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.123040][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.135880][ T11] bond0 (unregistering): Released all slaves [ 520.282825][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.294849][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.307108][ T11] bond0 (unregistering): Released all slaves [ 520.315179][ T5123] Bluetooth: hci1: command tx timeout [ 520.350187][T13784] team0: Port device team_slave_0 added [ 520.495232][T13784] team0: Port device team_slave_1 added [ 520.664145][T13784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.671561][T13784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.699853][T13784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.775042][T13784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.782499][T13784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.810587][T13784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.918370][T13739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 520.934056][T13739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 520.951742][T13454] veth0_vlan: entered promiscuous mode [ 521.031087][T13739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 521.049248][T13739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 521.067482][T13558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.106971][T13784] hsr_slave_0: entered promiscuous mode [ 521.117093][T13784] hsr_slave_1: entered promiscuous mode [ 521.123526][T13784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.131508][T13784] Cannot create hsr debugfs directory [ 521.183325][T13696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.218327][T13454] veth1_vlan: entered promiscuous mode [ 521.422541][T13696] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.442973][T13725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 521.455442][T13725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 521.550094][T13454] veth0_macvtap: entered promiscuous mode [ 521.559530][T13725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 521.574681][T13725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 521.694333][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.701475][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.722659][T13454] veth1_macvtap: entered promiscuous mode [ 521.779919][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.787057][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.994161][ T11] hsr_slave_0: left promiscuous mode [ 522.009583][ T11] hsr_slave_1: left promiscuous mode [ 522.016935][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.025598][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.037565][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.046299][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.058885][ T11] hsr_slave_0: left promiscuous mode [ 522.065779][ T11] hsr_slave_1: left promiscuous mode [ 522.073278][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.080885][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.088964][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.097149][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.109628][ T11] hsr_slave_0: left promiscuous mode [ 522.119307][ T11] hsr_slave_1: left promiscuous mode [ 522.127096][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.134685][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.152007][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.159436][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.237998][ T11] veth1_macvtap: left promiscuous mode [ 522.243715][ T11] veth0_macvtap: left promiscuous mode [ 522.250358][ T11] *: left promiscuous mode [ 522.254928][ T11] veth0_vlan: left promiscuous mode [ 522.263029][ T11] veth1_macvtap: left promiscuous mode [ 522.268551][ T11] veth0_macvtap: left promiscuous mode [ 522.274851][ T11] veth1_vlan: left promiscuous mode [ 522.280711][ T11] veth0_vlan: left promiscuous mode [ 522.289024][ T11] veth1_macvtap: left promiscuous mode [ 522.295179][ T11] veth0_macvtap: left promiscuous mode [ 522.301512][ T11] veth1_vlan: left promiscuous mode [ 522.306817][ T11] veth0_vlan: left promiscuous mode [ 522.380403][ T5123] Bluetooth: hci1: command tx timeout [ 523.305075][ T11] team0 (unregistering): Port device team_slave_1 removed [ 523.357500][ T11] team0 (unregistering): Port device team_slave_0 removed [ 524.372338][ T11] team0 (unregistering): Port device team_slave_1 removed [ 524.429744][ T11] team0 (unregistering): Port device team_slave_0 removed [ 524.461793][ T5123] Bluetooth: hci1: command tx timeout [ 524.997991][ T11] veth3 (unregistering): left allmulticast mode [ 525.493927][ T11] team0 (unregistering): Port device team_slave_1 removed [ 525.552120][ T11] team0 (unregistering): Port device team_slave_0 removed [ 526.262182][T13454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.273969][T13454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.285793][T13454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.318812][T13558] veth0_vlan: entered promiscuous mode [ 526.333700][T13454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.345088][T13454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.365700][T13454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.383902][T13696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.394548][T13696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.449931][T13454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.459115][T13454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.468048][T13454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.478413][T13454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.629598][T13558] veth1_vlan: entered promiscuous mode [ 526.702938][T13739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.857837][T13725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.949567][T13696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.963921][T13784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 527.004657][T13784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 527.035121][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.046037][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.093807][T13739] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.103808][T13784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 527.152710][T13558] veth0_macvtap: entered promiscuous mode [ 527.164307][T13784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 527.180084][T13725] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.275726][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.282977][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.304471][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.311628][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.353612][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.375192][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.383049][T13558] veth1_macvtap: entered promiscuous mode [ 527.446257][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.453444][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.555289][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.575712][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.585865][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.596574][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.608096][T13558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.617930][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.625126][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.680452][T13739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 527.719279][T13739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 527.790133][T13725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 527.805490][T13725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.202873][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.219352][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.229258][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.239897][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.252524][T13558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.309782][T13558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.334571][T13558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.352559][T13558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.362769][T13558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.763864][T13696] veth0_vlan: entered promiscuous mode [ 528.839406][T13739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.875898][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.906679][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.918981][T13696] veth1_vlan: entered promiscuous mode [ 528.960264][T13725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.967247][T13828] loop0: detected capacity change from 0 to 2048 [ 528.999007][T13830] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 529.006153][T13784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.043365][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.064984][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.093955][ T29] audit: type=1804 audit(1716847168.509:837): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2344237739/syzkaller.Q7yule/2/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 529.204788][T13784] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.259434][T13696] veth0_macvtap: entered promiscuous mode [ 529.266015][T13830] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 529.296973][T13830] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 529.298614][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.313237][ T5395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.316099][T13830] Remounting filesystem read-only [ 529.335093][ T68] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 529.353508][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.360701][ T5395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.376622][ T68] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 529.383944][ T68] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.410140][ T68] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.440869][T13696] veth1_macvtap: entered promiscuous mode [ 529.442993][ T68] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.465957][T13454] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 529.484749][T13454] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 529.508507][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.542545][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.567399][T13454] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 529.581612][T13454] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 529.610570][T13454] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 529.616204][T13725] veth0_vlan: entered promiscuous mode [ 529.624680][T13454] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 529.651428][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.670631][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.680060][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.714486][T13725] veth1_vlan: entered promiscuous mode [ 529.720534][T13454] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 529.746260][T13454] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 529.774056][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.783034][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.794269][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.805363][T13454] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 529.812063][T13454] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 529.821381][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.852846][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.860325][T13454] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 529.867302][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.883770][T13454] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 529.891076][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 529.892088][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.920848][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.932667][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.956245][T13696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.009925][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.039451][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.061000][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.086166][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.096342][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.121749][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.136639][T13696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.191968][T13696] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.236587][T13696] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.252610][T13696] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.269380][T13696] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.317862][T13739] veth0_vlan: entered promiscuous mode [ 530.368520][T13725] veth0_macvtap: entered promiscuous mode [ 530.388903][T13739] veth1_vlan: entered promiscuous mode [ 530.466925][T13725] veth1_macvtap: entered promiscuous mode [ 530.656856][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.701329][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.715974][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.729753][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.739699][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.750295][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.767190][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.792715][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.813241][T13725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.862464][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.890681][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.900496][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.914158][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.925811][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.936347][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.947613][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.958169][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.973142][T13725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.068956][ T5177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.083969][T13739] veth0_macvtap: entered promiscuous mode [ 531.094641][ T5177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.133521][T13725] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.158028][T13725] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.182791][T13725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.192609][T13725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.226063][T13739] veth1_macvtap: entered promiscuous mode [ 531.322503][ T1084] bridge_slave_1: left allmulticast mode [ 531.326598][T13858] loop2: detected capacity change from 0 to 40427 [ 531.335791][ T1084] bridge_slave_1: left promiscuous mode [ 531.348007][T13858] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 531.350242][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.363382][T13858] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 531.376532][ T1084] bridge_slave_0: left allmulticast mode [ 531.383873][ T1084] bridge_slave_0: left promiscuous mode [ 531.391904][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.395606][T13858] F2FS-fs (loop2): invalid crc value [ 531.413511][T13867] loop0: detected capacity change from 0 to 256 [ 531.431134][T13858] F2FS-fs (loop2): Found nat_bits in checkpoint [ 531.461643][T13867] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xe4d18cae, utbl_chksum : 0xe619d30d) [ 531.524755][T13858] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 531.547174][T13858] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 531.598400][ T29] audit: type=1800 audit(1716847171.016:838): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 531.624958][ T29] audit: type=1804 audit(1716847171.047:839): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1878538468/syzkaller.PzZBVf/7/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 531.653960][ T29] audit: type=1804 audit(1716847171.077:840): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1878538468/syzkaller.PzZBVf/7/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 531.779710][ T1084] bridge0 (unregistering): left promiscuous mode [ 532.113965][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.136612][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.158746][ T1084] bond0 (unregistering): Released all slaves [ 532.221394][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.261660][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.288948][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.299544][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.309564][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.320151][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.330015][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.388080][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.418587][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.441193][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.506755][T13739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.563981][T13860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.579936][T13784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.594938][T13860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.791609][T13784] veth0_vlan: entered promiscuous mode [ 532.858746][T13784] veth1_vlan: entered promiscuous mode [ 533.017930][T13881] loop0: detected capacity change from 0 to 2048 [ 533.055693][T13883] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.147458][ T29] audit: type=1804 audit(1716847172.571:841): pid=13885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2344237739/syzkaller.Q7yule/7/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 533.172909][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.198949][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.217099][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.245409][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.273977][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.290424][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.300723][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.311458][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.333091][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.344886][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.359139][T13739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.371406][T13739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.386091][T13739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.386841][T13883] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 533.395252][T13739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.416879][T13883] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 533.419917][T13739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.456821][T13883] Remounting filesystem read-only [ 533.489555][ T4252] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 533.532587][ T4252] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 533.542595][ T4252] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.555259][ T4252] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.590919][ T4252] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.600432][ T4252] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 533.619758][ T4252] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 533.633471][ T4252] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.655911][ T4252] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.667395][ T4252] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.667541][T13895] loop2: detected capacity change from 0 to 128 [ 533.685523][T13895] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 533.713187][ T4252] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 533.719892][ T4252] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 533.728348][ T4252] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 533.734022][T13895] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 533.735722][ T4252] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 533.752772][ T5432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.761828][ T5432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.772820][ T4252] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.786310][T13784] veth0_macvtap: entered promiscuous mode [ 533.798567][ T4252] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 533.810659][ T4252] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 533.818414][ T4252] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.837881][ T4252] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.838006][ T1084] hsr_slave_0: left promiscuous mode [ 533.852231][ T4252] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.862484][T13454] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 533.871649][T13454] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 533.878701][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.878723][ T1084] hsr_slave_1: left promiscuous mode [ 533.889248][T13454] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 533.904528][T13454] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 533.911999][T13454] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 533.919734][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.936323][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.575743][T13915] loop0: detected capacity change from 0 to 764 [ 534.615701][T13916] loop5: detected capacity change from 0 to 2048 [ 534.632643][T13915] rock: directory entry would overflow storage [ 534.644342][T13915] rock: sig=0x4f50, size=4, remaining=3 [ 534.645824][T13917] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.649889][T13915] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 534.691403][ T29] audit: type=1804 audit(1716847174.125:842): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir615082908/syzkaller.vdwHgk/2/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 534.772551][T13917] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 534.791244][T13917] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 534.803243][T13917] Remounting filesystem read-only [ 534.809162][ T51] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 534.842278][ T51] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 534.843013][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 534.849571][ T51] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 534.849600][ T51] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 534.849625][ T51] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 534.884253][T13696] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 534.900968][T13696] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 534.909036][T13696] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 534.936398][T13696] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 534.945394][T13696] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 534.973840][T13696] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 534.992153][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 535.001357][T13696] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 535.013159][T13696] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 535.046402][T13696] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.066050][T13696] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.075871][T13696] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.093286][T13696] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 535.115644][T13696] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 535.123179][T13696] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.145889][T13696] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.173443][T13696] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.182827][T13696] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 535.213847][T13696] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 535.222187][T13696] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 535.229754][T13696] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 535.237142][T13696] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.843846][T13948] loop0: detected capacity change from 0 to 764 [ 535.865671][T13948] rock: directory entry would overflow storage [ 535.872044][T13948] rock: sig=0x4f50, size=4, remaining=3 [ 535.879030][T13948] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 536.099452][T13784] veth1_macvtap: entered promiscuous mode [ 536.118881][T13950] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 536.194128][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.205017][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.216153][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.230061][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.241612][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.252230][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.263191][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.273839][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.286070][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.300332][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.310242][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.320760][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.363354][T13784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.393446][ T5511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.427075][ T5511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.433088][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.450059][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.462080][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.492609][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.502904][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.513689][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.553390][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.578147][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.601025][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.617953][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.651644][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.656536][T13964] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.670127][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.738561][T13784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.821328][T13784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.836491][T13784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.857804][T13784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.869143][T13784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.087260][T13570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.103946][T13570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.241066][T13860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.271358][T13860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.332005][ T5178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.367230][ T5178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.453648][ T5123] Bluetooth: hci0: command 0x0c20 tx timeout [ 537.501414][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.520045][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.635782][T13985] loop1: detected capacity change from 0 to 8192 [ 537.660143][T13985] REISERFS warning (device loop1): super-6505 reiserfs_getopt: head of option "nouser_xattr" is only correct [ 537.660143][T13985] [ 537.701980][T13992] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 537.925773][T14003] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.017625][T14005] loop2: detected capacity change from 0 to 1024 [ 538.306217][ T1084] hfsplus: b-tree write err: -5, ino 4 [ 538.670947][T14036] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 538.779407][T14040] loop0: detected capacity change from 0 to 764 [ 538.806009][T14040] rock: directory entry would overflow storage [ 538.807264][T14042] x_tables: unsorted underflow at hook 2 [ 538.860311][T14040] rock: sig=0x4f50, size=4, remaining=3 [ 538.865895][T14040] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 538.918143][T14046] loop3: detected capacity change from 0 to 2048 [ 538.961875][T14046] EXT4-fs: Ignoring removed bh option [ 538.967286][T14046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 538.986968][T14042] loop5: detected capacity change from 0 to 2048 [ 539.004617][T14046] EXT4-fs: Ignoring removed nobh option [ 539.021519][T14042] udf: Bad value for 'session' [ 539.048936][T14050] loop1: detected capacity change from 0 to 1024 [ 539.072149][T14046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.102196][T14046] EXT4-fs error (device loop3): __ext4_remount:6503: comm syz-executor.3: Abort forced by user [ 539.120555][T14046] EXT4-fs (loop3): Remounting filesystem read-only [ 539.148321][T14057] loop0: detected capacity change from 0 to 256 [ 539.158079][T14057] exfat: Deprecated parameter 'namecase' [ 539.165720][T14057] exfat: Deprecated parameter 'namecase' [ 539.171678][T14057] exfat: Deprecated parameter 'namecase' [ 539.191768][T14057] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 539.256485][T13784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.342469][ T11] hfsplus: b-tree write err: -5, ino 4 [ 539.397935][T14061] loop4: detected capacity change from 0 to 256 [ 539.431203][T14061] exfat: Deprecated parameter 'namecase' [ 539.451678][T14061] exfat: Deprecated parameter 'namecase' [ 539.503687][T14061] exfat: Deprecated parameter 'namecase' [ 539.533479][T14061] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 539.545839][ T5123] Bluetooth: hci0: command tx timeout [ 539.795258][T14079] loop3: detected capacity change from 0 to 16 [ 539.803345][T14081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 539.817812][T14082] loop1: detected capacity change from 0 to 64 [ 539.845353][T14079] erofs: (device loop3): mounted with root inode @ nid 36. [ 539.908793][T14085] loop0: detected capacity change from 0 to 16 [ 539.952581][T14085] erofs: (device loop0): mounted with root inode @ nid 36. [ 540.158033][T14093] loop3: detected capacity change from 0 to 256 [ 540.552186][T14116] x_tables: unsorted underflow at hook 2 [ 540.567232][T14113] loop0: detected capacity change from 0 to 256 [ 540.598778][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 540.602914][T14113] exfat: Deprecated parameter 'namecase' [ 540.630427][T14113] exfat: Deprecated parameter 'namecase' [ 540.653350][T14113] exfat: Deprecated parameter 'namecase' [ 540.679574][T14113] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 540.760907][T14122] loop4: detected capacity change from 0 to 1024 [ 540.777695][T14122] EXT4-fs: Ignoring removed orlov option [ 540.783369][T14122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 540.798059][T14116] loop1: detected capacity change from 0 to 2048 [ 540.818333][T14116] udf: Bad value for 'session' [ 540.833308][T14122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.129571][T13739] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.180815][T14142] loop1: detected capacity change from 0 to 128 [ 541.493540][T14156] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 541.605083][ T5123] Bluetooth: hci0: command tx timeout [ 541.756250][T14173] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 541.800425][ C1] Unknown status report in ack skb [ 541.973436][ T5176] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 542.194868][ T5176] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 542.242921][ T5176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.253954][ T5176] usb 1-1: Product: syz [ 542.258137][ T5176] usb 1-1: Manufacturer: syz [ 542.297616][ T5176] usb 1-1: SerialNumber: syz [ 542.373012][ T5176] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 542.540460][T13860] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 542.839594][T14207] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 542.867931][ T45] usb 1-1: USB disconnect, device number 4 [ 542.918748][ C1] Unknown status report in ack skb [ 543.126616][ T29] audit: type=1326 audit(1716847182.574:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8c07cee9 code=0x7ffc0000 [ 543.132247][T14220] loop2: detected capacity change from 0 to 16 [ 543.199834][T14220] erofs: (device loop2): mounted with root inode @ nid 36. [ 543.210228][ T29] audit: type=1326 audit(1716847182.574:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8c07cee9 code=0x7ffc0000 [ 543.293619][ T29] audit: type=1326 audit(1716847182.614:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e8c07cee9 code=0x7ffc0000 [ 543.357382][T14185] loop3: detected capacity change from 0 to 32768 [ 543.362120][ T29] audit: type=1326 audit(1716847182.614:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8c07cee9 code=0x7ffc0000 [ 543.377816][T14185] bcachefs (/dev/loop3): error reading default superblock: checksum error, type crc32c_nonzero: got f6a5b872 should be 29d2fb78 [ 543.479482][ T29] audit: type=1326 audit(1716847182.614:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8c07cee9 code=0x7ffc0000 [ 543.502545][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.547239][ T29] audit: type=1326 audit(1716847182.614:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e8c07cee9 code=0x7ffc0000 [ 543.570120][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.661913][ T29] audit: type=1326 audit(1716847182.614:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8c07cee9 code=0x7ffc0000 [ 543.693396][T13860] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 543.697609][ T5123] Bluetooth: hci0: command tx timeout [ 543.711480][T13860] ath9k_htc: Failed to initialize the device [ 543.725834][T14185] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 543.751334][T14185] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 543.757381][ T29] audit: type=1326 audit(1716847182.614:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e8c07a667 code=0x7ffc0000 [ 543.762559][ T45] usb 1-1: ath9k_htc: USB layer deinitialized [ 543.867220][ T29] audit: type=1326 audit(1716847182.614:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e8c040329 code=0x7ffc0000 [ 543.917334][T14185] bcachefs (loop3): alloc_read... done [ 543.955337][ T29] audit: type=1326 audit(1716847182.614:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e8c07a667 code=0x7ffc0000 [ 543.959133][T14185] bcachefs (loop3): stripes_read... done [ 544.084081][T14185] bcachefs (loop3): snapshots_read... done [ 544.161339][T14185] bcachefs (loop3): going read-write [ 544.207698][T14185] bcachefs (loop3): journal_replay... done [ 544.317826][T14185] bcachefs (loop3): resume_logged_ops... done [ 544.319647][T14259] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 544.355076][T14185] bcachefs (loop3): delete_dead_inodes... done [ 544.380944][T14185] bcachefs (loop3): done starting filesystem [ 544.668616][T13784] bcachefs (loop3): shutting down [ 544.673959][T13784] bcachefs (loop3): going read-only [ 544.684245][T13784] bcachefs (loop3): finished waiting for writes to stop [ 544.693425][T14243] loop1: detected capacity change from 0 to 32768 [ 544.717250][T13784] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 544.736394][T14243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (14243) [ 544.777935][T13784] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 544.792141][T14243] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 544.798311][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 544.802844][T14243] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 544.825517][T14243] BTRFS info (device loop1): using free-space-tree [ 544.835428][T13784] bcachefs (loop3): shutdown complete, journal seq 15 [ 544.843344][T13784] bcachefs (loop3): marking filesystem clean [ 544.915144][T13784] bcachefs (loop3): shutdown complete [ 545.046202][ T45] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 545.059381][T13725] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 545.064697][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.086355][ T45] usb 5-1: Product: syz [ 545.108695][ T45] usb 5-1: Manufacturer: syz [ 545.160762][ T45] usb 5-1: SerialNumber: syz [ 545.206238][ T45] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 545.255662][ T5395] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 547.117980][T14314] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 547.131833][ T5395] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 555.445232][T14309] loop1: detected capacity change from 0 to 32768 [ 555.465782][T14334] input: syz1 as /devices/virtual/input/input24 [ 557.905134][T14350] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 557.965590][T14351] input: syz1 as /devices/virtual/input/input25 [ 557.979075][T14351] input: failed to attach handler leds to device input25, error: -6 [ 560.533127][T14369] loop1: detected capacity change from 0 to 32768 [ 560.571641][T14369] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got f6a5b872 should be 29d2fb78 [ 561.922463][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.913256][T14369] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR [ 567.913632][T14369] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 568.154642][T14377] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 573.795280][ C0] Unknown status report in ack skb [ 575.643710][T14393] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 575.717822][ T5133] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 575.729011][ T7684] bridge_slave_1: left allmulticast mode [ 575.750991][ T5133] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 575.759582][ T5133] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 575.778760][ T7684] bridge_slave_1: left promiscuous mode [ 575.786366][ T5133] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 575.795664][ T5133] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 575.803900][ T5133] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 575.932207][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.202559][ T7684] bridge_slave_0: left allmulticast mode [ 576.252235][ T7684] bridge_slave_0: left promiscuous mode [ 576.300730][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.156413][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 577.171469][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 577.184337][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 577.195368][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 577.206051][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 577.217953][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 577.909439][ T5133] Bluetooth: hci6: command tx timeout [ 579.221805][T14424] loop5: detected capacity change from 0 to 32768 [ 579.331873][ T5133] Bluetooth: hci2: command tx timeout [ 579.350443][T14424] bcachefs (/dev/loop5): error reading default superblock: checksum error, type crc32c_nonzero: got f6a5b872 should be 29d2fb78 [ 579.867957][T14424] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 579.884232][T14424] bcachefs (loop5): recovering from clean shutdown, journal seq 7 [ 579.941935][T14424] bcachefs (loop5): alloc_read... done [ 579.953088][T14424] bcachefs (loop5): stripes_read... done [ 579.963558][T14424] bcachefs (loop5): snapshots_read... done [ 579.969673][ T5133] Bluetooth: hci6: command tx timeout [ 579.986009][T14424] bcachefs (loop5): going read-write [ 579.998146][T14424] bcachefs (loop5): journal_replay... done [ 580.041680][T14424] bcachefs (loop5): resume_logged_ops... done [ 580.067141][T14424] bcachefs (loop5): delete_dead_inodes... done [ 580.084216][T14424] bcachefs (loop5): done starting filesystem [ 580.434194][T13696] bcachefs (loop5): shutting down [ 580.443942][T13696] bcachefs (loop5): going read-only [ 580.457784][T13696] bcachefs (loop5): finished waiting for writes to stop [ 580.693346][T13696] bcachefs (loop5): flushing journal and stopping allocators, journal seq 12 [ 580.725440][T13696] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 13 [ 580.781787][T13696] bcachefs (loop5): shutdown complete, journal seq 14 [ 580.797732][T13696] bcachefs (loop5): marking filesystem clean [ 581.015099][T13696] bcachefs (loop5): shutdown complete [ 581.418927][ T5123] Bluetooth: hci2: command tx timeout [ 582.053404][ T5123] Bluetooth: hci6: command tx timeout [ 582.345570][T14435] loop5: detected capacity change from 0 to 2048 [ 582.372853][T14435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.487228][ T5123] Bluetooth: hci2: command tx timeout [ 583.921304][T14437] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 584.125897][ T5123] Bluetooth: hci6: command tx timeout [ 585.565055][ T5123] Bluetooth: hci2: command tx timeout [ 588.862110][ T7684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.141619][ T7684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.176061][ T7684] bond0 (unregistering): Released all slaves [ 593.147298][T14453] loop1: detected capacity change from 0 to 2048 [ 593.178581][T14453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 594.403120][ C0] Unknown status report in ack skb [ 594.722013][T14457] loop5: detected capacity change from 0 to 2048 [ 594.754055][T14457] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 594.782584][T14457] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 594.852632][T14457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 596.812193][T14469] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 596.866305][T14470] input: syz1 as /devices/virtual/input/input26 [ 596.880106][T14470] input: failed to attach handler leds to device input26, error: -6 [ 596.946540][T14462] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 597.182536][T14472] loop1: detected capacity change from 0 to 512 [ 597.222676][T14472] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 597.280304][T14472] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 597.336870][T14472] EXT4-fs (loop1): orphan cleanup on readonly fs [ 597.360746][T14472] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 597.469128][T14472] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 597.533396][T14472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 598.080224][T13725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.127335][T14487] loop5: detected capacity change from 0 to 8 [ 599.181720][T14487] Filesystem uses "unknown" compression. This is not supported [ 599.252821][T13729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.266421][T13729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.284911][T13729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.294496][T13729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.305510][T13729] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 599.313093][T13729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 600.076190][T14487] loop5: detected capacity change from 0 to 512 [ 600.111401][T14487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.131011][T14487] ext4 filesystem being mounted at /root/syzkaller-testdir615082908/syzkaller.vdwHgk/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 600.425292][T13696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.435882][ T5133] Bluetooth: hci2: command 0x0405 tx timeout [ 601.139518][T14498] loop5: detected capacity change from 0 to 64 [ 601.398696][ T5133] Bluetooth: hci3: command tx timeout [ 601.780193][T14500] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 603.478552][ T5133] Bluetooth: hci3: command tx timeout [ 605.557564][ T5133] Bluetooth: hci3: command tx timeout [ 607.035685][ T5123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.045313][ T5123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.053697][ T5123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.062556][ T5123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.073659][ T5123] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 607.081069][ T5123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.637149][ T5123] Bluetooth: hci3: command tx timeout [ 609.156644][ T5123] Bluetooth: hci5: command tx timeout [ 611.236055][ T5123] Bluetooth: hci5: command tx timeout [ 613.315887][ T5123] Bluetooth: hci5: command tx timeout [ 615.395147][ T5123] Bluetooth: hci5: command tx timeout [ 623.242268][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.530588][ T5123] Bluetooth: hci4: command 0x0406 tx timeout [ 630.552614][ T5123] Bluetooth: hci0: command tx timeout [ 632.566930][ T5133] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 632.578083][ T5133] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 632.586513][ T5133] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 632.594794][ T5133] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 632.603221][ T5133] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 632.610595][ T5133] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 634.673882][ T5133] Bluetooth: hci7: command tx timeout [ 636.752156][ T5133] Bluetooth: hci7: command tx timeout [ 638.831985][T14505] Bluetooth: hci7: command tx timeout [ 639.667822][T14505] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 639.691990][T14505] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 639.701210][T14505] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 639.720303][T14505] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 639.728911][T14505] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 639.737404][T14505] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 640.224681][ T5133] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 640.239938][ T5133] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 640.251708][ T5133] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 640.260186][ T5133] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 640.268284][ T5133] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 640.275727][ T5133] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 640.684383][ T5133] Bluetooth: hci1: command 0x0406 tx timeout [ 640.901896][ T5133] Bluetooth: hci7: command tx timeout [ 641.791876][T13729] Bluetooth: hci8: command tx timeout [ 642.361530][T13729] Bluetooth: hci9: command tx timeout [ 643.871407][T13729] Bluetooth: hci8: command tx timeout [ 644.431425][T13729] Bluetooth: hci9: command tx timeout [ 645.951207][T13729] Bluetooth: hci8: command tx timeout [ 646.511379][T13729] Bluetooth: hci9: command tx timeout [ 648.031028][T13729] Bluetooth: hci8: command tx timeout [ 648.591106][T13729] Bluetooth: hci9: command tx timeout [ 664.478037][ T5133] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 664.497604][ T5133] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 664.508603][ T5133] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 664.535664][ T5133] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 664.544554][ T5133] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 664.552133][ T5133] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 666.590413][ T5133] Bluetooth: hci10: command tx timeout [ 668.670148][ T5133] Bluetooth: hci10: command tx timeout [ 670.740233][ T5133] Bluetooth: hci10: command tx timeout [ 672.333209][T13729] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 672.355347][T13729] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 672.364602][T13729] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 672.373438][T13729] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 672.381355][T13729] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 672.388841][T13729] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 672.829816][ T5133] Bluetooth: hci10: command tx timeout [ 674.423263][T13729] Bluetooth: hci11: command tx timeout [ 676.509665][ T5133] Bluetooth: hci11: command tx timeout [ 678.579904][ T5133] Bluetooth: hci11: command tx timeout [ 680.669730][ T5133] Bluetooth: hci11: command tx timeout [ 684.677118][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 698.563865][T13729] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 698.574457][T13729] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 698.582633][T13729] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 698.591893][T13729] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 698.602008][T13729] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 698.609524][T13729] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 700.669452][T13729] Bluetooth: hci12: command tx timeout [ 702.127631][T13729] Bluetooth: hci6: command 0x0406 tx timeout [ 702.134294][T14505] Bluetooth: hci2: command 0x0405 tx timeout [ 702.739515][T14505] Bluetooth: hci12: command tx timeout [ 704.771725][ T5133] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 704.782565][ T5133] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 704.791607][ T5133] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 704.801184][ T5133] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 704.812554][ T5133] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 704.820244][ T5133] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 704.829280][ T5122] Bluetooth: hci12: command tx timeout [ 705.149402][ T30] INFO: task kworker/1:7:14370 blocked for more than 143 seconds. [ 705.157264][ T30] Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 705.189092][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 705.197779][ T30] task:kworker/1:7 state:D stack:30000 pid:14370 tgid:14370 ppid:2 flags:0x00004000 [ 705.244710][ T30] Call Trace: [ 705.248015][ T30] [ 705.291343][ T30] __schedule+0x17e8/0x4a20 [ 705.295942][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 2024/05/27 22:02:24 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 705.379086][ T30] ? __pfx___schedule+0x10/0x10 [ 705.384001][ T30] ? __pfx_lock_release+0x10/0x10 [ 705.450222][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 705.456165][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.519153][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.547733][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 705.569247][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 705.575610][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 705.621044][ T30] ? schedule+0x90/0x320 [ 705.625326][ T30] schedule+0x14b/0x320 [ 705.669055][ T30] ? kthread+0x1c6/0x390 [ 705.673334][ T30] schedule_preempt_disabled+0x13/0x30 [ 705.678822][ T30] kthread+0x23b/0x390 [ 705.720252][ T30] ? __pfx_worker_thread+0x10/0x10 [ 705.725402][ T30] ? __pfx_kthread+0x10/0x10 [ 705.771223][ T30] ret_from_fork+0x4d/0x80 [ 705.775685][ T30] ? __pfx_kthread+0x10/0x10 [ 705.829984][ T30] ret_from_fork_asm+0x1a/0x30 [ 705.854114][ T30] [ 705.857171][ T30] [ 705.857171][ T30] Showing all locks held in the system: [ 705.918577][ T30] 2 locks held by kworker/R-slub_/6: [ 705.964270][ T30] 1 lock held by kworker/R-mm_pe/13: [ 706.000164][ T30] 2 locks held by kworker/1:0/25: [ 706.005210][ T30] 1 lock held by khungtaskd/30: [ 706.080291][ T30] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 706.110315][ T30] 4 locks held by kworker/1:1/45: [ 706.115371][ T30] 3 locks held by kworker/u8:6/1084: [ 706.159032][ T30] #0: ffff888017723148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 706.200126][ T30] #1: ffffc900044e7d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 706.269168][ T30] #2: ffffffff8f5e70c8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 706.307809][ T30] 3 locks held by kworker/u8:7/2799: [ 706.350287][ T30] #0: ffff88802aa5a148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 706.389067][ T30] #1: ffffc90009977d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 706.440252][ T30] #2: ffffffff8f5e70c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 706.508885][ T30] 2 locks held by getty/4845: [ 706.540677][ T30] #0: ffff88802b6410a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 706.608381][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 706.649055][ T30] 2 locks held by syz-fuzzer/5084: [ 706.655957][ T30] 2 locks held by kworker/1:3/5174: [ 706.698455][ T30] 3 locks held by kworker/0:5/5176: [ 706.739621][ T30] #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 706.781220][ T30] #1: ffffc90002ebfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 706.845796][ T30] #2: ffffffff8f5e70c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 706.889007][ T30] 3 locks held by kworker/1:5/5178: [ 706.894317][ T30] 2 locks held by kworker/1:6/5179: [ 706.919305][ T5122] Bluetooth: hci13: command tx timeout [ 706.926605][ T5122] Bluetooth: hci12: command tx timeout [ 706.959616][ T30] 2 locks held by kworker/1:16/5395: [ 706.964931][ T30] 2 locks held by kworker/1:18/5511: [