last executing test programs: 7.256532187s ago: executing program 2 (id=681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@nodiscard}, {@lazytime}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000000a00)="$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") r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0xa, 0x80, 0xfffffc00}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x3) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f0000000280)={[], 0x0, 0xec2f7a1cfa24c048}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 4.642392581s ago: executing program 2 (id=693): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6e, 0xe4, 0x48, 0x20, 0xb95, 0x2790, 0x865d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) 4.376319702s ago: executing program 4 (id=696): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000a00)=@un=@file={0xa}, 0xa) 3.578807998s ago: executing program 4 (id=697): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0xc0045b0f, 0x0) 3.472136226s ago: executing program 0 (id=700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000001c0)=""/19, &(0x7f0000000240)=0x13) 3.446935308s ago: executing program 0 (id=701): socket$igmp6(0xa, 0x3, 0x2) unshare(0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sync_file_range(r0, 0x1000, 0x0, 0xd) socket$unix(0x1, 0x5, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file1'}, 0xb) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000100)) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000003c0)) socket$unix(0x1, 0x0, 0x0) r4 = creat(&(0x7f0000003d80)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x25, 0xa, @void}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 3.348581077s ago: executing program 3 (id=704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000006ef81e6100080002"], 0x30}}, 0x0) 3.245633675s ago: executing program 3 (id=705): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {}, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x8004745a, 0x0) 3.134911304s ago: executing program 3 (id=706): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5408, &(0x7f0000000040)) 3.039383852s ago: executing program 3 (id=707): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x9d, &(0x7f0000000400)=""/157, 0x0, 0x4a}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{}, {0x1d}, {0x6}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x20100, 0x0) r7 = socket(0x1a, 0x80002, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x14, 0x13, 0x53b, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001080)={0x2, &(0x7f0000001040)=[{0x3, 0x7, 0x1, 0xffffff81}, {0x0, 0x2, 0xf2}]}) bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r3}, 0x8) r8 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600), 0x70}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x200, 0x54) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="3d00001126ee28dcd11ce5ec583d7039267bfd91e686737de5b57db34d10740fd023", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c00990004000000580000000800010057000000080001002e0000000800db00", @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x11) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000680)=@add_del={0x2, &(0x7f00000001c0)='syzkaller1\x00'}) ftruncate(r4, 0x2007ffb) sendfile(r3, r4, 0x0, 0x1000000211005) 1.399114986s ago: executing program 0 (id=708): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f00000003c0)=@assoc_value={r2, 0x2}, 0x8) 1.398332206s ago: executing program 2 (id=709): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0xffff) 1.296246814s ago: executing program 3 (id=710): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd3, 0x0, 0x0) 1.203940542s ago: executing program 1 (id=711): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x21) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000400)=""/171) 1.156163075s ago: executing program 0 (id=712): r0 = io_uring_setup(0x77c0, &(0x7f00000003c0)) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.061447303s ago: executing program 2 (id=713): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) 1.000363209s ago: executing program 1 (id=714): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7ac, &(0x7f0000000140)) 894.749797ms ago: executing program 2 (id=715): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) 869.529689ms ago: executing program 1 (id=716): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) write$eventfd(r0, &(0x7f0000000300), 0x8) setresuid(0x0, r2, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xb8fe) 800.274095ms ago: executing program 0 (id=717): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000007a0000007a0a00ff000000005500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000061000500000000e8a5230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd7, 0x10, 0x0, 0x1e}, 0x2d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r0, 0x2, 0x0, 0x0, @link_id}, 0x20) socketpair(0xa, 0x1, 0x0, &(0x7f0000002d00)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 752.694049ms ago: executing program 3 (id=718): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="13010000000000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 740.18072ms ago: executing program 2 (id=719): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r1, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 644.256508ms ago: executing program 0 (id=720): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 612.74151ms ago: executing program 4 (id=721): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock none'], 0xc) 326.954663ms ago: executing program 4 (id=722): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d91345bf42c63726561746f723d8761be080000000000000067653d63703836362c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x5, 0x300, &(0x7f0000001980)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 233.240071ms ago: executing program 1 (id=723): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f0000000700)='D\xa3\xd5Wj\x00\x00\x8b\xa2\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x010X\x91\xfd\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17~h\xff\xff\xff\xff\xff\xffJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85Q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\x1a%\\\xe0N\x9b6\xfa\x00\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5\r\xfe\x81\xa8nYM_\b\x85\x1av\x9da\x8d\x1c\xb0=B\f\xe7\x87\x96o\xad\x04\xb0\x7fQ\x83\xffS\xe4\x14eU/\xcc\xcf}h\xbbC\x1dU\x01\x1f\xba\xf8\xca\x06h:\xbd\x8b\x95\x15\x83', 0x0) r3 = dup3(r1, r2, 0x0) fchdir(r3) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x80000200) getdents64(r0, 0x0, 0x0) 141.884489ms ago: executing program 4 (id=724): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3c, 0x1, 0x0, 0x0, &(0x7f0000000240)) 89.825873ms ago: executing program 4 (id=725): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x9d, &(0x7f0000000400)=""/157, 0x0, 0x4a}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{}, {0x1d}, {0x6}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x20100, 0x0) r7 = socket(0x1a, 0x80002, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x14, 0x13, 0x53b, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001080)={0x2, &(0x7f0000001040)=[{0x3, 0x7, 0x1, 0xffffff81}, {0x0, 0x2, 0xf2}]}) bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r3}, 0x8) r8 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600), 0x70}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x200, 0x54) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="3d00001126ee28dcd11ce5ec583d7039267bfd91e686737de5b57db34d10740fd023", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c00990004000000580000000800010057000000080001002e0000000800db00", @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x11) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000680)=@add_del={0x2, &(0x7f00000001c0)='syzkaller1\x00'}) ftruncate(r4, 0x2007ffb) sendfile(r3, r4, 0x0, 0x1000000211005) 89.272453ms ago: executing program 1 (id=735): r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x40045532, &(0x7f0000003f80)=""/4086) 0s ago: executing program 1 (id=726): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000001080)={[{}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@debug}, {@noinit_itable}, {@errors_continue}, {@usrjquota}, {@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x18d}}, {@resgid}]}, 0xfe, 0x43a, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x401, 0x45833af96e4b39fe, 0x0) syz_pidfd_open(0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) kernel console output (not intermixed with test programs): etdevsim3 netdevsim1: renamed from eth1 [ 124.094802][ T4324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.104794][ T4324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.172940][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.189885][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.200446][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.211676][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.226349][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.236045][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.244941][ T3689] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.252050][ T3689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.279027][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.287515][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.297130][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.306278][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.313434][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.321827][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.331492][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.340662][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.349857][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.358808][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.367606][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.384375][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.392520][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.401141][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.409792][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.418865][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.430438][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.595340][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.606040][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.614597][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.640334][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.649641][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.670887][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.679598][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.689647][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.698036][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.708220][ T4324] device veth0_vlan entered promiscuous mode [ 124.723802][ T4324] device veth1_vlan entered promiscuous mode [ 124.746961][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.755590][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.764412][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.772956][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.784684][ T4324] device veth0_macvtap entered promiscuous mode [ 124.797468][ T4324] device veth1_macvtap entered promiscuous mode [ 124.814037][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.827333][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.838677][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.849452][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.859475][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.870171][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.880088][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.890683][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.900802][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.911501][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.924866][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.939774][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.950315][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.960520][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.971113][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.981009][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.991482][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.001443][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.012040][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.022142][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.033098][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.046633][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.058044][ T4324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.067587][ T4324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.076815][ T4324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.086427][ T4324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.098586][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.107392][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.116270][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.125385][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.134729][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.144561][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.225471][ T3844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.239915][ T3844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.262671][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.278443][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.290040][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.304061][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.541577][ T4402] mmap: syz.4.201 (4402) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.584894][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 126.134730][ T3642] Bluetooth: hci5: command tx timeout [ 126.771970][ T4413] loop0: detected capacity change from 0 to 64 [ 127.005992][ T4414] Zero length message leads to an empty skb [ 129.088135][ T3642] Bluetooth: hci5: command tx timeout [ 129.798116][ T4424] loop1: detected capacity change from 0 to 1024 [ 129.959795][ T4424] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.990214][ T4429] loop2: detected capacity change from 0 to 8192 [ 130.009064][ T4424] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038 (0x7fffffff) [ 130.013385][ T4434] block nbd0: shutting down sockets [ 130.029772][ T4429] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 130.043562][ T4429] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 130.055798][ T4429] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 130.300033][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 130.300054][ T27] audit: type=1800 audit(1723037634.187:49): pid=4424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 130.334279][ T4429] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 130.384707][ T4429] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 130.477352][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 132.641107][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.647460][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.043289][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 134.053117][ T4488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.215'. [ 134.086412][ T4488] device gtp0 entered promiscuous mode [ 135.398333][ T4494] loop4: detected capacity change from 0 to 512 [ 135.492053][ T4494] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.521519][ T4485] loop0: detected capacity change from 0 to 4096 [ 135.543811][ T4494] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.220: bg 0: block 248: padding at end of block bitmap is not set [ 137.691437][ T4485] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 137.765898][ T4494] Quota error (device loop4): write_blk: dquota write failed [ 137.812282][ T4494] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 137.841251][ T4494] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.220: Failed to acquire dquot type 1 [ 137.888946][ T4494] EXT4-fs (loop4): 1 truncate cleaned up [ 137.922280][ T4485] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 137.962080][ T4485] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 137.981703][ T4494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.007048][ T4485] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 138.047229][ T4494] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 138.199475][ T4494] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 138.220019][ T4494] ext4 filesystem being remounted at /44/bus supports timestamps until 2038 (0x7fffffff) [ 138.297125][ T4512] loop1: detected capacity change from 0 to 2048 [ 138.298452][ T4494] Quota error (device loop4): write_blk: dquota write failed [ 138.354293][ T4494] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 138.364370][ T4512] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 138.394661][ T4494] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.220: Failed to acquire dquot type 1 [ 138.470675][ T4512] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.522798][ T4494] syz.4.220 (4494) used greatest stack depth: 19680 bytes left [ 138.582673][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 138.650636][ T27] audit: type=1800 audit(1723037642.537:50): pid=4512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.226" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 139.462926][ T4537] loop4: detected capacity change from 0 to 512 [ 139.571403][ T4541] loop1: detected capacity change from 0 to 2048 [ 139.594014][ T4537] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.237: inode #1: comm syz.4.237: iget: illegal inode # [ 139.693860][ T4541] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 139.694178][ T4547] loop2: detected capacity change from 0 to 4096 [ 139.720046][ T4537] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.237: error while reading EA inode 1 err=-117 [ 139.760494][ T4537] EXT4-fs (loop4): 1 orphan inode deleted [ 139.766533][ T4537] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.009873][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 140.207627][ T27] audit: type=1326 audit(1723037644.087:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.1.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d18f779f9 code=0x0 [ 140.700426][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.854565][ T3655] Bluetooth: hci5: command tx timeout [ 140.892676][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 140.918923][ T4562] netlink: 'syz.2.244': attribute type 5 has an invalid length. [ 141.103496][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 141.233634][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.274829][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.302093][ T7] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 141.339454][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.385964][ T7] usb 4-1: config 0 descriptor?? [ 141.533639][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.814153][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 142.024090][ T22] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.112167][ T22] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.214188][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 142.243381][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.324656][ T22] hub 5-1:4.0: USB hub found [ 142.541142][ T4579] loop0: detected capacity change from 0 to 32768 [ 142.548403][ T22] hub 5-1:4.0: 7 ports detected [ 142.567111][ T4579] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.251 (4579) [ 142.585370][ T22] hub 5-1:4.0: insufficient power available to use all downstream ports [ 142.607604][ T4579] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.609541][ T7] hid-led 0003:1294:1320.0004: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0 [ 142.623371][ T4077] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.663384][ T4579] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 142.672070][ T4579] BTRFS info (device loop0): using free space tree [ 142.678759][ T7] hid-led 0003:1294:1320.0004: Riso Kagaku Webmail Notifier initialized [ 142.753520][ T22] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 142.759913][ T22] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 142.805271][ T3694] usb 4-1: USB disconnect, device number 5 [ 142.823708][ T3686] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 142.832987][ T3686] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 142.841848][ T3686] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 142.856125][ T22] usb 5-1: USB disconnect, device number 4 [ 142.982287][ T4579] BTRFS info (device loop0): enabling ssd optimizations [ 143.003630][ T4077] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.029763][ T4077] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.133554][ T4077] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.142670][ T4077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.152974][ T3638] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.169177][ T4077] usb 3-1: SerialNumber: syz [ 143.466755][ T4077] usb 3-1: 0:2 : does not exist [ 143.490071][ T4077] usb 3-1: unit 5: unexpected type 0x03 [ 143.530240][ T4077] usb 3-1: USB disconnect, device number 4 [ 143.797022][ T4047] udevd[4047]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.023404][ T3694] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.085971][ T4627] loop4: detected capacity change from 0 to 256 [ 145.783594][ T3694] usb 4-1: config 0 has an invalid interface number: 181 but max is 0 [ 145.799650][ T3694] usb 4-1: config 0 has no interface number 0 [ 145.826815][ T3694] usb 4-1: config 0 interface 181 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 146.082356][ T4637] loop4: detected capacity change from 0 to 128 [ 147.002481][ T4637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.015396][ T4637] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038 (0x7fffffff) [ 147.023477][ T3694] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01a4, bcdDevice=7f.41 [ 147.072180][ T3694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.113475][ T3694] usb 4-1: Product: syz [ 147.117997][ T3694] usb 4-1: Manufacturer: syz [ 147.122874][ T3694] usb 4-1: SerialNumber: syz [ 147.160587][ T3694] usb 4-1: config 0 descriptor?? [ 147.226195][ T3694] usb 4-1: bad CDC descriptors [ 147.238729][ T3694] usb 4-1: bad CDC descriptors [ 147.250821][ T3694] ftdi_sio 4-1:0.181: FTDI USB Serial Device converter detected [ 147.270107][ T3694] ftdi_sio ttyUSB0: unknown device type: 0x7f41 [ 147.373756][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 147.463412][ T3689] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.894757][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.927702][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.971227][ T3689] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 148.001827][ T3689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.040601][ T3689] usb 1-1: config 0 descriptor?? [ 148.517721][ T4665] loop1: detected capacity change from 0 to 256 [ 148.533782][ T3694] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.184131][ T3694] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 149.223267][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.284414][ T3694] usb 3-1: config 0 descriptor?? [ 149.325243][ T3689] apple 0003:05AC:0262.0005: unbalanced delimiter at end of report description [ 149.339592][ T3689] apple 0003:05AC:0262.0005: parse failed [ 149.345485][ T3689] apple: probe of 0003:05AC:0262.0005 failed with error -22 [ 149.356273][ T3694] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 149.366609][ T3689] usb 1-1: USB disconnect, device number 3 [ 149.796858][ T4672] loop4: detected capacity change from 0 to 4096 [ 149.877441][ T4672] ntfs: volume version 3.1. [ 149.931882][ T3714] usb 4-1: USB disconnect, device number 6 [ 149.959833][ T3714] ftdi_sio 4-1:0.181: device disconnected [ 150.007128][ T3694] gspca_cpia1: usb_control_msg 01, error -32 [ 150.128331][ T4687] loop1: detected capacity change from 0 to 256 [ 150.175926][ T4687] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 150.283407][ T3694] gspca_cpia1: usb_control_msg 02, error -71 [ 150.289686][ T3694] cpia1 3-1:0.0: only firmware version 1 is supported (got: 4) [ 150.342469][ T3694] usb 3-1: USB disconnect, device number 5 [ 150.484462][ T4693] loop4: detected capacity change from 0 to 4096 [ 150.491730][ T4693] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 150.623439][ T4693] ntfs: volume version 3.1. [ 151.839214][ T4711] loop1: detected capacity change from 0 to 256 [ 152.131108][ T4718] loop1: detected capacity change from 0 to 512 [ 152.284986][ T4718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 152.290970][ T4715] loop2: detected capacity change from 0 to 8192 [ 152.314008][ T4715] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 152.324868][ T4718] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff) [ 152.496293][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 152.751204][ T27] audit: type=1326 audit(1723037656.637:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fd779f9 code=0x7ffc0000 [ 153.065207][ T27] audit: type=1326 audit(1723037656.637:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fd779f9 code=0x7ffc0000 [ 153.097643][ T27] audit: type=1326 audit(1723037656.637:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7ff08fd779f9 code=0x7ffc0000 [ 153.698737][ T27] audit: type=1326 audit(1723037656.637:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fd779f9 code=0x7ffc0000 [ 153.811870][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 153.873604][ T27] audit: type=1326 audit(1723037656.637:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fd779f9 code=0x7ffc0000 [ 153.873651][ T27] audit: type=1326 audit(1723037656.637:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08fd779f9 code=0x7ffc0000 [ 153.873688][ T27] audit: type=1326 audit(1723037656.637:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fd779f9 code=0x7ffc0000 [ 153.873721][ T27] audit: type=1326 audit(1723037656.637:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08fd779f9 code=0x7ffc0000 [ 153.873755][ T27] audit: type=1326 audit(1723037656.637:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08fd779f9 code=0x7ffc0000 [ 154.279650][ T4747] loop2: detected capacity change from 0 to 2048 [ 154.291144][ T4714] loop4: detected capacity change from 0 to 32768 [ 154.334004][ T4742] tty tty22: ldisc open failed (-12), clearing slot 21 [ 154.373073][ T4714] XFS (loop4): Mounting V5 Filesystem [ 154.403815][ T4747] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 154.472377][ T4747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.529096][ T4762] loop0: detected capacity change from 0 to 4096 [ 154.539671][ T4714] XFS (loop4): Ending clean mount [ 154.563763][ T4714] XFS (loop4): Quotacheck needed: Please wait. [ 154.577691][ T4747] EXT4-fs error (device loop2): ext4_lookup:1856: inode #13: comm syz.2.306: casefold flag without casefold feature [ 154.636514][ T4762] ntfs3: loop0: Failed to load $Extend. [ 154.676445][ T4714] XFS (loop4): Quotacheck: Done. [ 154.736368][ T4762] ntfs3: loop0: ino=1f, "file2" attr_set_size [ 154.788848][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 154.824226][ T4371] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.841040][ T3640] XFS (loop4): Unmounting Filesystem [ 155.103461][ T4371] usb 2-1: Using ep0 maxpacket: 32 [ 155.131052][ C1] eth0: bad gso: type: 1, size: 1408 [ 155.251581][ T4371] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.263913][ T4371] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 155.297702][ T4371] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 155.493691][ T4371] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice=9f.7f [ 155.507384][ T4371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.515764][ T4371] usb 2-1: Product: syz [ 155.519965][ T4371] usb 2-1: Manufacturer: syz [ 155.529252][ T4371] usb 2-1: SerialNumber: syz [ 155.536184][ T4371] usb 2-1: config 0 descriptor?? [ 155.543361][ T3714] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.783446][ T3714] usb 4-1: Using ep0 maxpacket: 8 [ 155.818050][ T4371] usb 2-1: USB disconnect, device number 5 [ 155.903538][ T3714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 155.925268][ T3714] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 155.936299][ T3714] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 156.023660][ T3714] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 156.039609][ T3714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 156.052019][ T3714] usb 4-1: SerialNumber: syz [ 156.143711][ T4775] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 156.165507][ T4047] udevd[4047]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.328737][ T4801] loop0: detected capacity change from 0 to 164 [ 156.984080][ T3714] hub 4-1:1.0: bad descriptor, ignoring hub [ 156.990051][ T3714] hub: probe of 4-1:1.0 failed with error -5 [ 157.014163][ T4775] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 157.762662][ T3714] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 157.804910][ T3714] usb 4-1: USB disconnect, device number 7 [ 157.812119][ T3714] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 158.108283][ T4821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 158.336587][ T4830] loop1: detected capacity change from 0 to 1024 [ 158.384148][ T4830] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.442177][ T4830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.552495][ T4838] loop4: detected capacity change from 0 to 2048 [ 158.616490][ T4838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 158.759398][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 158.896690][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 159.071392][ T4854] netlink: 152 bytes leftover after parsing attributes in process `syz.0.344'. [ 159.185403][ T3641] syz-executor (3641) used greatest stack depth: 19576 bytes left [ 159.260233][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 159.260250][ T27] audit: type=1326 audit(1723037663.147:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fe3779f9 code=0x7fc00000 [ 159.369198][ T3709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.483035][ T4858] loop0: detected capacity change from 0 to 64 [ 159.506256][ T4858] hfs: unable to parse mount options [ 159.538917][ T3709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.570076][ T4047] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.676264][ T3709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.833652][ T3709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.930229][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.949964][ T4869] netlink: 'syz.0.351': attribute type 27 has an invalid length. [ 160.260920][ T3642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.277407][ T3642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.287411][ T3642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.298768][ T3642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.307851][ T3642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.319876][ T3642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.453690][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 160.490910][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 160.543558][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.605815][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.646966][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.819771][ T7] usb 3-1: config 0 descriptor?? [ 160.863760][ T4862] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.333897][ T7] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 161.377065][ T7] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 161.402551][ T7] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 161.545280][ T14] usb 3-1: USB disconnect, device number 6 [ 161.629587][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.639893][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.435248][ T3655] Bluetooth: hci3: command tx timeout [ 162.518355][ T4906] Cannot find set identified by id 0 to match [ 164.054377][ T4908] loop2: detected capacity change from 0 to 4096 [ 164.139292][ T4908] ntfs: volume version 3.1. [ 164.533412][ T3655] Bluetooth: hci3: command tx timeout [ 164.573370][ T4882] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.607413][ T4869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.627003][ T4869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.813523][ T4882] usb 4-1: Using ep0 maxpacket: 32 [ 164.933493][ T4882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 164.944831][ T4882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.955124][ T4882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 165.123652][ T4882] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 165.132824][ T4882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.148341][ T4882] usb 4-1: Product: syz [ 165.152563][ T4882] usb 4-1: Manufacturer: syz [ 165.158855][ T4882] usb 4-1: SerialNumber: syz [ 165.190016][ T4882] usb 4-1: config 0 descriptor?? [ 165.197904][ T4869] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.207344][ T4869] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.216819][ T4869] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.225985][ T4869] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.440785][ T3687] usb 4-1: USB disconnect, device number 8 [ 165.555142][ T4912] loop2: detected capacity change from 0 to 256 [ 165.615182][ T4912] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 165.735044][ T4915] loop0: detected capacity change from 0 to 2048 [ 165.799432][ T4915] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 165.820950][ T4915] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 165.903642][ T4915] EXT4-fs error (device loop0): ext4_lookup:1856: inode #13: comm syz.0.366: casefold flag without casefold feature [ 166.141657][ T4930] loop2: detected capacity change from 0 to 1024 [ 166.252621][ T3638] EXT4-fs (loop0): unmounting filesystem. [ 166.454899][ T4370] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.564839][ T4873] chnl_net:caif_netlink_parms(): no params data found [ 166.613523][ T3642] Bluetooth: hci3: command tx timeout [ 166.809376][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 166.830406][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.843434][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.843567][ T4370] usb 5-1: config 0 has no interfaces? [ 166.851092][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.865229][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.873583][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.890247][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.897909][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 166.905591][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.913173][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.917021][ T4370] usb 5-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 166.921282][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.940279][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.948192][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.957019][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.964986][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.972573][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.980571][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 166.998617][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.003395][ T4370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.006870][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.031118][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.043384][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.061766][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.070093][ T4370] usb 5-1: config 0 descriptor?? [ 167.079839][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.097775][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.111088][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.129130][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.149424][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.159577][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.180015][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.200351][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.208331][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.221104][ T4886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.252364][ T4886] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 167.343733][ T3053] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.399902][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.408236][ T4873] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.422645][ T4873] device bridge_slave_0 entered promiscuous mode [ 167.462574][ T4873] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.483513][ T4873] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.491892][ T4873] device bridge_slave_1 entered promiscuous mode [ 167.505272][ T4936] loop4: detected capacity change from 0 to 2048 [ 167.537853][ T4936] UDF-fs: bad mount option "B" or missing value [ 167.579932][ T4047] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.736858][ T3053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.849129][ T3053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.886963][ T3053] usb 1-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 167.894540][ T4873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.910050][ T3053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.928843][ T3053] usb 1-1: config 0 descriptor?? [ 167.950036][ T4873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.612152][ T4949] 9pnet_fd: Insufficient options for proto=fd [ 168.693362][ T3655] Bluetooth: hci3: command tx timeout [ 168.832541][ T4370] usb 5-1: USB disconnect, device number 5 [ 168.949885][ T4873] team0: Port device team_slave_0 added [ 168.970829][ T4873] team0: Port device team_slave_1 added [ 169.043902][ T3053] usbhid 1-1:0.0: can't add hid device: -71 [ 169.049953][ T3053] usbhid: probe of 1-1:0.0 failed with error -71 [ 169.063442][ T4886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.094067][ T3053] usb 1-1: USB disconnect, device number 4 [ 169.213770][ T4873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.220980][ T4873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.277955][ T4873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.299992][ T4873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.304927][ T4886] usb 3-1: Using ep0 maxpacket: 8 [ 169.323654][ T4873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.395873][ T4873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.433612][ T4886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.464313][ T4886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.486594][ T4886] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 169.584046][ T4886] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 169.612877][ C1] eth0: bad gso: type: 1, size: 1408 [ 169.643353][ T4886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.651740][ T4886] usb 3-1: SerialNumber: syz [ 169.724529][ T4886] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 169.732091][ T4886] usbtest 3-1:1.0: Linux gadget zero [ 169.748513][ T4886] usbtest 3-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 169.764685][ T4999] loop0: detected capacity change from 0 to 1024 [ 169.808583][ T4999] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.819091][ T5001] block nbd4: shutting down sockets [ 169.876335][ T4999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 169.986212][ T3687] usb 3-1: USB disconnect, device number 7 [ 170.016507][ T4873] device hsr_slave_0 entered promiscuous mode [ 170.025253][ T4873] device hsr_slave_1 entered promiscuous mode [ 170.045642][ T4873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.059327][ T4873] Cannot create hsr debugfs directory [ 170.141134][ T3709] device hsr_slave_0 left promiscuous mode [ 170.146519][ T5007] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 170.166438][ T3709] device hsr_slave_1 left promiscuous mode [ 170.184531][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.202011][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.216071][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.261712][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.294360][ T3709] device bridge_slave_1 left promiscuous mode [ 170.326519][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.385276][ T3709] device bridge_slave_0 left promiscuous mode [ 170.395097][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.547032][ T3709] device veth1_macvtap left promiscuous mode [ 170.554010][ T3709] device veth0_macvtap left promiscuous mode [ 170.560471][ T3709] device veth1_vlan left promiscuous mode [ 170.567195][ T3709] device veth0_vlan left promiscuous mode [ 170.957112][ T27] audit: type=1326 audit(1723037674.847:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.3.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4fb9779f9 code=0x0 [ 171.013355][ T4886] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.073388][ T27] audit: type=1326 audit(1723037674.957:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fb9779f9 code=0x7ffc0000 [ 171.096186][ T27] audit: type=1326 audit(1723037674.957:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fe4fb9779f9 code=0x7ffc0000 [ 171.130573][ T27] audit: type=1326 audit(1723037674.957:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fb9779f9 code=0x7ffc0000 [ 171.189466][ T27] audit: type=1326 audit(1723037674.957:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4fb9779f9 code=0x7ffc0000 [ 171.231004][ T27] audit: type=1326 audit(1723037674.957:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fb9779f9 code=0x7ffc0000 [ 171.255875][ T27] audit: type=1326 audit(1723037674.957:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4fb9779f9 code=0x7ffc0000 [ 171.325255][ T27] audit: type=1326 audit(1723037674.957:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fb9779f9 code=0x7ffc0000 [ 171.348457][ T27] audit: type=1326 audit(1723037674.957:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4fb9779f9 code=0x7ffc0000 [ 171.372153][ T27] audit: type=1326 audit(1723037674.967:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fb9779f9 code=0x7ffc0000 [ 171.413574][ T4886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.425833][ T4886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.436239][ T4886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.449590][ T4886] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.458959][ T4886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.486816][ T4886] usb 3-1: config 0 descriptor?? [ 171.977444][ T3709] team0 (unregistering): Port device team_slave_1 removed [ 172.097732][ T3709] team0 (unregistering): Port device team_slave_0 removed [ 172.184331][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.225464][ T4886] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 172.237863][ T4886] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 172.263308][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.272365][ T4886] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 172.623862][ T4370] usb 3-1: USB disconnect, device number 8 [ 172.916777][ T3709] bond0 (unregistering): Released all slaves [ 173.039232][ T5016] netlink: 'syz.3.391': attribute type 27 has an invalid length. [ 173.047570][ T5016] device lo entered promiscuous mode [ 173.053747][ T5016] device tunl0 entered promiscuous mode [ 173.060774][ T5016] device gre0 entered promiscuous mode [ 173.072043][ T5006] EXT4-fs (loop0): unmounting filesystem. [ 173.074207][ T5016] device gretap0 entered promiscuous mode [ 173.089282][ T5016] device erspan0 entered promiscuous mode [ 173.096238][ T5016] device ip_vti0 entered promiscuous mode [ 173.103739][ T5016] device ip6_vti0 entered promiscuous mode [ 173.122992][ T5016] device sit0 entered promiscuous mode [ 173.138818][ T5016] device ip6tnl0 entered promiscuous mode [ 173.147953][ T5016] device ip6gre0 entered promiscuous mode [ 173.155469][ T5016] device syz_tun entered promiscuous mode [ 173.174695][ T5016] device ip6gretap0 entered promiscuous mode [ 173.184933][ T5016] device bridge0 entered promiscuous mode [ 173.201785][ T5016] device vcan0 entered promiscuous mode [ 173.211611][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.246011][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.260996][ T5016] device bond0 entered promiscuous mode [ 173.267720][ T5016] device bond_slave_0 entered promiscuous mode [ 173.274585][ T5016] device bond_slave_1 entered promiscuous mode [ 173.282113][ T5016] device team0 entered promiscuous mode [ 173.289593][ T5016] device team_slave_0 entered promiscuous mode [ 173.296384][ T5016] device team_slave_1 entered promiscuous mode [ 173.304628][ T5016] device dummy0 entered promiscuous mode [ 173.311535][ T5016] device nlmon0 entered promiscuous mode [ 173.319294][ T5016] device caif0 entered promiscuous mode [ 173.326438][ T5016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.351004][ T5024] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 173.360899][ T5024] pim6reg0: linktype set to 270 [ 173.916523][ T5034] loop2: detected capacity change from 0 to 164 [ 175.032175][ T3655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.042141][ T3655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.053148][ T3655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.084819][ T3655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.095084][ T3655] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.102510][ T3655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.433305][ T3745] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 175.607087][ T5050] chnl_net:caif_netlink_parms(): no params data found [ 175.693391][ T3745] usb 5-1: Using ep0 maxpacket: 8 [ 175.895433][ T3745] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.090717][ T3745] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.117037][ T3745] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 176.593504][ T3745] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 176.602921][ T3745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 176.611046][ T3745] usb 5-1: SerialNumber: syz [ 176.655198][ T3745] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 176.663155][ T3745] usbtest 5-1:1.0: Linux gadget zero [ 176.669308][ T3745] usbtest 5-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 176.695869][ T4873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.748674][ T4873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.768837][ T4873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.793540][ T5050] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.811728][ T5050] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.820309][ T5050] device bridge_slave_0 entered promiscuous mode [ 176.839004][ T4873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.871987][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.893397][ T5050] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.901696][ T5050] device bridge_slave_1 entered promiscuous mode [ 176.905851][ T3745] usb 5-1: USB disconnect, device number 6 [ 176.996165][ T5050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.021550][ T5050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.113173][ T5050] team0: Port device team_slave_0 added [ 177.129318][ T5050] team0: Port device team_slave_1 added [ 177.173340][ T3642] Bluetooth: hci2: command tx timeout [ 177.289003][ T5050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.316600][ T5050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.392259][ T5050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.416028][ T4873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.434816][ T5050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.442554][ T5050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.514186][ T5050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.655444][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.665629][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.714585][ T4873] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.777587][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.802100][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.837002][ T4886] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.844287][ T4886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.900555][ T5050] device hsr_slave_0 entered promiscuous mode [ 177.913843][ T5050] device hsr_slave_1 entered promiscuous mode [ 177.946595][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.961217][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.995525][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.028352][ T4077] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.035580][ T4077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.177172][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.201064][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.288258][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.321057][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.341778][ C1] eth0: bad gso: type: 1, size: 1408 [ 178.374268][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.417602][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.475478][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.497088][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.537801][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.587437][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.622486][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.653039][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.253432][ T3642] Bluetooth: hci2: command tx timeout [ 179.414690][ T5110] loop4: detected capacity change from 0 to 256 [ 179.422546][ T5110] FAT-fs (loop4): Unrecognized mount option "00000000000000000000000ÿÿÿÿÿÿÿÿ" or missing value [ 179.550786][ T5110] loop4: detected capacity change from 0 to 764 [ 179.759046][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 179.759063][ T27] audit: type=1326 audit(1723037683.647:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5109 comm="syz.4.411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x0 [ 179.803392][ T4370] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 180.002320][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.019966][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.073789][ T4873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.128688][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.140130][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.175404][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.184996][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.185016][ T4370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.196632][ T4873] device veth0_vlan entered promiscuous mode [ 180.232150][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.241192][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.256766][ T4370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.270012][ T4873] device veth1_vlan entered promiscuous mode [ 180.291352][ T4370] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 180.311150][ T4370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.324853][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.352236][ T4370] usb 4-1: config 0 descriptor?? [ 180.357466][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.383991][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.399214][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.461477][ T4873] device veth0_macvtap entered promiscuous mode [ 180.605398][ T4873] device veth1_macvtap entered promiscuous mode [ 180.789478][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.820548][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.840232][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.865744][ T4370] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 180.867123][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.873719][ T27] audit: type=1326 audit(1723037684.757:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.4.415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x0 [ 180.892250][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.915127][ T4370] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 180.930716][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.940974][ T4370] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 180.957168][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.978207][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.992690][ T4873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.026912][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.040770][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.059030][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.082368][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.107210][ C0] hid-thrustmaster 0003:044F:B65D.0009: Unknown packet type 0x0, unable to proceed further with wheel init [ 181.131736][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.150400][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.160479][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.171377][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.181747][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.193979][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.204237][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.216530][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.228427][ T4873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.249805][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.272095][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.297511][ T5050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.318874][ T3687] usb 4-1: USB disconnect, device number 9 [ 181.333477][ T3642] Bluetooth: hci2: command tx timeout [ 181.359769][ T4873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.401907][ T4873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.428797][ T4873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.441295][ T4873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.484075][ T5050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.504978][ T5050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.525769][ T5050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.805573][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.834125][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.101578][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.307255][ T5155] loop4: detected capacity change from 0 to 164 [ 182.918164][ T3849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.936070][ T3849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.028087][ T4373] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 183.038352][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.423391][ T3642] Bluetooth: hci2: command tx timeout [ 183.493872][ T4373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 183.534850][ T4373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 183.588184][ T4373] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.602915][ T4373] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.614370][ T4373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.653370][ T4373] usb 4-1: config 0 descriptor?? [ 183.694771][ T5152] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.187615][ T5050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.299328][ T5178] loop2: detected capacity change from 0 to 16 [ 184.315545][ T5178] erofs: (device loop2): mounted with root inode @ nid 36. [ 184.328477][ T4373] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 184.514586][ T4373] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 184.564335][ T3651] Bluetooth: hci4: unexpected event for opcode 0x201c [ 184.830708][ T4373] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 185.011773][ T4373] usb 4-1: USB disconnect, device number 10 [ 185.194395][ T5177] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 185.265667][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.283975][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.295767][ T5050] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.604566][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.614127][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.622835][ T4077] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.630052][ T4077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.183765][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.221684][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.270612][ T4077] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.277860][ T4077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.341658][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.413041][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.500653][ T5174] loop4: detected capacity change from 0 to 32768 [ 186.532122][ T5174] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.422 (5174) [ 187.538432][ C1] eth0: bad gso: type: 1, size: 1408 [ 188.051070][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.085669][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.098128][ T5217] loop2: detected capacity change from 0 to 256 [ 188.109961][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.160726][ T5050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.192102][ T5050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.218015][ T5217] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.273395][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 188.440893][ T5217] team0: Cannot enslave team device to itself [ 188.500728][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.514574][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.554501][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.584484][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.604082][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.613653][ T3642] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 188.622463][ T3642] Bluetooth: hci4: Injecting HCI hardware error event [ 188.630456][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.634859][ T3651] Bluetooth: hci4: hardware error 0x00 [ 188.663455][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.674786][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.685026][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.698535][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.707929][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.708759][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.718575][ T14] usb 2-1: config 0 descriptor?? [ 188.843392][ T3709] device hsr_slave_0 left promiscuous mode [ 189.019916][ T3709] device hsr_slave_1 left promiscuous mode [ 189.040843][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.070797][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.089723][ T3709] device bridge_slave_1 left promiscuous mode [ 189.116816][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.202412][ T3709] device bridge_slave_0 left promiscuous mode [ 189.214836][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.224192][ T14] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 189.232283][ T14] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 189.313952][ T14] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 189.413135][ T3709] bond1 (unregistering): Released all slaves [ 189.555376][ T5237] loop2: detected capacity change from 0 to 512 [ 189.614907][ T5248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.650129][ T5248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.674766][ T5237] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.435: casefold flag without casefold feature [ 189.707789][ T5237] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.435: missing EA_INODE flag [ 189.729254][ T5250] loop4: detected capacity change from 0 to 4096 [ 189.742026][ T5250] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 189.790656][ T5237] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.435: error while reading EA inode 12 err=-117 [ 189.823551][ T4047] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.848769][ T5237] EXT4-fs (loop2): 1 orphan inode deleted [ 189.871937][ T5237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 189.974647][ T5237] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.435: Directory hole found for htree leaf block 0 [ 190.045591][ T5241] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.435: Directory hole found for htree leaf block 0 [ 190.104928][ T5237] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.435: Directory hole found for htree leaf block 0 [ 190.150482][ T27] audit: type=1326 audit(1723037694.037:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5236 comm="syz.2.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69fe3779f9 code=0x0 [ 190.303503][ T3642] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 190.312569][ T3642] Bluetooth: hci3: Injecting HCI hardware error event [ 190.321824][ T3642] Bluetooth: hci3: hardware error 0x00 [ 190.371213][ T5237] kvm: emulating exchange as write [ 190.403718][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 190.825755][ T14] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.853880][ T3651] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 190.871098][ T14] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.884080][ T14] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.893478][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.896851][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 190.939827][ T5252] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 191.188885][ T3709] team0 (unregistering): Port device team_slave_1 removed [ 191.332055][ T3709] team0 (unregistering): Port device team_slave_0 removed [ 191.402691][ T4886] usb 5-1: USB disconnect, device number 7 [ 191.461958][ T3687] usb 2-1: USB disconnect, device number 6 [ 192.262529][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.373441][ T3642] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 192.422441][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.575474][ T5256] loop1: detected capacity change from 0 to 32768 [ 192.661510][ T5256] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 192.785461][ T5256] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 192.849471][ T5256] BTRFS info (device loop1): using free space tree [ 193.028980][ T5274] Cannot find set identified by id 0 to match [ 194.336121][ T5256] BTRFS info (device loop1): enabling ssd optimizations [ 194.374122][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380497][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.455174][ T4873] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 195.168169][ T5315] loop2: detected capacity change from 0 to 512 [ 195.176242][ T5315] EXT4-fs: Ignoring removed orlov option [ 195.186315][ T5315] EXT4-fs (loop2): unable to read superblock [ 195.256544][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 195.519584][ T3709] bond0 (unregistering): Released all slaves [ 195.553252][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 195.660123][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.693555][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.731177][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.760167][ T5050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.783348][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 195.794026][ T3651] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.807660][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.816116][ T3651] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.824908][ T3651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.835259][ T3651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.842846][ T3651] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 195.850371][ T3651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.868650][ T7] usb 2-1: config 0 descriptor?? [ 195.908628][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.917041][ T7] hub 2-1:0.0: USB hub found [ 195.933493][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.964786][ T5315] loop2: detected capacity change from 0 to 32768 [ 195.983541][ T5315] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.455 (5315) [ 195.989914][ T5320] loop4: detected capacity change from 0 to 64 [ 196.028395][ T5315] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.045740][ T5315] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 196.066419][ T5315] BTRFS info (device loop2): using free space tree [ 196.091283][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.112340][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.123380][ T7] hub 2-1:0.0: 1 port detected [ 196.190428][ T5330] fuse: Unknown parameter 'f0x000000000000000700000000000000000000' [ 196.331174][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.340980][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.346619][ T5315] BTRFS info (device loop2): enabling ssd optimizations [ 196.351105][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.365092][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.374843][ T5050] device veth0_vlan entered promiscuous mode [ 196.493646][ T5317] chnl_net:caif_netlink_parms(): no params data found [ 196.544916][ T5050] device veth1_vlan entered promiscuous mode [ 196.740482][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.761037][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.833451][ T14] hub 2-1:0.0: activate --> -90 [ 196.867362][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.894295][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.933890][ T5050] device veth0_macvtap entered promiscuous mode [ 196.941588][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.987153][ T5050] device veth1_macvtap entered promiscuous mode [ 197.005843][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.012982][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.022542][ T5317] device bridge_slave_0 entered promiscuous mode [ 197.052674][ T5317] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.070293][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.096691][ T5317] device bridge_slave_1 entered promiscuous mode [ 197.122025][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.148269][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.165871][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.182209][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.210561][ T3646] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.221495][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.245287][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.246927][ T5347] loop4: detected capacity change from 0 to 256 [ 197.265316][ T3745] usb 2-1: USB disconnect, device number 7 [ 197.268198][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.340655][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.371208][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.409365][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.425739][ T5050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.429328][ T5347] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.436950][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.455465][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.469033][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.480282][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.502625][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.513840][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.524650][ T14] usb 2-1-port1: config error [ 197.552528][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.564935][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.579518][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.591287][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.611650][ T5050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.701272][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.713116][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.732454][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.753110][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.772275][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.799518][ T5347] team0: Cannot enslave team device to itself [ 197.893736][ T3651] Bluetooth: hci6: command tx timeout [ 197.909405][ T5050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.928128][ T5050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.939769][ T5050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.953538][ T5050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.973502][ T5317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.020239][ T5317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.196290][ T5317] team0: Port device team_slave_0 added [ 198.244745][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.267111][ T5317] team0: Port device team_slave_1 added [ 198.273310][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.269926][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.298579][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.314491][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.344375][ T5371] loop2: detected capacity change from 0 to 1024 [ 199.352298][ T5372] loop1: detected capacity change from 0 to 256 [ 199.362652][ T5317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.402032][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.422053][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.435560][ T5372] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 199.458092][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.469519][ T5371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 199.483309][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.643308][ T5317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.984857][ T3651] Bluetooth: hci6: command tx timeout [ 200.491770][ T5386] loop4: detected capacity change from 0 to 256 [ 200.522510][ T5386] exfat: Deprecated parameter 'utf8' [ 200.544775][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.554111][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 200.581926][ T5386] exfat: Deprecated parameter 'namecase' [ 200.593575][ T5386] exfat: Deprecated parameter 'utf8' [ 200.605669][ T5388] loop1: detected capacity change from 0 to 1024 [ 200.667592][ T5386] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 200.710700][ T5317] device hsr_slave_0 entered promiscuous mode [ 200.754069][ T5317] device hsr_slave_1 entered promiscuous mode [ 200.769224][ T5317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.785932][ T5317] Cannot create hsr debugfs directory [ 200.973626][ T4886] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.081981][ T5397] loop4: detected capacity change from 0 to 4096 [ 201.157113][ T5397] ntfs: volume version 3.1. [ 201.233301][ T4886] usb 3-1: Using ep0 maxpacket: 8 [ 201.326854][ T5404] loop0: detected capacity change from 0 to 512 [ 201.371767][ T5404] EXT4-fs: Ignoring removed orlov option [ 201.392946][ T5404] EXT4-fs (loop0): unable to read superblock [ 201.514117][ T4886] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=7d.78 [ 201.542897][ T5317] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.549446][ T4886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.562634][ T5408] loop4: detected capacity change from 0 to 256 [ 201.568543][ T4886] usb 3-1: Product: syz [ 201.573713][ T4886] usb 3-1: Manufacturer: syz [ 201.578343][ T4886] usb 3-1: SerialNumber: syz [ 201.594243][ T4886] usb 3-1: config 0 descriptor?? [ 201.635159][ T4886] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 201.673899][ T4886] dvb-usb: bulk message failed: -22 (2/0) [ 201.697909][ T4886] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver error while loading driver (-22) [ 201.732758][ T4886] cinergyT2: probe of 3-1:0.0 failed with error -22 [ 201.861009][ T4886] usb 3-1: USB disconnect, device number 9 [ 201.869380][ T5317] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.892544][ T5415] loop4: detected capacity change from 0 to 1024 [ 201.966137][ T5317] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.996443][ T5415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 202.053510][ T3642] Bluetooth: hci6: command tx timeout [ 202.218061][ T5404] loop0: detected capacity change from 0 to 32768 [ 202.252104][ T5404] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.476 (5404) [ 202.299186][ T5404] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.311528][ T5404] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 202.314338][ T5317] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.320989][ T5404] BTRFS info (device loop0): using free space tree [ 203.033268][ T5404] BTRFS info (device loop0): enabling ssd optimizations [ 203.055999][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 203.201758][ T5317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.250115][ T27] audit: type=1326 audit(1723037707.137:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.4.485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x0 [ 203.277667][ T5050] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.293021][ T5317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.424789][ T5317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.480615][ T27] audit: type=1326 audit(1723037707.367:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 203.548948][ T27] audit: type=1326 audit(1723037707.417:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 204.010792][ T27] audit: type=1326 audit(1723037707.487:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 204.076812][ T5454] loop1: detected capacity change from 0 to 256 [ 204.297960][ T3642] Bluetooth: hci6: command tx timeout [ 204.331329][ T27] audit: type=1326 audit(1723037707.487:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 204.345693][ T5454] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 204.426358][ T27] audit: type=1326 audit(1723037707.487:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 204.474605][ T27] audit: type=1326 audit(1723037707.487:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 204.497250][ T27] audit: type=1326 audit(1723037707.487:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 204.523422][ T27] audit: type=1326 audit(1723037707.497:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 204.719036][ T5446] netlink: 'syz.4.485': attribute type 27 has an invalid length. [ 204.735415][ T5446] device lo entered promiscuous mode [ 204.741502][ T5446] device tunl0 entered promiscuous mode [ 204.755977][ T27] audit: type=1326 audit(1723037707.497:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 204.815179][ T5446] device gre0 entered promiscuous mode [ 204.821909][ T5446] device gretap0 entered promiscuous mode [ 204.863154][ T5446] device erspan0 entered promiscuous mode [ 204.876799][ T5461] loop1: detected capacity change from 0 to 64 [ 204.892857][ T5446] device ip_vti0 entered promiscuous mode [ 204.899920][ T5446] device ip6_vti0 entered promiscuous mode [ 204.907424][ T5446] device sit0 entered promiscuous mode [ 204.914239][ T5446] device ip6tnl0 entered promiscuous mode [ 204.922244][ T5446] device ip6gre0 entered promiscuous mode [ 204.929616][ T5446] device syz_tun entered promiscuous mode [ 204.937261][ T5446] device ip6gretap0 entered promiscuous mode [ 204.944414][ T5446] device bridge0 entered promiscuous mode [ 204.951299][ T5446] device vcan0 entered promiscuous mode [ 204.957387][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.963138][ T5461] hfs: request for non-existent node 1291 in B*Tree [ 204.967844][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.439694][ T5446] device bond0 entered promiscuous mode [ 205.453985][ T5461] hfs: request for non-existent node 1291 in B*Tree [ 205.743076][ T5446] device bond_slave_0 entered promiscuous mode [ 205.759001][ T5446] device bond_slave_1 entered promiscuous mode [ 205.783586][ T5446] device team0 entered promiscuous mode [ 205.801773][ T5446] device team_slave_0 entered promiscuous mode [ 205.813908][ T4666] hfs: request for non-existent node 1291 in B*Tree [ 205.824664][ T4666] hfs: request for non-existent node 1291 in B*Tree [ 205.845977][ T5446] device team_slave_1 entered promiscuous mode [ 205.874487][ T5446] device dummy0 entered promiscuous mode [ 205.881227][ T5446] device nlmon0 entered promiscuous mode [ 205.883529][ T4666] hfs: request for non-existent node 1291 in B*Tree [ 205.896868][ T5446] device caif0 entered promiscuous mode [ 205.902598][ T5446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.906143][ T4666] hfs: request for non-existent node 1291 in B*Tree [ 205.927353][ T5317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.992306][ T5468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.490'. [ 206.401719][ T5476] loop4: detected capacity change from 0 to 512 [ 207.301637][ T5476] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.492: casefold flag without casefold feature [ 207.327175][ T5476] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.492: missing EA_INODE flag [ 207.362435][ T5317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.362991][ T5476] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.492: error while reading EA inode 12 err=-117 [ 207.389958][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.390667][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.396271][ T5317] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.400500][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.429628][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.439160][ T4886] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.446371][ T4886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.455225][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.478701][ T5476] EXT4-fs (loop4): 1 orphan inode deleted [ 207.499324][ T5476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 207.574540][ T5476] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.492: Directory hole found for htree leaf block 0 [ 207.605379][ T5476] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.492: Directory hole found for htree leaf block 0 [ 207.641104][ T5476] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.492: Directory hole found for htree leaf block 0 [ 207.718495][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.727572][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.736602][ T4886] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.743759][ T4886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.754254][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.763335][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.797362][ T5484] loop2: detected capacity change from 0 to 32768 [ 207.943582][ T5500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.498'. [ 208.241406][ T5484] XFS (loop2): Mounting V5 Filesystem [ 208.456503][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.477698][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.486644][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.498776][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.509440][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.523742][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.535259][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.544187][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.557131][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.591977][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.633087][ T5484] XFS (loop2): Ending clean mount [ 208.660550][ T5484] XFS (loop2): Quotacheck needed: Please wait. [ 208.773807][ T3651] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 208.782601][ T3651] Bluetooth: hci2: Injecting HCI hardware error event [ 208.793598][ T3642] Bluetooth: hci2: hardware error 0x00 [ 208.826495][ T5484] XFS (loop2): Quotacheck: Done. [ 208.990003][ T3709] device hsr_slave_0 left promiscuous mode [ 209.024057][ T3709] device hsr_slave_1 left promiscuous mode [ 209.030747][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.043164][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.066796][ T3646] XFS (loop2): Unmounting Filesystem [ 209.074375][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.081942][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.111680][ T3709] device bridge_slave_1 left promiscuous mode [ 209.120499][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.142918][ T3709] device bridge_slave_0 left promiscuous mode [ 209.150110][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.158829][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 209.236828][ T3709] device veth1_macvtap left promiscuous mode [ 209.242925][ T3709] device veth0_macvtap left promiscuous mode [ 209.249632][ T3709] device veth1_vlan left promiscuous mode [ 209.255612][ T3709] device veth0_vlan left promiscuous mode [ 209.782526][ T3709] device team_slave_1 left promiscuous mode [ 209.796511][ T3709] team0 (unregistering): Port device team_slave_1 removed [ 209.835009][ T3709] device team_slave_0 left promiscuous mode [ 209.841887][ T3709] team0 (unregistering): Port device team_slave_0 removed [ 209.880707][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.889519][ T3709] device bond_slave_1 left promiscuous mode [ 209.929299][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.938605][ T3709] device bond_slave_0 left promiscuous mode [ 210.384275][ T3709] bond0 (unregistering): Released all slaves [ 210.485988][ T5317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.493892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.501443][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.561266][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.576118][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.599669][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.608604][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.621312][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.630436][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.649700][ T5317] device veth0_vlan entered promiscuous mode [ 210.662545][ T5317] device veth1_vlan entered promiscuous mode [ 210.687540][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.698010][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.707728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.716980][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.728517][ T5317] device veth0_macvtap entered promiscuous mode [ 210.747448][ T5317] device veth1_macvtap entered promiscuous mode [ 210.773083][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.783940][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.794490][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.805199][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.815457][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.825985][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.835874][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.847060][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.857021][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.867500][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.879467][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.890694][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.899459][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.907965][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.916799][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.928380][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.940508][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.943355][ T3642] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 210.951246][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.972647][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.982596][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.996520][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.006489][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.017308][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.027305][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.037880][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.051352][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.059508][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.069063][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.081101][ T5317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.104849][ T5317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.123238][ T5317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.131959][ T5317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.230672][ T3722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.243641][ T3722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.276816][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.287118][ T4666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.295859][ T4666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.336039][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.431927][ T5515] loop4: detected capacity change from 0 to 512 [ 211.499484][ T5515] EXT4-fs (loop4): 1 truncate cleaned up [ 211.507176][ T5515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 211.833548][ T4886] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.010321][ T5528] loop2: detected capacity change from 0 to 1024 [ 213.033022][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 213.297954][ T5535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.308187][ T5535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.315928][ T5535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.333964][ T4886] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 213.356960][ T5535] /dev/loop2: Can't open blockdev [ 213.394497][ T4886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.452353][ T4886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.500983][ T5538] loop4: detected capacity change from 0 to 256 [ 213.518255][ T4886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 213.553773][ T5538] exfat: Deprecated parameter 'namecase' [ 213.584856][ T5538] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 213.643579][ T4886] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 213.652700][ T4886] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 213.678917][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 213.678934][ T27] audit: type=1326 audit(1723037717.567:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 213.717994][ T4886] usb 2-1: Manufacturer: syz [ 213.732706][ T4886] usb 2-1: config 0 descriptor?? [ 213.739551][ T5538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.501'. [ 213.769483][ T27] audit: type=1326 audit(1723037717.607:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 213.833530][ T27] audit: type=1326 audit(1723037717.607:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 213.880660][ T27] audit: type=1326 audit(1723037717.607:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 213.908314][ T5539] loop4: detected capacity change from 0 to 128 [ 213.943448][ T27] audit: type=1326 audit(1723037717.607:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 213.992573][ T27] audit: type=1326 audit(1723037717.607:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 214.069478][ T27] audit: type=1326 audit(1723037717.607:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 214.141652][ T27] audit: type=1326 audit(1723037717.607:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 214.200292][ T27] audit: type=1326 audit(1723037717.607:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 214.233866][ T27] audit: type=1326 audit(1723037717.607:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x7ffc0000 [ 214.255420][ T4886] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 214.284192][ T4886] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 214.300225][ T5544] netlink: 'syz.0.502': attribute type 27 has an invalid length. [ 214.317269][ T5544] device lo entered promiscuous mode [ 214.324059][ T4886] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 214.331603][ T5544] device tunl0 entered promiscuous mode [ 214.352029][ T5544] device gre0 entered promiscuous mode [ 214.383378][ T4882] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 214.390883][ T5544] device gretap0 entered promiscuous mode [ 214.453095][ T5544] device erspan0 entered promiscuous mode [ 214.470248][ T5544] device ip_vti0 entered promiscuous mode [ 214.482436][ T5544] device ip6_vti0 entered promiscuous mode [ 214.517224][ T5544] device sit0 entered promiscuous mode [ 214.524705][ T5544] device ip6tnl0 entered promiscuous mode [ 214.532297][ T5544] device ip6gre0 entered promiscuous mode [ 214.550386][ T5544] device syz_tun entered promiscuous mode [ 214.558220][ T5544] device ip6gretap0 entered promiscuous mode [ 214.568115][ T14] usb 2-1: USB disconnect, device number 8 [ 214.575190][ T5544] device bridge0 entered promiscuous mode [ 214.612533][ T5544] device vcan0 entered promiscuous mode [ 214.632098][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.666729][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.731382][ T5544] device bond0 entered promiscuous mode [ 214.758182][ T5544] device bond_slave_0 entered promiscuous mode [ 214.773436][ T5544] device bond_slave_1 entered promiscuous mode [ 214.964180][ T5544] device team0 entered promiscuous mode [ 215.191396][ T5544] device team_slave_0 entered promiscuous mode [ 215.418369][ T5544] device team_slave_1 entered promiscuous mode [ 215.481654][ T5544] device dummy0 entered promiscuous mode [ 215.519005][ T5544] device nlmon0 entered promiscuous mode [ 215.541207][ T5544] device caif0 entered promiscuous mode [ 215.550597][ T5544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.572325][ T4882] usb 4-1: config 0 has no interfaces? [ 215.578223][ T4882] usb 4-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 215.603432][ T4882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.611432][ T5554] loop4: detected capacity change from 0 to 256 [ 215.644532][ T4882] usb 4-1: config 0 descriptor?? [ 215.674293][ T5554] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 215.855334][ T5559] loop1: detected capacity change from 0 to 4096 [ 215.893327][ T3642] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 215.902192][ T3642] Bluetooth: hci6: Injecting HCI hardware error event [ 215.916291][ T3655] Bluetooth: hci6: hardware error 0x00 [ 216.070042][ T5559] ntfs: volume version 3.1. [ 218.063471][ T3655] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 218.745010][ T5350] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 219.021629][ T5350] usb 5-1: Using ep0 maxpacket: 16 [ 219.404601][ T5350] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 219.428007][ T5350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.478982][ T5350] usb 5-1: Product: syz [ 219.500462][ T5350] usb 5-1: Manufacturer: syz [ 219.524710][ T5350] usb 5-1: SerialNumber: syz [ 219.575692][ T5350] usb 5-1: config 0 descriptor?? [ 219.647068][ T5350] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 220.733655][ T5350] ssu100: probe of 5-1:0.0 failed with error -71 [ 220.750062][ T5350] usb 5-1: USB disconnect, device number 8 [ 220.927809][ T153] usb 4-1: USB disconnect, device number 11 [ 224.340092][ T5637] loop4: detected capacity change from 0 to 1024 [ 224.443505][ T5637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 224.465084][ T5637] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038 (0x7fffffff) [ 224.601891][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 224.601908][ T27] audit: type=1800 audit(1723037728.487:209): pid=5637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.534" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 224.778700][ T5650] loop2: detected capacity change from 0 to 512 [ 224.799286][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 224.817059][ T5650] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 224.848525][ T5650] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 224.866513][ T5650] EXT4-fs (loop2): mount failed [ 225.232305][ T5656] capability: warning: `syz.4.539' uses 32-bit capabilities (legacy support in use) [ 226.318053][ T5659] loop2: detected capacity change from 0 to 1764 [ 226.583527][ T5659] ISOFS: Logical zone size(2) < hardware blocksize(1024) [ 230.343851][ T5699] loop2: detected capacity change from 0 to 256 [ 230.382838][ T5700] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 230.390769][ T5700] netlink: 'syz.0.554': attribute type 2 has an invalid length. [ 230.463743][ T5705] loop4: detected capacity change from 0 to 256 [ 230.485475][ T5705] exfat: Deprecated parameter 'utf8' [ 230.504345][ T5705] exfat: Deprecated parameter 'utf8' [ 230.542375][ T5705] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 231.275931][ T5707] loop1: detected capacity change from 0 to 4096 [ 231.314837][ T5707] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 231.619376][ T5707] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 231.647967][ T5707] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 231.695357][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 231.704365][ T5723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.561'. [ 231.733250][ T5723] device gtp0 entered promiscuous mode [ 232.572732][ T4556] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 232.605590][ T4873] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 232.743665][ T5729] loop3: detected capacity change from 32768 to 11 [ 233.547705][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 233.853850][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 233.921990][ T5763] loop4: detected capacity change from 0 to 764 [ 234.535733][ T5765] loop2: detected capacity change from 0 to 4096 [ 234.553469][ T7] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 234.561349][ T5765] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 234.564509][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.599745][ T5765] ntfs3: loop2: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 234.599745][ T5765] Volume contains 64 bits run: vcn 0, lcn ffffffffffffff03, len 80. [ 234.599745][ T5765] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 234.803903][ T5765] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 235.052119][ T7] usb 1-1: config 0 descriptor?? [ 235.115367][ T5765] ntfs3: loop2: Failed to load $LogFile. [ 235.116253][ T7] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 235.288721][ T5776] loop4: detected capacity change from 0 to 8 [ 235.328597][ T7] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 235.335875][ T7] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 235.358090][ T5776] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 235.366245][ T7] usb 1-1: USB disconnect, device number 5 [ 235.519389][ T5783] afs: Unknown parameter '00000000000000000000011' [ 235.603807][ T153] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 235.674526][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 235.736727][ C1] eth0: bad gso: type: 1, size: 1408 [ 235.804242][ T5792] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 235.963719][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.989524][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.020206][ T153] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 236.057962][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.089616][ T153] usb 4-1: config 0 descriptor?? [ 236.362646][ T5811] loop4: detected capacity change from 0 to 2048 [ 236.411220][ T5811] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.595: bad orphan inode 8192 [ 236.429849][ T5811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 236.576303][ T5816] loop2: detected capacity change from 0 to 4096 [ 236.647615][ T153] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 236.657142][ T153] prodikeys 0003:041E:2801.000D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 237.586321][ T5824] loop1: detected capacity change from 0 to 128 [ 237.621471][ T4886] usb 4-1: USB disconnect, device number 12 [ 237.634129][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 237.745897][ T5828] sctp: [Deprecated]: syz.1.598 (pid 5828) Use of int in max_burst socket option deprecated. [ 237.745897][ T5828] Use struct sctp_assoc_value instead [ 237.815474][ T5834] loop2: detected capacity change from 0 to 64 [ 240.591567][ T5865] loop2: detected capacity change from 0 to 1024 [ 240.982072][ T5865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 241.065673][ T5865] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038 (0x7fffffff) [ 241.484199][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 243.608126][ T5912] loop4: detected capacity change from 0 to 1024 [ 244.143552][ T4373] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 244.553634][ T3745] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 244.583933][ T4373] usb 5-1: config 0 has an invalid interface number: 157 but max is 0 [ 244.628507][ T4373] usb 5-1: config 0 has no interface number 0 [ 244.833630][ T3745] usb 2-1: Using ep0 maxpacket: 32 [ 244.924508][ T4373] usb 5-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 244.988477][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.082070][ T5925] loop2: detected capacity change from 0 to 8192 [ 245.115306][ T4373] usb 5-1: Product: syz [ 245.183435][ T3745] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.44 [ 245.192630][ T3745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.222513][ T4373] usb 5-1: Manufacturer: syz [ 245.227309][ T4373] usb 5-1: SerialNumber: syz [ 245.242472][ T3745] usb 2-1: Product: syz [ 245.248143][ T4373] usb 5-1: config 0 descriptor?? [ 245.288376][ T3745] usb 2-1: Manufacturer: syz [ 245.293482][ T3745] usb 2-1: SerialNumber: syz [ 245.318372][ T3745] usb 2-1: config 0 descriptor?? [ 245.404203][ T3745] usb-storage 2-1:0.0: USB Mass Storage device detected [ 245.569683][ T4373] usb 5-1: USB disconnect, device number 9 [ 245.581545][ T3745] usb-storage 2-1:0.0: Quirks match for vid 04e6 pid 0007: 1 [ 246.578381][ T3745] usb-storage 2-1:0.0: This device (04e6,0007,0144 S 3e P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.1.103-syzkaller) [ 246.578381][ T3745] Please send a copy of this message to and [ 246.832866][ T3745] usb 2-1: USB disconnect, device number 9 [ 247.591867][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 247.601586][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 247.608088][ T5962] loop4: detected capacity change from 0 to 256 [ 247.835363][ T4373] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 248.093676][ T4373] usb 1-1: Using ep0 maxpacket: 16 [ 248.193014][ T5974] device vlan1 entered promiscuous mode [ 248.232858][ T5974] device batadv_slave_1 entered promiscuous mode [ 248.253610][ T4373] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 248.274316][ T4373] usb 1-1: config 0 has no interface number 0 [ 248.312363][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'. [ 248.329223][ T4373] usb 1-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 248.402187][ T4373] usb 1-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 248.483882][ T4373] usb 1-1: config 0 interface 11 has no altsetting 0 [ 248.628731][ T5974] device vlan1 left promiscuous mode [ 248.684071][ T4373] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 248.701188][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.726321][ T5973] device batadv_slave_1 left promiscuous mode [ 248.752170][ T4373] usb 1-1: Product: syz [ 248.766937][ T4373] usb 1-1: Manufacturer: syz [ 248.771595][ T4373] usb 1-1: SerialNumber: syz [ 248.809983][ T4373] usb 1-1: config 0 descriptor?? [ 249.152058][ T4373] usb 1-1: Expected 3 endpoints, found: 0 [ 249.355004][ T4373] usb 1-1: USB disconnect, device number 6 [ 250.294153][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 250.302077][ T4373] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 250.563480][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 250.653496][ T4373] usb 3-1: Using ep0 maxpacket: 32 [ 250.714168][ T7] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 250.774271][ T7] usb 2-1: config 0 has no interfaces? [ 250.851878][ T7] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 250.949813][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.963638][ T7] usb 2-1: config 0 descriptor?? [ 251.116909][ T4373] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 251.136732][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.160612][ T4373] usb 3-1: Product: syz [ 251.176695][ T4373] usb 3-1: Manufacturer: syz [ 251.191345][ T4373] usb 3-1: SerialNumber: syz [ 251.199223][ T4373] usb 3-1: config 0 descriptor?? [ 251.233270][ T3053] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 251.245777][ T4373] radioshark 3-1:0.0: Invalid radioSHARK device [ 251.262399][ T4373] radioshark: probe of 3-1:0.0 failed with error -22 [ 251.270943][ T4373] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 251.280780][ T4373] usb 2-1: USB disconnect, device number 10 [ 251.589684][ T4373] usb 3-1: USB disconnect, device number 10 [ 251.654209][ T3053] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 251.680171][ T3053] usb 1-1: config 0 has no interface number 0 [ 251.739121][ T3053] usb 1-1: config 0 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 251.916477][ T3053] usb 1-1: config 0 interface 20 has no altsetting 0 [ 251.993929][ T3053] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 252.141547][ T3053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.184551][ T3053] usb 1-1: config 0 descriptor?? [ 252.353305][ T4882] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 252.442287][ T3053] usb 1-1: USB disconnect, device number 7 [ 252.627050][ T6027] loop4: detected capacity change from 0 to 1024 [ 252.634032][ T6030] binder: 6028:6030 ioctl c0306201 0 returned -14 [ 252.644350][ T6027] EXT4-fs: Ignoring removed oldalloc option [ 252.667301][ T6027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 252.884375][ T4882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.998343][ T4882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.244449][ T4882] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 253.477633][ T4882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.554477][ T4882] usb 4-1: config 0 descriptor?? [ 253.687991][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 254.996025][ T4882] apple 0003:05AC:0262.000E: unbalanced delimiter at end of report description [ 255.005706][ T4882] apple 0003:05AC:0262.000E: parse failed [ 255.011587][ T4882] apple: probe of 0003:05AC:0262.000E failed with error -22 [ 255.021960][ T4882] usb 4-1: USB disconnect, device number 13 [ 255.103449][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 255.496858][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.507488][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.097851][ T6060] loop4: detected capacity change from 0 to 4096 [ 256.178988][ T6060] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.380818][ T6068] loop2: detected capacity change from 0 to 512 [ 256.414441][ T6068] EXT4-fs: Invalid want_extra_isize 5 [ 256.480294][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 258.044127][ T6084] tipc: Started in network mode [ 258.069951][ T6084] tipc: Node identity b69b3ed47995, cluster identity 4711 [ 258.085661][ T6084] tipc: Enabled bearer , priority 0 [ 258.508973][ T6083] tipc: Disabling bearer [ 259.133525][ T4373] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 259.600071][ T4373] usb 3-1: Using ep0 maxpacket: 32 [ 259.695598][ T4882] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 259.928330][ T4373] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=86.5d [ 259.943834][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.953602][ T3053] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 259.969112][ T4373] usb 3-1: Product: syz [ 259.975732][ T4373] usb 3-1: Manufacturer: syz [ 259.981130][ T4373] usb 3-1: SerialNumber: syz [ 259.989054][ T4373] usb 3-1: config 0 descriptor?? [ 260.063415][ T4882] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 260.074360][ T4882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.086921][ T4882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 142, changing to 11 [ 260.098492][ T4882] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 33 [ 260.117131][ T4882] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 260.128809][ T4882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.140318][ T4882] usb 2-1: config 0 descriptor?? [ 260.150924][ T6133] sp0: Synchronizing with TNC [ 260.213258][ T3053] usb 5-1: Using ep0 maxpacket: 8 [ 260.269618][ T4373] usb 3-1: USB disconnect, device number 11 [ 260.373668][ T3053] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 260.384305][ T3053] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.409370][ T3053] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.422605][ T3053] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.438785][ T3053] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.455536][ T3053] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.481730][ T3053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.499142][ T6100] dccp_invalid_packet: P.Data Offset(0) too small [ 260.724810][ T27] audit: type=1326 audit(1723037764.547:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.3.707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b537779f9 code=0x0 [ 261.851389][ T4882] input: HID 28bd:1903 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:1903.000F/input/input9 [ 261.883489][ T3053] usb 5-1: GET_CAPABILITIES returned 0 [ 261.889212][ T3053] usbtmc 5-1:16.0: can't read capabilities [ 262.055218][ T4882] uclogic 0003:28BD:1903.000F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.1-1/input0 [ 262.086428][ T4882] usb 2-1: USB disconnect, device number 11 [ 262.140210][ T4373] usb 5-1: USB disconnect, device number 10 [ 262.574774][ T6160] loop1: detected capacity change from 0 to 2048 [ 262.766309][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 262.792853][ T6160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 262.863369][ T153] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 263.001936][ T6175] loop4: detected capacity change from 0 to 64 [ 263.010066][ T4873] EXT4-fs (loop1): unmounting filesystem. [ 263.060714][ T27] audit: type=1800 audit(1723037766.947:211): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.722" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 263.265129][ T6183] loop4: detected capacity change from 0 to 2048 [ 263.272928][ T6185] loop1: detected capacity change from 0 to 512 [ 263.280876][ T153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.290812][ T153] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 263.291320][ T6185] EXT4-fs: Ignoring removed orlov option [ 263.300566][ T153] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.324064][ T6185] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e01c, mo2=0002] [ 263.332147][ T6185] System zones: 1-12 [ 263.338027][ T6185] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.726: casefold flag without casefold feature [ 263.354899][ T6183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 263.365885][ T6185] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.726: missing EA_INODE flag [ 263.379393][ T6185] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.726: error while reading EA inode 12 err=-117 [ 263.411027][ T6185] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.726: missing EA_INODE flag [ 263.430487][ T6185] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.726: error while reading EA inode 12 err=-117 [ 263.454717][ T6185] EXT4-fs (loop1): 1 orphan inode deleted [ 263.460504][ T6185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 263.770860][ T153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 263.780171][ T153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.788810][ T153] usb 4-1: Product: syz [ 263.793047][ T153] usb 4-1: Manufacturer: syz [ 263.797773][ T153] usb 4-1: SerialNumber: syz [ 263.814620][ T28] INFO: task syz.3.113:4159 blocked for more than 143 seconds. [ 263.915058][ T6192] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.726: Directory hole found for htree leaf block 0 [ 264.727070][ T27] audit: type=1326 audit(1723037768.607:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.4.725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7867779f9 code=0x0 [ 264.963747][ T28] Not tainted 6.1.103-syzkaller #0 [ 264.971568][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.991983][ T28] task:syz.3.113 state:D stack:25376 pid:4159 ppid:3639 flags:0x00004004 [ 265.103256][ T28] Call Trace: [ 265.106769][ T28] [ 265.109745][ T28] __schedule+0x143f/0x4570 [ 265.173303][ T28] ? release_firmware_map_entry+0x186/0x186 [ 265.179392][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 265.189814][ T28] ? print_irqtrace_events+0x210/0x210 [ 265.197114][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 265.202269][ T28] schedule+0xbf/0x180 [ 265.209836][ T28] io_schedule+0x88/0x100 [ 265.216376][ T28] folio_wait_bit_common+0x878/0x1290 [ 265.222149][ T28] ? folio_wait_bit+0x20/0x20 [ 265.230238][ T28] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 265.238478][ T28] ? jfs_error+0x219/0x2e0 [ 265.242942][ T28] ? __get_metapage+0x551/0x1040 [ 265.251084][ T28] release_metapage+0x88/0x9b0 [ 265.257601][ T28] ? PageHeadHuge+0x8e/0x1c0 [ 265.262326][ T28] __get_metapage+0xb15/0x1040 [ 265.270319][ T28] jfs_readdir+0x2907/0x4620 [ 265.276793][ T28] ? dtInitRoot+0x690/0x690 [ 265.281329][ T28] ? down_write_killable_nested+0x90/0x90 [ 265.290831][ T28] ? end_current_label_crit_section+0x147/0x170 [ 265.299748][ T28] ? common_file_perm+0x17d/0x1d0 [ 265.308017][ T28] ? iterate_dir+0x131/0x560 [ 265.312658][ T28] iterate_dir+0x224/0x560 [ 265.327110][ T28] __se_sys_getdents64+0x209/0x4f0 [ 265.332392][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 265.340242][ T153] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 265.351320][ T28] ? __x64_sys_getdents64+0x80/0x80 [ 265.356790][ T28] ? filldir+0x6f0/0x6f0 [ 265.361095][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 265.368439][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 265.373774][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 265.379793][ T28] do_syscall_64+0x3b/0xb0 [ 265.384332][ T28] ? clear_bhb_loop+0x45/0xa0 [ 265.389223][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.396353][ T28] RIP: 0033:0x7efec1b779f9 [ 265.400818][ T28] RSP: 002b:00007efec2868038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 265.410408][ T28] RAX: ffffffffffffffda RBX: 00007efec1d06058 RCX: 00007efec1b779f9 [ 265.418616][ T28] RDX: 0000000000001000 RSI: 0000000020000f80 RDI: 0000000000000006 [ 265.427458][ T28] RBP: 00007efec1be58ee R08: 0000000000000000 R09: 0000000000000000 [ 265.435539][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.443733][ T28] R13: 0000000000000001 R14: 00007efec1d06058 R15: 00007fff4886cab8 [ 265.451874][ T28] [ 265.457040][ T4873] EXT4-fs (loop1): unmounting filesystem. [ 265.463264][ T28] [ 265.463264][ T28] Showing all locks held in the system: [ 265.481233][ T28] 1 lock held by rcu_tasks_kthre/12: [ 265.490848][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 265.504045][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 265.521952][ T28] 1 lock held by rcu_tasks_trace/13: [ 265.528033][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 265.547917][ T28] 2 locks held by kworker/0:1/14: [ 265.553082][ T28] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 265.564065][ T28] #1: ffffc90000137d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 265.565077][ T4373] usb 4-1: USB disconnect, device number 14 [ 265.576014][ T28] 1 lock held by khungtaskd/28: [ 265.587134][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 265.597567][ T28] 3 locks held by kworker/0:3/3053: [ 265.603436][ T28] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 265.607388][ T4373] usblp0: removed [ 265.621642][ T28] #1: ffffc9000b9d7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 265.636375][ T28] #2: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 265.647414][ T28] 2 locks held by getty/3401: [ 265.652132][ T28] #0: ffff88802910d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 265.662081][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 265.672468][ T28] 2 locks held by syz.3.113/4159: [ 265.677572][ T28] #0: ffff888074b0eae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 265.687102][ T28] #1: ffff888070f5aa80 (&type->i_mutex_dir_key#12){+.+.}-{3:3}, at: iterate_dir+0x131/0x560 [ 265.697434][ T28] 3 locks held by kworker/0:13/4373: [ 265.702731][ T28] #0: ffff888143eac138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 265.713577][ T28] #1: ffffc9001958fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 265.725826][ T28] #2: ffff88802294f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 265.735687][ T28] [ 265.738065][ T28] ============================================= [ 265.738065][ T28] [ 265.751582][ T28] NMI backtrace for cpu 1 [ 265.755984][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 265.763904][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 265.774080][ T28] Call Trace: [ 265.777554][ T28] [ 265.780516][ T28] dump_stack_lvl+0x1e3/0x2cb [ 265.785252][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 265.790759][ T28] ? panic+0x764/0x764 [ 265.794867][ T28] ? vprintk_emit+0x622/0x740 [ 265.799583][ T28] ? printk_sprint+0x490/0x490 [ 265.804401][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 265.809637][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 265.814791][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 265.820954][ T28] ? _printk+0xd1/0x111 [ 265.825197][ T28] ? panic+0x764/0x764 [ 265.829271][ T28] ? __wake_up_klogd+0xcc/0x100 [ 265.834141][ T28] ? panic+0x764/0x764 [ 265.838239][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 265.844330][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 265.850413][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 265.856448][ T28] watchdog+0xf88/0xfd0 [ 265.860632][ T28] ? watchdog+0x1f8/0xfd0 [ 265.865062][ T28] kthread+0x28d/0x320 [ 265.869221][ T28] ? hungtask_pm_notify+0x50/0x50 [ 265.874255][ T28] ? kthread_blkcg+0xd0/0xd0 [ 265.878854][ T28] ret_from_fork+0x1f/0x30 [ 265.883306][ T28] [ 265.887178][ T28] Sending NMI from CPU 1 to CPUs 0: [ 265.892714][ C0] NMI backtrace for cpu 0 [ 265.892725][ C0] CPU: 0 PID: 3847 Comm: kworker/u4:12 Not tainted 6.1.103-syzkaller #0 [ 265.892743][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 265.892754][ C0] Workqueue: 0x0 (phy20) [ 265.892777][ C0] RIP: 0010:__lock_acquire+0xcd1/0x1f80 [ 265.892804][ C0] Code: 89 d8 48 c1 e8 06 48 8d 3c c5 20 92 73 90 be 08 00 00 00 e8 e1 98 77 00 48 bf 00 00 00 00 00 fc ff df 48 0f a3 1d 9f 0c 09 0f <0f> 83 40 08 00 00 49 8d 9d d0 0a 00 00 48 89 d8 48 c1 e8 03 48 89 [ 265.892819][ C0] RSP: 0018:ffffc900047e7960 EFLAGS: 00000057 [ 265.892832][ C0] RAX: 0000000000000001 RBX: 0000000000000033 RCX: ffffffff816a856f [ 265.892844][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 265.892854][ C0] RBP: ffff88801ba98ae0 R08: dffffc0000000000 R09: fffffbfff20e7245 [ 265.892867][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801ba98ad8 [ 265.892879][ C0] R13: ffff88801ba98000 R14: ffff88801ba98b00 R15: 1ffff11003753160 [ 265.892892][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 265.892907][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.892918][ C0] CR2: 0000001b3060cff8 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 265.892933][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.892943][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.892953][ C0] Call Trace: [ 265.892959][ C0] [ 265.892964][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 265.892990][ C0] ? read_lock_is_recursive+0x10/0x10 [ 265.893016][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 265.893050][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 265.893076][ C0] ? nmi_handle+0x12e/0x440 [ 265.893102][ C0] ? nmi_handle+0x25/0x440 [ 265.893127][ C0] ? __lock_acquire+0xcd1/0x1f80 [ 265.893156][ C0] ? default_do_nmi+0x62/0x150 [ 265.893184][ C0] ? exc_nmi+0xa8/0x100 [ 265.893210][ C0] ? end_repeat_nmi+0x16/0x31 [ 265.893236][ C0] ? __lock_acquire+0xcbf/0x1f80 [ 265.893260][ C0] ? __lock_acquire+0xcd1/0x1f80 [ 265.893285][ C0] ? __lock_acquire+0xcd1/0x1f80 [ 265.893309][ C0] ? __lock_acquire+0xcd1/0x1f80 [ 265.893333][ C0] [ 265.893338][ C0] [ 265.893357][ C0] lock_acquire+0x1f8/0x5a0 [ 265.893381][ C0] ? raw_spin_rq_lock_nested+0x26/0x140 [ 265.893403][ C0] ? trace_rcu_utilization+0x71/0x230 [ 265.893422][ C0] ? read_lock_is_recursive+0x10/0x10 [ 265.893446][ C0] ? read_lock_is_recursive+0x10/0x10 [ 265.893479][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 265.893499][ C0] ? raw_spin_rq_lock_nested+0x26/0x140 [ 265.893519][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 265.893542][ C0] __schedule+0x33d/0x4570 [ 265.893566][ C0] ? pwq_dec_nr_in_flight+0x1e8/0x460 [ 265.893594][ C0] ? worker_thread+0xe98/0x1200 [ 265.893614][ C0] ? release_firmware_map_entry+0x186/0x186 [ 265.893638][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 265.893664][ C0] ? print_irqtrace_events+0x210/0x210 [ 265.893687][ C0] ? kthread_data+0x4e/0xc0 [ 265.893712][ C0] ? wq_worker_sleeping+0x5f/0x270 [ 265.893729][ C0] schedule+0xbf/0x180 [ 265.893752][ C0] worker_thread+0xe9d/0x1200 [ 265.893776][ C0] ? _raw_spin_unlock+0x40/0x40 [ 265.893799][ C0] kthread+0x28d/0x320 [ 265.893812][ C0] ? worker_clr_flags+0x190/0x190 [ 265.893831][ C0] ? kthread_blkcg+0xd0/0xd0 [ 265.893847][ C0] ret_from_fork+0x1f/0x30 [ 265.893876][ C0] [ 265.905082][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 265.905098][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 265.905124][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 265.905137][ T28] Call Trace: [ 265.905145][ T28] [ 265.905155][ T28] dump_stack_lvl+0x1e3/0x2cb [ 265.905196][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 265.905228][ T28] ? panic+0x764/0x764 [ 265.905250][ T28] ? llist_add_batch+0x160/0x1d0 [ 265.905286][ T28] ? vscnprintf+0x59/0x80 [ 265.905313][ T28] panic+0x318/0x764 [ 265.905337][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 265.905373][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 265.905402][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 265.905436][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 265.905471][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 265.905509][ T28] watchdog+0xfc7/0xfd0 [ 265.905545][ T28] ? watchdog+0x1f8/0xfd0 [ 265.905578][ T28] kthread+0x28d/0x320 [ 265.905604][ T28] ? hungtask_pm_notify+0x50/0x50 [ 265.905632][ T28] ? kthread_blkcg+0xd0/0xd0 [ 265.905655][ T28] ret_from_fork+0x1f/0x30 [ 265.905699][ T28] [ 265.906985][ T28] Kernel Offset: disabled [ 266.354193][ T28] Rebooting in 86400 seconds..