last executing test programs: 7.524601617s ago: executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000380)="fee040602d9e780c5e1d673f3e5d2e518ada7c7252491b7d5660109bdc7083c8ad3b00bc4563d98c76ec089698dd5b487950fc2fb25891623e7f6b45801874f8b83d2f772c5ce9e4f89a2d", 0x4b}], 0x1}, 0x0) 7.357727523s ago: executing program 1: syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000140), 0x1, 0x50ed, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="85", 0x1}, {&(0x7f0000000380)="b678dfbb2003836a0a5e69e880336ace1aa351ce93c73a1d8d6fd422d1d05cda15207d9aae4b0cbc13bfdcc8ef4a220a674eaac36e998057388419aa6132f9b7c6a3b28d3c76b1cdfc53b1e2bc34629a0910723db9a22e34fd9429ccb1969a657a4b0d4d0f76aaa785f488a2683d92a977b0b0007b9cfea20917df6a19e34c0d95971f446824c4c7e9c6bd0d630f74a1042094b574cf5718646152a919c4e439a2ae940b26bf0a09c7cd6797671d53c93623d9090b9747d40d61210e165ce32a1ac6485c9dd118a1a2a00db67e7a600606fe640516fc2d9b2b618d131253d4ccf9d9584bd539236f92084f510e1e8e3cb26b", 0xf2}], 0x2, 0x0, 0x4, 0x0) 6.416933528s ago: executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7, 0x4, 0x23}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0xe740, r1}, 0x38) 6.107439346s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 5.88927612s ago: executing program 4: syz_emit_vhci(&(0x7f0000000540)=ANY=[], 0x22) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000001300)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x22}, @l2cap_cid_signaling={{0x1e}, [@l2cap_conf_rsp={{0x5, 0x9, 0x6}, {0x0, 0x0, 0x4}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x5}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x0, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}}]}}, 0x27) write(0xffffffffffffffff, 0x0, 0x0) 5.69592194s ago: executing program 1: write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 5.579008158s ago: executing program 1: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xfffffcdd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfffffcdd) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00') sendfile(r1, r2, 0x0, 0x37) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') sendfile(r0, r3, 0x0, 0x7) 5.464029325s ago: executing program 4: mlockall(0x1) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc000, 0x3, &(0x7f0000ff4000/0xc000)=nil) 4.45940923s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfed7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3.658884865s ago: executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) 3.154603632s ago: executing program 2: syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000140), 0x1, 0x50ed, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="85", 0x1}, {&(0x7f0000000380)="b678dfbb2003836a0a5e69e880336ace1aa351ce93c73a1d8d6fd422d1d05cda15207d9aae4b0cbc13bfdcc8ef4a220a674eaac36e998057388419aa6132f9b7c6a3b28d3c76b1cdfc53b1e2bc34629a0910723db9a22e34fd9429ccb1969a657a4b0d4d0f76aaa785f488a2683d92a977b0b0007b9cfea20917df6a19e34c0d95971f446824c4c7e9c6bd0d630f74a1042094b574cf5718646152a919c4e439a2ae940b26bf0a09c7cd6797671d53c93623d9090b9747d40d61210e165ce32a1ac6485c9dd118a1a2a00db67e7a600606fe640516fc2d9b2b618d131253d4ccf9d9584bd539236f92084f510e1e8e3cb26b", 0xf2}], 0x2, 0x0, 0x4, 0x0) 2.997889056s ago: executing program 3: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0x22) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000001300)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x22}, @l2cap_cid_signaling={{0x1e}, [@l2cap_conf_rsp={{0x5, 0x9, 0x6}, {0x0, 0x0, 0x4}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x5}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x0, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}}]}}, 0x27) write(0xffffffffffffffff, 0x0, 0x0) 2.807593936s ago: executing program 3: write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 2.648245081s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d0000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000000040)=""/40, 0x28}], 0x2}}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000340)=""/4096, 0x412269194f7c77a1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.506766532s ago: executing program 0: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000001400)=ANY=[], 0x835, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) 2.496940574s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) 2.357100435s ago: executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000140)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bind$packet(r4, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr") truncate(&(0x7f0000000200)='./file1\x00', 0x87e) truncate(&(0x7f0000000080)='./file1\x00', 0xc00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) socket$nl_netfilter(0x10, 0x3, 0xc) 2.13680732s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='\vG\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xb}, {&(0x7f00000001c0)="75bbc32709565272ff5111b482ecedf6af41c5304bd2f4e4efd6760a750cd28715696dd748a7a3dd8384d925012e7d1c63231070611da43ab910fbc8defa1ffdf40b419dfb03c52c54f3ac2ab16288c111051b335bf1764c0947cf0d9791cb8faf67ff7ae42bba1179dbc316085c81541b2bc8e3d977", 0x76}], 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003980)=""/4103, 0x1007}], 0x1}}], 0x1, 0x60, 0x0) 1.988324892s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)='\vG\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xb}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003980)=""/4103, 0x1007}], 0x1}}], 0x1, 0x60, 0x0) 1.851113254s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.669806242s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000006231306e53f070c0000000aa7e19349a4a1f783000000000b06007a1583"], 0x0}, 0x0) 1.634544927s ago: executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) 1.495929469s ago: executing program 2: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0x22) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000001300)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x22}, @l2cap_cid_signaling={{0x1e}, [@l2cap_conf_rsp={{0x5, 0x9, 0x6}, {0x0, 0x0, 0x4}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x5}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x0, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}}]}}, 0x27) write(0xffffffffffffffff, 0x0, 0x0) 1.462687664s ago: executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001fe, 0xe8082) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffd56, 0x0, 0x0}) 1.277537782s ago: executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7, 0x4, 0x23}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0xe740, r1}, 0x38) 510.959571ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) 474.482387ms ago: executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) unshare(0x22020400) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x10) 228.992214ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000080)}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x4b67, &(0x7f0000000000)) 191.15687ms ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='\vG\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xb}, {&(0x7f00000001c0)="75bbc32709565272ff5111b482ecedf6af41c5304bd2f4e4efd6760a750cd28715696dd748a7a3dd8384d925012e7d1c63231070611da43ab910fbc8defa1ffdf40b419dfb03c52c54f3ac2ab16288c111051b335bf1764c0947cf0d9791cb8faf67ff7ae42bba1179dbc316085c81541b2bc8e3d977", 0x76}], 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003980)=""/4103, 0x1007}], 0x1}}], 0x1, 0x60, 0x0) 0s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)='\vG\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xb}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003980)=""/4103, 0x1007}], 0x1}}], 0x1, 0x60, 0x0) kernel console output (not intermixed with test programs): [ 198.259726][ T3575] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.268907][ T3575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.311255][ T6177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.355063][ T3688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.371203][ T7118] XFS (loop0): Quotacheck: Done. [ 198.389744][ T3688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.420827][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.484672][ T3568] XFS (loop0): Unmounting Filesystem [ 198.502867][ T6176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.540360][ T6176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.580893][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.842229][ T7137] chnl_net:caif_netlink_parms(): no params data found [ 198.850968][ T27] audit: type=1326 audit(1717245097.572:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386f87cee9 code=0x7ffc0000 [ 198.902963][ T27] audit: type=1326 audit(1717245097.572:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f386f87cee9 code=0x7ffc0000 [ 198.948907][ T27] audit: type=1326 audit(1717245097.572:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386f87cee9 code=0x7ffc0000 [ 198.975646][ T27] audit: type=1326 audit(1717245097.572:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f386f87cee9 code=0x7ffc0000 [ 199.006046][ T27] audit: type=1326 audit(1717245097.582:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386f87cee9 code=0x7ffc0000 [ 199.036528][ T27] audit: type=1326 audit(1717245097.582:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f386f87cee9 code=0x7ffc0000 [ 199.070147][ T27] audit: type=1326 audit(1717245097.612:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386f87cee9 code=0x7ffc0000 [ 199.140624][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.158286][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.168045][ T7137] device bridge_slave_0 entered promiscuous mode [ 199.185909][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.198586][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.208270][ T7137] device bridge_slave_1 entered promiscuous mode [ 199.250920][ T27] audit: type=1326 audit(1717245097.612:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f386f87a667 code=0x7ffc0000 [ 199.319223][ T27] audit: type=1326 audit(1717245097.622:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f386f840329 code=0x7ffc0000 [ 199.389696][ T27] audit: type=1326 audit(1717245097.622:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386f87cee9 code=0x7ffc0000 [ 200.866585][ T3575] Bluetooth: hci1: command tx timeout [ 200.884107][ T7137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.898726][ T7137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.959438][ T7137] team0: Port device team_slave_0 added [ 200.991028][ T7137] team0: Port device team_slave_1 added [ 201.041277][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.048336][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.074356][ T7137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.086829][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.102617][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.128829][ T7137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.221343][ T7137] device hsr_slave_0 entered promiscuous mode [ 201.229409][ T7137] device hsr_slave_1 entered promiscuous mode [ 201.241376][ T7137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.249116][ T7137] Cannot create hsr debugfs directory [ 201.251811][ T3689] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 201.424694][ T7184] loop0: detected capacity change from 0 to 2048 [ 201.484870][ T7184] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 201.521770][ T3689] usb 3-1: Using ep0 maxpacket: 8 [ 201.557568][ T6177] device hsr_slave_0 left promiscuous mode [ 201.586628][ T6177] device hsr_slave_1 left promiscuous mode [ 201.606702][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.618223][ T7180] loop4: detected capacity change from 0 to 32768 [ 201.623754][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.633041][ T7180] XFS (loop4): Mounting V5 Filesystem [ 201.639455][ T3568] EXT4-fs (loop0): unmounting filesystem. [ 201.641499][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.659970][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.668132][ T3689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.694463][ T7197] loop0: detected capacity change from 0 to 512 [ 201.697486][ T3689] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 201.707452][ T7197] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz-executor.0: invalid block [ 201.723670][ T6177] device bridge_slave_1 left promiscuous mode [ 201.729909][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.730436][ T3689] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 201.738725][ T7197] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 10 (level 1) [ 201.748561][ T3689] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 201.772399][ T7197] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 8 (level 1) [ 201.773527][ T3689] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 201.792082][ T6177] device bridge_slave_0 left promiscuous mode [ 201.802147][ T3689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.813825][ T7180] XFS (loop4): Ending clean mount [ 201.819675][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.820840][ T7180] XFS (loop4): Quotacheck needed: Please wait. [ 201.830791][ T7197] EXT4-fs (loop0): 1 truncate cleaned up [ 201.839045][ T7197] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 201.853484][ T3689] hub 3-1:1.0: bad descriptor, ignoring hub [ 201.859432][ T3689] hub: probe of 3-1:1.0 failed with error -5 [ 201.871111][ T3689] cdc_wdm 3-1:1.0: skipping garbage [ 201.876560][ T3689] cdc_wdm 3-1:1.0: skipping garbage [ 201.881153][ T7180] XFS (loop4): Quotacheck: Done. [ 201.887728][ T3689] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 201.894159][ T3689] cdc_wdm 3-1:1.0: Unknown control protocol [ 201.921222][ T6177] device veth1_macvtap left promiscuous mode [ 201.934812][ T6177] device veth0_macvtap left promiscuous mode [ 201.941267][ T6177] device veth1_vlan left promiscuous mode [ 201.947851][ T6177] device veth0_vlan left promiscuous mode [ 202.011509][ T7197] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 202.058766][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.066330][ T7197] EXT4-fs error (device loop0): ext4_discard_preallocations:5123: comm syz-executor.0: Error -117 reading block bitmap for 0 [ 202.072032][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.094848][ T7197] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 202.095118][ T6867] XFS (loop4): Unmounting Filesystem [ 202.120332][ T7197] EXT4-fs error (device loop0): ext4_discard_preallocations:5123: comm syz-executor.0: Error -117 reading block bitmap for 0 [ 202.147107][ T7197] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #18: comm syz-executor.0: attempt to clear invalid blocks 37 len 12 [ 202.174291][ T7197] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 202.191089][ T7197] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 202.212755][ T7197] EXT4-fs error (device loop0): ext4_punch_hole:4140: inode #18: comm syz-executor.0: mark_inode_dirty error [ 202.222136][ T3689] usb 3-1: USB disconnect, device number 5 [ 202.409492][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 202.436817][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 202.465416][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.597055][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.651348][ T3584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.663571][ T3584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.674305][ T3584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.684012][ T3584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.706413][ T3583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 202.716085][ T3583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.931840][ T3584] Bluetooth: hci1: command tx timeout [ 203.399485][ T6177] bond0 (unregistering): Released all slaves [ 203.426589][ T3568] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 13: comm syz-executor.0: lblock 0 mapped to illegal pblock 13 (length 1) [ 203.478183][ T3568] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 203.502838][ T3568] EXT4-fs (loop0): unmounting filesystem. [ 203.797860][ T7202] chnl_net:caif_netlink_parms(): no params data found [ 204.022951][ T7137] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.068469][ T7137] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.086883][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.096649][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.114148][ T7202] device bridge_slave_0 entered promiscuous mode [ 204.135190][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.163183][ T7137] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.179490][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.191029][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.208621][ T7202] device bridge_slave_1 entered promiscuous mode [ 204.217358][ T3584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.225359][ T7137] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.241294][ T3584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.249969][ T3584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.259361][ T3584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.268306][ T3584] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.275870][ T3584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.313257][ T7229] team0: Port device bridge1 added [ 204.435963][ T7202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.495869][ T7202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.553234][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.646222][ T7202] team0: Port device team_slave_0 added [ 204.666293][ T7202] team0: Port device team_slave_1 added [ 204.677935][ T7231] team0: Device veth1 is up. Set it down before adding it as a team port [ 204.764597][ T7137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.779870][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.787689][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.825841][ T7202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.855057][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.869072][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.889315][ T7137] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.902991][ T3681] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 204.908225][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.919326][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.990666][ T7202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.021796][ T3583] Bluetooth: hci5: command tx timeout [ 205.028022][ T3583] Bluetooth: hci1: command tx timeout [ 205.150355][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.168759][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.190593][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.197780][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.201706][ T3681] usb 3-1: Using ep0 maxpacket: 8 [ 205.212189][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.233449][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.253681][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.260833][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.275674][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.289419][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.341930][ T3681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.352616][ T3681] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.353093][ T7242] loop4: detected capacity change from 0 to 512 [ 205.361606][ T3681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 205.380535][ T3681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 205.392425][ T3681] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 205.402004][ T3681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.419649][ T7202] device hsr_slave_0 entered promiscuous mode [ 205.427371][ T7202] device hsr_slave_1 entered promiscuous mode [ 205.429459][ T7242] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz-executor.4: invalid block [ 205.446812][ T7202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.455430][ T3681] hub 3-1:1.0: bad descriptor, ignoring hub [ 205.461348][ T3681] hub: probe of 3-1:1.0 failed with error -5 [ 205.467551][ T7202] Cannot create hsr debugfs directory [ 205.473850][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.473891][ T3681] cdc_wdm 3-1:1.0: skipping garbage [ 205.486505][ T3681] cdc_wdm 3-1:1.0: skipping garbage [ 205.487379][ T7242] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 10 (level 1) [ 205.493932][ T3681] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 205.510742][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.511706][ T3681] cdc_wdm 3-1:1.0: Unknown control protocol [ 205.526053][ T7242] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 8 (level 1) [ 205.542241][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.550778][ T7242] EXT4-fs (loop4): 1 truncate cleaned up [ 205.560620][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.568022][ T7242] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 205.577494][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.596684][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.628321][ T7137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.660939][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.677369][ T7137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.697372][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.707037][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.722315][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.730639][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.759161][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.769689][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.803982][ T7227] chnl_net:caif_netlink_parms(): no params data found [ 205.819246][ T7247] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 205.842092][ T3864] usb 3-1: USB disconnect, device number 6 [ 205.873486][ T7247] EXT4-fs error (device loop4): ext4_discard_preallocations:5123: comm syz-executor.4: Error -117 reading block bitmap for 0 [ 205.953551][ T7247] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 205.993957][ T7247] EXT4-fs error (device loop4): ext4_discard_preallocations:5123: comm syz-executor.4: Error -117 reading block bitmap for 0 [ 206.032223][ T7247] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #18: comm syz-executor.4: attempt to clear invalid blocks 37 len 12 [ 206.046357][ T7247] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz-executor.4: Invalid inode table block 0 in block_group 0 [ 206.066526][ T7247] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 206.080397][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.096842][ T7247] EXT4-fs error (device loop4): ext4_punch_hole:4140: inode #18: comm syz-executor.4: mark_inode_dirty error [ 206.101707][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.122912][ T7227] device bridge_slave_0 entered promiscuous mode [ 206.145892][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.155352][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.163315][ T7227] device bridge_slave_1 entered promiscuous mode [ 206.205764][ T7202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.261122][ T6177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.287604][ T7137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.294776][ T3583] Bluetooth: hci0: command tx timeout [ 206.406727][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.419960][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.429598][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.459112][ T7202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.479408][ T6177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.757404][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.899129][ T6177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.151651][ T3583] Bluetooth: hci1: command tx timeout [ 207.157106][ T3583] Bluetooth: hci5: command tx timeout [ 207.203195][ T6867] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 13: comm syz-executor.4: lblock 0 mapped to illegal pblock 13 (length 1) [ 207.265996][ T7202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.284739][ T6867] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz-executor.4: Invalid inode table block 0 in block_group 0 [ 207.305924][ T6867] EXT4-fs (loop4): unmounting filesystem. [ 207.390237][ T6177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.429639][ T7202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.493018][ T7227] team0: Port device team_slave_0 added [ 207.509445][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.518406][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.552376][ T7227] team0: Port device team_slave_1 added [ 207.600576][ T7137] device veth0_vlan entered promiscuous mode [ 207.617982][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.626524][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.679761][ T7137] device veth1_vlan entered promiscuous mode [ 207.691752][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.708175][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.716482][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.741981][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.748943][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.803011][ T7227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.824753][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.835296][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.862218][ T7227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.905468][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.975349][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.989782][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.018358][ T7137] device veth0_macvtap entered promiscuous mode [ 208.081033][ T7227] device hsr_slave_0 entered promiscuous mode [ 208.092448][ T7227] device hsr_slave_1 entered promiscuous mode [ 208.105909][ T7227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.117253][ T7227] Cannot create hsr debugfs directory [ 208.123231][ T7202] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.133470][ T7202] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.145295][ T7137] device veth1_macvtap entered promiscuous mode [ 208.198088][ T7202] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.236310][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.247714][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.257905][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.268633][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.279184][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.290109][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.300872][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.311520][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.333755][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.341103][ T7202] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.350772][ T3584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.366726][ T3584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.373813][ T3575] Bluetooth: hci0: command tx timeout [ 208.382547][ T3584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.392076][ T3584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.402506][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.410189][ T3579] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.412872][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.425118][ T3584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.449543][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.468904][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.481464][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.495813][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.506007][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.519789][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.530633][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.549387][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.559295][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.569802][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.581177][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.621977][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.630695][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.653609][ T7137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.672305][ T7137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.681035][ T7137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.689979][ T7137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.911539][ T6176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.922942][ T6176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.955159][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.049309][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.053235][ T7202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.066180][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.111917][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.140922][ T7202] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.168588][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.172092][ T3583] Bluetooth: hci5: command tx timeout [ 209.176603][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.279585][ T6177] device hsr_slave_0 left promiscuous mode [ 209.297193][ T6177] device hsr_slave_1 left promiscuous mode [ 209.309994][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.318845][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.337927][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.387504][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.405095][ T6177] device bridge_slave_1 left promiscuous mode [ 209.414058][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.424732][ T6177] device bridge_slave_0 left promiscuous mode [ 209.431034][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.445179][ T6177] device veth1_macvtap left promiscuous mode [ 209.451298][ T6177] device veth0_macvtap left promiscuous mode [ 209.457964][ T6177] device veth1_vlan left promiscuous mode [ 209.464798][ T6177] device veth0_vlan left promiscuous mode [ 210.386639][ T6177] bond1 (unregistering): Released all slaves [ 210.455869][ T3583] Bluetooth: hci2: command tx timeout [ 210.462152][ T3583] Bluetooth: hci0: command tx timeout [ 210.491936][ T3689] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.513260][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 210.529882][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 210.545251][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.569136][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.669808][ T6177] bond0 (unregistering): Released all slaves [ 210.748310][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.756548][ T3689] usb 4-1: Using ep0 maxpacket: 8 [ 210.762378][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.770952][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.778093][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.786623][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.795447][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.806184][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.813313][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.821291][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.837434][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.849467][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.872719][ T7261] chnl_net:caif_netlink_parms(): no params data found [ 210.891913][ T3689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.902616][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.913285][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.913983][ T3689] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 210.931126][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.936909][ T3689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 210.952504][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.967839][ T3689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 210.972324][ T7202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.979313][ T3689] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 210.998584][ T3689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.020196][ T7202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.052596][ T3689] hub 4-1:1.0: bad descriptor, ignoring hub [ 211.059769][ T3689] hub: probe of 4-1:1.0 failed with error -5 [ 211.066288][ T3689] cdc_wdm 4-1:1.0: skipping garbage [ 211.071709][ T3689] cdc_wdm 4-1:1.0: skipping garbage [ 211.077950][ T3689] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 211.084191][ T3689] cdc_wdm 4-1:1.0: Unknown control protocol [ 211.101054][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.109018][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.117749][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.128312][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.142382][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.163759][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.256169][ T3584] Bluetooth: hci5: command tx timeout [ 211.262856][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.279337][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.285699][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.301754][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.310213][ T7261] device bridge_slave_0 entered promiscuous mode [ 211.339984][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.384197][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.402637][ T7261] device bridge_slave_1 entered promiscuous mode [ 211.458205][ T3689] usb 4-1: USB disconnect, device number 4 [ 211.485072][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.527672][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.546595][ T7227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.576140][ T7227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.601329][ T7227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.622532][ T7227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.642913][ T7261] team0: Port device team_slave_0 added [ 211.672398][ T7261] team0: Port device team_slave_1 added [ 211.733315][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.753226][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.783319][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.790288][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.816186][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.825329][ T7261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.863753][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.870845][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.936453][ T7261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.975138][ T7202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.079802][ T7202] device veth0_vlan entered promiscuous mode [ 212.136493][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.153855][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.911209][ T3583] Bluetooth: hci0: command tx timeout [ 212.918824][ T3584] Bluetooth: hci2: command tx timeout [ 213.000936][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.009869][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.021780][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.029529][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.043742][ T7202] device veth1_vlan entered promiscuous mode [ 213.085033][ T7227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.178176][ T7261] device hsr_slave_0 entered promiscuous mode [ 213.252386][ T7261] device hsr_slave_1 entered promiscuous mode [ 213.281805][ T3682] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 213.400583][ T7261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.419972][ T7261] Cannot create hsr debugfs directory [ 213.441326][ T7227] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.477224][ T7202] device veth0_macvtap entered promiscuous mode [ 213.509985][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.518615][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.527019][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.534997][ T3682] usb 3-1: Using ep0 maxpacket: 8 [ 213.552364][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.636136][ T7202] device veth1_macvtap entered promiscuous mode [ 213.661855][ T3682] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.685453][ T3682] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.718493][ T3682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 213.741835][ T3682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 213.771868][ T3682] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 213.780934][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.842556][ T3682] hub 3-1:1.0: bad descriptor, ignoring hub [ 213.848508][ T3682] hub: probe of 3-1:1.0 failed with error -5 [ 213.862141][ T3682] cdc_wdm 3-1:1.0: skipping garbage [ 213.867371][ T3682] cdc_wdm 3-1:1.0: skipping garbage [ 213.886913][ T3682] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 213.899814][ T3682] cdc_wdm 3-1:1.0: Unknown control protocol [ 213.938302][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.951513][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.973682][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.982963][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.998548][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.005691][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.014274][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.023530][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.032073][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.039140][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.046810][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.094771][ T7308] device ip6gretap0 entered promiscuous mode [ 214.100846][ T7308] device macsec1 entered promiscuous mode [ 214.128729][ T7308] device ip6gretap0 left promiscuous mode [ 214.159019][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.169846][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.179828][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.190371][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.200530][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.211085][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.211953][ T3681] usb 3-1: USB disconnect, device number 7 [ 214.221372][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.240133][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.253391][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.261966][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.270079][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.287734][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.296345][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.326248][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.350326][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.366102][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.378034][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.388120][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.398592][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.409436][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.424045][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.440108][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.471740][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.480540][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.502394][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.512363][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.543183][ T7202] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.560796][ T7202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.579811][ T7202] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.589621][ T7202] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.601232][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.611298][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.621103][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.629543][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.638050][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.671267][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.681748][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.714350][ T7227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.788474][ T6177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.889156][ T6177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.931920][ T3583] Bluetooth: hci2: command tx timeout [ 214.959162][ T6177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.992126][ T7227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.000480][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.009183][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.019564][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.029255][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.042202][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.064373][ T6177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.101993][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.110105][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.133211][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.147357][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.158786][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.309974][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.328108][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.357436][ T7227] device veth0_vlan entered promiscuous mode [ 215.381120][ T7326] Cannot find set identified by id 0 to match [ 215.396534][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.412736][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.447843][ T7227] device veth1_vlan entered promiscuous mode [ 215.484987][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.495270][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.532193][ T7227] device veth0_macvtap entered promiscuous mode [ 215.562526][ T7227] device veth1_macvtap entered promiscuous mode [ 215.570050][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.643650][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.655290][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.665410][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.676401][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.686419][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.699494][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.722069][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.740464][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.751368][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.771423][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.811515][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.820672][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.843075][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.851255][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.866715][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.899841][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.916944][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.927032][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.942610][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.953215][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.963815][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.974139][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.985131][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.995193][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.005746][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.019122][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.031165][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.101024][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.125587][ T7227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.137422][ T7227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.148967][ T7227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.157941][ T7227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.307308][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.331606][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.362217][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.391458][ T7349] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 216.417722][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.434782][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.453797][ T7349] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 216.495043][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.522747][ T7353] loop3: detected capacity change from 0 to 2048 [ 216.563823][ T7349] syz-executor.1 (7349) used greatest stack depth: 19576 bytes left [ 216.587957][ T7353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.609543][ T7261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.610302][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 216.610315][ T27] audit: type=1800 audit(1717245115.332:1987): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 216.626670][ T7353] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set [ 216.667147][ T7353] EXT4-fs (loop3): Remounting filesystem read-only [ 216.680365][ T27] audit: type=1800 audit(1717245115.352:1988): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 216.735999][ T7137] EXT4-fs (loop3): unmounting filesystem. [ 216.742308][ T7261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.765058][ T7261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.851312][ T7261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.216831][ T3583] Bluetooth: hci2: command tx timeout [ 217.817656][ T7378] loop2: detected capacity change from 0 to 64 [ 217.837303][ T6177] device hsr_slave_0 left promiscuous mode [ 217.848539][ T6177] device hsr_slave_1 left promiscuous mode [ 217.853904][ T27] audit: type=1326 audit(1717245116.572:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0572a7cee9 code=0x7ffc0000 [ 217.882218][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.901751][ T27] audit: type=1326 audit(1717245116.572:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0572a7cee9 code=0x7ffc0000 [ 217.924824][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.933068][ T27] audit: type=1326 audit(1717245116.602:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0572a7cee9 code=0x7ffc0000 [ 217.961126][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.968752][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.977050][ T27] audit: type=1326 audit(1717245116.602:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0572a7cee9 code=0x7ffc0000 [ 218.002541][ T6177] device bridge_slave_1 left promiscuous mode [ 218.008786][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.017789][ T27] audit: type=1326 audit(1717245116.602:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0572a7cee9 code=0x7ffc0000 [ 218.042008][ T27] audit: type=1326 audit(1717245116.602:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0572a7cee9 code=0x7ffc0000 [ 218.065858][ T6177] device bridge_slave_0 left promiscuous mode [ 218.073807][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.087432][ T6177] device veth1_macvtap left promiscuous mode [ 218.094410][ T6177] device veth0_macvtap left promiscuous mode [ 218.100709][ T6177] device veth1_vlan left promiscuous mode [ 218.107121][ T27] audit: type=1326 audit(1717245116.602:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0572a7cee9 code=0x7ffc0000 [ 218.131140][ T6177] device veth0_vlan left promiscuous mode [ 218.138049][ T27] audit: type=1326 audit(1717245116.602:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0572a7a667 code=0x7ffc0000 [ 218.574761][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.669202][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 218.698084][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 218.698791][ T7381] loop3: detected capacity change from 0 to 32768 [ 218.722255][ T7381] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7381) [ 218.737746][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.752893][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.763231][ T7381] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.802525][ T7381] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 218.822784][ T7381] BTRFS info (device loop3): using free space tree [ 218.857846][ T6177] bond0 (unregistering): Released all slaves [ 218.888907][ T7381] BTRFS info (device loop3): enabling ssd optimizations [ 219.104357][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.158582][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.167972][ T7137] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 219.169090][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.198357][ T7261] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.210951][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.229946][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.242198][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.249351][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.276478][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.300255][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.310879][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.328739][ T3689] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.335889][ T3689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.351189][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.410388][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.434328][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.450721][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.461783][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.470656][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.492657][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.502149][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.527627][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.544047][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.558791][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.572574][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.844873][ T7433] loop0: detected capacity change from 0 to 4096 [ 219.902156][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.909691][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.968372][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.346200][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.368614][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.440758][ T7261] device veth0_vlan entered promiscuous mode [ 221.455630][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.474974][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.510431][ T7261] device veth1_vlan entered promiscuous mode [ 221.541173][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.560112][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.587837][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.596756][ T7443] loop2: detected capacity change from 0 to 32768 [ 221.608430][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.715808][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.736408][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.769357][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.812926][ T7261] device veth0_macvtap entered promiscuous mode [ 221.852914][ T7261] device veth1_macvtap entered promiscuous mode [ 221.904027][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.941680][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.987506][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.029524][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.056275][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.097563][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.120872][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.135006][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.149580][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.163323][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.192183][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.208911][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.220955][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.240314][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.259485][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.281777][ T5373] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 222.285801][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.316457][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.337657][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.359058][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.386158][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.408101][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.418817][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.429900][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.448730][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.467471][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.479218][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.490598][ T7261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.500495][ T7261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.517552][ T7261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.531843][ T5373] usb 4-1: Using ep0 maxpacket: 32 [ 222.533705][ T7261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.568095][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.586126][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.662000][ T5373] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 222.685140][ T5373] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 222.705464][ T5373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.754878][ T5373] usb 4-1: config 0 descriptor?? [ 222.772346][ T7483] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 222.792213][ T5373] hub 4-1:0.0: bad descriptor, ignoring hub [ 222.811681][ T5373] hub: probe of 4-1:0.0 failed with error -5 [ 222.842342][ T3688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.842946][ T5373] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 222.889373][ T3688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.924703][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.936224][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.943824][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.972564][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.540070][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.671654][ T3682] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 223.931904][ T3682] usb 5-1: Using ep0 maxpacket: 8 [ 224.161940][ T3682] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 224.177234][ T3682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 224.208267][ T3682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 224.395103][ T7517] loop0: detected capacity change from 0 to 2048 [ 224.431891][ T3682] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 224.446329][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.471845][ T3682] usb 5-1: Product: syz [ 224.477612][ T3682] usb 5-1: Manufacturer: syz [ 224.488395][ T7517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 224.498072][ T3682] usb 5-1: SerialNumber: syz [ 224.514772][ T3682] usb 5-1: config 0 descriptor?? [ 224.551878][ T7504] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 224.597441][ T7227] EXT4-fs (loop0): unmounting filesystem. [ 224.791962][ T3682] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 224.813766][ T3682] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 225.117192][ T7538] loop3: detected capacity change from 0 to 128 [ 225.129458][ T7538] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 225.140762][ T7538] sysv_free_block: flc_count > flc_size [ 225.147790][ T7538] sysv_free_block: flc_count > flc_size [ 225.154096][ T7538] sysv_free_block: flc_count > flc_size [ 225.244278][ T7538] sysv_free_block: flc_count > flc_size [ 225.251522][ T7538] sysv_free_block: flc_count > flc_size [ 225.307668][ T7538] sysv_free_block: flc_count > flc_size [ 225.357981][ T7538] sysv_free_block: flc_count > flc_size [ 225.371229][ T3689] usb 5-1: USB disconnect, device number 4 [ 225.382771][ C1] powermate: config urb returned -71 [ 225.382907][ C1] powermate: usb_submit_urb(config) failed [ 225.383032][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 225.411700][ T7538] sysv_free_block: flc_count > flc_size [ 225.460536][ T7538] sysv_free_block: flc_count > flc_size [ 225.517268][ T7538] sysv_free_block: flc_count > flc_size [ 225.610401][ T7538] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 225.750316][ T5373] usb 4-1: USB disconnect, device number 5 [ 225.905400][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.920085][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.083948][ T7549] kvm: emulating exchange as write [ 228.371709][ T3579] Bluetooth: hci2: command tx timeout [ 228.935014][ T7582] loop3: detected capacity change from 0 to 128 [ 228.959738][ T7582] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 228.979445][ T7582] sysv_free_block: flc_count > flc_size [ 229.011855][ T7582] sysv_free_block: flc_count > flc_size [ 229.020510][ T7582] sysv_free_block: flc_count > flc_size [ 229.027505][ T7582] sysv_free_block: flc_count > flc_size [ 229.041096][ T7582] sysv_free_block: flc_count > flc_size [ 229.060842][ T7582] sysv_free_block: flc_count > flc_size [ 229.075469][ T7582] sysv_free_block: flc_count > flc_size [ 229.091258][ T7582] sysv_free_block: flc_count > flc_size [ 229.141765][ T7582] sysv_free_block: flc_count > flc_size [ 229.149619][ T7582] sysv_free_block: flc_count > flc_size [ 229.156049][ T7582] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 229.163333][ T7574] syz-executor.0 (7574): drop_caches: 1 [ 229.230391][ T7569] loop4: detected capacity change from 0 to 32768 [ 229.291744][ T3684] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 229.473407][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.561299][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.571774][ T3684] usb 3-1: Using ep0 maxpacket: 8 [ 229.782377][ T3684] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 229.817199][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 229.828878][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 229.991873][ T3684] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 230.000966][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.051146][ T3684] usb 3-1: Product: syz [ 230.082422][ T3684] usb 3-1: Manufacturer: syz [ 230.087061][ T3684] usb 3-1: SerialNumber: syz [ 230.132299][ T3684] usb 3-1: config 0 descriptor?? [ 230.152018][ T7584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.405560][ T3684] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 230.413880][ T3684] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 230.501765][ T3682] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 230.621390][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 230.711792][ T5373] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 230.816732][ T3684] usb 3-1: USB disconnect, device number 8 [ 230.831665][ C1] powermate: config urb returned -71 [ 230.837395][ C1] powermate: usb_submit_urb(config) failed [ 230.861812][ T3682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 230.891828][ T3682] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 230.927847][ T3682] usb 5-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 230.951691][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.970481][ T3682] usb 5-1: config 0 descriptor?? [ 231.115684][ T5373] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 231.136965][ T5373] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.158371][ T5373] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.240936][ T3689] usb 5-1: USB disconnect, device number 5 [ 231.331964][ T3583] Bluetooth: hci2: command tx timeout [ 231.372584][ T5373] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.385470][ T5373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.398267][ T5373] usb 2-1: Product: syz [ 231.403027][ T5373] usb 2-1: Manufacturer: syz [ 231.407644][ T5373] usb 2-1: SerialNumber: syz [ 231.732157][ T5373] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 231.795012][ T5373] usb 2-1: USB disconnect, device number 3 [ 232.024710][ T7653] loop2: detected capacity change from 0 to 32768 [ 232.058288][ T7653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7653) [ 232.124570][ T7653] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.189650][ T7653] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 232.231146][ T7653] BTRFS info (device loop2): using free space tree [ 232.559007][ T7653] BTRFS info (device loop2): enabling ssd optimizations [ 232.743756][ T7664] loop3: detected capacity change from 0 to 32768 [ 232.923108][ T7666] loop4: detected capacity change from 0 to 32768 [ 233.088454][ T5281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.653918][ T3689] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 233.901760][ T3689] usb 2-1: Using ep0 maxpacket: 8 [ 234.022115][ T3689] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 234.045708][ T7718] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.064039][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 234.118352][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 234.322170][ T3689] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 234.347171][ T3689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.371788][ T3689] usb 2-1: Product: syz [ 234.392249][ T3689] usb 2-1: Manufacturer: syz [ 234.403226][ T3689] usb 2-1: SerialNumber: syz [ 234.433316][ T3689] usb 2-1: config 0 descriptor?? [ 234.472880][ T7696] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.711955][ T3689] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 234.732651][ T3689] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 235.088468][ T7716] loop4: detected capacity change from 0 to 32768 [ 235.108656][ T7716] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7716) [ 235.149625][ T7716] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.153333][ T7722] loop2: detected capacity change from 0 to 32768 [ 235.171104][ T7716] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 235.173648][ T3684] usb 2-1: USB disconnect, device number 4 [ 235.191986][ C1] powermate: config urb returned -71 [ 235.196768][ T7716] BTRFS info (device loop4): using free space tree [ 235.197301][ C1] powermate: usb_submit_urb(config) failed [ 235.204594][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 235.240772][ T7722] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (7722) [ 235.340454][ T7716] BTRFS info (device loop4): enabling ssd optimizations [ 235.611832][ T7261] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.898107][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.984752][ T7757] team0: Port device bridge2 added [ 236.107208][ T7763] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.571776][ T3933] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 236.737029][ T7749] loop3: detected capacity change from 0 to 32768 [ 237.072018][ T3933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 237.089823][ T3933] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 237.125090][ T3933] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 237.162064][ T3933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.172182][ T3933] usb 3-1: config 0 descriptor?? [ 237.435526][ T3684] usb 3-1: USB disconnect, device number 9 [ 237.591675][ T3933] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 237.972389][ T3933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 238.001859][ T3933] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 238.031674][ T3933] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 238.040748][ T3933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.078792][ T3933] usb 4-1: config 0 descriptor?? [ 238.098832][ T7787] loop0: detected capacity change from 0 to 32768 [ 238.119394][ T7787] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (7787) [ 238.425684][ T3681] usb 4-1: USB disconnect, device number 6 [ 239.040896][ T7797] loop2: detected capacity change from 0 to 32768 [ 239.107778][ T7797] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7797) [ 239.153555][ T7797] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.171716][ T7797] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 239.180458][ T7797] BTRFS info (device loop2): using free space tree [ 239.341917][ T3933] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 239.374148][ T7797] BTRFS info (device loop2): enabling ssd optimizations [ 239.528510][ T5281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.733604][ T3933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 239.756422][ T3933] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 239.786539][ T3933] usb 1-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 239.815796][ T3933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.847024][ T3933] usb 1-1: config 0 descriptor?? [ 240.200108][ T3689] usb 1-1: USB disconnect, device number 7 [ 240.245626][ T7844] loop2: detected capacity change from 0 to 32768 [ 240.288809][ T7844] XFS (loop2): Mounting V5 Filesystem [ 240.354681][ T7844] XFS (loop2): Ending clean mount [ 240.364459][ T7844] XFS (loop2): Quotacheck needed: Please wait. [ 240.424603][ T7844] XFS (loop2): Quotacheck: Done. [ 240.519706][ T5281] XFS (loop2): Unmounting Filesystem [ 242.500574][ T7881] loop0: detected capacity change from 0 to 32768 [ 242.569060][ T7881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7881) [ 242.600377][ T7883] loop2: detected capacity change from 0 to 32768 [ 242.634557][ T7883] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (7883) [ 242.648318][ T7881] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.701823][ T7881] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 242.710577][ T7881] BTRFS info (device loop0): using free space tree [ 242.961540][ T7881] BTRFS info (device loop0): enabling ssd optimizations [ 243.221480][ T7227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.852384][ T3579] Bluetooth: hci5: command tx timeout [ 244.983991][ T7943] loop2: detected capacity change from 0 to 32768 [ 245.009382][ T7943] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7943) [ 245.058566][ T7943] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.090229][ T7943] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 245.123293][ T7943] BTRFS info (device loop2): using free space tree [ 245.167203][ T7950] loop0: detected capacity change from 0 to 32768 [ 245.178815][ T7950] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (7950) [ 245.291326][ T7943] BTRFS info (device loop2): enabling ssd optimizations [ 245.447583][ T5281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.498017][ T8017] loop2: detected capacity change from 0 to 32768 [ 246.544996][ T8017] XFS (loop2): Mounting V5 Filesystem [ 246.688315][ T8017] XFS (loop2): Ending clean mount [ 246.700113][ T8017] XFS (loop2): Quotacheck needed: Please wait. [ 246.836880][ T8017] XFS (loop2): Quotacheck: Done. [ 246.892418][ T5281] XFS (loop2): Unmounting Filesystem [ 246.989570][ T8033] device veth0_vlan left promiscuous mode [ 247.013604][ T8033] device veth0_vlan entered promiscuous mode [ 247.068994][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.096971][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.131912][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.254408][ T3583] Bluetooth: hci1: command tx timeout [ 247.300332][ T8013] loop0: detected capacity change from 0 to 32768 [ 247.322780][ T8013] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8013) [ 247.363600][ T8013] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 247.374293][ T8013] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 247.383842][ T8013] BTRFS info (device loop0): using free space tree [ 247.568105][ T8013] BTRFS info (device loop0): enabling ssd optimizations [ 248.000437][ T7227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.702626][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.777487][ T8070] loop2: detected capacity change from 0 to 32768 [ 248.810774][ T8070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8070) [ 248.850439][ T8070] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.901232][ T8070] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 248.925618][ T8070] BTRFS info (device loop2): using free space tree [ 249.028483][ T8070] BTRFS info (device loop2): enabling ssd optimizations [ 249.380231][ T5281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.516334][ T8082] loop0: detected capacity change from 0 to 32768 [ 249.551452][ T8082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8082) [ 249.660487][ T8082] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.723070][ T8082] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 249.781461][ T8082] BTRFS info (device loop0): using free space tree [ 249.962072][ T8082] BTRFS info (device loop0): enabling ssd optimizations [ 250.219894][ T7227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.734942][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.886192][ T8167] team0: Port device bridge1 added [ 251.009592][ T8148] loop2: detected capacity change from 0 to 32768 [ 251.027459][ T8148] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8148) [ 251.214388][ T8148] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.241862][ T8148] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 251.250690][ T8148] BTRFS info (device loop2): using free space tree [ 251.423779][ T8148] BTRFS info (device loop2): enabling ssd optimizations [ 251.760223][ T5281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.911453][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.006224][ T8173] loop0: detected capacity change from 0 to 32768 [ 252.083763][ T8173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8173) [ 252.114446][ T8214] team0: Port device bridge1 added [ 252.134186][ T8173] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 252.158160][ T8173] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 252.201746][ T8173] BTRFS info (device loop0): using free space tree [ 252.395197][ T8173] BTRFS info (device loop0): enabling ssd optimizations [ 252.732858][ T7227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.903260][ T8254] loop2: detected capacity change from 0 to 32768 [ 253.945409][ T8254] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8254) [ 254.010983][ T8254] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.058372][ T8254] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 254.087261][ T8254] BTRFS info (device loop2): using free space tree [ 254.210780][ T8254] BTRFS info (device loop2): enabling ssd optimizations [ 254.289461][ T3583] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 254.459522][ T5281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.517774][ T8267] loop3: detected capacity change from 0 to 32768 [ 254.527218][ T8328] device syzkaller0 entered promiscuous mode [ 254.564349][ T8267] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor.3 (8267) [ 255.166537][ T3583] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 255.420749][ T27] kauditd_printk_skb: 356 callbacks suppressed [ 255.420764][ T27] audit: type=1326 audit(1717245154.142:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8e7cee9 code=0x7ffc0000 [ 255.533685][ T27] audit: type=1326 audit(1717245154.142:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8e7cee9 code=0x7ffc0000 [ 255.583345][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.590100][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.667698][ T27] audit: type=1326 audit(1717245154.182:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64b8e7cee9 code=0x7ffc0000 [ 255.768493][ T27] audit: type=1326 audit(1717245154.182:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8e7cee9 code=0x7ffc0000 [ 256.042390][ T27] audit: type=1326 audit(1717245154.182:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8e7cee9 code=0x7ffc0000 [ 256.098613][ T27] audit: type=1326 audit(1717245154.182:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64b8e7cee9 code=0x7ffc0000 [ 256.175630][ T27] audit: type=1326 audit(1717245154.182:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8e7cee9 code=0x7ffc0000 [ 256.225579][ T8349] loop0: detected capacity change from 0 to 32768 [ 256.251283][ T8349] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8349) [ 256.267654][ T27] audit: type=1326 audit(1717245154.182:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8e7cee9 code=0x7ffc0000 [ 256.301721][ T3933] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 256.322765][ T27] audit: type=1326 audit(1717245154.182:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f64b8e7cee9 code=0x7ffc0000 [ 256.351741][ T8349] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.375663][ T8349] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 256.392098][ T27] audit: type=1326 audit(1717245154.182:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8e7cee9 code=0x7ffc0000 [ 256.420348][ T8349] BTRFS info (device loop0): using free space tree [ 256.461407][ T3583] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 256.570916][ T8349] BTRFS info (device loop0): enabling ssd optimizations [ 256.705397][ T3933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.725419][ T3933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.757874][ T3933] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 256.824079][ T3933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.869417][ T3933] usb 5-1: config 0 descriptor?? [ 256.891117][ T7227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.021722][ T3864] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 257.177170][ T8385] loop3: detected capacity change from 0 to 32768 [ 257.257299][ T8385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (8385) [ 257.271822][ T3864] usb 2-1: Using ep0 maxpacket: 32 [ 257.345332][ T8385] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.359843][ T3933] wacom 0003:056A:0043.0002: unknown main item tag 0x4 [ 257.380082][ T3933] wacom 0003:056A:0043.0002: item fetching failed at offset 4/7 [ 257.393991][ T8385] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 257.412781][ T3933] wacom 0003:056A:0043.0002: parse failed [ 257.418934][ T8385] BTRFS info (device loop3): using free space tree [ 257.426585][ T3864] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.438051][ T3933] wacom: probe of 0003:056A:0043.0002 failed with error -22 [ 257.450255][ T3864] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.576846][ T7990] usb 5-1: USB disconnect, device number 6 [ 257.612564][ T3864] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 257.651947][ T3864] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 257.660335][ T3864] usb 2-1: Product: syz [ 257.671709][ T8385] BTRFS info (device loop3): enabling ssd optimizations [ 257.693689][ T3864] usb 2-1: Manufacturer: syz [ 257.827823][ T3864] hub 2-1:4.0: USB hub found [ 257.897786][ T7137] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.944702][ T8448] loop2: detected capacity change from 0 to 512 [ 258.068296][ T8448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.085743][ T8448] ext4 filesystem being mounted at /root/syzkaller-testdir2295142929/syzkaller.RkS7Fq/186/file0 supports timestamps until 2038 (0x7fffffff) [ 258.122006][ T3864] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 258.193356][ T3864] usb 2-1: USB disconnect, device number 5 [ 258.253917][ T8456] loop0: detected capacity change from 0 to 2048 [ 258.270569][ T5281] EXT4-fs (loop2): unmounting filesystem. [ 258.340902][ T8456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 258.538684][ T7227] EXT4-fs (loop0): unmounting filesystem. [ 258.766193][ T3864] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 259.021648][ T3864] usb 4-1: Using ep0 maxpacket: 8 [ 259.117617][ T8457] loop4: detected capacity change from 0 to 32768 [ 259.151502][ T8457] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8457) [ 259.155881][ T3864] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 259.205789][ T3864] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 259.244267][ T3864] usb 4-1: config 135 has no interface number 0 [ 259.263014][ T3864] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.352692][ T8457] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 259.380560][ T8457] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 259.431848][ T8457] BTRFS info (device loop4): using free space tree [ 259.472057][ T3864] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 259.498325][ T3864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.540149][ T3864] usb 4-1: Product: syz [ 259.555512][ T3864] usb 4-1: Manufacturer: syz [ 259.600244][ T3864] usb 4-1: SerialNumber: syz [ 259.640081][ T8457] BTRFS info (device loop4): enabling ssd optimizations [ 259.673075][ T3864] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 259.702745][ T3864] usb 4-1: No valid video chain found. [ 259.748854][ T8472] loop0: detected capacity change from 0 to 32768 [ 259.776002][ T8472] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (8472) [ 259.878797][ T3864] usb 4-1: USB disconnect, device number 7 [ 259.917608][ T7261] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.551845][ T3683] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 260.601873][ T3933] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 260.801687][ T3683] usb 3-1: Using ep0 maxpacket: 8 [ 260.925030][ T3683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 260.946355][ T3683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 260.961980][ T3933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.981028][ T3683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 260.984890][ T3933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.071645][ T3933] usb 1-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 261.080759][ T3933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.114395][ T3933] usb 1-1: config 0 descriptor?? [ 261.161998][ T3683] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 261.183724][ T3683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.219416][ T3683] usb 3-1: Product: syz [ 261.238269][ T3683] usb 3-1: Manufacturer: syz [ 261.250772][ T3683] usb 3-1: SerialNumber: syz [ 261.267544][ T3683] usb 3-1: config 0 descriptor?? [ 261.292119][ T8502] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.531876][ T3683] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 261.540461][ T3683] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 261.606981][ T3933] wacom 0003:056A:0043.0003: unknown main item tag 0x4 [ 261.631637][ T3933] wacom 0003:056A:0043.0003: item fetching failed at offset 4/7 [ 261.640492][ T3933] wacom 0003:056A:0043.0003: parse failed [ 261.681765][ T3933] wacom: probe of 0003:056A:0043.0003 failed with error -22 [ 261.837774][ T3680] usb 1-1: USB disconnect, device number 8 [ 261.973216][ T3933] usb 3-1: USB disconnect, device number 10 [ 261.991704][ C1] powermate: config urb returned -71 [ 261.997040][ C1] powermate: usb_submit_urb(config) failed [ 263.813158][ T8524] loop0: detected capacity change from 0 to 32768 [ 263.865952][ T8524] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8524) [ 263.996896][ T8524] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.025097][ T8524] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 264.050213][ T8524] BTRFS info (device loop0): using free space tree [ 264.405633][ T8524] BTRFS info (device loop0): enabling ssd optimizations [ 264.515358][ T8582] loop4: detected capacity change from 0 to 2048 [ 264.596826][ T8582] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 264.642112][ T7227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.906494][ T7261] EXT4-fs (loop4): unmounting filesystem. [ 266.982659][ T8613] loop4: detected capacity change from 0 to 32768 [ 267.030250][ T8613] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8613) [ 267.086444][ T8613] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.130667][ T8613] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 267.167802][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.171105][ T8613] BTRFS info (device loop4): using free space tree [ 267.352270][ T8613] BTRFS info (device loop4): enabling ssd optimizations [ 267.419754][ T8630] loop2: detected capacity change from 0 to 32768 [ 267.429324][ T8630] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (8630) [ 267.614102][ T7261] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.694559][ T8657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.019128][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.363887][ T8684] loop2: detected capacity change from 0 to 32768 [ 270.401638][ T3683] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 270.430495][ T8684] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8684) [ 270.473711][ T8684] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 270.489943][ T8684] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 270.514294][ T8684] BTRFS info (device loop2): using free space tree [ 270.655980][ T3683] usb 2-1: Using ep0 maxpacket: 32 [ 270.778259][ T3683] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 270.939516][ T8734] loop4: detected capacity change from 0 to 32768 [ 270.958111][ T8684] BTRFS info (device loop2): enabling ssd optimizations [ 271.032492][ T8734] XFS (loop4): Mounting V5 Filesystem [ 271.061902][ T3683] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 271.071037][ T3683] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 271.236388][ T3683] usb 2-1: Product: syz [ 271.240794][ T3683] usb 2-1: Manufacturer: syz [ 271.245587][ T3683] usb 2-1: SerialNumber: syz [ 271.266296][ T3683] usb 2-1: config 0 descriptor?? [ 271.272686][ T5281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.292089][ T8706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.299236][ T8734] XFS (loop4): Ending clean mount [ 271.322363][ T8734] XFS (loop4): Quotacheck needed: Please wait. [ 271.520264][ T8734] XFS (loop4): Quotacheck: Done. [ 271.539524][ T3680] usb 2-1: USB disconnect, device number 6 [ 271.578721][ T7261] XFS (loop4): Unmounting Filesystem [ 271.886244][ T8752] device gretap0 entered promiscuous mode [ 271.907664][ T8754] serio: Serial port pts0 [ 271.926780][ T8752] device bond0 entered promiscuous mode [ 271.952977][ T8752] device bond_slave_0 entered promiscuous mode [ 271.981129][ T8752] device bond_slave_1 entered promiscuous mode [ 272.015692][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 272.861637][ T3614] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 273.101679][ T3614] usb 1-1: Using ep0 maxpacket: 16 [ 273.260098][ T3614] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 273.441974][ T3614] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.451060][ T3614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.493051][ T3614] usb 1-1: Product: syz [ 273.497343][ T3614] usb 1-1: Manufacturer: syz [ 273.518837][ T3614] usb 1-1: SerialNumber: syz [ 273.582680][ T3614] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 273.786412][ T3614] usb 1-1: USB disconnect, device number 9 [ 273.827245][ T8776] syz-executor.2 (8776) used greatest stack depth: 19064 bytes left [ 274.153414][ T8793] syz-executor.2[8793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.153517][ T8793] syz-executor.2[8793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.269190][ T8797] loop4: detected capacity change from 0 to 256 [ 274.431811][ T3614] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 274.471725][ T8797] syz-executor.4[8797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.471824][ T8797] syz-executor.4[8797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.574598][ T3579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.666179][ T3579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.681661][ T3614] usb 2-1: Using ep0 maxpacket: 32 [ 274.692071][ T3579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.700987][ T3579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.708917][ T3579] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.716876][ T3579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.801793][ T3614] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 274.943646][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.991817][ T3614] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 275.001744][ T3614] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 275.010289][ T3614] usb 2-1: Product: syz [ 275.017212][ T3614] usb 2-1: Manufacturer: syz [ 275.022274][ T3614] usb 2-1: SerialNumber: syz [ 275.033701][ T3614] usb 2-1: config 0 descriptor?? [ 275.051928][ T8792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.070707][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.157365][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.308357][ T3648] usb 2-1: USB disconnect, device number 7 [ 275.364486][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.573144][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 275.995705][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.014878][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.042629][ T8808] device bridge_slave_0 entered promiscuous mode [ 276.082327][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.114557][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.159221][ T8808] device bridge_slave_1 entered promiscuous mode [ 276.311268][ T8808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.319215][ T8815] loop4: detected capacity change from 0 to 32768 [ 276.370427][ T8815] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8815) [ 276.395469][ T8808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.417763][ T8815] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 276.459184][ T8815] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 276.512000][ T8815] BTRFS info (device loop4): using free space tree [ 276.518114][ T8808] team0: Port device team_slave_0 added [ 276.581219][ T8808] team0: Port device team_slave_1 added [ 276.749333][ T8815] BTRFS info (device loop4): enabling ssd optimizations [ 276.772296][ T3579] Bluetooth: hci1: command tx timeout [ 276.817163][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.850261][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.917994][ T8808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.933049][ T7261] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 276.988326][ T37] device hsr_slave_0 left promiscuous mode [ 277.000388][ T37] device hsr_slave_1 left promiscuous mode [ 277.014806][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.031488][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.309609][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.321502][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.366862][ T37] device bridge_slave_1 left promiscuous mode [ 277.433354][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.682786][ T37] device bridge_slave_0 left promiscuous mode [ 277.804210][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.056499][ T37] device veth1_macvtap left promiscuous mode [ 278.071703][ T37] device veth0_macvtap left promiscuous mode [ 278.078301][ T37] device veth1_vlan left promiscuous mode [ 278.130850][ T37] device veth0_vlan left promiscuous mode [ 278.860597][ T3579] Bluetooth: hci1: command tx timeout [ 278.891954][ T37] team0 (unregistering): Port device bridge1 removed [ 279.058738][ T37] team0 (unregistering): Port device team_slave_1 removed [ 279.068903][ T8878] loop4: detected capacity change from 0 to 32768 [ 279.084511][ T37] team0 (unregistering): Port device team_slave_0 removed [ 279.087490][ T8878] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8878) [ 279.105166][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.124928][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.151367][ T8878] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 279.169627][ T8878] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 279.184855][ T8878] BTRFS info (device loop4): using free space tree [ 279.280522][ T37] bond0 (unregistering): Released all slaves [ 279.303338][ T8878] BTRFS info (device loop4): enabling ssd optimizations [ 279.327829][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.343465][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.369966][ T8808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.415721][ T7261] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 279.488827][ T8808] device hsr_slave_0 entered promiscuous mode [ 279.506342][ T8899] syz-executor.2 (pid 8899) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 279.541407][ T8808] device hsr_slave_1 entered promiscuous mode [ 279.551698][ T8411] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 279.557388][ T8808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.594136][ T8808] Cannot create hsr debugfs directory [ 279.932071][ T8411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.950379][ T8411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.974858][ T8411] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 280.002339][ T8411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.036298][ T8411] usb 1-1: config 0 descriptor?? [ 280.184881][ T3622] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 280.407130][ T8411] usbhid 1-1:0.0: can't add hid device: -71 [ 280.415817][ T8411] usbhid: probe of 1-1:0.0 failed with error -71 [ 280.446766][ T8411] usb 1-1: USB disconnect, device number 10 [ 280.571976][ T3622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.609547][ T3622] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.639700][ T8808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.680775][ T3622] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.726093][ T3622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.774559][ T3622] usb 2-1: config 0 descriptor?? [ 280.806458][ T8808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.859159][ T8808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.913316][ T8808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.931734][ T3579] Bluetooth: hci1: command tx timeout [ 281.116371][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.134207][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.168029][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.181835][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.213712][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.223945][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.246726][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.254279][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.278139][ T3622] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 281.310162][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.313509][ T3622] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 281.319544][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.363632][ T3622] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 281.370364][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.396800][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.397759][ T3622] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 281.404284][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.412101][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.469528][ T3622] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 281.496064][ T3622] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 281.526374][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.552196][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.580997][ T3622] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 281.591054][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.628504][ T3622] usb 2-1: USB disconnect, device number 8 [ 281.640946][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.667210][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.696989][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.722537][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.736954][ T8808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.777759][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.804643][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.817808][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.842628][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.209901][ T8926] loop0: detected capacity change from 0 to 32768 [ 282.237660][ T8926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8926) [ 282.331752][ T8926] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.393361][ T8926] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 282.423091][ T8926] BTRFS info (device loop0): using free space tree [ 282.563743][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.623806][ T3579] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 282.633846][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.644386][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.691137][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.718508][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.798302][ T8926] BTRFS info (device loop0): enabling ssd optimizations [ 282.898966][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 282.898981][ T27] audit: type=1804 audit(1717245181.622:2364): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1392548013/syzkaller.e8inkN/86/file0" dev="sda1" ino=1960 res=1 errno=0 [ 282.962494][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.971217][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.011874][ T3579] Bluetooth: hci1: command tx timeout [ 283.019661][ T8808] device veth0_vlan entered promiscuous mode [ 283.063283][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.066422][ T7227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.081716][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.134210][ T8808] device veth1_vlan entered promiscuous mode [ 283.236397][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.256297][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.287510][ T8808] device veth0_macvtap entered promiscuous mode [ 283.338751][ T8808] device veth1_macvtap entered promiscuous mode [ 283.446337][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.487714][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.527855][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.566209][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.660607][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.672120][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.682518][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.699476][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.710153][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.728789][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.788114][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.821650][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.835763][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.850976][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.875257][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.895559][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.933251][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.961328][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.988959][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.017175][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.070988][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.109729][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.139705][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.166233][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.188840][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.220413][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.242804][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.258562][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.305037][ T8808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.331869][ T8808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.367512][ T8808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.408295][ T8808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.688875][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.710483][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.790225][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.823827][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.849980][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.903085][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.902969][ T9020] loop3: detected capacity change from 0 to 2048 [ 286.922488][ T9020] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 286.966809][ T9020] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 287.013925][ T9020] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 287.035198][ T9020] System zones: 0-19 [ 287.057252][ T9020] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.176936][ T8808] EXT4-fs (loop3): unmounting filesystem. [ 288.485232][ T9048] process 'syz-executor.4' launched './file1' with NULL argv: empty string added [ 288.691801][ T3583] Bluetooth: hci1: command tx timeout [ 294.071411][ T9091] loop3: detected capacity change from 0 to 32768 [ 294.173173][ T9091] XFS (loop3): Mounting V5 Filesystem [ 294.369056][ T9091] XFS (loop3): Ending clean mount [ 294.385970][ T9091] XFS (loop3): Quotacheck needed: Please wait. [ 294.502794][ T9091] XFS (loop3): Quotacheck: Done. [ 294.682338][ T8808] XFS (loop3): Unmounting Filesystem [ 296.019264][ T3583] Bluetooth: hci6: sending frame failed (-49) [ 296.027742][ T3579] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 296.827634][ T9129] loop2: detected capacity change from 0 to 32768 [ 297.768500][ T9129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (9129) [ 297.813999][ T9129] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.833073][ T9129] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 297.864019][ T9129] BTRFS info (device loop2): using free space tree [ 298.251272][ T3583] Bluetooth: hci7: command 0x1003 tx timeout [ 298.259079][ T3579] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 299.243287][ T9129] BTRFS error (device loop2): open_ctree failed [ 302.099601][ T9227] loop4: detected capacity change from 0 to 128 [ 302.432722][ T9227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 302.504993][ T9227] ext4 filesystem being mounted at /root/syzkaller-testdir992988151/syzkaller.lPuOo4/121/mnt supports timestamps until 2038 (0x7fffffff) [ 302.871873][ T3579] Bluetooth: hci6: command 0x1003 tx timeout [ 302.881375][ T3584] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 304.362630][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.454031][ T9271] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 305.481739][ T3682] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 305.548605][ T7261] EXT4-fs (loop4): unmounting filesystem. [ 305.831846][ T3682] usb 1-1: Using ep0 maxpacket: 32 [ 305.952822][ T3682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.989097][ T3682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.040837][ T3682] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 306.151844][ T3682] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 306.175839][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.223872][ T3682] usb 1-1: config 0 descriptor?? [ 306.713691][ T3682] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 306.720628][ T3682] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 306.747011][ T3682] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 306.875274][ T9326] loop4: detected capacity change from 0 to 128 [ 306.942447][ T3682] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 306.950166][ T3682] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 306.959054][ T3682] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 307.000356][ T9326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 307.001781][ T3682] ntrig 0003:1B96:000A.0005: Firmware version: 1.9.12.48.0 (a5f3 189e) [ 307.017769][ T9326] ext4 filesystem being mounted at /root/syzkaller-testdir992988151/syzkaller.lPuOo4/126/mnt supports timestamps until 2038 (0x7fffffff) [ 307.809402][ T3682] usb 1-1: USB disconnect, device number 11 [ 307.955854][ T9308] loop3: detected capacity change from 0 to 32768 [ 308.000933][ T9308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (9308) [ 308.062342][ T9308] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.162627][ T9308] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 308.191131][ T9308] BTRFS info (device loop3): using free space tree [ 308.344097][ T9347] loop0: detected capacity change from 0 to 128 [ 308.700593][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.800065][ T9308] BTRFS info (device loop3): enabling ssd optimizations [ 308.908182][ T27] audit: type=1800 audit(1717245207.632:2365): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=1048624 res=0 errno=0 [ 309.386341][ T8808] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 311.400088][ T3571] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 311.651618][ T3571] usb 3-1: Using ep0 maxpacket: 32 [ 311.773262][ T3571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.790428][ T7261] EXT4-fs (loop4): unmounting filesystem. [ 311.835573][ T3571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.865565][ T3571] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 311.879823][ T3571] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 311.903490][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.964090][ T3571] usb 3-1: config 0 descriptor?? [ 312.553511][ T3571] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 312.576557][ T3571] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 312.604049][ T3571] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 312.627101][ T3571] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 312.636706][ T3571] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 312.664679][ T3571] ntrig 0003:1B96:000A.0006: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 312.781962][ T3571] ntrig 0003:1B96:000A.0006: Firmware version: 1.9.12.48.0 (a5f3 189e) [ 313.026830][ T3571] usb 3-1: USB disconnect, device number 11 [ 317.023331][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.029867][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.041812][ T9444] loop2: detected capacity change from 0 to 32768 [ 317.093132][ T9444] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (9444) [ 317.168741][ T9444] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.206611][ T9444] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 317.222904][ T9444] BTRFS info (device loop2): using free space tree [ 317.287352][ T9444] BTRFS info (device loop2): enabling ssd optimizations [ 317.544127][ T5281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.725016][ T3622] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 318.011767][ T3622] usb 1-1: Using ep0 maxpacket: 16 [ 318.151868][ T3622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.185181][ T3622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.230434][ T3622] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.304492][ T3622] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.354527][ T3622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.412168][ T3622] usb 1-1: config 0 descriptor?? [ 318.476305][ T3584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.488255][ T3584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.498625][ T3584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.508857][ T3584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.518255][ T3584] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 318.525820][ T3584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.709042][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.914296][ T3622] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 318.931967][ T28] INFO: task syz-executor.1:6452 blocked for more than 143 seconds. [ 318.941440][ T3622] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 318.958798][ T28] Not tainted 6.1.92-syzkaller #0 2024/06/01 12:33:37 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 318.986770][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.021019][ T3622] microsoft 0003:045E:07DA.0007: no inputs found [ 319.073489][ T3622] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 319.089269][ T28] task:syz-executor.1 state:D stack:20448 pid:6452 ppid:3576 flags:0x00004006 [ 319.127403][ T28] Call Trace: [ 319.130802][ T28] [ 319.135881][ T28] __schedule+0x142d/0x4550 [ 319.151758][ T28] ? __sched_text_start+0x8/0x8 [ 319.157255][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 319.172118][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 319.177637][ T28] schedule+0xbf/0x180 [ 319.191635][ T28] wait_extent_bit+0x423/0x570 [ 319.196501][ T28] ? __set_extent_bit+0x13b1/0x18c0 [ 319.202034][ T28] ? clear_state_bit+0x330/0x330 [ 319.207275][ T28] ? wake_bit_function+0x210/0x210 [ 319.212464][ T28] lock_extent+0x17a/0x200 [ 319.216902][ T28] ? try_lock_extent+0x1a0/0x1a0 [ 319.222056][ T28] ? folio_wait_writeback+0x1aa/0x1e0 [ 319.227508][ T28] btrfs_page_mkwrite+0x550/0xc90 [ 319.232651][ T28] ? btrfs_dio_write+0x100/0x100 [ 319.237692][ T28] ? do_raw_spin_lock+0x14a/0x370 [ 319.242931][ T28] do_page_mkwrite+0x1a1/0x5f0 [ 319.247878][ T28] wp_page_shared+0x164/0x380 [ 319.252649][ T28] handle_mm_fault+0x2525/0x5340 [ 319.257600][ T28] ? mt_find+0x29a/0xc60 [ 319.262720][ T28] ? mt_find+0x29a/0xc60 [ 319.267258][ T28] ? numa_migrate_prep+0x250/0x250 [ 319.273791][ T28] ? lock_mm_and_find_vma+0xae/0x2e0 [ 319.279651][ T28] exc_page_fault+0x26f/0x660 [ 319.286378][ T28] asm_exc_page_fault+0x22/0x30 [ 319.291434][ T28] RIP: 0010:copy_user_short_string+0xd/0x40 [ 319.297621][ T28] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 0f 1f 80 00 00 00 00 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 319.317521][ T28] RSP: 0018:ffffc90003caf3b0 EFLAGS: 00050202 [ 319.323841][ T28] RAX: ffffffff84385601 RBX: 00007fffffffefc8 RCX: 0000000000000007 [ 319.332064][ T28] RDX: 0000000000000000 RSI: ffffc90003caf460 RDI: 00000000200002a0 [ 319.340148][ T28] RBP: ffffc90003caf510 R08: 0000000000000000 R09: fffff52000795e93 [ 319.348252][ T28] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000038 [ 319.356547][ T28] R13: ffffc90003caf460 R14: 00000000200002a0 R15: ffffc90003caf460 [ 319.365512][ T28] ? _copy_to_user+0x71/0x130 [ 319.370312][ T28] _copy_to_user+0xe9/0x130 [ 319.375413][ T28] fiemap_fill_next_extent+0x231/0x410 [ 319.381002][ T28] ? vfs_ioctl+0xc0/0xc0 [ 319.385336][ T28] ? btrfs_is_data_extent_shared+0x110c/0x1390 [ 319.395851][ T28] fiemap_process_hole+0x107e/0x1290 [ 319.401348][ T28] ? extent_fiemap+0x1ff0/0x1ff0 [ 319.406507][ T28] ? btrfs_get_token_64+0x600/0x600 [ 319.412441][ T28] ? memcpy+0x3c/0x60 [ 319.416539][ T28] extent_fiemap+0xef7/0x1ff0 [ 319.421275][ T28] ? try_release_extent_mapping+0x560/0x560 [ 319.427345][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 319.433586][ T28] ? print_irqtrace_events+0x210/0x210 [ 319.439163][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 319.445411][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 319.450713][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 319.456173][ T28] ? _raw_spin_unlock_irq+0x2a/0x40 [ 319.461481][ T28] ? btrfs_lookup_first_ordered_extent+0x50a/0x700 [ 319.468520][ T28] ? btrfs_wait_ordered_range+0x242/0x260 [ 319.474466][ T28] btrfs_fiemap+0x174/0x1e0 [ 319.479079][ T28] ? btrfs_getattr+0x4a0/0x4a0 [ 319.483970][ T28] ? __might_fault+0xbd/0x110 [ 319.488743][ T28] ? btrfs_getattr+0x4a0/0x4a0 [ 319.495877][ T28] do_vfs_ioctl+0x18e9/0x2a90 [ 319.500801][ T28] ? __x64_compat_sys_ioctl+0x80/0x80 [ 319.506406][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 319.516355][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 319.521806][ T28] ? __kmem_cache_free+0x25c/0x3c0 [ 319.527128][ T28] ? t