last executing test programs: 7.388244131s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x5}]}, 0x20}}, 0x0) 4.618008329s ago: executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000001c0)=0x20000) 4.37661566s ago: executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdb9}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000004240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4.029403133s ago: executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000380)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000340)="bb1cdca1950d1b232ce0244d93aa106f2a499c9b5405eeda6af2450ff2b0bcd97c89fd5bb5f76ac8a9c573237275a8c10c6cf731f00d3229a3", 0x7ffff000}, {&(0x7f0000000540)="99e7441dd5d7c19d29ea7abd7a3268189f03e5e8d291177ed03e3c86d27a944ebcffc5ddba0a01709a80ebd34d37a7074699a1c102839733d3f85e22bf81d23594ee4c1b584446d04987892cb071156f3d7e41cfc05f941f6877cd7c6dcfa5b7a863afe4e9e8f634f5c4ef25ece96b62b15005b6dde2667acbae270613b6559c1bb0e2d4017a3d1deafa7817b69aaa685a9876bea763946ece87e97007d1ef34cf52eefdaa05ee1de14a60897f8a3a2019ec", 0xb2}, {&(0x7f0000000600)="ec2c6c1da17b6fd606fcf427333ba17df57a32f11e8c0aca79b6e8c2f6669b3848875bec013c81bfca6764485047c453f5d2ab74e1096017c216a6387cf637e5cfa23b2a66df17d1694194d44327b78d713ac4fcaea04cc551731260469ecee67bcd3df3dbd25d0723e491e875383596643f31d2be0ad9b5839217089f1323e76e34bbb8efd4b9563ab3611a9df4c268025b0ff7273cc6c6b53e54eeffa0cfcded3e487d3707b90d13900f3d7846f87d29cdc9c97e735160c313fae2fb961f7417050f5515bce2214c507530155606994191c89423777f594dd820780ca434c514aaedd5", 0xe4}, {&(0x7f0000000b40)="ae43fca408b50cc7d9a1725c2ef2932090a25a7d70e0313df3d0e2e7820008e231e83c86465164e4abcf4e24c3fc2db9f6fb89efefed5c1b47d9ac01381c7bbb6ab8a6b6f36bc0b68742ae9e8229b5b72aa83e3b9deb8762f45dfbf9b109a0fa6206166305673d0c05cfd2fbd994d050b67e6d9fb9a9527770d71734eb29583e6e9b7518c95d805aeac31d634b0efffe3d2b7178", 0x94}, {&(0x7f0000000940)="627f33009436c19975ccfa9385c8c4798fade4caeab322b77e7ec95e25d7c25e002e60344b1c2a51dff99867d73c331c75a68f8a6733f8f581eb762b2f132260198995a89d08060545ccf412d0faa7d850297588a08f40e90919c954970fd2d7598a317464c1f34637002b836c0ec527fc790be4f4755f90bb05c3b33a224a84cd276dc1dad4fb6e01f0355903e11fc51b25ea05d7ab7125f4cb9c4aedd64b0741c712491ad3ea0241704c98a49fd1c15e9585f797fcb03432561420014e692967191bb17c256b99bd891adc0d8d8ce93167e37adc4411931f859c262f4f20eb21f8323bf0", 0xe5}, {&(0x7f0000000400)="a756b3", 0x3}, {&(0x7f0000000a40)="f54bcf6dea0a0953773322b72583370e30f8b9a2711f0965888fbec9a590bac982bd385851df74753f21b138e3a0cb01befb5e5f501ff451923a89e7bf5d3368fe7aec72692530fabc7717316caac71eda0103f074cd7e430555fca5d00714a54c58f77dc9c67b5c13e0bac95e0c1a6f0ecabfbf5e31408f64f93f44cc2b6e3403943f5be6406c8bfdb90dec3f7f716caf94f4eab754612c7d189dcf96d3f0b2694202f7f4378a59474ccec503303bfe773f39322bf95aed675347401b117b022c52a18358dade3e4a6a5b8e486c10b14406", 0xd2}, {&(0x7f0000000480)="73cdfa0744e27653b929b65b3103098b78df6eb98c295fe3974cedbec9dc024acafcdc4cf4c408c1226d81b40597f14657ffedc90ffaa3dfa262822f1093a91a", 0x40}, {&(0x7f00000007c0)="80fb5010a1331b3fba6607e02da650e5b295534b907e163a83b74e46a6333eca012e324bf98922e2f008555e17ddba76eac48a9d105952fae6b2a68474259e34ebc60ed8188c420493281748430e8aaed72a7d5dfc3cf588adb55ce4d4dfe89d78a48949e46347e37809a3f102319304c3a08f315d96dddcb3a55417bca588243b83741f875a21fe0414fac5e7131382cc989f9240915e8d19c3d7d42be3d7c769aebbcb899bd7716c1194b3214dd986ddd3f7bc9bd184816b8711b57bd5d84180925634e82c8ac34aa6298ddb733b285871ca664cdadcba7c5fb9e6796cb2daefc70822756d", 0xe6}, {&(0x7f0000000c00)="6052aef8b889f6cca93a612aeaef0b7f463c844234448da618a1b1e9f359018ab2fb5f2be1cc37009caccd350cccd8c9d442156dba8f824c9510308fa111", 0x3e}], 0xa}}], 0x1, 0x0) 4.000544128s ago: executing program 3: iopl(0x3) clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000)) 3.852448204s ago: executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x4a042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.814256777s ago: executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 3.796141992s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0x0, 0x5}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) 2.456174613s ago: executing program 0: syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000005b80)=ANY=[@ANYBLOB='0'], 0x1, 0x5afb, &(0x7f0000005bc0)="$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") setxattr$incfs_metadata(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) 2.316763216s ago: executing program 2: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797aa538000000140003800800024000000000080001400000000048000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003"], 0xd0}}, 0x0) 2.154865777s ago: executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000080), 0x1, 0x4f4, &(0x7f0000000540)="$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") timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0x19038, 0x0, 0x0) 2.132257356s ago: executing program 1: r0 = eventfd(0x800a6) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r1}, 0x10) 1.959805811s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e050602bc"], 0xffdd) 1.817476619s ago: executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0xe) 1.648986068s ago: executing program 2: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f00000000c0)) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000000c0), 0x15559d8a63b943d1) close(r1) 1.647198343s ago: executing program 4: close(0x3) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, 0x0, 0xfffffc80, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 1.463974837s ago: executing program 4: r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) syz_mount_image$fuse(&(0x7f0000000640), &(0x7f0000000000)='./file1\x00', 0x10b0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '.\x00'}, 0x6e) 1.266385404s ago: executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000380)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000340)="bb1cdca1950d1b232ce0244d93aa106f2a499c9b5405eeda6af2450ff2b0bcd97c89fd5bb5f76ac8a9c573237275a8c10c6cf731f00d3229a3", 0x7ffff000}, {&(0x7f0000000540)="99e7441dd5d7c19d29ea7abd7a3268189f03e5e8d291177ed03e3c86d27a944ebcffc5ddba0a01709a80ebd34d37a7074699a1c102839733d3f85e22bf81d23594ee4c1b584446d04987892cb071156f3d7e41cfc05f941f6877cd7c6dcfa5b7a863afe4e9e8f634f5c4ef25ece96b62b15005b6dde2667acbae270613b6559c1bb0e2d4017a3d1deafa7817b69aaa685a9876bea763946ece87e97007d1ef34cf52eefdaa05ee1de14a60897f8a3a2019ec", 0xb2}, {&(0x7f0000000600)="ec2c6c1da17b6fd606fcf427333ba17df57a32f11e8c0aca79b6e8c2f6669b3848875bec013c81bfca6764485047c453f5d2ab74e1096017c216a6387cf637e5cfa23b2a66df17d1694194d44327b78d713ac4fcaea04cc551731260469ecee67bcd3df3dbd25d0723e491e875383596643f31d2be0ad9b5839217089f1323e76e34bbb8efd4b9563ab3611a9df4c268025b0ff7273cc6c6b53e54eeffa0cfcded3e487d3707b90d13900f3d7846f87d29cdc9c97e735160c313fae2fb961f7417050f5515bce2214c507530155606994191c89423777f594dd820780ca434c514aaedd5", 0xe4}, {&(0x7f0000000b40)="ae43fca408b50cc7d9a1725c2ef2932090a25a7d70e0313df3d0e2e7820008e231e83c86465164e4abcf4e24c3fc2db9f6fb89efefed5c1b47d9ac01381c7bbb6ab8a6b6f36bc0b68742ae9e8229b5b72aa83e3b9deb8762f45dfbf9b109a0fa6206166305673d0c05cfd2fbd994d050b67e6d9fb9a9527770d71734eb29583e6e9b7518c95d805aeac31d634b0efffe3d2b7178", 0x94}, {&(0x7f0000000940)="627f33009436c19975ccfa9385c8c4798fade4caeab322b77e7ec95e25d7c25e002e60344b1c2a51dff99867d73c331c75a68f8a6733f8f581eb762b2f132260198995a89d08060545ccf412d0faa7d850297588a08f40e90919c954970fd2d7598a317464c1f34637002b836c0ec527fc790be4f4755f90bb05c3b33a224a84cd276dc1dad4fb6e01f0355903e11fc51b25ea05d7ab7125f4cb9c4aedd64b0741c712491ad3ea0241704c98a49fd1c15e9585f797fcb03432561420014e692967191bb17c256b99bd891adc0d8d8ce93167e37adc4411931f859c262f4f20eb21f8323bf0", 0xe5}, {&(0x7f0000000400)="a756b3", 0x3}, {&(0x7f0000000a40)="f54bcf6dea0a0953773322b72583370e30f8b9a2711f0965888fbec9a590bac982bd385851df74753f21b138e3a0cb01befb5e5f501ff451923a89e7bf5d3368fe7aec72692530fabc7717316caac71eda0103f074cd7e430555fca5d00714a54c58f77dc9c67b5c13e0bac95e0c1a6f0ecabfbf5e31408f64f93f44cc2b6e3403943f5be6406c8bfdb90dec3f7f716caf94f4eab754612c7d189dcf96d3f0b2694202f7f4378a59474ccec503303bfe773f39322bf95aed675347401b117b022c52a18358dade3e4a6a5b8e486c10b14406", 0xd2}, {&(0x7f0000000480)="73cdfa0744e27653b929b65b3103098b78df6eb98c295fe3974cedbec9dc024acafcdc4cf4c408c1226d81b40597f14657ffedc90ffaa3dfa262822f1093a91a", 0x40}, {&(0x7f00000007c0)="80fb5010a1331b3fba6607e02da650e5b295534b907e163a83b74e46a6333eca012e324bf98922e2f008555e17ddba76eac48a9d105952fae6b2a68474259e34ebc60ed8188c420493281748430e8aaed72a7d5dfc3cf588adb55ce4d4dfe89d78a48949e46347e37809a3f102319304c3a08f315d96dddcb3a55417bca588243b83741f875a21fe0414fac5e7131382cc989f9240915e8d19c3d7d42be3d7c769aebbcb899bd7716c1194b3214dd986ddd3f7bc9bd184816b8711b57bd5d84180925634e82c8ac34aa6298ddb733b285871ca664cdadcba7c5fb9e6796cb2daefc70822756d", 0xe6}, {&(0x7f0000000c00)="6052aef8b889f6cca93a612aeaef0b7f463c844234448da618a1b1e9f359018ab2fb5f2be1cc37009caccd350cccd8c9d442156dba8f824c9510308fa111", 0x3e}], 0xa}}], 0x1, 0x0) 1.233013542s ago: executing program 4: r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001980)={0x765, {"a2e3ad084fc752f91b5009094bf70e0dd038e7ff7fc6e5539b3245078b089b39353b0e1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 1.159905606s ago: executing program 3: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000001c0)) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x500) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1) write$dsp(0xffffffffffffffff, &(0x7f0000000900)="c935c811e6", 0x5) 1.134280106s ago: executing program 1: memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.131783355s ago: executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 1.114697095s ago: executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) readlink(0x0, &(0x7f0000000680)=""/111, 0x6f) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000040)) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff801000000800395032303030"], 0x15) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) unshare(0x4000400) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 911.175784ms ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff}}}}]}, 0x88}}, 0x0) 631.592163ms ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e050602bc"], 0xffdd) 368.418668ms ago: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0xe) 220.459268ms ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 60.775466ms ago: executing program 0: mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(0x0, 0x83f42, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$eJzsmL9rFEEUx78zu7e5FRFtUthYGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b1JJnGPNVa+TzF8Z9978+a9233FgSCI/5Yvn39+enJuZv4kgP2YwJh+/s0BGFOaG/4fn9878ax1/sXrD6/erhx4sLn9PBkixNYH9T/kdwG8mXWQFpmK6F9STOjNPHihL4PjuNZXwRBofRMcV7SOwXBd6zuG7kr/ILi9lMTBrW6yIMW0XEK5RHJpbr/fYJ1hQe+FEIIZ9tW1fqedJHHPEK627WCqJIpknXGrfzV4GMxytIz7yS5ee/xoXe7z3kwb/QvBEeoimmCY089nMJb3RrXEqP+wOzzfserfsVrpKg1lRdaVaP3Yk2aZ4tBUtfBJWc5Z23QQVa6BrVE1DE2yk3tbsvXqZMItfxfP6B+0Qq6Lo1bx1Afwjyo1RaUqcjE+2Hxnm76WhQtWnoKN/v7UR71z/iFW75iPfof/Tcd2u9j7DTU/xEuGY8Z8co350UiX7zZW1/pTS8vtxXgxXomi5mkGPDwVNbJBpFZr7g3ns5/Np33G+bVdfD3u4X47TXuhWj3mwUea9qJsHxmfzdxG9/sNHZbiAoCjaiPHplec6Fg5mKd8eOYr1aTtRBAEQRAEQRAEQRAEQRAEUYkjYNm/oCVElzLv3wEAAP//0Ixjlw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0xcb0a) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x49c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x81}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "60a0e981f278"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e56377618571"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xec, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd8, 0xe, 0x0, 0x1, [{0xd2, 0x0, "d1150c4b5d89eba1b736582d7d85ef68b3aee39ca243af76773913dff7b77a5193a7a8a889ac03d462d04f6de38f82040e51f2b08101e0ce2d39fdbe81cfc05e54017d0cac4e725d5a1a77adbde1c53c00ce17d92deb03d991f3162496e44cdabc5c744eee617660751290ab9ef731bb972e7a84663504c83470cb423a53c5032279a037f9388524a3227650ef76ed0fcd800db23b2777a2c8b32771c69570907a6ff7b300cf9f80e409fd632e1f60025a1d0028215b7771ae86069d15db89cb0f7d7e46c0ab8ecf65ad2eb5e6a6"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3f}]}, @NL80211_ATTR_NAN_FUNC={0xfc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xe8, 0xe, 0x0, 0x1, [{0xe2, 0x0, "8623e656cb398895b553b0ea5b83828d9e19a95121a8cfab1986db3fa2a71e0856f56ce74eb55908c7d533d38753d899bd789f97cde479dd2e14b63c0c85cfc862a9aa78a1d9acf82414a295a4c0b8f4868fab1a694ec9104b4d07087f06481bb3cb36db5065ca880191306930984406fd1c33aae0077304d04013fbe9027411f8183053ec3ef983a5b1a08fe515cb5f00c21b07ab5ab2f0fb821ea52a26f4613636fbf5a9294f2c604e3dc2e1dfff5dbd9ebce267a8ce6024a0dcbb2527cafd321aa54c9a0da8bf966c218f7f0ecc0ad3b0124f78675d6377d0f051d2c3"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x98}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x1d4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "96ec8d08614c"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x9}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xbf}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x2c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x170, 0xd, 0x0, 0x1, [{0x103, 0x0, "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"}, {0x42, 0x0, "cb322667f800550b6051379d2d3f355ee041735befc9bf461cd94f52469da73f65b33a891d5cebe858a2ce7927cfb86357256b53860e0a6fe27a37dfe9c1"}, {0x22, 0x0, "c00a07954110b76c8f10f4c0fb473ba5850e44a3e67bf7d6c9515192e1e9"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x58, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0x41, 0xb, "7b54d50075d7eea068da95a2cafe2406284ad8f7a53e815269d48edcd92932513b58dc20b68e891bc5e9a200321d60293c07dfe999c12116763cd7b92f"}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x49c}, 0x1, 0x0, 0x0, 0x4040018}, 0x8000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) 46.423865ms ago: executing program 4: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f00000000c0)) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000000c0), 0x15559d8a63b943d1) close(r1) 0s ago: executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. 2024/06/24 15:10:56 fuzzer started 2024/06/24 15:10:57 dialing manager at 10.128.0.169:30008 [ 73.316582][ T5088] cgroup: Unknown subsys name 'net' [ 73.536970][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/06/24 15:10:59 starting 5 executor processes [ 74.965477][ T5094] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.856454][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.866969][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.875498][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.884170][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.892053][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.900294][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.901215][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.908150][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.919804][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.930363][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.938637][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.939976][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.947134][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.954156][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.960541][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.968191][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.976250][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.988142][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.011321][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.018572][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.027428][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.034677][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.042780][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.052236][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.096849][ T4483] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.106361][ T4483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.114472][ T4483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.123132][ T4483] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.131144][ T4483] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.169385][ T4483] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.622948][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 77.738341][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 77.871411][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 77.944501][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.951915][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.959839][ T5108] bridge_slave_0: entered allmulticast mode [ 77.967581][ T5108] bridge_slave_0: entered promiscuous mode [ 78.030171][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.037545][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.045071][ T5108] bridge_slave_1: entered allmulticast mode [ 78.053001][ T5108] bridge_slave_1: entered promiscuous mode [ 78.082164][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.089745][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.097026][ T5119] bridge_slave_0: entered allmulticast mode [ 78.105236][ T5119] bridge_slave_0: entered promiscuous mode [ 78.115064][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.123469][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.131191][ T5119] bridge_slave_1: entered allmulticast mode [ 78.138275][ T5119] bridge_slave_1: entered promiscuous mode [ 78.209081][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.222527][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.241694][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.256321][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.272117][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 78.359301][ T5119] team0: Port device team_slave_0 added [ 78.374458][ T5108] team0: Port device team_slave_0 added [ 78.404010][ T5119] team0: Port device team_slave_1 added [ 78.437898][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 78.459433][ T5108] team0: Port device team_slave_1 added [ 78.483435][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.494491][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.502668][ T5111] bridge_slave_0: entered allmulticast mode [ 78.510760][ T5111] bridge_slave_0: entered promiscuous mode [ 78.525832][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.533625][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.541240][ T5111] bridge_slave_1: entered allmulticast mode [ 78.548313][ T5111] bridge_slave_1: entered promiscuous mode [ 78.662336][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.670075][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.696693][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.711672][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.726832][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.736995][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.744332][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.771228][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.791559][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.798843][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.824993][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.855226][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.862294][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.888234][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.987014][ T5111] team0: Port device team_slave_0 added [ 79.007811][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.009600][ T4483] Bluetooth: hci2: command tx timeout [ 79.015236][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.027672][ T5125] bridge_slave_0: entered allmulticast mode [ 79.035625][ T5125] bridge_slave_0: entered promiscuous mode [ 79.044142][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.051482][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.058928][ T5125] bridge_slave_1: entered allmulticast mode [ 79.066065][ T5125] bridge_slave_1: entered promiscuous mode [ 79.088733][ T4483] Bluetooth: hci3: command tx timeout [ 79.088837][ T53] Bluetooth: hci1: command tx timeout [ 79.106166][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.113480][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.120921][ T5109] bridge_slave_0: entered allmulticast mode [ 79.128021][ T5109] bridge_slave_0: entered promiscuous mode [ 79.138004][ T5111] team0: Port device team_slave_1 added [ 79.169171][ T4483] Bluetooth: hci0: command tx timeout [ 79.182849][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.195852][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.206444][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.213753][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.221166][ T5109] bridge_slave_1: entered allmulticast mode [ 79.228197][ T5109] bridge_slave_1: entered promiscuous mode [ 79.248787][ T4483] Bluetooth: hci4: command tx timeout [ 79.267786][ T5108] hsr_slave_0: entered promiscuous mode [ 79.274488][ T5108] hsr_slave_1: entered promiscuous mode [ 79.323398][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.330851][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.357373][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.372183][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.379273][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.405419][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.435450][ T5119] hsr_slave_0: entered promiscuous mode [ 79.442678][ T5119] hsr_slave_1: entered promiscuous mode [ 79.449150][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.456976][ T5119] Cannot create hsr debugfs directory [ 79.466390][ T5125] team0: Port device team_slave_0 added [ 79.495309][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.530137][ T5125] team0: Port device team_slave_1 added [ 79.552012][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.607699][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.614803][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.641436][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.673196][ T5109] team0: Port device team_slave_0 added [ 79.744057][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.752694][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.779347][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.801776][ T5109] team0: Port device team_slave_1 added [ 79.840790][ T5111] hsr_slave_0: entered promiscuous mode [ 79.847630][ T5111] hsr_slave_1: entered promiscuous mode [ 79.855595][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.863332][ T5111] Cannot create hsr debugfs directory [ 79.974534][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.981886][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.008129][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.051938][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.059082][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.085465][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.114764][ T5125] hsr_slave_0: entered promiscuous mode [ 80.122240][ T5125] hsr_slave_1: entered promiscuous mode [ 80.128733][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.136540][ T5125] Cannot create hsr debugfs directory [ 80.403594][ T5109] hsr_slave_0: entered promiscuous mode [ 80.412076][ T5109] hsr_slave_1: entered promiscuous mode [ 80.418333][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.426011][ T5109] Cannot create hsr debugfs directory [ 80.588280][ T5108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.624959][ T5108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.639354][ T5108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.671972][ T5108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.767679][ T5111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.784147][ T5111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.797013][ T5111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.818869][ T5111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.915226][ T5119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.936130][ T5119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.947535][ T5119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.966209][ T5119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.073422][ T5125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.088887][ T4483] Bluetooth: hci2: command tx timeout [ 81.121004][ T5125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.131790][ T5125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.145852][ T5125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.169269][ T53] Bluetooth: hci1: command tx timeout [ 81.175847][ T4483] Bluetooth: hci3: command tx timeout [ 81.249079][ T4483] Bluetooth: hci0: command tx timeout [ 81.255463][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.267826][ T5109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.282683][ T5109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.309439][ T5109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.320719][ T5109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.328911][ T4483] Bluetooth: hci4: command tx timeout [ 81.359903][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.428143][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.436347][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.447969][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.455166][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.507600][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.572514][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.632428][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.639691][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.666694][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.708176][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.715469][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.857826][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.931687][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.004429][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.077621][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.149264][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.156491][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.212427][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.295231][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.330875][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.341878][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.349274][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.479740][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.487046][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.505504][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.512780][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.542676][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.576293][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.583656][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.605522][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.612967][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.815892][ T5109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.839461][ T5109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.981015][ T5111] veth0_vlan: entered promiscuous mode [ 83.071714][ T5111] veth1_vlan: entered promiscuous mode [ 83.169721][ T4483] Bluetooth: hci2: command tx timeout [ 83.213446][ T5108] veth0_vlan: entered promiscuous mode [ 83.249858][ T4483] Bluetooth: hci3: command tx timeout [ 83.255351][ T4483] Bluetooth: hci1: command tx timeout [ 83.272246][ T5108] veth1_vlan: entered promiscuous mode [ 83.313289][ T5111] veth0_macvtap: entered promiscuous mode [ 83.329844][ T4483] Bluetooth: hci0: command tx timeout [ 83.372630][ T5111] veth1_macvtap: entered promiscuous mode [ 83.410885][ T4483] Bluetooth: hci4: command tx timeout [ 83.462370][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.503575][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.523127][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.544836][ T5108] veth0_macvtap: entered promiscuous mode [ 83.561436][ T5108] veth1_macvtap: entered promiscuous mode [ 83.585835][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.603908][ T5111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.613048][ T5111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.623245][ T5111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.632419][ T5111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.723977][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.735821][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.748150][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.760435][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.797369][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.816603][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.830193][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.901664][ T5108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.910813][ T5108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.919657][ T5108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.929082][ T5108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.978164][ T5119] veth0_vlan: entered promiscuous mode [ 83.998970][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.008203][ T5109] veth0_vlan: entered promiscuous mode [ 84.021038][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.092464][ T5109] veth1_vlan: entered promiscuous mode [ 84.121410][ T5119] veth1_vlan: entered promiscuous mode [ 84.143593][ T2827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.153315][ T2827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.186758][ T5125] veth0_vlan: entered promiscuous mode [ 84.277838][ T5125] veth1_vlan: entered promiscuous mode [ 84.305812][ T5119] veth0_macvtap: entered promiscuous mode [ 84.326421][ T2827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.356494][ T2827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.376273][ T5119] veth1_macvtap: entered promiscuous mode [ 84.405803][ T5109] veth0_macvtap: entered promiscuous mode [ 84.493578][ T5109] veth1_macvtap: entered promiscuous mode [ 84.543502][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.582840][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.657967][ T5125] veth0_macvtap: entered promiscuous mode [ 84.690361][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.711246][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.722109][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.736576][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.750109][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.765355][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.783528][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.795542][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.812587][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.825744][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.843074][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.857226][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.875892][ T5125] veth1_macvtap: entered promiscuous mode [ 84.892257][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.904632][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.915851][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.940922][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.970903][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.988052][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.007835][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.046113][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.070603][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.085376][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.104402][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.118074][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.152309][ T5109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.167864][ T5109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.181704][ T5109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.192786][ T5109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.227845][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.251442][ T4483] Bluetooth: hci2: command tx timeout [ 85.256990][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.274209][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.285509][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.295817][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.307716][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.317734][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.328644][ T4483] Bluetooth: hci1: command tx timeout [ 85.334731][ T4483] Bluetooth: hci3: command tx timeout [ 85.341104][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.354221][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.392781][ T5119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.409104][ T4483] Bluetooth: hci0: command tx timeout [ 85.422752][ T5119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.440112][ T5119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.452926][ T5119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.485007][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.501169][ T4483] Bluetooth: hci4: command tx timeout [ 85.506853][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.519772][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.530339][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.541099][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.551715][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.561671][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.573399][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.586759][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.617659][ T5125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.627884][ T5125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.639894][ T5125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.650554][ T5125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.805533][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.828974][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.910361][ T2452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.918242][ T2452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.006744][ T2827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.015597][ T2827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.055406][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.091280][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.278189][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.334655][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.380275][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.414062][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.097638][ T58] cfg80211: failed to load regulatory.db [ 88.012824][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.413444][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.695198][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.686104][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.978928][ T5293] loop4: detected capacity change from 0 to 1024 [ 90.010318][ T5293] EXT4-fs: Ignoring removed orlov option [ 90.049896][ T5293] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.078905][ T5293] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 90.118788][ T5293] EXT4-fs (loop4): invalid journal inode [ 90.125330][ T5293] EXT4-fs (loop4): can't get journal size [ 90.276902][ T5293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.397919][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.415098][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.424337][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.433552][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.442281][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.458667][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.493177][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.824248][ T11] bridge_slave_1: left allmulticast mode [ 90.846886][ T11] bridge_slave_1: left promiscuous mode [ 90.870008][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.975541][ T11] bridge_slave_0: left allmulticast mode [ 91.000763][ T11] bridge_slave_0: left promiscuous mode [ 91.006606][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.358222][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.526945][ T5327] loop2: detected capacity change from 0 to 1024 [ 91.545853][ T5327] EXT4-fs: Ignoring removed orlov option [ 91.575215][ T5327] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.594753][ T5327] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 91.605551][ T5327] EXT4-fs (loop2): invalid journal inode [ 91.611587][ T5327] EXT4-fs (loop2): can't get journal size [ 91.622564][ T5327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.673499][ T5109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.794278][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.840622][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.862929][ T11] bond0 (unregistering): Released all slaves [ 92.531805][ T53] Bluetooth: hci4: command tx timeout [ 92.723368][ T5362] Zero length message leads to an empty skb [ 92.832668][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.874453][ T5368] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.232341][ T11] hsr_slave_0: left promiscuous mode [ 93.268907][ T11] hsr_slave_1: left promiscuous mode [ 93.309334][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.371226][ T5394] autofs: Unknown parameter '0x0000000000000003' [ 93.374569][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.418318][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.451404][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.619177][ T11] veth1_macvtap: left promiscuous mode [ 93.627558][ T11] veth0_macvtap: left promiscuous mode [ 93.670170][ T11] veth1_vlan: left promiscuous mode [ 93.684189][ T11] veth0_vlan: left promiscuous mode [ 94.609979][ T53] Bluetooth: hci4: command tx timeout [ 94.840601][ T11] team0 (unregistering): Port device team_slave_1 removed [ 94.888979][ T11] team0 (unregistering): Port device team_slave_0 removed [ 94.979322][ T5162] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.188628][ T5162] usb 5-1: Using ep0 maxpacket: 32 [ 95.229445][ T5162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 95.285197][ T5162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 95.297434][ T5162] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 95.307085][ T5162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.340556][ T5162] usb 5-1: config 0 descriptor?? [ 95.352843][ T5438] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.394163][ T5162] hub 5-1:0.0: USB hub found [ 95.596567][ T5162] hub 5-1:0.0: 2 ports detected [ 95.888337][ T5299] chnl_net:caif_netlink_parms(): no params data found [ 96.289669][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.311214][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.327206][ T5299] bridge_slave_0: entered allmulticast mode [ 96.345972][ T5299] bridge_slave_0: entered promiscuous mode [ 96.399351][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.411247][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.450300][ T5299] bridge_slave_1: entered allmulticast mode [ 96.481883][ T5299] bridge_slave_1: entered promiscuous mode [ 96.692475][ T53] Bluetooth: hci4: command tx timeout [ 96.785170][ T5299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.867634][ T5299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.048616][ T5299] team0: Port device team_slave_0 added [ 97.098389][ T5299] team0: Port device team_slave_1 added [ 97.365499][ T932] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.470039][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.507246][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.537268][ T5299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.559263][ T932] usb 3-1: Using ep0 maxpacket: 8 [ 97.567805][ T932] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 97.582535][ T932] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.594044][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.610176][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.613951][ T5126] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 97.636252][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.637423][ T932] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.637871][ T932] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.637902][ T932] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.637954][ T932] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.637982][ T932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.700107][ T5299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.887097][ T932] usb 3-1: usb_control_msg returned -32 [ 97.910451][ T932] usbtmc 3-1:16.0: can't read capabilities [ 97.936634][ T5299] hsr_slave_0: entered promiscuous mode [ 97.975031][ T5299] hsr_slave_1: entered promiscuous mode [ 98.008536][ T5299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.035292][ T5299] Cannot create hsr debugfs directory [ 98.280844][ T5531] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 98.520988][ T5160] usb 3-1: USB disconnect, device number 2 [ 98.688843][ T5126] hub 5-1:0.0: set hub depth failed [ 98.700115][ T5162] usb 5-1: USB disconnect, device number 2 [ 98.768608][ T53] Bluetooth: hci4: command tx timeout [ 99.950706][ T5299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.973698][ T5299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.009557][ T5299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.040820][ T5299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.515252][ T5299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.630814][ T5299] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.677727][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.685034][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.757161][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.764416][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.156969][ T5622] loop1: detected capacity change from 0 to 512 [ 101.284320][ T5622] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 101.359310][ T5622] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 13 (err -117) [ 101.426966][ T5299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.453527][ T5622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.519538][ T5622] ext4 filesystem being mounted at /root/syzkaller-testdir2482316965/syzkaller.xXL6ym/42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.605226][ T5622] EXT4-fs error (device loop1): ext4_lookup:1858: inode #2: comm syz-executor.1: deleted inode referenced: 12 [ 101.642753][ T5299] veth0_vlan: entered promiscuous mode [ 101.742458][ T5299] veth1_vlan: entered promiscuous mode [ 101.781487][ T5111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.928766][ T5299] veth0_macvtap: entered promiscuous mode [ 101.982355][ T5299] veth1_macvtap: entered promiscuous mode [ 102.027784][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.042344][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.070503][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.105304][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.140510][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.178596][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.207120][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.257677][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.318955][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.383420][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.447253][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.498845][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.531346][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.573040][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.625757][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.660573][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.698050][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.754502][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.811230][ T5299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.853023][ T5299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.885939][ T5299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.927887][ T5299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.948546][ T5670] loop1: detected capacity change from 0 to 1024 [ 102.973938][ T5670] EXT4-fs: Ignoring removed orlov option [ 103.214437][ T5670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.228654][ T5670] EXT4-fs (loop1): Test dummy encryption mode enabled [ 103.266214][ T5670] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.287670][ T5670] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 103.307247][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.345008][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.369016][ T5670] EXT4-fs (loop1): invalid journal inode [ 103.388280][ T5670] EXT4-fs (loop1): can't get journal size [ 103.458995][ T5670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.507817][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.563403][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.752466][ T5111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.628184][ T5733] serio: Serial port pts0 [ 105.659148][ T5786] serio: Serial port pts0 [ 105.895933][ T5798] loop2: detected capacity change from 0 to 512 [ 105.976682][ T5798] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 106.062628][ T5798] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 106.125518][ T5798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.175297][ T5798] ext4 filesystem being mounted at /root/syzkaller-testdir2648040896/syzkaller.4qt8zV/37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.517505][ T5109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.054339][ T5852] loop3: detected capacity change from 0 to 512 [ 107.093544][ T5852] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 107.105896][ T5852] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 107.119581][ T5852] EXT4-fs (loop3): 1 truncate cleaned up [ 107.127053][ T5852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.226939][ T5859] loop1: detected capacity change from 0 to 512 [ 107.272433][ T5859] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 107.280216][ T5299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.308671][ T5859] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 107.357543][ T5859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.377646][ T5859] ext4 filesystem being mounted at /root/syzkaller-testdir2482316965/syzkaller.xXL6ym/60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.479576][ T5111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.969428][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.192571][ T5896] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.544885][ T5915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.508606][ T5949] process 'syz-executor.3' launched '/dev/fd/5' with NULL argv: empty string added [ 110.496205][ T5160] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 110.540623][ T5160] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 110.867891][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 111.522071][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 111.824626][ T6013] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 112.051274][ T932] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.254155][ T932] usb 4-1: Using ep0 maxpacket: 8 [ 112.288784][ T932] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 112.307489][ T932] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.348194][ T932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.378506][ T932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.409783][ T932] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.458534][ T932] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.500591][ T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.760612][ T932] usb 4-1: usb_control_msg returned -32 [ 112.776763][ T932] usbtmc 4-1:16.0: can't read capabilities [ 112.821309][ T932] usb 4-1: USB disconnect, device number 2 [ 113.668346][ T6068] loop1: detected capacity change from 0 to 1024 [ 113.803182][ T6068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.997657][ T5111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.034185][ T6064] loop0: detected capacity change from 0 to 512 [ 114.070847][ T6064] ======================================================= [ 114.070847][ T6064] WARNING: The mand mount option has been deprecated and [ 114.070847][ T6064] and is ignored by this kernel. Remove the mand [ 114.070847][ T6064] option from the mount to silence this warning. [ 114.070847][ T6064] ======================================================= [ 114.188659][ T6064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.254225][ T6064] EXT4-fs (loop0): orphan cleanup on readonly fs [ 114.331284][ T6064] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 114.418851][ T6064] Quota error (device loop0): write_blk: dquota write failed [ 114.439434][ T6064] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 114.470792][ T6064] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz-executor.0: Failed to acquire dquot type 1 [ 114.538977][ T6064] EXT4-fs (loop0): 1 truncate cleaned up [ 114.592829][ T6064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.949192][ T58] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.962172][ T5119] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.148745][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 115.160254][ T58] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 115.189934][ T58] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.220367][ T58] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.269003][ T58] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.294024][ T58] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.331690][ T58] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.366320][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.620238][ T58] usb 2-1: usb_control_msg returned -32 [ 115.631949][ T58] usbtmc 2-1:16.0: can't read capabilities [ 115.700461][ T58] usb 2-1: USB disconnect, device number 2 [ 115.926175][ T6112] loop0: detected capacity change from 0 to 512 [ 115.946370][ T6112] EXT4-fs: Ignoring removed orlov option [ 115.960764][ T6112] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.046464][ T6112] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.094285][ T6112] EXT4-fs (loop0): 1 truncate cleaned up [ 116.126767][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.234933][ T5119] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.747270][ T6123] loop3: detected capacity change from 0 to 512 [ 117.966782][ T6123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.048266][ T6123] EXT4-fs (loop3): orphan cleanup on readonly fs [ 118.161287][ T6123] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 248: padding at end of block bitmap is not set [ 118.244047][ T6123] Quota error (device loop3): write_blk: dquota write failed [ 118.268656][ T6123] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 118.329041][ T6123] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 1 [ 118.420405][ T6123] EXT4-fs (loop3): 1 truncate cleaned up [ 118.498628][ T6123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.166933][ T5299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.839604][ T6204] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.852372][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.224004][ T6218] loop0: detected capacity change from 0 to 512 [ 121.232871][ T6218] EXT4-fs: Ignoring removed orlov option [ 121.268948][ T6218] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.325811][ T6218] EXT4-fs (loop0): 1 truncate cleaned up [ 121.369485][ T6218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.651797][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.963378][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.242040][ T5119] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.602334][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.628385][ T4483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.638199][ T4483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.647514][ T4483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.674370][ T4483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.687085][ T4483] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.702561][ T4483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.987173][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.008909][ T5108] syz-executor.4 (5108) used greatest stack depth: 18704 bytes left [ 123.033518][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.046933][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.056465][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.067187][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.080482][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 123.088693][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.188616][ T5161] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.374063][ T51] bridge_slave_1: left allmulticast mode [ 123.380033][ T51] bridge_slave_1: left promiscuous mode [ 123.386249][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.401737][ T5161] usb 2-1: Using ep0 maxpacket: 16 [ 123.422065][ T51] bridge_slave_0: left allmulticast mode [ 123.429258][ T51] bridge_slave_0: left promiscuous mode [ 123.429307][ T5161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.435356][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.456752][ T5161] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.471661][ T5161] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.480922][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.506782][ T5161] usb 2-1: config 0 descriptor?? [ 123.975597][ T5161] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 123.996095][ T5161] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 124.014891][ T5161] microsoft 0003:045E:07DA.0002: no inputs found [ 124.025085][ T5161] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 124.222288][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.246032][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.265421][ T51] bond0 (unregistering): Released all slaves [ 124.458543][ T5160] usb 2-1: USB disconnect, device number 3 [ 124.768796][ T4483] Bluetooth: hci0: command tx timeout [ 125.168785][ T4483] Bluetooth: hci1: command tx timeout [ 125.232894][ T6244] chnl_net:caif_netlink_parms(): no params data found [ 125.423423][ T51] hsr_slave_0: left promiscuous mode [ 125.446740][ T51] hsr_slave_1: left promiscuous mode [ 125.487195][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.496604][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.539361][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.561307][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.641321][ T51] veth1_macvtap: left promiscuous mode [ 125.655836][ T51] veth0_macvtap: left promiscuous mode [ 125.679784][ T51] veth1_vlan: left promiscuous mode [ 125.685252][ T51] veth0_vlan: left promiscuous mode [ 126.849591][ T4483] Bluetooth: hci0: command tx timeout [ 127.106211][ T51] team0 (unregistering): Port device team_slave_1 removed [ 127.250495][ T4483] Bluetooth: hci1: command tx timeout [ 127.295973][ T51] team0 (unregistering): Port device team_slave_0 removed [ 128.673981][ T6256] chnl_net:caif_netlink_parms(): no params data found [ 128.928763][ T4483] Bluetooth: hci0: command tx timeout [ 129.152308][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.174779][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.204047][ T6244] bridge_slave_0: entered allmulticast mode [ 129.218143][ T6244] bridge_slave_0: entered promiscuous mode [ 129.329126][ T4483] Bluetooth: hci1: command tx timeout [ 129.334905][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.359746][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.385624][ T6244] bridge_slave_1: entered allmulticast mode [ 129.411789][ T6244] bridge_slave_1: entered promiscuous mode [ 129.471205][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.486270][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.493696][ T6256] bridge_slave_0: entered allmulticast mode [ 129.511635][ T6256] bridge_slave_0: entered promiscuous mode [ 129.559323][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.587624][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.602740][ T6256] bridge_slave_1: entered allmulticast mode [ 129.610614][ T6256] bridge_slave_1: entered promiscuous mode [ 129.698320][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.819395][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.943600][ T6256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.062278][ T6244] team0: Port device team_slave_0 added [ 130.111643][ T6256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.260927][ T6244] team0: Port device team_slave_1 added [ 130.377661][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.662889][ T6256] team0: Port device team_slave_0 added [ 130.701210][ T6256] team0: Port device team_slave_1 added [ 130.862030][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.917553][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.936789][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.008868][ T4483] Bluetooth: hci0: command tx timeout [ 131.018472][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.200999][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.260549][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.267655][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.317841][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.357377][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.376493][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.406796][ T6256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.408716][ T4483] Bluetooth: hci1: command tx timeout [ 131.425090][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.434381][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.464988][ T6256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.511745][ T6502] loop3: detected capacity change from 0 to 512 [ 131.519167][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.541281][ T6502] EXT4-fs: Ignoring removed orlov option [ 131.569259][ T6502] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.618619][ T6502] EXT4-fs (loop3): 1 truncate cleaned up [ 131.625474][ T6502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.735422][ T5299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.849405][ T6244] hsr_slave_0: entered promiscuous mode [ 131.869434][ T6244] hsr_slave_1: entered promiscuous mode [ 131.899550][ T6244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.922317][ T6244] Cannot create hsr debugfs directory [ 132.041282][ T6256] hsr_slave_0: entered promiscuous mode [ 132.066407][ T6256] hsr_slave_1: entered promiscuous mode [ 132.097719][ T6256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.117315][ T6256] Cannot create hsr debugfs directory [ 132.282501][ T6523] loop3: detected capacity change from 0 to 2048 [ 132.415767][ T6523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.803301][ T6541] loop1: detected capacity change from 0 to 512 [ 132.813490][ T51] bridge_slave_1: left allmulticast mode [ 132.819330][ T51] bridge_slave_1: left promiscuous mode [ 132.825284][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.870435][ T6541] EXT4-fs: Ignoring removed orlov option [ 132.909675][ T51] bridge_slave_0: left allmulticast mode [ 132.916051][ T6541] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.959708][ T51] bridge_slave_0: left promiscuous mode [ 132.981161][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.014417][ T6541] EXT4-fs (loop1): 1 truncate cleaned up [ 133.061386][ T6541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.194269][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.201417][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.315729][ T5111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.372850][ T5299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.955568][ T6574] loop3: detected capacity change from 0 to 1024 [ 133.964152][ T6574] EXT4-fs: Ignoring removed orlov option [ 133.990933][ T6574] EXT4-fs (loop3): Test dummy encryption mode enabled [ 134.024042][ T6574] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 134.047216][ T6574] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 134.057599][ T6574] EXT4-fs (loop3): invalid journal inode [ 134.064144][ T6574] EXT4-fs (loop3): can't get journal size [ 134.077179][ T6574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.160314][ T5299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.368101][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.393827][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.412418][ T51] bond0 (unregistering): Released all slaves [ 135.494246][ T51] hsr_slave_0: left promiscuous mode [ 135.527994][ T51] hsr_slave_1: left promiscuous mode [ 135.551928][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.561049][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.570110][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.577693][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.613847][ T51] veth1_macvtap: left promiscuous mode [ 135.619960][ T51] veth0_macvtap: left promiscuous mode [ 135.626298][ T51] veth1_vlan: left promiscuous mode [ 135.631976][ T51] veth0_vlan: left promiscuous mode [ 136.512246][ T51] team0 (unregistering): Port device team_slave_1 removed [ 136.565630][ T51] team0 (unregistering): Port device team_slave_0 removed [ 137.804264][ T6244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.835705][ T6244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.856775][ T6244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.004200][ T6244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.258573][ T5161] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.458982][ T5161] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 138.500163][ T5161] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.536372][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.536408][ T5161] usb 1-1: SerialNumber: syz [ 138.553709][ T5161] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 138.605782][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.684488][ T6256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.727220][ T6256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 138.819275][ T6244] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.844790][ T6256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 138.883608][ T6256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 138.953437][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.960795][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.972404][ T5126] usb 1-1: USB disconnect, device number 2 [ 139.008721][ T785] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.035510][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.043217][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.212306][ T785] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.227087][ T6244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.247664][ T785] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 139.271370][ T785] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.315642][ T785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 139.344337][ T785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 139.386020][ T785] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.416074][ T785] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.437714][ T785] usb 2-1: Product: syz [ 139.451456][ T785] usb 2-1: Manufacturer: syz [ 139.489284][ T6727] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.509902][ T785] cdc_wdm 2-1:1.0: skipping garbage [ 139.520554][ T6256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.524598][ T785] cdc_wdm 2-1:1.0: skipping garbage [ 139.587473][ T785] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 139.609453][ T785] cdc_wdm 2-1:1.0: Unknown control protocol [ 139.632733][ T6256] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.714484][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.721741][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.753692][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.785524][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.792769][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.794821][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.901375][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.935086][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.963226][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 139.970116][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 139.976725][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 139.983403][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 139.989984][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 139.996721][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 140.003097][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 140.005980][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.009727][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 140.010905][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 140.029281][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 140.035571][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 140.042206][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 140.048537][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 140.055195][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 140.061553][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 140.068292][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 140.074685][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 140.081309][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 140.087672][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 140.094316][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 140.350234][ T932] usb 2-1: USB disconnect, device number 4 [ 140.350956][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 140.759303][ T6256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.909638][ T932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.923448][ T6256] veth0_vlan: entered promiscuous mode [ 140.990799][ T6256] veth1_vlan: entered promiscuous mode [ 141.128168][ T932] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.150486][ T932] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 141.172726][ T932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.183101][ T6256] veth0_macvtap: entered promiscuous mode [ 141.198001][ T932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 141.228732][ T932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 141.267860][ T932] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.278135][ T6256] veth1_macvtap: entered promiscuous mode [ 141.288770][ T932] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.307894][ T932] usb 2-1: Product: syz [ 141.318579][ T932] usb 2-1: Manufacturer: syz [ 141.352240][ T6727] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.379098][ T932] cdc_wdm 2-1:1.0: skipping garbage [ 141.405679][ T932] cdc_wdm 2-1:1.0: skipping garbage [ 141.439879][ T932] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 141.445854][ T932] cdc_wdm 2-1:1.0: Unknown control protocol [ 141.461695][ T6244] veth0_vlan: entered promiscuous mode [ 141.519457][ T6256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.546998][ T6256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.583767][ T6256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.605282][ T6256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.640742][ T6256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.666858][ T6256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.681841][ T5171] usb 2-1: USB disconnect, device number 5 [ 141.693646][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.714121][ T6822] loop3: detected capacity change from 0 to 512 [ 141.736065][ T6244] veth1_vlan: entered promiscuous mode [ 141.767217][ T6256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.789841][ T6256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.805736][ T6256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.817583][ T6256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.827707][ T6256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.838858][ T6256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.853327][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.866750][ T6256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.875758][ T6256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.876101][ T6822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.884576][ T6256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.884654][ T6256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.923780][ T6822] ext4 filesystem being mounted at /root/syzkaller-testdir3297875220/syzkaller.HLGMQW/109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.971016][ T6822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.149923][ T6244] veth0_macvtap: entered promiscuous mode [ 142.205003][ T6244] veth1_macvtap: entered promiscuous mode [ 142.213421][ T2852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.231352][ T2852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.289720][ T5126] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.326914][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.353737][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.364809][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.378997][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.401382][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.428544][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.450549][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.486817][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.514620][ T5126] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 142.531876][ T5126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.543548][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.561132][ T5126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.590074][ T5126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.605721][ T5126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.625196][ T5126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.644245][ T5126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.653623][ T5126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.670193][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.692523][ T5126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.692969][ T6849] loop1: detected capacity change from 0 to 512 [ 142.714687][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.749135][ T5126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.758794][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.793668][ T5126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.809879][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.812145][ T5126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.831034][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.845253][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.856307][ T6849] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 142.875317][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.886417][ T6849] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 142.899211][ T6849] EXT4-fs (loop1): 1 truncate cleaned up [ 142.903582][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.918050][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.918915][ T5126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.929392][ T6849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.938062][ T2852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.989105][ T2852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.995184][ T6244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.005902][ T6244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.039556][ T6244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.067646][ T6244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.248715][ T5126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.257876][ T5126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.288559][ T5126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.473512][ T5126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.577800][ T5126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.703289][ T5126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.799573][ T5126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.855348][ T5126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.933166][ T5111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.962583][ T5126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.987242][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.020139][ T5126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.039791][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.071803][ T5126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.129561][ T5126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.200689][ T5126] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 144.232304][ T5126] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 144.258302][ T5126] usb 1-1: Product: syz [ 144.260411][ T2882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.276087][ T5126] usb 1-1: Manufacturer: syz [ 144.290045][ T5126] usb 1-1: SerialNumber: syz [ 144.323509][ T2882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.345849][ T5126] usb 1-1: config 0 descriptor?? [ 144.394396][ T5126] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 144.603309][ T932] usb 1-1: USB disconnect, device number 3 [ 144.655827][ T932] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 145.009005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 145.058946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.067436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.610905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.732779][ T6901] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 145.747549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 145.969648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 145.978959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 145.980072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 146.027163][ T6909] loop4: detected capacity change from 0 to 512 [ 146.189380][ T6909] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 146.246364][ T6909] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 1 (level 1) [ 146.264397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 146.304505][ T6909] EXT4-fs (loop4): 1 truncate cleaned up [ 146.324264][ T6909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.465164][ T6244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.953510][ T29] audit: type=1326 audit(1719241932.109:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6947 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4eafe7d0a9 code=0x0 [ 148.111925][ T6956] nfs: Unknown parameter '' [ 148.253842][ T6964] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.355994][ T6967] loop1: detected capacity change from 0 to 512 [ 148.419915][ T6967] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 148.438851][ T6967] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 148.581496][ T6967] EXT4-fs (loop1): 1 truncate cleaned up [ 148.799759][ T6967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.966006][ T29] audit: type=1326 audit(1719241933.139:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6977 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f084b07d0a9 code=0x0 [ 150.458709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 150.610230][ T5111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.801333][ T6954] loop3: detected capacity change from 0 to 32768 [ 150.905362][ T7006] loop2: detected capacity change from 0 to 256 [ 151.014310][ T6954] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 151.039640][ T6954] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 151.045963][ T6954] XFS (loop3): log mount failed [ 151.168612][ T932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.398508][ T932] usb 2-1: Using ep0 maxpacket: 8 [ 151.431070][ T932] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 151.460378][ T932] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.526259][ T932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.568533][ T932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.606482][ T932] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.656832][ T932] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.677493][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.959453][ T932] usb 2-1: usb_control_msg returned -32 [ 151.984719][ T932] usbtmc 2-1:16.0: can't read capabilities [ 152.340444][ T6998] loop4: detected capacity change from 0 to 32768 [ 152.410171][ T6998] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 152.531485][ T6998] XFS (loop4): Ending clean mount [ 152.666278][ T6998] XFS (loop4): Quotacheck needed: Please wait. [ 152.804409][ T29] audit: type=1326 audit(1719241936.979:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4eafe7d0a9 code=0x0 [ 152.825762][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.871215][ T7051] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 152.919395][ T6998] XFS (loop4): Quotacheck: Done. [ 153.001392][ T5164] usb 2-1: USB disconnect, device number 6 [ 153.089690][ T6244] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 153.117047][ T7061] loop3: detected capacity change from 0 to 256 [ 153.291515][ T7061] FAT-fs (loop3): Directory bread(block 64) failed [ 153.314594][ T7061] FAT-fs (loop3): Directory bread(block 65) failed [ 153.322954][ T7061] FAT-fs (loop3): Directory bread(block 66) failed [ 153.340424][ T7061] FAT-fs (loop3): Directory bread(block 67) failed [ 153.355894][ T7061] FAT-fs (loop3): Directory bread(block 68) failed [ 153.479334][ T7061] FAT-fs (loop3): Directory bread(block 69) failed [ 153.486782][ T7061] FAT-fs (loop3): Directory bread(block 70) failed [ 153.516641][ T7061] FAT-fs (loop3): Directory bread(block 71) failed [ 153.551221][ T7061] FAT-fs (loop3): Directory bread(block 72) failed [ 153.572210][ T7061] FAT-fs (loop3): Directory bread(block 73) failed [ 154.266636][ T7076] loop2: detected capacity change from 0 to 512 [ 154.304360][ T7076] EXT4-fs (loop2): Test dummy encryption mode enabled [ 154.386957][ T7076] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 154.411707][ T7076] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 154.439537][ T7076] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.353675][ T7111] loop3: detected capacity change from 0 to 512 [ 155.428304][ T7065] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 155.506710][ T7111] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 155.632865][ T7111] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 155.696926][ T7111] EXT4-fs (loop3): 1 truncate cleaned up [ 155.726080][ T7111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.797707][ T5299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.638005][ T6256] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 158.858688][ T7152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.865173][ T7152] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 158.960755][ T7152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.008522][ T7152] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 159.076688][ T7152] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.108710][ T7152] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 159.151717][ T7152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.157718][ T7152] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 159.218108][ T7152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.248626][ T7152] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 159.564324][ T7175] loop4: detected capacity change from 0 to 16 [ 159.595084][ T7175] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 160.502958][ T29] audit: type=1800 audit(1719241944.679:5): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1962 res=0 errno=0 [ 160.695538][ T7201] overlayfs: workdir and upperdir must be separate subtrees [ 160.709055][ T29] audit: type=1800 audit(1719241944.869:6): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz-executor.0" name="/root/syzkaller-testdir868452360/syzkaller.h3HXfc/211/file0" dev="sda1" ino=1960 res=0 errno=0 [ 160.728797][ T7203] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 160.953675][ T7220] loop1: detected capacity change from 0 to 4096 [ 161.001941][ T7220] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 161.039412][ T7220] ntfs3: loop1: RAW NTFS volume: Filesystem size 16384.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 161.069104][ T7220] ntfs3: loop1: NTFS 16384.00 Gb is too big to use 32 bits per cluster. [ 161.106259][ T7220] ntfs3: loop1: try to read out of volume at offset 0x1ffe00 [ 161.149131][ T7189] loop4: detected capacity change from 0 to 32768 [ 161.170577][ T7189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7189) [ 161.334566][ T7189] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.408740][ T7189] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 161.476125][ T7189] BTRFS info (device loop4): using free-space-tree [ 161.895038][ T7256] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.907925][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801b286400: rx timeout, send abort [ 161.918814][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801b286400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.085663][ T29] audit: type=1800 audit(1719241946.259:7): pid=7261 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1965 res=0 errno=0 [ 162.154171][ T7189] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 162.186366][ T7263] loop1: detected capacity change from 0 to 128 [ 162.362237][ T6244] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.862380][ T29] audit: type=1800 audit(1719241947.039:8): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="/" dev="sda1" ino=1201 res=0 errno=0 [ 163.183890][ T7292] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 163.410762][ T29] audit: type=1326 audit(1719241947.589:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7302 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feed967d0a9 code=0x0 [ 164.607101][ T7358] loop4: detected capacity change from 0 to 1024 [ 164.686520][ T7358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.071072][ T7375] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.448806][ T7351] loop2: detected capacity change from 0 to 32768 [ 165.497265][ T7351] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7351) [ 165.592384][ T7351] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 165.648660][ T7351] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 165.657444][ T7351] BTRFS info (device loop2): using free-space-tree [ 165.733556][ T7405] loop3: detected capacity change from 0 to 128 [ 165.822466][ T7405] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 166.057382][ T7374] loop1: detected capacity change from 0 to 32768 [ 166.106857][ T7374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7374) [ 166.259256][ T2852] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 166.260860][ T7374] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.289190][ T7374] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 166.311840][ T7374] BTRFS info (device loop1): using free-space-tree [ 166.516996][ T6256] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 166.581138][ T7437] loop3: detected capacity change from 0 to 128 [ 166.845737][ T7445] evm: overlay not supported [ 167.087262][ T5111] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.422959][ T7474] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.169463][ T7468] loop2: detected capacity change from 0 to 40427 [ 169.196321][ T7487] loop4: detected capacity change from 0 to 128 [ 169.207887][ T7468] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 169.232867][ T7472] loop1: detected capacity change from 0 to 32768 [ 169.241390][ T7468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 169.274769][ T7472] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7472) [ 169.303011][ T7468] F2FS-fs (loop2): invalid crc value [ 169.362485][ T7468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 169.362546][ T7472] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 169.379847][ T7472] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 169.424304][ T7472] BTRFS info (device loop1): using free-space-tree [ 169.617499][ T7506] bridge0: port 3(veth1_macvtap) entered blocking state [ 169.669259][ T7506] bridge0: port 3(veth1_macvtap) entered disabled state [ 169.745191][ T7506] veth1_macvtap: entered allmulticast mode [ 169.759702][ T7468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 169.774175][ T7506] veth1_macvtap: left allmulticast mode [ 169.783447][ T7468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 169.930259][ T7468] syz-executor.2: attempt to access beyond end of device [ 169.930259][ T7468] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 169.986688][ T7517] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.997504][ T7468] syz-executor.2: attempt to access beyond end of device [ 169.997504][ T7468] loop2: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 170.022354][ T5111] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 170.099598][ T7516] syz-executor.2: attempt to access beyond end of device [ 170.099598][ T7516] loop2: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 170.148348][ T7482] loop3: detected capacity change from 0 to 40427 [ 170.164457][ T7468] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 170.195057][ T7468] F2FS-fs (loop2): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 170.209945][ T7482] F2FS-fs (loop3): invalid crc value [ 170.233117][ T7516] F2FS-fs (loop2): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 170.279490][ T7482] F2FS-fs (loop3): Found nat_bits in checkpoint [ 170.568642][ T7482] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 170.876965][ T5299] syz-executor.3: attempt to access beyond end of device [ 170.876965][ T5299] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.930957][ T5299] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 171.140989][ T7543] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 171.888024][ T7535] loop4: detected capacity change from 0 to 32768 [ 171.939446][ T7535] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7535) [ 172.076704][ T7535] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 172.097384][ T7535] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 172.124745][ T7535] BTRFS info (device loop4): using free-space-tree [ 173.206685][ T7541] loop2: detected capacity change from 0 to 40427 [ 173.269763][ T7541] F2FS-fs (loop2): invalid crc value [ 173.327073][ T7541] F2FS-fs (loop2): Found nat_bits in checkpoint [ 173.496760][ T7535] BTRFS info (device loop4): balance: start -f -d -m [ 173.547276][ T7579] loop3: detected capacity change from 0 to 128 [ 173.563612][ T7535] BTRFS info (device loop4): balance: canceled [ 173.657938][ T7541] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 173.746258][ T6244] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 173.763223][ T6256] syz-executor.2: attempt to access beyond end of device [ 173.763223][ T6256] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.789704][ T6256] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 173.825077][ T7547] loop1: detected capacity change from 0 to 40427 [ 173.846739][ T7547] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 173.889153][ T7547] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 173.928896][ T7547] F2FS-fs (loop1): invalid crc value [ 173.969599][ T7547] F2FS-fs (loop1): Found nat_bits in checkpoint [ 173.982136][ T7590] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.239912][ T7547] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 174.256450][ T7547] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 174.280363][ T7547] syz-executor.1: attempt to access beyond end of device [ 174.280363][ T7547] loop1: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 174.295356][ T7547] syz-executor.1: attempt to access beyond end of device [ 174.295356][ T7547] loop1: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 174.344511][ T7597] syz-executor.1: attempt to access beyond end of device [ 174.344511][ T7597] loop1: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 174.399860][ T7547] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 174.408316][ T7596] loop3: detected capacity change from 0 to 4096 [ 174.433884][ T7547] F2FS-fs (loop1): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 174.469318][ T7597] F2FS-fs (loop1): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 176.252041][ T7620] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 176.286172][ T7620] syzkaller0: entered promiscuous mode [ 176.292641][ T7620] syzkaller0: entered allmulticast mode [ 176.674531][ T7599] loop4: detected capacity change from 0 to 40427 [ 176.734162][ T7599] F2FS-fs (loop4): invalid crc value [ 176.769103][ T7599] F2FS-fs (loop4): Found nat_bits in checkpoint [ 176.952094][ T7599] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 177.077069][ T6244] syz-executor.4: attempt to access beyond end of device [ 177.077069][ T6244] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.128819][ T6244] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 177.379358][ T7624] loop2: detected capacity change from 0 to 40427 [ 177.405015][ T7624] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 177.419960][ T7624] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 177.454034][ T7624] F2FS-fs (loop2): invalid crc value [ 177.519166][ T7624] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.602351][ T7632] loop1: detected capacity change from 0 to 32768 [ 177.638926][ T7632] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7632) [ 177.748866][ T7624] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 177.766708][ T7624] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 177.798305][ T7632] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.824571][ T7632] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 177.828315][ T7624] syz-executor.2: attempt to access beyond end of device [ 177.828315][ T7624] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 177.844021][ T7632] BTRFS error (device loop1): cannot disable free-space-tree [ 177.897056][ T7624] syz-executor.2: attempt to access beyond end of device [ 177.897056][ T7624] loop2: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 177.949054][ T7632] BTRFS error (device loop1): open_ctree failed [ 177.986305][ T7648] syz-executor.2: attempt to access beyond end of device [ 177.986305][ T7648] loop2: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 178.083445][ T7624] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 178.137455][ T7624] F2FS-fs (loop2): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 178.193492][ T7648] F2FS-fs (loop2): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 178.460326][ T7650] loop3: detected capacity change from 0 to 4096 [ 180.697617][ T7673] loop4: detected capacity change from 0 to 40427 [ 180.726833][ T7673] F2FS-fs (loop4): invalid crc value [ 180.761247][ T7673] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.887225][ T7673] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 180.981128][ T6244] syz-executor.4: attempt to access beyond end of device [ 180.981128][ T6244] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.000290][ T7680] loop2: detected capacity change from 0 to 32768 [ 181.000535][ T6244] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 181.039529][ T7680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7680) [ 181.112692][ T7680] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.129559][ T7680] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 181.144201][ T7680] BTRFS error (device loop2): cannot disable free-space-tree [ 181.161379][ T7680] BTRFS error (device loop2): open_ctree failed [ 181.644089][ T5161] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 181.841868][ T5161] usb 3-1: Using ep0 maxpacket: 8 [ 181.849620][ T5161] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 181.860386][ T5161] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.872236][ T5161] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.887286][ T5161] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 181.899455][ T5161] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.910912][ T5161] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.925880][ T5161] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 181.936508][ T5161] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.949216][ T5161] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.966177][ T5161] usb 3-1: string descriptor 0 read error: -22 [ 181.972857][ T5161] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 181.982122][ T5161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.017996][ T5161] adutux 3-1:168.0: interrupt endpoints not found [ 182.430561][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.449414][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.632867][ T7684] tipc: Started in network mode [ 182.638917][ T7684] tipc: Node identity 1, cluster identity 4711 [ 182.650689][ T7684] tipc: Node number set to 1 [ 182.658901][ T7684] tipc: Cannot configure node identity twice [ 182.659042][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.691201][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.796333][ T5162] usb 3-1: USB disconnect, device number 3 [ 182.991875][ T7703] loop1: detected capacity change from 0 to 4096 [ 185.278725][ T5212] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.659484][ T5212] usb 3-1: Using ep0 maxpacket: 16 [ 185.756215][ T7762] sctp: [Deprecated]: syz-executor.1 (pid 7762) Use of int in max_burst socket option. [ 185.756215][ T7762] Use struct sctp_assoc_value instead [ 185.790083][ T5212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 185.845125][ T5212] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 185.897111][ T5212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.981090][ T5212] usb 3-1: config 0 descriptor?? [ 186.420062][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.444206][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.496014][ T5212] hid (null): nested delimiters [ 186.501092][ T5212] hid (null): report_id 24797 is invalid [ 186.516159][ T5212] hid (null): unknown global tag 0x83 [ 186.522175][ T5212] hid (null): unknown global tag 0xc [ 186.536497][ T5212] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 186.562742][ T5212] hid-generic 0003:0158:0100.0003: unexpected long global item [ 186.580494][ T5212] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 186.743359][ T5212] usb 3-1: USB disconnect, device number 4 [ 186.925620][ T7768] loop1: detected capacity change from 0 to 40427 [ 186.969464][ T7768] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 186.999302][ T7768] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 187.017607][ T7768] F2FS-fs (loop1): invalid crc value [ 187.046431][ T7768] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.242364][ T7768] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 187.258518][ T7768] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 187.308286][ T7768] syz-executor.1: attempt to access beyond end of device [ 187.308286][ T7768] loop1: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 187.395927][ T7768] syz-executor.1: attempt to access beyond end of device [ 187.395927][ T7768] loop1: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 187.449988][ T7807] syz-executor.1: attempt to access beyond end of device [ 187.449988][ T7807] loop1: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 187.532308][ T7768] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 187.554414][ T7768] F2FS-fs (loop1): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 187.563592][ T7807] F2FS-fs (loop1): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 188.400499][ T7818] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.444902][ T7818] block nbd0: not configured, cannot reconfigure [ 188.465984][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.478925][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.493865][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.507015][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.544369][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.557510][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.602677][ T4483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.630985][ T4483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.638593][ T4483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.650507][ T4483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.659612][ T4483] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.667275][ T4483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.769492][ T2934] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.059590][ T2934] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.349878][ T2934] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.652055][ T2934] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.530853][ T2934] bridge_slave_1: left allmulticast mode [ 190.541531][ T2934] bridge_slave_1: left promiscuous mode [ 190.548547][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.575353][ T2934] bridge_slave_0: left allmulticast mode [ 190.598185][ T2934] bridge_slave_0: left promiscuous mode [ 190.615132][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.700913][ T4483] Bluetooth: hci0: command tx timeout [ 191.617795][ T2934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.668124][ T2934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.693089][ T2934] bond0 (unregistering): Released all slaves [ 192.238057][ T7820] chnl_net:caif_netlink_parms(): no params data found [ 192.767974][ T4483] Bluetooth: hci0: command tx timeout [ 192.908635][ T2934] hsr_slave_0: left promiscuous mode [ 192.938847][ T2934] hsr_slave_1: left promiscuous mode [ 192.952538][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.969837][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.982921][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.995286][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.125188][ T2934] veth1_macvtap: left promiscuous mode [ 193.133407][ T2934] veth0_macvtap: left promiscuous mode [ 193.144547][ T2934] veth1_vlan: left promiscuous mode [ 193.152383][ T2934] veth0_vlan: left promiscuous mode [ 194.220137][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.226535][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.840669][ T4483] Bluetooth: hci0: command tx timeout [ 194.902904][ T2934] team0 (unregistering): Port device team_slave_1 removed [ 195.015294][ T2934] team0 (unregistering): Port device team_slave_0 removed [ 196.424454][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.438481][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.453843][ T7820] bridge_slave_0: entered allmulticast mode [ 196.466946][ T7820] bridge_slave_0: entered promiscuous mode [ 196.497114][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.506644][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.545523][ T7820] bridge_slave_1: entered allmulticast mode [ 196.563830][ T7820] bridge_slave_1: entered promiscuous mode [ 196.774375][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.854406][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.906635][ T4483] Bluetooth: hci0: command tx timeout [ 197.028563][ T7820] team0: Port device team_slave_0 added [ 197.073191][ T7820] team0: Port device team_slave_1 added [ 197.123709][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.134488][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.234000][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.271923][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.293188][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.362221][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.689116][ T7820] hsr_slave_0: entered promiscuous mode [ 197.728417][ T7820] hsr_slave_1: entered promiscuous mode [ 198.488176][ T8083] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.925508][ T7820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.967131][ T7820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.026339][ T7820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.080132][ T7820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.509213][ T8138] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 200.590148][ T8138] syzkaller0: entered promiscuous mode [ 200.600530][ T8138] syzkaller0: entered allmulticast mode [ 200.653845][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.436124][ T8167] Bluetooth: MGMT ver 1.22 [ 201.927324][ T5162] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 202.143078][ T5162] usb 1-1: Using ep0 maxpacket: 8 [ 202.152593][ T5162] usb 1-1: config 0 has an invalid interface number: 194 but max is 1 [ 202.167502][ T5162] usb 1-1: config 0 has no interface number 1 [ 202.191070][ T5162] usb 1-1: New USB device found, idVendor=1ff4, idProduct=600a, bcdDevice=8e.a2 [ 202.214367][ T5162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.232795][ T5162] usb 1-1: Product: syz [ 202.238858][ T5162] usb 1-1: Manufacturer: syz [ 202.244680][ T5162] usb 1-1: SerialNumber: syz [ 202.263975][ T5162] usb 1-1: config 0 descriptor?? [ 202.280758][ T5162] option 1-1:0.194: GSM modem (1-port) converter detected [ 202.304207][ T5162] option 1-1:0.0: GSM modem (1-port) converter detected [ 202.483529][ T5162] usb 1-1: USB disconnect, device number 4 [ 202.530699][ T5162] option 1-1:0.194: device disconnected [ 202.578136][ T5162] option 1-1:0.0: device disconnected [ 203.254372][ T5171] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.455821][ T5171] usb 2-1: Using ep0 maxpacket: 16 [ 203.476674][ T5171] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 203.508032][ T5171] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.535447][ T5171] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.40 [ 203.544769][ T5171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.552943][ T5171] usb 2-1: Product: 䀁 [ 203.557214][ T5171] usb 2-1: Manufacturer: С [ 203.561889][ T5171] usb 2-1: SerialNumber: 逤渜晨舁뒛䧆䪞啸င΁쀣簪壍䪱뜮㉉䘵޹蠖洙ᮈ⎟覈詝⿦菁ॱ缨ᣤᆘ귶⛰넪䖱퀱华홄₉Ԇ齲繁檆໅䡗ൡ듣蕋 [ 205.496959][ T5171] usbhid 2-1:1.0: can't add hid device: -71 [ 205.508513][ T5171] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 205.514871][ T7820] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.554338][ T5171] usb 2-1: USB disconnect, device number 7 [ 205.649698][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.656950][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.688262][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.695592][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.730974][ T7820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.762274][ T7820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.804339][ T8238] syz-executor.2 (pid 8238) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 207.001288][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.376223][ T8272] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.484116][ T8272] syzkaller0: entered promiscuous mode [ 208.519879][ T8272] syzkaller0: entered allmulticast mode [ 211.926976][ T29] audit: type=1326 audit(1719241996.555:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618087d0a9 code=0x7ffc0000 [ 211.968513][ T29] audit: type=1326 audit(1719241996.555:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618087d0a9 code=0x7ffc0000 [ 212.021793][ T29] audit: type=1326 audit(1719241996.555:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f618087d0a9 code=0x7ffc0000 [ 212.055731][ T29] audit: type=1326 audit(1719241996.555:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618087d0a9 code=0x7ffc0000 [ 212.140600][ T29] audit: type=1326 audit(1719241996.555:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618087d0a9 code=0x7ffc0000 [ 212.174850][ T29] audit: type=1326 audit(1719241996.555:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f618087d0a9 code=0x7ffc0000 [ 212.223789][ T29] audit: type=1326 audit(1719241996.555:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618087d0a9 code=0x7ffc0000 [ 212.266898][ T29] audit: type=1326 audit(1719241996.555:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f618087d0a9 code=0x7ffc0000 [ 212.300688][ T29] audit: type=1326 audit(1719241996.555:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618087d0a9 code=0x7ffc0000 [ 212.331959][ T29] audit: type=1326 audit(1719241996.555:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f618087d0a9 code=0x7ffc0000 [ 212.935116][ T7820] veth0_vlan: entered promiscuous mode [ 212.973310][ T7820] veth1_vlan: entered promiscuous mode [ 213.026416][ T8333] loop1: detected capacity change from 0 to 512 [ 213.066853][ T7820] veth0_macvtap: entered promiscuous mode [ 213.134402][ T7820] veth1_macvtap: entered promiscuous mode [ 213.177017][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.188188][ T8333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.228727][ T8333] ext4 filesystem being mounted at /root/syzkaller-testdir2482316965/syzkaller.xXL6ym/248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.243801][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.270771][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.293583][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.306163][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.322845][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.356975][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.374986][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.409355][ T8336] loop2: detected capacity change from 0 to 8192 [ 213.422420][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.443992][ T5111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.455447][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.476506][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.500627][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.511348][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.546854][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.617262][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.728071][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.799868][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.833513][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.571268][ T7820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.728689][ T7820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.768460][ T7820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.777341][ T7820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.052569][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.092803][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.130342][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.232883][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.243014][ T8364] loop3: detected capacity change from 0 to 512 [ 215.262333][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.298890][ T8364] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 215.376533][ T8364] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 215.461037][ T8364] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 18: invalid block bitmap [ 215.532602][ T8364] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 215.573180][ T8364] EXT4-fs (loop3): 1 truncate cleaned up [ 215.585070][ T8364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.627680][ T8364] ext2 filesystem being mounted at /root/syzkaller-testdir3297875220/syzkaller.HLGMQW/227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.803764][ T4539] udevd[4539]: worker [5309] terminated by signal 33 (Unknown signal 33) [ 216.104410][ T5299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.547028][ T58] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 216.580496][ T8393] input: syz0 as /devices/virtual/input/input6 [ 216.746422][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 216.764890][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 216.779371][ T58] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 216.789272][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.806677][ T58] usb 2-1: config 0 descriptor?? [ 217.022775][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.045491][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.326346][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 322.333552][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8408/1:b..l [ 322.342175][ C1] rcu: (detected by 1, t=10502 jiffies, g=29761, q=376 ncpus=2) [ 322.350045][ C1] task:syz-executor.3 state:R running task stack:24672 pid:8408 tgid:8408 ppid:5299 flags:0x00004006 [ 322.363565][ C1] Call Trace: [ 322.366897][ C1] [ 322.369873][ C1] __schedule+0x1796/0x49d0 [ 322.374626][ C1] ? mark_lock+0x9a/0x350 [ 322.379015][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 322.385254][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.391643][ C1] ? __pfx___schedule+0x10/0x10 [ 322.396623][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 322.402669][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 322.408015][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 322.413310][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 322.419097][ C1] irqentry_exit+0x5e/0x90 [ 322.423644][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.430132][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x90/0x120 [ 322.436958][ C1] Code: 85 d2 75 14 e9 9a 00 00 00 41 b8 05 00 00 00 4d 85 d2 0f 84 8b 00 00 00 4c 8b 4c 24 20 65 4c 8b 1c 25 80 d4 03 00 31 d2 eb 08 <48> ff c2 49 39 d2 74 71 4c 8b 74 d6 10 65 8b 05 c4 a9 6d 7e a9 00 [ 322.456792][ C1] RSP: 0018:ffffc90003c47678 EFLAGS: 00000293 [ 322.462919][ C1] RAX: 0000000000000000 RBX: ffffc90003c47798 RCX: ffffffff8b7302c1 [ 322.470940][ C1] RDX: 0000000000000002 RSI: ffffffff8f93acd0 RDI: 0000000000000001 [ 322.478957][ C1] RBP: ffffc90003c47890 R08: 0000000000000005 R09: ffffffff8b730305 [ 322.487325][ C1] R10: 0000000000000003 R11: ffff88802b150000 R12: 1ffff92000788ef7 [ 322.495339][ C1] R13: ffff88801cb3c800 R14: 0000000000000003 R15: ffff88802af4a0f8 [ 322.503407][ C1] ? mt_validate+0x4375/0x4aa0 [ 322.508311][ C1] ? mt_validate+0x4331/0x4aa0 [ 322.513147][ C1] mt_validate+0x4375/0x4aa0 [ 322.517815][ C1] ? mt_validate+0x1a1/0x4aa0 [ 322.522631][ C1] ? __pfx_mt_validate+0x10/0x10 [ 322.527643][ C1] ? mas_store_prealloc+0x2db/0x5f0 [ 322.532901][ C1] validate_mm+0xe7/0x530 [ 322.537381][ C1] ? __pfx_validate_mm+0x10/0x10 [ 322.542374][ C1] ? vma_complete+0xafd/0xb60 [ 322.547125][ C1] __split_vma+0xa69/0xc30 [ 322.551602][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.558084][ C1] ? __pfx___split_vma+0x10/0x10 [ 322.563097][ C1] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 322.569435][ C1] vma_modify+0x194/0x350 [ 322.573917][ C1] mprotect_fixup+0x3ea/0xa90 [ 322.578745][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 322.584024][ C1] do_mprotect_pkey+0x908/0xe00 [ 322.589072][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 322.594612][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.600996][ C1] ? do_syscall_64+0x100/0x230 [ 322.605901][ C1] __x64_sys_mprotect+0x80/0x90 [ 322.610899][ C1] do_syscall_64+0xf3/0x230 [ 322.615472][ C1] ? clear_bhb_loop+0x35/0x90 [ 322.620209][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.626157][ C1] RIP: 0033:0x7feed967d167 [ 322.630624][ C1] RSP: 002b:00007ffca4623a18 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 322.639089][ C1] RAX: ffffffffffffffda RBX: 00007feeda38c6c0 RCX: 00007feed967d167 [ 322.647107][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007feeda36d000 [ 322.655120][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 322.663141][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffca4623c70 [ 322.671213][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 322.679346][ C1] [ 322.682418][ C1] rcu: rcu_preempt kthread starved for 10537 jiffies! g29761 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 322.693659][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 322.703670][ C1] rcu: RCU grace-period kthread stack dump: [ 322.709684][ C1] task:rcu_preempt state:R running task stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 322.721484][ C1] Call Trace: [ 322.724878][ C1] [ 322.727880][ C1] __schedule+0x1796/0x49d0 [ 322.732544][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.738955][ C1] ? __pfx___schedule+0x10/0x10 [ 322.743875][ C1] ? schedule+0x144/0x320 [ 322.748261][ C1] ? queued_write_lock_slowpath+0x420/0x44a [ 322.754279][ C1] ? schedule+0x144/0x320 [ 322.758667][ C1] ? preempt_count_add+0xaa/0x190 [ 322.763771][ C1] ? schedule+0x90/0x320 [ 322.768058][ C1] schedule+0x14b/0x320 [ 322.772398][ C1] schedule_timeout+0x1be/0x310 [ 322.777322][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 322.782769][ C1] ? __pfx_process_timeout+0x10/0x10 [ 322.788402][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 322.794193][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 322.799105][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 322.804099][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 322.810310][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 322.815721][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 322.821689][ C1] ? finish_swait+0xd4/0x1e0 [ 322.826420][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 322.831053][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 322.836387][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 322.842429][ C1] ? __kthread_parkme+0x169/0x1d0 [ 322.847596][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 322.852841][ C1] kthread+0x2f0/0x390 [ 322.857014][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 322.862259][ C1] ? __pfx_kthread+0x10/0x10 [ 322.866987][ C1] ret_from_fork+0x4b/0x80 [ 322.871542][ C1] ? __pfx_kthread+0x10/0x10 [ 322.876269][ C1] ret_from_fork_asm+0x1a/0x30 [ 322.881199][ C1] [ 322.884251][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 322.890626][ C1] Sending NMI from CPU 1 to CPUs 0: [ 322.895962][ C0] NMI backtrace for cpu 0 [ 322.895984][ C0] CPU: 0 PID: 8407 Comm: syz-executor.0 Not tainted 6.10.0-rc5-syzkaller #0 [ 322.896002][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 322.896013][ C0] RIP: 0010:__lock_acquire+0x6e/0x1fd0 [ 322.896037][ C0] Code: 30 84 c0 0f 85 4b 16 00 00 83 3d 48 e8 39 0e 00 0f 84 1c 11 00 00 83 3d bf 9d ad 0c 00 74 2c 4c 89 e0 48 c1 e8 03 80 3c 30 00 <74> 12 4c 89 e7 e8 e8 1c 86 00 48 be 00 00 00 00 00 fc ff df 48 c7 [ 322.896052][ C0] RSP: 0018:ffffc90003e27450 EFLAGS: 00000046 [ 322.896068][ C0] RAX: 1ffffffff1c667f4 RBX: 0000000000000000 RCX: 0000000000000002 [ 322.896080][ C0] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffffffff8e333fa0 [ 322.896092][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 322.896103][ C0] R10: dffffc0000000000 R11: fffffbfff1f58426 R12: ffffffff8e333fa0 [ 322.896116][ C0] R13: 0000000000000001 R14: ffff88802265bc00 R15: 0000000000000002 [ 322.896127][ C0] FS: 00007f61815d56c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 322.896143][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.896155][ C0] CR2: 0000001b32d26000 CR3: 000000005db1e000 CR4: 00000000003506f0 [ 322.896171][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 322.896182][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 322.896193][ C0] Call Trace: [ 322.896203][ C0] [ 322.896210][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 322.896231][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 322.896250][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 322.896278][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 322.896303][ C0] ? nmi_handle+0x14f/0x5a0 [ 322.896330][ C0] ? nmi_handle+0x2a/0x5a0 [ 322.896356][ C0] ? __lock_acquire+0x6e/0x1fd0 [ 322.896374][ C0] ? default_do_nmi+0x63/0x160 [ 322.896393][ C0] ? exc_nmi+0x123/0x1f0 [ 322.896411][ C0] ? end_repeat_nmi+0xf/0x53 [ 322.896442][ C0] ? __lock_acquire+0x6e/0x1fd0 [ 322.896461][ C0] ? __lock_acquire+0x6e/0x1fd0 [ 322.896480][ C0] ? __lock_acquire+0x6e/0x1fd0 [ 322.896498][ C0] [ 322.896503][ C0] [ 322.896510][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 322.896534][ C0] lock_acquire+0x1ed/0x550 [ 322.896552][ C0] ? bpf_trace_run4+0x244/0x590 [ 322.896582][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 322.896600][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 322.896619][ C0] ? __pfx___cant_sleep+0x10/0x10 [ 322.896646][ C0] ? bpf_trace_run4+0x244/0x590 [ 322.896670][ C0] bpf_trace_run4+0x261/0x590 [ 322.896694][ C0] ? bpf_trace_run4+0x244/0x590 [ 322.896720][ C0] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 322.896742][ C0] ? __pfx_bpf_trace_run4+0x10/0x10 [ 322.896771][ C0] ? __pfx_probe_sched_switch+0x10/0x10 [ 322.896798][ C0] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 322.896823][ C0] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 322.896848][ C0] __traceiter_sched_switch+0x98/0xd0 [ 322.896875][ C0] __schedule+0x2535/0x49d0 [ 322.896902][ C0] ? __pfx___schedule+0x10/0x10 [ 322.896936][ C0] ? __pfx_lock_release+0x10/0x10 [ 322.896957][ C0] ? plist_check_list+0x2cb/0x300 [ 322.896976][ C0] ? futex_wait_queue+0x27/0x1d0 [ 322.896998][ C0] ? schedule+0x90/0x320 [ 322.897012][ C0] schedule+0x14b/0x320 [ 322.897028][ C0] ? futex_wait_queue+0x27/0x1d0 [ 322.897047][ C0] futex_wait_queue+0x14e/0x1d0 [ 322.897069][ C0] __futex_wait+0x17f/0x320 [ 322.897088][ C0] ? mark_lock+0x9a/0x350 [ 322.897110][ C0] ? __pfx___futex_wait+0x10/0x10 [ 322.897132][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 322.897162][ C0] futex_wait+0x101/0x360 [ 322.897184][ C0] ? __pfx_futex_wait+0x10/0x10 [ 322.897207][ C0] ? __pfx_lock_release+0x10/0x10 [ 322.897230][ C0] do_futex+0x33b/0x560 [ 322.897249][ C0] ? __pfx_do_futex+0x10/0x10 [ 322.897263][ C0] ? restore_altstack+0x10c/0x150 [ 322.897285][ C0] ? __pfx_restore_altstack+0x10/0x10 [ 322.897309][ C0] __se_sys_futex+0x3f9/0x480 [ 322.897329][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 322.897346][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.897365][ C0] ? do_syscall_64+0x100/0x230 [ 322.897391][ C0] ? __x64_sys_futex+0x21/0xf0 [ 322.897408][ C0] do_syscall_64+0xf3/0x230 [ 322.897433][ C0] ? clear_bhb_loop+0x35/0x90 [ 322.897459][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.897484][ C0] RIP: 0033:0x7f618087d0a9 [ 322.897498][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 322.897512][ C0] RSP: 002b:00007f61815d5178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 322.897529][ C0] RAX: ffffffffffffffda RBX: 00007f61809b3f88 RCX: 00007f618087d0a9 [ 322.897542][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f61809b3f88 [ 322.897553][ C0] RBP: 00007f61809b3f80 R08: 00007f61815d56c0 R09: 00007f61815d56c0 [ 322.897566][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61809b3f8c [ 322.897577][ C0] R13: 000000000000000b R14: 00007ffeddd354c0 R15: 00007ffeddd355a8 [ 322.897597][ C0]