last executing test programs: 3m44.473696453s ago: executing program 4 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x1, 0x20000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 3m21.735364466s ago: executing program 3 (id=746): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r0, r1) ppoll(&(0x7f0000000000)=[{r0, 0x4021}], 0x1, 0x0, 0x0, 0x0) 3m16.345445032s ago: executing program 1 (id=421): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xf6, 0x487, &(0x7f0000000940)="$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") 2m55.600772884s ago: executing program 4 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x1, 0x20000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 2m51.943909545s ago: executing program 3 (id=746): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r0, r1) ppoll(&(0x7f0000000000)=[{r0, 0x4021}], 0x1, 0x0, 0x0, 0x0) 2m44.269131097s ago: executing program 1 (id=421): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xf6, 0x487, &(0x7f0000000940)="$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") 2m22.833358821s ago: executing program 4 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x1, 0x20000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 2m21.480433327s ago: executing program 3 (id=746): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r0, r1) ppoll(&(0x7f0000000000)=[{r0, 0x4021}], 0x1, 0x0, 0x0, 0x0) 2m15.25342908s ago: executing program 1 (id=421): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xf6, 0x487, &(0x7f0000000940)="$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") 1m48.69642358s ago: executing program 3 (id=746): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r0, r1) ppoll(&(0x7f0000000000)=[{r0, 0x4021}], 0x1, 0x0, 0x0, 0x0) 1m42.683246621s ago: executing program 4 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x1, 0x20000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 1m37.579074287s ago: executing program 1 (id=421): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xf6, 0x487, &(0x7f0000000940)="$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") 1m8.758685256s ago: executing program 3 (id=746): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r0, r1) ppoll(&(0x7f0000000000)=[{r0, 0x4021}], 0x1, 0x0, 0x0, 0x0) 1m1.142581514s ago: executing program 4 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x1, 0x20000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 59.621738748s ago: executing program 1 (id=421): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xf6, 0x487, &(0x7f0000000940)="$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") 42.530806141s ago: executing program 3 (id=746): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r0, r1) ppoll(&(0x7f0000000000)=[{r0, 0x4021}], 0x1, 0x0, 0x0, 0x0) 31.381097539s ago: executing program 1 (id=421): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xf6, 0x487, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvbrel5YdFxB8gaBWMxB8tLT/k4EWjiQeNJnrAeKptIUihhtZECFH0gDEeDIl349HEv8CTXox6MvGKd0NCDBeQ05q3M9Nul93SpUtb3M8nGfrezLTvfeft233z3g4BdK2h9E8pYnNEXI6IwYioNJ4wlP24ce38xL/XeiKiWn37n1L6tbh+7fxE/idqW7Ip21Gt5vkNTcq9+F7E+PT01Jk8PzJ36sOR2bPnnj9xavz41PGp02NHjhw8sLvv8NihjsSZ4rq+85OZXTtee/fSGxNHL73/2w+pvpvz40UcnTSUXd2mnup0YWtsS126VFnDitCW1G69+XY5BqMnBuaPDcarn69p5YC7rdLs8zl3oQr8j6WBOtCNig/6dP9bbKs07lgXrr6UTXikuG/kW3akEuX8nN6G+9tO6o+Ioxdufpu2uEvzEAAA9X5K45/nmo3/yvFQ3Xn35WsoWyPi/ojYFhEPRMT2iHgwonbuwxHxSJvlN66Q3Dr+KV9ZlK32tFnC0tL478V8bWvx+K8Y/cXWnjy3pRZ/b+nYiemp/fk12Re9G1J+dNGvLPbzK39+3bjvq3yafahu/Je2VP7iCMtXGifoJsfnxlceeebqZxE7K83iL82vA5YiYkdE7LzDMk488/2uVseaxV+MhW+rA+tM1e8ins7a/0I0xF8oza9P3szvmor1ydEXDo8dGumP6an9I8Wr4la//3HxrVblryj+Dkjtv7Hp6z+LP0Vb6o+YPXvuZG29drb9Mi7+9cVEqcWx7beNv+7135v/3BvRV3qnluzLd308Pjd3ZjTtfz1lBxbtH1v4a0W+OD/Fv2/PQvzjsdD/t2W3Z7Ur8WhEpBfx7oh4LCIez9vuiYh4MiL2LBH/ry/v/aDVsdbtv8SsfAel+CeXaP/0lpdSC+3ffqLn5C8/tiq/uqz2P1hL7cv3LOf9b7kVXMm1AwAAgHtFufYd+FJ5eD5dLg8PZ9/h3x4by9Mzs3PPHpv56PRk9l35rdFbLma6BuvmQ0fzueEiP9aQP5DPG3/TM1DLD0/MTE+udfDQ5Ta16P/J351dagHWI89rQffS/6F76f/QvfR/6F76P3Spvua7P13tegBrov3P//67Ug9g9bXV/1s9yQXck9z/Q/fS/6ErtXw2vryiR/7v1UTltucUF271aziwDq5PXSLK66IanUu8+WXWsuulPkWisuz/zOIOExuaHlrDNyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+i8AAP//tYzelg==") 30.102965694s ago: executing program 4 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x1, 0x20000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 14.862058977s ago: executing program 0 (id=1995): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f0000000700)={[{@errors_remount}, {@noblock_validity}, {@mblk_io_submit}, {@bsdgroups}, {@dioread_nolock}]}, 0x1, 0x517, &(0x7f0000000140)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 14.805283863s ago: executing program 5 (id=1997): r0 = fanotify_init(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x20, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x102, 0x48001050, r2, 0x0) 14.324755234s ago: executing program 5 (id=1998): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5437, 0x0) 13.466184616s ago: executing program 0 (id=2000): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff0000000026090200760000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb50200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001400000076000000bf9100000000000007080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 12.860937355s ago: executing program 0 (id=2002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0, 0x0, 0x10}, 0x18) 9.01320831s ago: executing program 5 (id=2003): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x80000c, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x6f2, &(0x7f0000001200)="$eJzs3UtoHOcdAPD/rFarXRccOfEjLYGIGNpSUVuyUFr1UreUokMoIT30LGw5Fl7LQVKKbEqt9HEvNKee0oNuoYeS3g3tuSEXXwW9BAq55KSbyszOrGa1o92VbT2S/n5m9vtmvsd88x/NzD4wXwD/txano/4kklicfmszXd/Zjq2x7bmJvLgdEY2IqEXUO0kkq5GV3syX+Ga6Ma+fxHj1fj5cWXjn6Zc7n3fW6vmStauV2o+i0b9pK19iKiLG8rTfIWOLTw7uvqe/W4f2N6qke4RpwK4WgYu/PFev8Nz2+mzlJX8ey5L6x4OaH+W6Bc6opPPc7DMZcS4imhGdp35+d6id7OhevK3THgAAAAAcVevoTV7ajd3YjPPHMRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4usrn/0/ypZalzUimIinm/2/kZZHnz6DhEyF+NtFJnxz/YAAAAAAAAADg2L2+G7uxGeeL9b0k+83/jdJv/N+I92M9lmMtrsVmLMVGbMRazEbEZKmjxubSxsbabNYyWhcHtLwRn1a0vFEe1V7PGG8ex4EDAAAAAAAAwNnVHFJ+b7x/2+9icf/3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAuSiLFOki0Xi/xk1OoR0YyIRlpvK+LTIv8VkVRtfHLy4wAAAIDn0uxdTZojtHnpcezGZpwv1veS7DP/5ezzcjPej9XYiJXYiHYsx+38M3T6qb+2sz3X3tmeu58u/f3+5IsjDT3rMTrfPVTv+dWsRivuxEq25VrciiT2MrW8l1d3tufS9H71uD5Ix5T8ODdgNGOl/O305conWf5Pvd8i1I90iM+odmjJZFY63o3ITD62tMWFIgLVkRh6duoD9zQbte43PxcH76k65h8M3vu5A7Uqv7k5FQcjcSNq3TN0eXAkIr7zj49/dbe9eu/unfXps3NIlR4PrXEwEnOlSFz5GkViuJnsCC511xfj5/HLmI4vJt6OtViJX8dSbMTyVFG+lP89p6+TgyP12bny2tvDRpJek1Pd+1etYkxT0TOmmIqfZbmleCM7p+djJZJ4EBHL8Wb270bMdu8G+2f40ghXfW2EO23J1e9mSTdM0Tq87t9G6/JFSeN6oRTX8j13Misrb9mP0suVUSqedaM/j0rq38ozaQ+/H/h8OGkHIzFbisQrh/29dEL61730db29em/t7tJ7I+4vKaV/PFNPifQMvxzN/OAuZK9Jdk3NZGWvdJ+wvfFq5L+4dNT6yi5123Wu1F/Eg7jdc6X+IOZjPhay2pez2uN9T6y07Eq3p957eFqWvtOqd3/YKb/fehDtzvshAM6M8aqN5753rtH6b+vfrY9af2jdbb3V/OnEDydea8T4v8Z/VJ8Z+3btteTv8VH8dv/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OzWHz66t9RuL69VZ2rVRcngVkvtvWIisQF1ejJJPlXOCJWT9YeP9oZ2ODgzkQ/vGZu/yEwxW+PwylPHNoz/FPEona/m8HNRzPI0wi6SvoCnjZ95zMWe97eMn4FTeTAzNaROEiN3WJygUlH1X28xH0hVP62q8zV2SOUhN46x57vvAKfv+sb9966vP3z0/ZX7S+8uv7u8Oj4/vzCzMP/m3PU7K+3lmc5rqcGJTH4LnITy24muRkS8PrztgIlaAQAAAAAAAAAAgGN0Ev8X4rSPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhqW5yO+pNIYnbm2ky6vrM9106XIr9fsx4RtYhIfhOR/DPiZjx+ejMtmCx1lxy2nw9XFt55+uXO5/t91Yv6tYitQ9uNZitfYioixvL0RfV3a3h/jf3sREVx0o1MGrCreQqn7n8BAAD//3876Qo=") mkdir(&(0x7f0000000480)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 8.849174017s ago: executing program 0 (id=2005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) close_range(r0, 0xffffffffffffffff, 0x0) 8.395006806s ago: executing program 5 (id=2007): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x5542, &(0x7f000000c7c0)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0040ce91bae94d6591ac6d0100000000000000b5384050da"], 0x1, 0xd99, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x105042, 0x1fe) 8.359466388s ago: executing program 0 (id=2008): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 7.925006549s ago: executing program 0 (id=2009): socket(0x11, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a8008000280", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 5.28852349s ago: executing program 5 (id=2012): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 3.640415102s ago: executing program 5 (id=2014): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6) 3.63996438s ago: executing program 2 (id=2015): unshare(0x2c060000) unshare(0x24020400) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 3.341423465s ago: executing program 2 (id=2016): r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x6c) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40000073, r1, 0x0) copy_file_range(r0, &(0x7f0000000080), r1, 0x0, 0x2, 0x0) 3.050913572s ago: executing program 2 (id=2017): r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000102505a8a4400001020301090224000101000000090400000207010200090501020000000000090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) 1.054892172s ago: executing program 2 (id=2018): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}], 0x1, 0x0) 856.928012ms ago: executing program 2 (id=2019): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000009880), 0x1, 0x97f5, &(0x7f00000098c0)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 0s ago: executing program 2 (id=2020): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xf634}], 0x1, 0x0, 0x2000000000000}, 0x700) kernel console output (not intermixed with test programs): 7][T13506] XFS: noikeep mount option is deprecated. [ 534.642362][T13506] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 534.663795][ T5239] Bluetooth: hci5: command tx timeout [ 534.715887][T13506] XFS (loop2): Ending clean mount [ 534.740346][T13506] XFS (loop2): Quotacheck needed: Please wait. [ 534.856192][T13506] XFS (loop2): Quotacheck: Done. [ 534.925207][T12458] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 535.196345][ T29] audit: type=1326 audit(1729120508.999:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf777dff9 code=0x7ffc0000 [ 535.219500][ T29] audit: type=1326 audit(1729120508.999:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf777dff9 code=0x7ffc0000 [ 535.252916][ T29] audit: type=1326 audit(1729120508.999:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcf777dff9 code=0x7ffc0000 [ 535.283891][ T29] audit: type=1326 audit(1729120508.999:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf777dff9 code=0x7ffc0000 [ 535.307060][ T29] audit: type=1326 audit(1729120508.999:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf777dff9 code=0x7ffc0000 [ 535.331089][ T29] audit: type=1326 audit(1729120508.999:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcf777dff9 code=0x7ffc0000 [ 535.378203][ T29] audit: type=1326 audit(1729120508.999:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf777dff9 code=0x7ffc0000 [ 535.416520][ T29] audit: type=1326 audit(1729120508.999:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf777dff9 code=0x7ffc0000 [ 535.454165][ T29] audit: type=1326 audit(1729120508.999:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcf777dff9 code=0x7ffc0000 [ 535.485280][ T29] audit: type=1326 audit(1729120508.999:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf777dff9 code=0x7ffc0000 [ 535.725297][T11189] team0 (unregistering): Port device team_slave_1 removed [ 535.779003][T11189] team0 (unregistering): Port device team_slave_0 removed [ 536.358613][T13139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.427282][T13539] loop2: detected capacity change from 0 to 256 [ 536.579053][T13059] veth1_vlan: entered promiscuous mode [ 536.681998][ T64] kworker/u8:4: attempt to access beyond end of device [ 536.681998][ T64] loop2: rw=1, sector=256, nr_sectors = 12 limit=256 [ 536.754034][ T64] kworker/u8:4: attempt to access beyond end of device [ 536.754034][ T64] loop2: rw=1, sector=288, nr_sectors = 16 limit=256 [ 536.755701][ T5239] Bluetooth: hci5: command tx timeout [ 536.866215][T13059] veth0_macvtap: entered promiscuous mode [ 536.889452][T13468] chnl_net:caif_netlink_parms(): no params data found [ 536.927788][T13139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.937922][ T2575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.963274][T13059] veth1_macvtap: entered promiscuous mode [ 536.983585][ T2575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.186587][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.216487][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.235687][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.243223][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.251800][T13468] bridge_slave_0: entered allmulticast mode [ 537.261923][T13468] bridge_slave_0: entered promiscuous mode [ 537.275640][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.282861][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.291613][T13468] bridge_slave_1: entered allmulticast mode [ 537.299942][T13468] bridge_slave_1: entered promiscuous mode [ 537.310973][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.321832][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.332334][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.343223][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.353612][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.367011][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.378764][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.390139][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.412004][T13059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.468159][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.497439][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.517045][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.527864][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.537837][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.548774][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.558803][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.569663][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.581958][T13059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.687868][T13059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.697706][T13059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.709674][T13059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.718562][T13059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.769379][T11189] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.796625][T13468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.816922][T13468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.880620][T11189] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.899571][T13139] veth0_vlan: entered promiscuous mode [ 537.942040][T13468] team0: Port device team_slave_0 added [ 537.951347][T13468] team0: Port device team_slave_1 added [ 537.978650][T13139] veth1_vlan: entered promiscuous mode [ 538.027892][T11189] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.096796][T13468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.107314][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.133738][T13468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.190890][T11189] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.236537][T13468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.261247][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.307934][T13468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.375812][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.424677][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.513396][ T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 538.597517][T13139] veth0_macvtap: entered promiscuous mode [ 538.652596][T13468] hsr_slave_0: entered promiscuous mode [ 538.695612][T13062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 538.713927][T13062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 538.721293][T13468] hsr_slave_1: entered promiscuous mode [ 538.732896][T13062] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 538.739401][T13579] loop2: detected capacity change from 0 to 512 [ 538.740028][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 538.754377][ T25] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 538.762529][T13468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.762653][ T25] usb 6-1: config 0 has no interface number 0 [ 538.779530][ T25] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 538.791672][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.791756][T13062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 538.808421][T13468] Cannot create hsr debugfs directory [ 538.813876][ T25] usb 6-1: Product: syz [ 538.818229][ T25] usb 6-1: Manufacturer: syz [ 538.823008][ T25] usb 6-1: SerialNumber: syz [ 538.828062][T13062] Bluetooth: hci5: command tx timeout [ 538.834362][T13470] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 538.843790][T13062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 538.851601][ T25] usb 6-1: config 0 descriptor?? [ 538.861258][ T25] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 538.899752][T13579] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 538.952847][T13139] veth1_macvtap: entered promiscuous mode [ 538.969320][T13579] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #15: comm syz.2.1738: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 539.044648][T13579] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1738: couldn't read orphan inode 15 (err -117) [ 539.053404][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.076828][T13579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.120157][T11189] bridge_slave_1: left allmulticast mode [ 539.128755][T13579] ext2 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.138863][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.150605][T11189] bridge_slave_1: left promiscuous mode [ 539.164124][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.189486][T11189] bridge_slave_0: left allmulticast mode [ 539.195721][T11189] bridge_slave_0: left promiscuous mode [ 539.201458][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.246843][T11189] bridge_slave_1: left allmulticast mode [ 539.262564][T11189] bridge_slave_1: left promiscuous mode [ 539.270752][T13579] EXT4-fs error (device loop2): ext4_get_parent:1864: comm syz.2.1738: inode #2: comm syz.2.1738: iget: illegal inode # [ 539.286726][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.302935][T11189] bridge_slave_0: left allmulticast mode [ 539.309345][T11189] bridge_slave_0: left promiscuous mode [ 539.332646][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.405313][T12458] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.884608][ T25] gspca_spca1528: reg_w err -71 [ 539.889579][ T25] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 539.926765][ T25] usb 6-1: USB disconnect, device number 21 [ 540.469807][T13599] loop2: detected capacity change from 0 to 32768 [ 540.531555][T13599] JBD2: Ignoring recovery information on journal [ 540.599308][T13599] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 540.618032][T11189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.645553][T11189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.659168][T11189] bond0 (unregistering): Released all slaves [ 540.848806][T11189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.857791][T12458] ocfs2: Unmounting device (7,2) on (node local) [ 540.876572][T11189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.889099][T11189] bond0 (unregistering): Released all slaves [ 540.921442][ T5239] Bluetooth: hci0: command tx timeout [ 540.921967][T13062] Bluetooth: hci5: command tx timeout [ 541.000625][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.019837][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.039129][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.052161][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.071832][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.082629][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.096967][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.108569][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.118650][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.129203][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.141069][T13139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.236680][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.252322][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.266877][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.277627][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.291495][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.302080][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.312034][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.322572][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.332475][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.343946][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.353922][T11509] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 541.380947][T13139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.500221][T13139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.512294][T13139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.521314][T13139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.530259][T13139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.544957][T11509] usb 3-1: Using ep0 maxpacket: 8 [ 541.559443][T11509] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 541.591887][T11509] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 541.613047][T11509] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 541.632513][T11509] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.671562][T11509] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 541.697513][T11509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.959460][T11509] usb 3-1: usb_control_msg returned -32 [ 541.967574][T11509] usbtmc 3-1:16.0: can't read capabilities [ 542.343237][T13625] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -32 [ 542.362016][ T25] usb 3-1: USB disconnect, device number 22 [ 542.506997][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.532369][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.626971][T13575] chnl_net:caif_netlink_parms(): no params data found [ 542.663416][T11189] hsr_slave_0: left promiscuous mode [ 542.675335][T11189] hsr_slave_1: left promiscuous mode [ 542.681355][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.694944][T11189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.702883][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.710752][T11189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.722566][T11189] hsr_slave_0: left promiscuous mode [ 542.728866][T11189] hsr_slave_1: left promiscuous mode [ 542.736747][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.745441][T11189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.753359][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.761778][T11189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.805710][T11189] veth1_macvtap: left promiscuous mode [ 542.811257][T11189] veth0_macvtap: left promiscuous mode [ 542.817312][T11189] veth1_vlan: left promiscuous mode [ 542.822606][T11189] veth0_vlan: left promiscuous mode [ 542.834887][T11189] veth1_macvtap: left promiscuous mode [ 542.840552][T11189] veth0_macvtap: left promiscuous mode [ 542.846579][T11189] veth1_vlan: left promiscuous mode [ 542.851970][T11189] veth0_vlan: left promiscuous mode [ 542.992020][T13062] Bluetooth: hci0: command tx timeout [ 543.815122][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.827039][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.842570][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.850925][T11189] team0 (unregistering): Port device team_slave_1 removed [ 543.859920][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.878643][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 543.886205][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.997494][T11189] team0 (unregistering): Port device team_slave_0 removed [ 544.568676][T13062] Bluetooth: hci6: sending frame failed (-49) [ 544.577372][ T5239] Bluetooth: hci6: Entering manufacturer mode failed (-49) [ 545.077115][ T5239] Bluetooth: hci0: command tx timeout [ 545.622405][T11189] team0 (unregistering): Port device team_slave_1 removed [ 545.774630][T11189] team0 (unregistering): Port device team_slave_0 removed [ 545.945890][ T5239] Bluetooth: hci2: command tx timeout [ 546.877762][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.877794][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.059265][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 547.060475][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 547.060813][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 547.061025][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 547.152344][ T5239] Bluetooth: hci0: command tx timeout [ 547.406123][T13575] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.407076][T13672] input: syz0 as /devices/virtual/input/input31 [ 547.424042][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.474974][T13575] bridge_slave_0: entered allmulticast mode [ 547.503984][T13575] bridge_slave_0: entered promiscuous mode [ 547.634156][T11492] udevd[11492]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 547.679114][T13575] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.692746][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.733834][T13575] bridge_slave_1: entered allmulticast mode [ 547.766774][T13575] bridge_slave_1: entered promiscuous mode [ 547.779859][T13680] loop5: detected capacity change from 0 to 2048 [ 547.817866][T13680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 547.866413][T13683] loop2: detected capacity change from 0 to 256 [ 547.917537][T13683] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 548.064026][ T5239] Bluetooth: hci2: command tx timeout [ 550.176260][ T5239] Bluetooth: hci2: command tx timeout [ 552.203667][ T5239] Bluetooth: hci2: command tx timeout [ 552.441141][T11189] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.038080][T11189] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.590819][T11189] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.006580][T11189] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.540576][T11189] bridge_slave_1: left allmulticast mode [ 554.592070][T11189] bridge_slave_1: left promiscuous mode [ 554.633973][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.695571][T11189] bridge_slave_0: left allmulticast mode [ 554.701377][T11189] bridge_slave_0: left promiscuous mode [ 554.802708][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.459710][T13061] UDF-fs: warning (device loop5): udf_evict_inode: Inode 1367 (mode 100000) has inode size 1073741825 different from extent length 1073742336. Filesystem need not be standards compliant. [ 556.725393][T11189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.750736][T11189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.774455][T11189] bond0 (unregistering): Released all slaves [ 556.807878][T13575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.853077][T13575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.887957][T13468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 557.090941][T13729] loop5: detected capacity change from 0 to 32768 [ 557.172484][T13729] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 557.231828][T13748] loop2: detected capacity change from 0 to 1024 [ 557.259664][T13748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 557.274519][T13468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 557.301732][T13468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 557.324866][T13468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 557.383390][T13729] XFS (loop5): Ending clean mount [ 557.431687][T13575] team0: Port device team_slave_0 added [ 557.462802][T13575] team0: Port device team_slave_1 added [ 557.630350][T13061] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 558.076206][T13575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.083247][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.166567][T13575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.217064][T13575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.234235][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.322850][T13575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.373780][T11189] hsr_slave_0: left promiscuous mode [ 558.380953][T11189] hsr_slave_1: left promiscuous mode [ 558.418806][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.443572][T11189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.462795][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.493656][T11189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.578585][T11189] veth1_macvtap: left promiscuous mode [ 558.592514][T11189] veth0_macvtap: left promiscuous mode [ 558.609969][T11189] veth1_vlan: left promiscuous mode [ 558.615513][T11189] veth0_vlan: left promiscuous mode [ 558.854564][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 558.910548][T13774] loop5: detected capacity change from 0 to 32768 [ 558.940184][T13774] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1773 (13774) [ 558.968183][T13774] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 558.996708][T13774] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 559.007830][T13774] BTRFS info (device loop5): using free-space-tree [ 559.040950][ T25] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.050815][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.062371][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 559.094247][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.108407][ T25] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.128156][ T25] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.138430][ T25] usb 1-1: Product: syz [ 559.148564][ T25] usb 1-1: Manufacturer: syz [ 559.226761][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 559.232029][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 559.280245][ T25] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 559.299703][ T25] cdc_wdm 1-1:1.0: Unknown control protocol [ 559.507010][T13061] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 559.522966][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.529853][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.536353][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.542968][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.549515][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.556129][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.563747][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.570394][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.578732][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.585383][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.591962][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.598598][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.605295][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.611940][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.618295][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.624937][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.631129][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 559.640224][ T5328] usb 1-1: USB disconnect, device number 22 [ 560.330931][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 560.330959][ T29] audit: type=1326 audit(1729120534.129:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13823 comm="syz.0.1785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c77dff9 code=0x0 [ 560.584348][T11189] team0 (unregistering): Port device team_slave_1 removed [ 560.633740][T13829] Invalid logical block size (1) [ 560.722112][T11189] team0 (unregistering): Port device team_slave_0 removed [ 560.858052][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 561.435164][T13848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.446278][ T5298] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 561.629287][ T5298] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 561.640844][ T5298] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 561.650886][ T25] kernel read not supported for file /input/event2 (pid: 25 comm: kworker/1:0) [ 561.661278][ T5298] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 561.661313][ T5298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.704479][T13839] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 561.743702][ T5298] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.049450][ T5298] usb 3-1: USB disconnect, device number 23 [ 562.063856][T13635] chnl_net:caif_netlink_parms(): no params data found [ 562.114534][T13468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.228598][T13468] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.425574][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.431961][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.488440][T13575] hsr_slave_0: entered promiscuous mode [ 562.560356][T13575] hsr_slave_1: entered promiscuous mode [ 562.572036][T13862] vivid-001: disconnect [ 562.597836][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.604997][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.637055][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.644219][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.733887][T13859] vivid-001: reconnect [ 562.835235][T13635] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.856102][T13853] loop5: detected capacity change from 0 to 40427 [ 562.878778][T13853] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 562.882288][T13635] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.900499][T13635] bridge_slave_0: entered allmulticast mode [ 562.914929][T13853] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 562.936419][T13635] bridge_slave_0: entered promiscuous mode [ 562.949967][T13853] F2FS-fs (loop5): invalid crc value [ 562.985728][T13635] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.992920][T13635] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.023786][T13635] bridge_slave_1: entered allmulticast mode [ 563.046686][T13635] bridge_slave_1: entered promiscuous mode [ 563.056371][T13853] F2FS-fs (loop5): Found nat_bits in checkpoint [ 563.096175][T13881] loop2: detected capacity change from 0 to 164 [ 563.253126][T13853] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 563.280226][T13853] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 563.294884][T13635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.428904][T13635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.503043][T13061] syz-executor: attempt to access beyond end of device [ 563.503043][T13061] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 563.549122][T13061] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 563.691712][T13635] team0: Port device team_slave_0 added [ 563.730663][T13635] team0: Port device team_slave_1 added [ 563.761335][T13635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.769565][T13635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.799140][T13635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.882084][T13635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.902552][T13635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.946483][T13635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.135582][T13635] hsr_slave_0: entered promiscuous mode [ 564.154135][T13635] hsr_slave_1: entered promiscuous mode [ 564.199013][T13635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.212891][T13635] Cannot create hsr debugfs directory [ 564.501948][T13468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.616145][T13897] loop2: detected capacity change from 0 to 32768 [ 564.655970][T13897] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1808 (13897) [ 564.746666][T13897] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 564.790394][T13897] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 564.822963][T13468] veth0_vlan: entered promiscuous mode [ 564.838518][T13897] BTRFS info (device loop2): using free-space-tree [ 564.920075][T13575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 565.085140][ T8] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 565.182329][T13468] veth1_vlan: entered promiscuous mode [ 565.212329][T13575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 565.225867][T12458] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 565.332395][T13575] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 565.356431][T13575] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 565.409506][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.423646][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.488889][ T8] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 565.542538][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.586493][ T8] usb 6-1: config 0 descriptor?? [ 565.666480][T13926] loop0: detected capacity change from 0 to 32768 [ 565.818150][T13926] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 565.827945][T13468] veth0_macvtap: entered promiscuous mode [ 565.927590][T13926] XFS (loop0): Ending clean mount [ 566.001272][T13468] veth1_macvtap: entered promiscuous mode [ 566.078790][ T8] uclogic 0003:5543:0042.0020: No inputs registered, leaving [ 566.094101][ T8] uclogic 0003:5543:0042.0020: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.5-1/input0 [ 566.119142][T13139] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 566.138656][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.166724][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.182266][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.202467][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.230774][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.250977][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.280097][T13468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.318183][ T8] usb 6-1: USB disconnect, device number 22 [ 566.355976][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.403481][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.413931][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.425254][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.435824][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.446735][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.503159][T13468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.561029][T13575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.612129][T13955] loop0: detected capacity change from 0 to 1024 [ 566.638210][T13468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.656636][T13468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.684237][T13468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.694335][T13468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.745828][T13955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.778337][T13948] loop2: detected capacity change from 0 to 32768 [ 566.793837][T13948] XFS: noikeep mount option is deprecated. [ 566.815277][T13575] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.835926][T11189] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.843216][T11189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.868088][T13948] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 566.868538][T11189] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.883899][T11189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.896328][T13955] loop0: detected capacity change from 1024 to 96 [ 566.910087][T13955] syz.0.1814: attempt to access beyond end of device [ 566.910087][T13955] loop0: rw=2051, sector=224, nr_sectors = 32 limit=96 [ 566.925979][T13955] EXT4-fs (loop0): discard request in group:0 block:7 count:16 failed with -5 [ 566.935233][T13955] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: IO failure [ 566.997169][T13635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 567.012238][T13139] syz-executor: attempt to access beyond end of device [ 567.012238][T13139] loop0: rw=2051, sector=160, nr_sectors = 32 limit=96 [ 567.015435][T13948] XFS (loop2): Ending clean mount [ 567.029393][T13139] EXT4-fs (loop0): discard request in group:0 block:5 count:16 failed with -5 [ 567.044984][T13948] XFS (loop2): Quotacheck needed: Please wait. [ 567.047780][T13635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 567.058612][T13139] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: IO failure [ 567.077507][T13139] syz-executor: attempt to access beyond end of device [ 567.077507][T13139] loop0: rw=2051, sector=192, nr_sectors = 32 limit=96 [ 567.105922][T13948] XFS (loop2): Quotacheck: Done. [ 567.111543][T13139] EXT4-fs (loop0): discard request in group:0 block:6 count:16 failed with -5 [ 567.129903][T13139] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: IO failure [ 567.175253][T13635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 567.183819][ T29] audit: type=1800 audit(1729120540.979:156): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1812" name="bus" dev="loop2" ino=4426 res=0 errno=0 [ 567.256900][T13635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 567.271981][T13139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.316359][T13956] kmmpd-loop0: attempt to access beyond end of device [ 567.316359][T13956] loop0: rw=14337, sector=128, nr_sectors = 2 limit=96 [ 567.344083][T13956] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 567.373405][T12458] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 567.422790][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.495709][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.705407][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.727959][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.831590][T13635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.919710][T13635] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.945986][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.953288][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.978334][T13575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.176188][T11189] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.183349][T11189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.125852][ T2575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.500871][ T2575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.656856][ T2575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.753096][ T2575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.979397][ T2575] bridge_slave_1: left allmulticast mode [ 571.002343][ T2575] bridge_slave_1: left promiscuous mode [ 571.008745][ T2575] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.018667][ T2575] bridge_slave_0: left allmulticast mode [ 571.024864][ T2575] bridge_slave_0: left promiscuous mode [ 571.030643][ T2575] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.482389][ T2575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.502324][ T2575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.514520][ T2575] bond0 (unregistering): Released all slaves [ 571.549108][T13575] veth0_vlan: entered promiscuous mode [ 571.579616][T13575] veth1_vlan: entered promiscuous mode [ 571.595737][T13635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.886892][T13635] veth0_vlan: entered promiscuous mode [ 571.899843][T13575] veth0_macvtap: entered promiscuous mode [ 571.975413][T13575] veth1_macvtap: entered promiscuous mode [ 572.039269][T13635] veth1_vlan: entered promiscuous mode [ 572.130399][ T2575] hsr_slave_0: left promiscuous mode [ 572.200881][ T2575] hsr_slave_1: left promiscuous mode [ 572.224416][ T2575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.254541][ T2575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.275183][ T2575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.282620][ T2575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.348855][ T2575] veth1_macvtap: left promiscuous mode [ 572.365146][ T2575] veth0_macvtap: left promiscuous mode [ 572.370793][ T2575] veth1_vlan: left promiscuous mode [ 572.393662][ T2575] veth0_vlan: left promiscuous mode [ 572.486784][T13062] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 572.507478][T13062] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 572.520992][T13062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 572.532541][T13062] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 572.541747][T13062] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 572.551260][T13062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 572.802360][T14002] loop5: detected capacity change from 0 to 32768 [ 572.882434][T14002] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 573.354711][T14002] (syz.5.1822,14002,1):ocfs2_dio_end_io:2424 ERROR: Direct IO failed, bytes = -11 [ 573.409955][T14016] loop2: detected capacity change from 0 to 512 [ 573.444318][T14016] EXT4-fs: Ignoring removed oldalloc option [ 573.450946][T14016] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 573.491771][T14016] EXT4-fs (loop2): 1 truncate cleaned up [ 573.492141][T13061] ocfs2: Unmounting device (7,5) on (node local) [ 573.499039][T14016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.126119][T12458] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.548010][ T2575] team0 (unregistering): Port device team_slave_1 removed [ 574.595129][ T5239] Bluetooth: hci5: command tx timeout [ 574.782850][T14020] delete_channel: no stack [ 574.791379][T14031] 9pnet: p9_errstr2errno: server reported unknown error ™ [ 574.801051][ T2575] team0 (unregistering): Port device team_slave_0 removed [ 575.334076][ T29] audit: type=1326 audit(1729120549.139:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.5.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cd97dff9 code=0x7fc00000 [ 575.966496][T13575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.984227][T13575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.014574][T13575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.033048][T13575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.053629][ T29] audit: type=1326 audit(1729120549.829:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.5.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95cd97dff9 code=0x7fc00000 [ 576.083329][T13575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.105980][T13575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.117852][T13575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.159130][T13575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.170227][T13575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.200174][T13575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.218981][T13575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.231413][T13575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.249976][T13575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.286334][T13575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.293463][T14043] loop2: detected capacity change from 0 to 32768 [ 576.418961][T13575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.431935][T13575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.450842][T13575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.460021][T13575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.460672][T14050] loop5: detected capacity change from 0 to 1024 [ 576.501802][T14050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.519049][T14050] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.628079][T13061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.647937][T13635] veth0_macvtap: entered promiscuous mode [ 576.663829][ T5239] Bluetooth: hci5: command tx timeout [ 576.884369][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.896659][T13635] veth1_macvtap: entered promiscuous mode [ 576.904998][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.912896][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.921235][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.037136][T13635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.054595][T13635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.066805][T13635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.077440][T13635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.093641][T13635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.123626][T13635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.169304][T13635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.196972][T13635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.247868][T13635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.438416][T13635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.480968][T13635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.508951][T13635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.537114][T13635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.562474][T13635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.588429][T13635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.614999][T13635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.642654][T13635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.676688][T13635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.849317][T14093] loop0: detected capacity change from 0 to 2048 [ 577.881109][T13635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.901583][T13635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.911445][T14093] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 577.930363][T13635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.941848][T14093] UDF-fs: Scanning with blocksize 512 failed [ 577.944514][T14095] loop5: detected capacity change from 0 to 2048 [ 577.956134][T13635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.970728][T14093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 577.999891][T14095] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 578.122602][T14093] overlayfs: upper fs needs to support d_type. [ 578.201330][T14093] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 578.210384][ T2575] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.227472][T14093] overlayfs: failed to set xattr on upper [ 578.233244][T14093] overlayfs: ...falling back to redirect_dir=nofollow. [ 578.271547][T14093] overlayfs: ...falling back to index=off. [ 578.284567][T14093] overlayfs: ...falling back to xino=off. [ 578.490927][ T2575] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.526726][T14008] chnl_net:caif_netlink_parms(): no params data found [ 578.644710][ T2575] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.742236][ T2575] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.743954][ T5239] Bluetooth: hci5: command tx timeout [ 578.759390][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.775055][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.782735][T14008] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.793735][T14008] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.801003][T14008] bridge_slave_0: entered allmulticast mode [ 578.808350][T14008] bridge_slave_0: entered promiscuous mode [ 578.836054][T14008] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.846866][T14008] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.856539][T14008] bridge_slave_1: entered allmulticast mode [ 578.867228][T14008] bridge_slave_1: entered promiscuous mode [ 578.905461][T14008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.925493][T14008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.948127][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.960915][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.979856][T14008] team0: Port device team_slave_0 added [ 578.988284][T14008] team0: Port device team_slave_1 added [ 579.077303][T14008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.084568][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.120029][T14008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.249330][T14008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.257734][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.284304][T14008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.349490][ T2575] bridge_slave_1: left allmulticast mode [ 579.356195][ T2575] bridge_slave_1: left promiscuous mode [ 579.361959][ T2575] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.372281][ T2575] bridge_slave_0: left allmulticast mode [ 579.379081][ T2575] bridge_slave_0: left promiscuous mode [ 579.387156][ T2575] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.600653][T14112] loop5: detected capacity change from 0 to 1024 [ 579.645542][T14112] EXT4-fs: Ignoring removed bh option [ 579.738018][T14112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.856686][T13062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 579.874186][T13062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 579.884324][T13062] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 579.912611][T13062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 579.949445][T13062] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 579.962717][T13062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 580.041626][T13061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.397705][ T2575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.413021][ T2575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.427338][ T2575] bond0 (unregistering): Released all slaves [ 580.446796][T14008] hsr_slave_0: entered promiscuous mode [ 580.458160][T14008] hsr_slave_1: entered promiscuous mode [ 580.465204][T14008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.472780][T14008] Cannot create hsr debugfs directory [ 580.798117][ T2575] hsr_slave_0: left promiscuous mode [ 580.814699][ T2575] hsr_slave_1: left promiscuous mode [ 580.820817][ T2575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.823898][ T5239] Bluetooth: hci5: command tx timeout [ 580.831179][ T2575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.851343][ T2575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.861286][ T2575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.902748][ T2575] veth1_macvtap: left promiscuous mode [ 580.913235][ T2575] veth0_macvtap: left promiscuous mode [ 580.921443][ T2575] veth1_vlan: left promiscuous mode [ 580.931330][ T2575] veth0_vlan: left promiscuous mode [ 581.483978][T14135] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 581.518712][T14139] loop5: detected capacity change from 0 to 512 [ 581.584955][T14139] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 581.634886][T14139] EXT4-fs (loop5): invalid journal inode [ 581.640650][T14139] EXT4-fs (loop5): can't get journal size [ 581.744065][T13062] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 581.764085][T14139] EXT4-fs (loop5): 1 truncate cleaned up [ 581.770577][T14139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.798023][T14145] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 581.817203][T13062] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 581.829320][T13062] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 581.887491][T13062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 581.919786][T13062] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 581.927424][T13062] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 581.935674][ T29] audit: type=1800 audit(1729120555.729:159): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1851" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 582.025592][ T5239] Bluetooth: hci0: command tx timeout [ 582.078845][ T29] audit: type=1804 audit(1729120555.849:160): pid=14150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1851" name="/newroot/41/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 582.130686][ T2575] team0 (unregistering): Port device team_slave_1 removed [ 582.151519][T13061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.231341][T14154] loop5: detected capacity change from 0 to 512 [ 582.253600][T14154] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 582.261577][T14154] UDF-fs: Scanning with blocksize 512 failed [ 582.295597][T14154] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 582.303205][T14154] UDF-fs: Scanning with blocksize 1024 failed [ 582.317212][ T2575] team0 (unregistering): Port device team_slave_0 removed [ 582.320989][T14154] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 582.340742][T14154] UDF-fs: Scanning with blocksize 2048 failed [ 582.348905][T14154] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 582.376894][T14154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.064810][ T25] kernel read not supported for file /usbmon0 (pid: 25 comm: kworker/1:0) [ 583.080285][T14152] loop2: detected capacity change from 0 to 40427 [ 583.102402][T14152] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 583.123642][T14152] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 583.136571][T14152] F2FS-fs (loop2): invalid crc value [ 583.165777][T14152] F2FS-fs (loop2): Found nat_bits in checkpoint [ 583.294961][T14152] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 583.302652][T14152] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 583.341621][ T29] audit: type=1800 audit(1729120557.149:161): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1854" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 583.432468][T12458] syz-executor: attempt to access beyond end of device [ 583.432468][T12458] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 583.464300][T12458] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 583.472590][T12458] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 583.791792][T14170] netlink: 'syz.5.1861': attribute type 1 has an invalid length. [ 583.863057][T14171] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 583.879079][T14171] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 583.893356][T14171] bond1: (slave vti0): making interface the new active one [ 583.935153][T14171] bond1: (slave vti0): Enslaving as an active interface with an up link [ 584.023651][ T5239] Bluetooth: hci2: command tx timeout [ 584.104329][ T5239] Bluetooth: hci0: command tx timeout [ 584.267503][T14184] loop0: detected capacity change from 0 to 2048 [ 584.306379][T14184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 584.777350][T14117] chnl_net:caif_netlink_parms(): no params data found [ 584.912137][T14179] loop5: detected capacity change from 0 to 32768 [ 584.989004][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 584.989158][T14140] chnl_net:caif_netlink_parms(): no params data found [ 585.004135][T14179] read_mapping_page failed! [ 585.018788][T14179] read_mapping_page failed! [ 585.242286][ T111] read_mapping_page failed! [ 585.259087][T14008] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 585.279832][T14008] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 585.308592][T13139] UDF-fs: warning (device loop0): udf_evict_inode: Inode 1346 (mode 100755) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 585.387996][T14008] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 585.422116][T14008] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 585.490991][T14008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.510171][T14008] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.546906][T14008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.557606][T14008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.578596][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 585.592685][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.599877][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.616391][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.623589][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.835392][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.846843][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.918656][ T25] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 585.992911][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.003650][ T25] usb 3-1: config 0 descriptor?? [ 586.105593][T13062] Bluetooth: hci2: command tx timeout [ 586.132441][T14226] loop0: detected capacity change from 0 to 128 [ 586.190612][ T2575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.211541][ T5239] Bluetooth: hci0: command tx timeout [ 586.239143][T14226] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 586.267333][T14226] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.472377][ T25] hid-steam 0003:28DE:1142.0021: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 586.555837][ T25] hid-steam 0003:28DE:1142.0021: Steam wireless receiver connected [ 586.569035][ T2575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.646649][ T25] hid-steam 0003:28DE:1142.0022: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 586.686138][T13139] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 586.707675][T14117] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.722031][T14117] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.733568][T14117] bridge_slave_0: entered allmulticast mode [ 586.740970][T14117] bridge_slave_0: entered promiscuous mode [ 586.763078][T14117] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.802854][T14117] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.826037][T14117] bridge_slave_1: entered allmulticast mode [ 586.850036][T14117] bridge_slave_1: entered promiscuous mode [ 586.984632][ T2575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.994018][T14140] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.994098][T14140] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.994270][T14140] bridge_slave_0: entered allmulticast mode [ 586.995432][T14140] bridge_slave_0: entered promiscuous mode [ 587.004075][T14254] loop5: detected capacity change from 0 to 1024 [ 587.137975][ T2575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.181800][T14140] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.181880][T14140] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.182035][T14140] bridge_slave_1: entered allmulticast mode [ 587.183125][T14140] bridge_slave_1: entered promiscuous mode [ 587.277483][ T25] usb 3-1: USB disconnect, device number 24 [ 587.285283][ T25] hid-steam 0003:28DE:1142.0021: Steam wireless receiver disconnected [ 587.321033][T14117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.334258][T14117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.354339][T14262] loop5: detected capacity change from 0 to 512 [ 587.469296][T14140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.508017][T14262] EXT4-fs (loop5): blocks per group (255) and clusters per group (8192) inconsistent [ 587.533979][T14008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.630532][T14117] team0: Port device team_slave_0 added [ 587.669543][T14262] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1878' sets config #0 [ 587.679155][T14140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.707679][T14117] team0: Port device team_slave_1 added [ 588.045683][T14140] team0: Port device team_slave_0 added [ 588.078046][T14117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.107647][T14117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.154180][T14117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.187453][ T5239] Bluetooth: hci2: command tx timeout [ 588.243146][T14140] team0: Port device team_slave_1 added [ 588.263950][ T5239] Bluetooth: hci0: command tx timeout [ 588.334529][T14117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.342023][T14117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.370932][T14117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.479379][T14140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.493473][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.523735][T14140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.570885][T14265] loop0: detected capacity change from 0 to 40427 [ 588.615034][T14265] F2FS-fs (loop0): invalid crc value [ 588.635526][T14265] F2FS-fs (loop0): Found nat_bits in checkpoint [ 588.667589][T14140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.678988][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.740538][T14140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.825631][T14117] hsr_slave_0: entered promiscuous mode [ 588.832459][T14117] hsr_slave_1: entered promiscuous mode [ 588.838708][T14265] F2FS-fs (loop0): Start checkpoint disabled! [ 588.862398][T14265] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 588.894432][ T2575] bridge_slave_1: left allmulticast mode [ 588.904212][ T2575] bridge_slave_1: left promiscuous mode [ 588.910167][ T2575] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.940743][ T2575] bridge_slave_0: left allmulticast mode [ 588.953678][ T2575] bridge_slave_0: left promiscuous mode [ 588.966422][ T2575] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.324961][ T1108] kworker/u8:6: attempt to access beyond end of device [ 589.324961][ T1108] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 589.358822][ T1108] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 589.836860][ T2575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.858385][ T2575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.888986][ T2575] bond0 (unregistering): Released all slaves [ 590.055996][T14284] loop2: detected capacity change from 0 to 256 [ 590.263842][ T5239] Bluetooth: hci2: command tx timeout [ 590.270006][T14282] loop0: detected capacity change from 0 to 40427 [ 590.284949][T14140] hsr_slave_0: entered promiscuous mode [ 590.300401][T14140] hsr_slave_1: entered promiscuous mode [ 590.304294][T14282] F2FS-fs (loop0): invalid crc value [ 590.312974][T14140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.328700][T14282] F2FS-fs (loop0): Found nat_bits in checkpoint [ 590.329134][T14140] Cannot create hsr debugfs directory [ 590.457354][T14282] F2FS-fs (loop0): Start checkpoint disabled! [ 590.485650][T14282] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 590.540332][T14282] syz.0.1884: attempt to access beyond end of device [ 590.540332][T14282] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 590.566112][T14282] syz.0.1884: attempt to access beyond end of device [ 590.566112][T14282] loop0: rw=2049, sector=45120, nr_sectors = 16 limit=40427 [ 590.695494][T14008] veth0_vlan: entered promiscuous mode [ 590.740718][ T3053] kworker/u8:11: attempt to access beyond end of device [ 590.740718][ T3053] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 590.764601][ T3053] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 590.775363][ T3053] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 590.806037][ T2575] hsr_slave_0: left promiscuous mode [ 590.835081][ T2575] hsr_slave_1: left promiscuous mode [ 590.850084][ T2575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.865464][ T2575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.876498][ T2575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.890344][ T2575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.945688][ T2575] veth1_macvtap: left promiscuous mode [ 590.952606][ T2575] veth0_macvtap: left promiscuous mode [ 590.967412][ T2575] veth1_vlan: left promiscuous mode [ 590.972873][ T2575] veth0_vlan: left promiscuous mode [ 591.273341][T14304] loop0: detected capacity change from 0 to 64 [ 591.349815][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 591.405689][ T25] IPVS: starting estimator thread 0... [ 591.534165][T14307] IPVS: using max 16 ests per chain, 38400 per kthread [ 591.632808][T14312] loop2: detected capacity change from 0 to 512 [ 591.706890][T14312] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 591.710762][T14314] netlink: 'syz.0.1890': attribute type 9 has an invalid length. [ 591.732018][T14314] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1890'. [ 592.021515][T14321] loop0: detected capacity change from 0 to 64 [ 592.291369][T14325] loop0: detected capacity change from 0 to 1024 [ 592.303660][ T5297] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 592.467037][ T5297] usb 3-1: Using ep0 maxpacket: 16 [ 592.479527][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.517997][ T5297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 592.546941][ T5297] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 592.557487][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.569127][ T5297] usb 3-1: config 0 descriptor?? [ 592.800344][ T2575] team0 (unregistering): Port device team_slave_1 removed [ 592.858729][ T2575] team0 (unregistering): Port device team_slave_0 removed [ 592.996827][ T5297] HID 045e:07da: Invalid code 65791 type 1 [ 593.020616][ T5297] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0023/input/input33 [ 593.022511][ T5296] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 593.039077][ T5297] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 593.233790][ T5296] usb 1-1: Using ep0 maxpacket: 8 [ 593.260066][ T5296] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 593.269679][ T5296] usb 1-1: config 179 has no interface number 0 [ 593.276038][ T5296] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 593.296690][ T5296] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 593.308069][ T5296] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 593.319767][ T5296] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 593.331152][ T5296] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 593.344556][ T5296] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 593.357624][ T5296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.369237][T14330] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 593.403209][ T5296] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input34 [ 593.508900][ T4668] input input34: unable to receive magic message: -110 [ 593.562216][ T4668] input input34: unable to receive magic message: -32 [ 593.613140][ T4668] input input34: unable to receive magic message: -32 [ 593.687631][ T4668] input input34: unable to receive magic message: -32 [ 593.714610][T14330] loop0: detected capacity change from 0 to 512 [ 593.729579][ T4668] input input34: unable to receive magic message: -32 [ 593.814173][ T5311] usb 1-1: USB disconnect, device number 23 [ 593.814173][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 593.829196][ T5311] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 593.866051][ T5296] usb 3-1: USB disconnect, device number 25 [ 594.176101][T14008] veth1_vlan: entered promiscuous mode [ 594.391920][T14008] veth0_macvtap: entered promiscuous mode [ 594.460008][T14008] veth1_macvtap: entered promiscuous mode [ 594.525285][T14335] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 594.639555][T14340] loop5: detected capacity change from 0 to 64 [ 594.646952][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.712417][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.744529][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.773657][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.793719][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.823046][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.855354][T14008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.893303][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.920070][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.945786][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.983595][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.029300][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.064066][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.128503][T14008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.197093][T14356] loop0: detected capacity change from 0 to 512 [ 595.271443][T14008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.307920][T14008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.318097][T14008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.328710][T14008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.345946][T14356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.394027][T14356] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.646796][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.698281][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.801830][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.828803][T13139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.841024][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.938642][T14351] loop5: detected capacity change from 0 to 32768 [ 595.979128][T14351] XFS: ikeep mount option is deprecated. [ 596.022247][T14140] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 596.064254][T14140] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 596.140944][T14351] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 596.289982][T14377] loop0: detected capacity change from 0 to 4096 [ 596.350754][T14351] XFS (loop5): Ending clean mount [ 596.404069][T14351] XFS (loop5): Quotacheck needed: Please wait. [ 596.432930][ T29] audit: type=1804 audit(1729120570.229:162): pid=14377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1906" name="/newroot/49/file0/file0/file0" dev="loop0" ino=28 res=1 errno=0 [ 596.461314][T14140] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 596.504457][T14351] XFS (loop5): Quotacheck: Done. [ 596.511589][T14140] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 596.922561][T13061] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 597.074036][T11509] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 597.249666][T11509] usb 1-1: Using ep0 maxpacket: 32 [ 597.261807][T11509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.280105][T11509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.290250][T11509] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 597.300367][T11509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.323317][T11509] usb 1-1: config 0 descriptor?? [ 597.331311][ T32] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.514311][ T32] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.713042][T14140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.729068][T14117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 597.753474][T14117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 597.770666][T14140] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.772268][T11509] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 597.791961][T14117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 597.813378][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.820650][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.839079][T14117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 597.880423][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.887732][ T3053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.943296][ T32] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.968341][T11509] ft260 0003:0403:6030.0024: chip code: 0000 0000 [ 598.088288][ T32] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.239289][T14140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.455681][ T5283] usb 1-1: USB disconnect, device number 24 [ 598.475457][T14117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.718219][ T32] bridge_slave_1: left allmulticast mode [ 598.736768][ T32] bridge_slave_1: left promiscuous mode [ 598.774184][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.810400][ T32] bridge_slave_0: left allmulticast mode [ 598.825647][ T32] bridge_slave_0: left promiscuous mode [ 598.846212][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.914194][T13062] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 598.940604][T13062] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 598.964337][T13062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 598.977048][T13062] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 598.992578][T13062] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 599.002002][T13062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 599.075712][T14424] loop5: detected capacity change from 0 to 4096 [ 599.170688][T14424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.295782][T14428] vxcan0: tx address claim with different name [ 599.324294][T13061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.467854][T14430] loop2: detected capacity change from 0 to 2048 [ 599.531554][T14430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 599.597616][T14436] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.1914'. [ 599.874657][ T29] audit: type=1804 audit(1729120573.669:163): pid=14444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1919" name="/" dev="pidfs" ino=14741 res=1 errno=0 [ 600.553629][T11509] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 600.562037][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.582958][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.595951][ T32] bond0 (unregistering): Released all slaves [ 600.623906][T14117] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.624031][ T5311] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 600.697852][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.705173][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.733657][T11509] usb 6-1: Using ep0 maxpacket: 8 [ 600.741026][T11509] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 600.784913][T11509] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 600.801195][T11509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.813601][ T5311] usb 1-1: Using ep0 maxpacket: 16 [ 600.834295][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.866909][T11509] usb 6-1: Product: syz [ 600.871154][T11509] usb 6-1: Manufacturer: syz [ 600.876159][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.891825][T11509] usb 6-1: SerialNumber: syz [ 600.899074][ T5311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 600.914836][T11509] usb 6-1: config 0 descriptor?? [ 600.936060][ T5311] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 600.945574][T11509] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 600.969372][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.996963][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.004226][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.015724][ T5311] usb 1-1: config 0 descriptor?? [ 601.144658][ T5239] Bluetooth: hci5: command tx timeout [ 601.282386][T14117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.357480][T14140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.430777][ T32] hsr_slave_0: left promiscuous mode [ 601.447786][ T32] hsr_slave_1: left promiscuous mode [ 601.462790][ T5311] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0025/input/input35 [ 601.504192][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.529632][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.550504][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.558308][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.592378][ T32] veth1_macvtap: left promiscuous mode [ 601.604948][ T5311] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 601.616201][ T32] veth0_macvtap: left promiscuous mode [ 601.638900][ T32] veth1_vlan: left promiscuous mode [ 601.656594][ T5311] usb 1-1: USB disconnect, device number 25 [ 601.661186][ T32] veth0_vlan: left promiscuous mode [ 601.970036][T11509] gspca_zc3xx: reg_w_i err -71 [ 602.356711][ T32] team0 (unregistering): Port device team_slave_1 removed [ 602.434457][ T32] team0 (unregistering): Port device team_slave_0 removed [ 602.563718][T11509] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 602.577278][T11509] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 602.597252][T11509] usb 6-1: USB disconnect, device number 23 [ 603.237583][ T5239] Bluetooth: hci5: command tx timeout [ 603.950442][T14489] loop5: detected capacity change from 0 to 32768 [ 604.096514][T14489] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 604.146411][T14422] chnl_net:caif_netlink_parms(): no params data found [ 604.229812][T14117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.353371][T14489] XFS (loop5): Ending clean mount [ 604.368830][T14140] veth0_vlan: entered promiscuous mode [ 604.387586][T14489] XFS (loop5): Quotacheck needed: Please wait. [ 604.477325][T14140] veth1_vlan: entered promiscuous mode [ 604.519447][T14489] XFS (loop5): Quotacheck: Done. [ 604.575144][T14422] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.582279][T14422] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.611963][T14422] bridge_slave_0: entered allmulticast mode [ 604.624309][ T5311] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 604.633458][T14422] bridge_slave_0: entered promiscuous mode [ 604.669206][T13061] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 604.684507][T14422] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.691702][T14422] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.735017][T14422] bridge_slave_1: entered allmulticast mode [ 604.742124][T14422] bridge_slave_1: entered promiscuous mode [ 604.829693][ T5311] usb 3-1: Using ep0 maxpacket: 16 [ 604.846878][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.874331][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.920979][ T5311] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 604.951683][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.966453][T14422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.996900][ T5311] usb 3-1: config 0 descriptor?? [ 605.038436][T14422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.104720][T14140] veth0_macvtap: entered promiscuous mode [ 605.226275][T14422] team0: Port device team_slave_0 added [ 605.235929][T14140] veth1_macvtap: entered promiscuous mode [ 605.257690][T14547] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1939'. [ 605.283178][T14422] team0: Port device team_slave_1 added [ 605.284087][T14547] unsupported nlmsg_type 40 [ 605.304580][ T5239] Bluetooth: hci5: command tx timeout [ 605.432370][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.482391][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.506308][ T5311] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0026/input/input36 [ 605.535004][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.566839][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.603222][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.625694][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.651803][ T5311] appleir 0003:05AC:8241.0026: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 605.666354][T14140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.749845][T14422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.761096][T14422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.824368][T14422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.851025][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.893651][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.909740][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.933942][ T5297] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 605.942955][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.963567][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.992313][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.011375][T14140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.032219][T14422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.054120][T14422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.091104][T14422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.102199][ T5297] usb 6-1: Using ep0 maxpacket: 32 [ 606.110657][ T5297] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 606.120804][ T5297] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 606.151624][ T5297] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 606.157972][T14117] veth0_vlan: entered promiscuous mode [ 606.167387][ T5297] usb 6-1: config 1 has no interface number 0 [ 606.177403][ T5297] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 32912, setting to 1024 [ 606.202240][T14140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.212810][T14140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.228997][ T5297] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 606.249917][ T5297] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 606.252242][T14140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.275890][ T5297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.277125][T14140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.295481][ T5311] usb 3-1: USB disconnect, device number 26 [ 606.373119][ T5297] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 606.448609][T14422] hsr_slave_0: entered promiscuous mode [ 606.462135][T14422] hsr_slave_1: entered promiscuous mode [ 606.469429][T14422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.477756][T14422] Cannot create hsr debugfs directory [ 606.546779][T14117] veth1_vlan: entered promiscuous mode [ 606.572929][ T5297] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 606.780276][ T5296] usb 6-1: USB disconnect, device number 24 [ 606.790071][ T3053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.807379][ T3053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.810198][ T5296] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 606.870595][T14117] veth0_macvtap: entered promiscuous mode [ 606.988870][T11189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.020329][T11189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.094207][T14117] veth1_macvtap: entered promiscuous mode [ 607.112319][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.122871][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.132812][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.143692][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.154261][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.164750][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.174854][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.185438][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.197196][T14117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.343947][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.354570][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.364842][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.375588][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.385825][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.394129][ T5239] Bluetooth: hci5: command tx timeout [ 607.396811][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.412568][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.423784][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.439069][T14117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.449611][T14117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.458551][T14117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.467853][T14117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.476988][T14117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.706170][T14607] loop5: detected capacity change from 0 to 1024 [ 607.738492][T14607] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 607.803900][T14607] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 607.812109][T14607] EXT4-fs (loop5): orphan cleanup on readonly fs [ 607.822285][T14607] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.1949: Freeing blocks not in datazone - block = 0, count = 4096 [ 607.853273][T14607] EXT4-fs (loop5): 1 orphan inode deleted [ 607.864990][T14607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 607.995697][T13061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.037483][ T3053] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.224550][ T3053] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.256753][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.270382][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.348891][ T3053] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.390951][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.403128][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.446568][ T3053] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.514525][T14422] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 608.526304][T14422] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 608.544797][T14422] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 608.564829][T14422] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 608.798844][ T3053] bridge_slave_1: left allmulticast mode [ 608.806233][ T3053] bridge_slave_1: left promiscuous mode [ 608.812036][ T3053] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.821121][ T3053] bridge_slave_0: left allmulticast mode [ 608.843610][ T3053] bridge_slave_0: left promiscuous mode [ 608.851395][ T3053] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.099343][T14615] loop2: detected capacity change from 0 to 16 [ 609.133964][T14615] erofs: (device loop2): mounted with root inode @ nid 36. [ 609.428805][T13062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 609.439050][T13062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 609.447834][T13062] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 609.480700][T13062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 609.488940][T13062] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 609.497491][T13062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 609.616378][ T3053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.629442][ T3053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.641855][ T3053] bond0 (unregistering): Released all slaves [ 609.678586][T14422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.743267][T14422] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.773210][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.780345][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.842629][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.849782][ T2575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.046450][ T3053] hsr_slave_0: left promiscuous mode [ 610.052507][ T3053] hsr_slave_1: left promiscuous mode [ 610.059131][ T3053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.067873][ T3053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.079856][ T3053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.087317][ T3053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.111948][ T3053] veth1_macvtap: left promiscuous mode [ 610.117701][ T3053] veth0_macvtap: left promiscuous mode [ 610.123261][ T3053] veth1_vlan: left promiscuous mode [ 610.129792][ T3053] veth0_vlan: left promiscuous mode [ 610.729602][T13062] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 610.741633][T13062] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 610.770544][T13062] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 610.794532][ T5297] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 610.804601][T13062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 610.823864][T13062] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 610.842297][T13062] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 610.951848][ T3053] team0 (unregistering): Port device team_slave_1 removed [ 610.953889][ T5297] usb 3-1: Using ep0 maxpacket: 16 [ 610.980540][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 610.992209][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 611.006379][ T5297] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 611.015779][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.036792][ T5297] usb 3-1: config 0 descriptor?? [ 611.091198][ T3053] team0 (unregistering): Port device team_slave_0 removed [ 611.450876][T14628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.491919][T14628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.555354][ T5297] hid-generic 0003:0158:0100.0027: unknown main item tag 0x0 [ 611.574282][ T5297] hid-generic 0003:0158:0100.0027: unknown main item tag 0x0 [ 611.591948][ T5297] hid-generic 0003:0158:0100.0027: unexpected long global item [ 611.607029][ T5297] hid-generic 0003:0158:0100.0027: probe with driver hid-generic failed with error -22 [ 611.640937][T13062] Bluetooth: hci0: command tx timeout [ 611.791114][ T5341] usb 3-1: USB disconnect, device number 27 [ 611.863470][T14641] loop5: detected capacity change from 0 to 2048 [ 612.031262][T14645] loop5: detected capacity change from 0 to 1024 [ 612.074422][ T5298] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 612.118294][ T1108] hfsplus: b-tree write err: -5, ino 4 [ 612.204585][T14617] chnl_net:caif_netlink_parms(): no params data found [ 612.236154][ T5298] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 612.273572][ T5298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.281603][ T5298] usb 1-1: Product: syz [ 612.304887][ T5298] usb 1-1: Manufacturer: syz [ 612.323642][ T5298] usb 1-1: SerialNumber: syz [ 612.367782][ T5298] usb 1-1: config 0 descriptor?? [ 612.781828][T14617] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.810860][T14617] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.820438][ T5298] usb 1-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (127) [ 612.849168][T14617] bridge_slave_0: entered allmulticast mode [ 612.923019][T14617] bridge_slave_0: entered promiscuous mode [ 612.936743][T13062] Bluetooth: hci2: command tx timeout [ 613.043397][ T5298] usb 1-1: Read permanent extended address b8:2d:89:91:0c:26:13:04 from device [ 613.056858][T14617] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.070977][ T5298] usb 1-1: atusb_probe: initialization failed, error = -524 [ 613.086019][T14617] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.089095][ T5298] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 613.122651][T14617] bridge_slave_1: entered allmulticast mode [ 613.146889][T14617] bridge_slave_1: entered promiscuous mode [ 613.309194][T14617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.320651][ T5341] usb 1-1: USB disconnect, device number 26 [ 613.357376][T14630] chnl_net:caif_netlink_parms(): no params data found [ 613.395575][T14617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.615224][T14659] loop2: detected capacity change from 0 to 32768 [ 613.688461][T14659] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 613.705716][T13062] Bluetooth: hci0: command tx timeout [ 613.725596][ T3012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.734362][T14685] loop5: detected capacity change from 0 to 4096 [ 613.756932][T14685] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 613.817715][T14617] team0: Port device team_slave_0 added [ 613.899574][T14685] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 613.951471][T14422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.975831][T14659] XFS (loop2): Ending clean mount [ 613.996786][T14659] XFS (loop2): Quotacheck needed: Please wait. [ 613.998535][T14617] team0: Port device team_slave_1 added [ 614.056496][T14697] loop0: detected capacity change from 0 to 1024 [ 614.059428][T14659] XFS (loop2): Quotacheck: Done. [ 614.078500][T14659] XFS (loop2): User initiated shutdown received. [ 614.096470][T14659] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:453). Shutting down filesystem. [ 614.112780][T14659] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 614.183081][T12458] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 614.194053][T14697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.230451][T14702] loop5: detected capacity change from 0 to 128 [ 614.251126][ T3012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.294909][T14702] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 614.355809][T14702] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 614.369637][ T29] audit: type=1800 audit(1729120588.153:164): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1970" name="bus" dev="loop5" ino=115 res=0 errno=0 [ 614.448160][T13139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.492517][T14617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.499864][T14617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.526081][T14617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.649106][T14705] loop5: detected capacity change from 0 to 4096 [ 614.665397][T14705] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 614.672946][ T3012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.761575][T14630] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.776196][T14630] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.793816][T14630] bridge_slave_0: entered allmulticast mode [ 614.809944][T14630] bridge_slave_0: entered promiscuous mode [ 614.812867][T14705] ntfs3(loop5): failed to convert "c46c" to iso8859-13 [ 614.839946][T14617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.847533][T14617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.888761][T14617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.001020][T13062] Bluetooth: hci2: command tx timeout [ 615.029808][ T3012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.117103][T14630] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.124455][T14630] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.131831][T14630] bridge_slave_1: entered allmulticast mode [ 615.168065][T14717] loop5: detected capacity change from 0 to 64 [ 615.195823][T14630] bridge_slave_1: entered promiscuous mode [ 615.277409][T14717] hfs: request for non-existent node 237 in B*Tree [ 615.287521][T14717] hfs: request for non-existent node 237 in B*Tree [ 615.320800][T14617] hsr_slave_0: entered promiscuous mode [ 615.340946][T14724] hfs: request for non-existent node 237 in B*Tree [ 615.349442][T14617] hsr_slave_1: entered promiscuous mode [ 615.443680][T14617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.451320][T14617] Cannot create hsr debugfs directory [ 615.545763][T14724] hfs: request for non-existent node 237 in B*Tree [ 615.552872][T14724] hfs: request for non-existent node 237 in B*Tree [ 615.793603][T13062] Bluetooth: hci0: command tx timeout [ 615.863775][T14724] hfs: request for non-existent node 237 in B*Tree [ 616.495695][T14630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.604384][ T53] hfs: request for non-existent node 237 in B*Tree [ 616.611738][ T53] hfs: request for non-existent node 237 in B*Tree [ 616.676256][T14422] veth0_vlan: entered promiscuous mode [ 616.698951][T14630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.025386][ T5298] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 617.034238][T14630] team0: Port device team_slave_0 added [ 617.105235][T14422] veth1_vlan: entered promiscuous mode [ 617.114011][T13062] Bluetooth: hci2: command tx timeout [ 617.223697][ T5298] usb 1-1: Using ep0 maxpacket: 32 [ 617.231864][ T5298] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 617.247013][ T5298] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 617.256815][ T5298] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 617.267359][ T5298] usb 1-1: Product: syz [ 617.271654][ T5298] usb 1-1: Manufacturer: syz [ 617.276877][ T5298] usb 1-1: SerialNumber: syz [ 617.302897][ T5298] usb 1-1: config 0 descriptor?? [ 617.313842][T14734] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 617.374069][T14630] team0: Port device team_slave_1 added [ 617.690217][ T5341] usb 1-1: USB disconnect, device number 27 [ 617.722406][T14630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.763730][T14630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.874322][T13062] Bluetooth: hci0: command tx timeout [ 617.956390][T14630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.014339][T14630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.052070][T14630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.174629][T14630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.311673][ T3012] bridge_slave_1: left allmulticast mode [ 618.336471][ T3012] bridge_slave_1: left promiscuous mode [ 618.342333][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.463117][ T3012] bridge_slave_0: left allmulticast mode [ 618.482280][ T5298] kernel read not supported for file /video37 (pid: 5298 comm: kworker/0:6) [ 618.514463][ T3012] bridge_slave_0: left promiscuous mode [ 618.542843][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.144572][T13062] Bluetooth: hci2: command tx timeout [ 619.191879][T14741] loop5: detected capacity change from 0 to 40427 [ 619.223382][T14741] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 619.273695][T14741] F2FS-fs (loop5): Image doesn't support compression [ 619.305057][T14741] F2FS-fs (loop5): Image doesn't support compression [ 619.372270][T14741] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 619.425152][T14741] F2FS-fs (loop5): invalid crc value [ 619.465601][T14741] F2FS-fs (loop5): Found nat_bits in checkpoint [ 619.782892][T14741] F2FS-fs (loop5): Start checkpoint disabled! [ 619.825774][T14741] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 621.278834][T14760] loop2: detected capacity change from 0 to 32768 [ 621.313707][ T5341] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 621.339061][T14760] XFS: ikeep mount option is deprecated. [ 621.355233][T14760] XFS: ikeep mount option is deprecated. [ 621.402556][T14760] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 621.495532][ T5341] usb 6-1: Using ep0 maxpacket: 16 [ 621.527777][ T5341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.572784][ T5341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.634899][ T5341] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.659424][T14765] loop0: detected capacity change from 0 to 32768 [ 621.688114][T14760] XFS (loop2): Ending clean mount [ 621.709070][T14765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1988 (14765) [ 621.742497][ T5341] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.783902][T14760] XFS (loop2): User initiated shutdown received. [ 621.806511][ T5341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.818967][T14760] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:457). Shutting down filesystem. [ 621.868108][ T5341] usb 6-1: config 0 descriptor?? [ 621.883988][T14760] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 622.052523][T12458] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 622.296405][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.359556][T14765] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 622.381695][ T5341] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0028/input/input37 [ 622.430553][T14765] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 622.506976][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.533642][T14765] BTRFS info (device loop0): using free-space-tree [ 622.612866][ T5341] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 622.791768][ T3012] bond0 (unregistering): Released all slaves [ 622.803662][ T5341] usb 6-1: USB disconnect, device number 25 [ 623.389672][T13139] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 623.520635][T14422] veth0_macvtap: entered promiscuous mode [ 623.885873][T14798] loop0: detected capacity change from 0 to 8 [ 623.892747][T14798] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 623.979438][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.987072][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.446094][T14630] hsr_slave_0: entered promiscuous mode [ 624.526908][T14630] hsr_slave_1: entered promiscuous mode [ 624.536552][T14805] loop2: detected capacity change from 0 to 256 [ 624.583822][T14630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.601122][T14808] loop0: detected capacity change from 0 to 512 [ 624.654644][T14630] Cannot create hsr debugfs directory [ 624.660881][T14805] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 624.685147][T14422] veth1_macvtap: entered promiscuous mode [ 624.760170][T14808] EXT4-fs: Ignoring removed mblk_io_submit option [ 624.808681][T14808] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 624.951158][T14808] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 624.999783][T14808] EXT4-fs error (device loop0): ext4_orphan_get:1388: comm syz.0.1995: inode #15: comm syz.0.1995: iget: illegal inode # [ 625.127044][T14808] EXT4-fs (loop0): Remounting filesystem read-only [ 625.190039][T14808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.698372][T13139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.135601][T14422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.230832][T14422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.312773][T14422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.367224][T14422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.424109][T14422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.476389][T14422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.528111][T14422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.574208][T14422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.647442][T14422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.083671][ T3012] hsr_slave_0: left promiscuous mode [ 627.139389][ T3012] hsr_slave_1: left promiscuous mode [ 627.275797][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.313699][T13062] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 627.379243][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.491839][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.589425][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.848956][ T3012] veth1_macvtap: left promiscuous mode [ 627.973701][ T3012] veth0_macvtap: left promiscuous mode [ 627.979380][ T3012] veth1_vlan: left promiscuous mode [ 628.103716][ T3012] veth0_vlan: left promiscuous mode [ 628.653501][ C1] sched: DL replenish lagged too much [ 630.377827][T14842] loop5: detected capacity change from 0 to 1024 [ 630.844034][ T3053] hfsplus: b-tree write err: -5, ino 4 [ 631.002241][T14852] ubi0: attaching mtd0 [ 631.042832][T14852] ubi0: scanning is finished [ 631.069919][T13470] Bluetooth: hci4: command 0x0406 tx timeout [ 631.115588][T14852] ubi0: empty MTD device detected [ 631.667452][T14852] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 631.680278][T14852] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 631.708975][T14852] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 631.766603][T14852] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 631.820463][T14852] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 631.861525][T14852] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 631.888365][T14852] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3529140807 [ 631.927427][T14852] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 631.999306][T14856] ubi0: detaching mtd0 [ 632.004324][T14860] ubi0: background thread "ubi_bgt0d" started, PID 14860 [ 632.075930][T14856] ubi0: mtd0 is detached [ 632.827828][T14857] loop5: detected capacity change from 0 to 40427 [ 632.865097][T14857] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 632.907921][T14857] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 632.974907][T14857] F2FS-fs (loop5): invalid crc value [ 633.045670][T14857] F2FS-fs (loop5): Found nat_bits in checkpoint [ 633.249574][T14857] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 633.273726][T14857] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 633.337696][T11189] kworker/u8:8: attempt to access beyond end of device [ 633.337696][T11189] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 633.398369][T11189] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 634.040186][T14864] loop2: detected capacity change from 0 to 32768 [ 634.069647][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 634.158729][T14864] JBD2: Ignoring recovery information on journal [ 634.305454][T14864] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 634.690964][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 634.816977][T12458] ocfs2: Unmounting device (7,2) on (node local) [ 635.041885][T14873] loop5: detected capacity change from 0 to 1024 [ 635.184556][T14873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.557156][T13061] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 635.620186][T13061] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 635.657701][T13061] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 635.720631][T13061] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 635.782365][T13061] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 635.828750][T13061] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 635.914422][T13061] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 635.945335][T13061] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 636.022441][T13061] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 636.056925][T13061] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 636.189919][T13470] Bluetooth: hci1: command 0x0405 tx timeout [ 636.523883][ T5298] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 636.774873][ T5298] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 636.793526][ T5298] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 636.839620][ T5298] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 636.858142][ T5298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.907416][ T5298] usb 3-1: Product: syz [ 636.911682][ T5298] usb 3-1: Manufacturer: syz [ 636.924944][ T5298] usb 3-1: SerialNumber: syz [ 636.968687][T14885] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 637.212673][T14885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.241470][ T5298] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 637.278950][T14885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.355292][ C0] usblp0: nonzero read bulk status received: -71 [ 637.394619][T14885] usblp0: error -71 reading from printer [ 637.405973][ C0] usblp0: nonzero read bulk status received: -71 [ 637.425947][ T5298] usb 3-1: USB disconnect, device number 28 [ 637.464271][ T5298] usblp0: removed [ 638.940375][T14889] loop2: detected capacity change from 0 to 32768 [ 638.979350][T14889] XFS (loop2): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 639.063790][T14889] XFS (loop2): Ending clean mount [ 639.208145][T12458] XFS (loop2): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 691.305916][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.322016][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.356525][ T5242] Bluetooth: hci2: command 0x0406 tx timeout [ 752.362808][ T5242] Bluetooth: hci5: command 0x0406 tx timeout [ 752.404384][ T5242] Bluetooth: hci0: command 0x0406 tx timeout [ 752.543546][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.555390][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.425325][T13061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.593666][ T30] INFO: task kworker/u8:9:3012 blocked for more than 153 seconds. [ 792.631516][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 792.643644][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 792.653276][ T30] task:kworker/u8:9 state:D stack:18992 pid:3012 tgid:3012 ppid:2 flags:0x00004000 [ 792.712172][ T30] Workqueue: netns cleanup_net [ 792.723729][ T30] Call Trace: [ 792.727068][ T30] [ 792.730018][ T30] __schedule+0x1895/0x4b30 [ 792.983366][ T30] ? __pfx___schedule+0x10/0x10 [ 792.987262][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 792.988436][ T30] ? __pfx_lock_release+0x10/0x10 [ 793.001210][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 793.006790][ T30] ? kthread_data+0x52/0xd0 [ 793.011340][ T30] ? schedule+0x90/0x320 [ 793.015741][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.018793][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 793.021429][ T30] ? wq_worker_sleeping+0x66/0x240 [ 793.033947][ T30] ? schedule+0x90/0x320 [ 793.038243][ T30] schedule+0x14b/0x320 [ 793.042443][ T30] schedule_preempt_disabled+0x13/0x30 [ 793.047999][ T30] __mutex_lock+0x6a7/0xd70 [ 793.052538][ T30] ? __mutex_lock+0x52a/0xd70 [ 793.057313][ T30] ? wg_destruct+0x25/0x2e0 [ 793.062570][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 793.067689][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.073355][ T30] ? __pfx_free_percpu+0x10/0x10 [ 793.078517][ T30] ? kobject_put+0x272/0x480 [ 793.083148][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 793.088218][ T30] wg_destruct+0x25/0x2e0 [ 793.092586][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 793.097618][ T30] netdev_run_todo+0xe1c/0x1000 [ 793.102517][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 793.107910][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 793.113904][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 793.120107][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.125878][ T30] default_device_exit_batch+0xa24/0xaa0 [ 793.131582][ T30] ? __pfx___might_resched+0x10/0x10 [ 793.137077][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 793.143276][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 793.149118][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.149189][T13062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 793.154826][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 793.154878][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 793.154926][ T30] cleanup_net+0x89f/0xcc0 [ 793.154963][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 793.154996][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 793.155033][ T30] ? process_scheduled_works+0x976/0x1850 [ 793.155076][ T30] process_scheduled_works+0xa65/0x1850 [ 793.155147][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 793.155198][ T30] ? assign_work+0x364/0x3d0 [ 793.155243][ T30] worker_thread+0x870/0xd30 [ 793.155299][ T30] ? __kthread_parkme+0x169/0x1d0 [ 793.221520][ T30] ? __pfx_worker_thread+0x10/0x10 [ 793.226834][ T30] kthread+0x2f2/0x390 [ 793.230930][ T30] ? __pfx_worker_thread+0x10/0x10 [ 793.236183][ T30] ? __pfx_kthread+0x10/0x10 [ 793.240831][ T30] ret_from_fork+0x4d/0x80 [ 793.245391][ T30] ? __pfx_kthread+0x10/0x10 [ 793.250025][ T30] ret_from_fork_asm+0x1a/0x30 [ 793.254910][ T30] [ 793.258107][ T30] [ 793.258107][ T30] Showing all locks held in the system: [ 793.265918][ T30] 1 lock held by pool_workqueue_/3: [ 793.271875][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 793.282951][ T30] 3 locks held by kworker/u8:1/12: [ 793.288142][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 793.300007][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 793.311167][ T30] #2: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 793.320302][ T30] 1 lock held by khungtaskd/30: [ 793.325224][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 793.335307][ T30] 3 locks held by kworker/0:2/931: [ 793.340449][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 793.351815][ T30] #1: ffffc90003b8fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 793.363136][ T30] #2: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 793.374076][ T30] 3 locks held by kworker/u8:6/1108: [ 793.379398][ T30] #0: ffff88814b7fc148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 793.391691][ T30] #1: ffffc900042a7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 793.404679][ T30] #2: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 793.414328][ T30] 4 locks held by kworker/u8:9/3012: [ 793.419638][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 793.430685][ T30] #1: ffffc9000a027d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 793.441420][ T30] #2: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 793.451063][ T30] #3: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 793.460044][ T30] 2 locks held by dhcpcd/4897: [ 793.465016][ T30] #0: ffff888066b116c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 793.476023][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 793.485448][ T30] 2 locks held by getty/4993: [ 793.490151][ T30] #0: ffff88814b9970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 793.500070][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 793.510376][ T30] 3 locks held by kworker/u9:2/5239: [ 793.515753][ T30] #0: ffff888238a1e948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 793.526895][ T30] #1: ffffc900036d7d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 793.539174][ T30] #2: ffff8880542b0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 793.549179][ T30] 3 locks held by kworker/0:5/5296: [ 793.554497][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 793.567076][ T30] #1: ffffc900041b7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 793.578709][ T30] #2: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 793.589016][ T30] 3 locks held by kworker/1:1/11509: [ 793.594555][ T30] 4 locks held by syz-executor/12458: [ 793.599961][ T30] 1 lock held by syz-executor/13061: [ 793.605347][ T30] 3 locks held by kworker/u9:1/13470: [ 793.610735][ T30] 1 lock held by syz-executor/14422: [ 793.616096][ T30] #0: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 793.626256][ T30] 7 locks held by syz-executor/14617: [ 793.631668][ T30] #0: ffff888032bec420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 793.640746][ T30] #1: ffff88805146a088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 793.650709][ T30] #2: ffff8880273ed3c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 793.660935][ T30] #3: ffffffff8f570ce8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 793.671478][ T30] #4: ffff88805a5b10e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 793.682562][ T30] #5: ffff88805a5b0250 (&devlink->lock_key#53){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 793.693354][ T30] #6: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 793.702409][ T30] 1 lock held by syz-executor/14630: [ 793.707945][ T30] #0: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 793.717692][ T30] 2 locks held by syz.0.2009/14859: [ 793.722913][ T30] #0: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 793.732174][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 793.743293][ T30] [ 793.745698][ T30] ============================================= [ 793.745698][ T30] [ 793.754603][ T30] NMI backtrace for cpu 1 [ 793.758955][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 793.769468][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 793.779534][ T30] Call Trace: [ 793.782818][ T30] [ 793.785763][ T30] dump_stack_lvl+0x241/0x360 [ 793.790461][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 793.795676][ T30] ? __pfx__printk+0x10/0x10 [ 793.800290][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 793.805259][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 793.810736][ T30] ? _printk+0xd5/0x120 [ 793.814990][ T30] ? __pfx__printk+0x10/0x10 [ 793.819594][ T30] ? __wake_up_klogd+0xcc/0x110 [ 793.824555][ T30] ? __pfx__printk+0x10/0x10 [ 793.829159][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.834812][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 793.839864][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 793.845867][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 793.851871][ T30] watchdog+0xff4/0x1040 [ 793.856136][ T30] ? watchdog+0x1ea/0x1040 [ 793.860580][ T30] ? __pfx_watchdog+0x10/0x10 [ 793.865282][ T30] kthread+0x2f2/0x390 [ 793.869449][ T30] ? __pfx_watchdog+0x10/0x10 [ 793.874144][ T30] ? __pfx_kthread+0x10/0x10 [ 793.878781][ T30] ret_from_fork+0x4d/0x80 [ 793.883221][ T30] ? __pfx_kthread+0x10/0x10 [ 793.887844][ T30] ret_from_fork_asm+0x1a/0x30 [ 793.892657][ T30] [ 793.895927][ T30] Sending NMI from CPU 1 to CPUs 0: [ 793.901173][ C0] NMI backtrace for cpu 0 [ 793.901192][ C0] CPU: 0 UID: 0 PID: 5283 Comm: kworker/0:3 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 793.901219][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 793.901236][ C0] Workqueue: events free_obj_work [ 793.901278][ C0] RIP: 0010:unwind_next_frame+0xcec/0x22d0 [ 793.901306][ C0] Code: 33 48 8b 44 24 58 80 3c 28 00 4c 8b 6c 24 08 48 8b 5c 24 78 4c 8b 7c 24 50 74 08 48 89 df e8 6b 28 bd 00 48 8b 04 24 48 89 03 10 00 00 00 4c 89 ff 31 f6 e8 35 2a bd 00 e9 85 07 00 00 48 89 [ 793.901326][ C0] RSP: 0018:ffffc9000479f590 EFLAGS: 00000246 [ 793.901346][ C0] RAX: ffffc9000479fee0 RBX: ffffc9000479f698 RCX: 1ffff920008f3ecc [ 793.901366][ C0] RDX: ffffffff90a4589a RSI: 0000000000000002 RDI: ffffc9000479fed8 [ 793.901383][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffc9000479f750 [ 793.901401][ C0] R10: dffffc0000000000 R11: ffffffff8180a0e0 R12: ffffc900047a0000 [ 793.901419][ C0] R13: ffffc9000479f660 R14: ffffffff81608e02 R15: ffffc9000479f6b0 [ 793.901442][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 793.901463][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.901480][ C0] CR2: 00007f6e905ffd00 CR3: 0000000062efa000 CR4: 0000000000350ef0 [ 793.901500][ C0] Call Trace: [ 793.901509][ C0] [ 793.901519][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 793.901550][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 793.901589][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 793.901620][ C0] ? nmi_handle+0x2a/0x5a0 [ 793.901656][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 793.901689][ C0] ? nmi_handle+0x151/0x5a0 [ 793.901714][ C0] ? nmi_handle+0x2a/0x5a0 [ 793.901740][ C0] ? unwind_next_frame+0xcec/0x22d0 [ 793.901763][ C0] ? default_do_nmi+0x63/0x160 [ 793.901796][ C0] ? exc_nmi+0x123/0x1f0 [ 793.901830][ C0] ? end_repeat_nmi+0xf/0x53 [ 793.901855][ C0] ? kthread+0x2f2/0x390 [ 793.901880][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 793.901914][ C0] ? unwind_next_frame+0xcec/0x22d0 [ 793.901939][ C0] ? unwind_next_frame+0xcec/0x22d0 [ 793.901963][ C0] ? unwind_next_frame+0xcec/0x22d0 [ 793.901987][ C0] [ 793.901996][ C0] [ 793.902011][ C0] ? worker_thread+0x870/0xd30 [ 793.902048][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 793.902079][ C0] arch_stack_walk+0x11c/0x150 [ 793.902109][ C0] ? kthread+0x2f2/0x390 [ 793.902136][ C0] stack_trace_save+0x118/0x1d0 [ 793.902166][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 793.902197][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.902224][ C0] ? stack_depot_save_flags+0x29/0x830 [ 793.902267][ C0] kasan_save_track+0x3f/0x80 [ 793.902291][ C0] ? kasan_save_track+0x3f/0x80 [ 793.902314][ C0] ? kasan_save_free_info+0x40/0x50 [ 793.902347][ C0] ? __kasan_slab_free+0x59/0x70 [ 793.902372][ C0] ? kmem_cache_free+0x1a2/0x420 [ 793.902404][ C0] ? free_obj_work+0x4ff/0x6d0 [ 793.902439][ C0] ? process_scheduled_works+0xa65/0x1850 [ 793.902471][ C0] ? worker_thread+0x870/0xd30 [ 793.902535][ C0] kasan_save_free_info+0x40/0x50 [ 793.902569][ C0] __kasan_slab_free+0x59/0x70 [ 793.902594][ C0] ? free_obj_work+0x4ff/0x6d0 [ 793.902629][ C0] kmem_cache_free+0x1a2/0x420 [ 793.902661][ C0] ? free_obj_work+0x4ff/0x6d0 [ 793.902700][ C0] free_obj_work+0x4ff/0x6d0 [ 793.902737][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.902764][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 793.902800][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 793.902840][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 793.902884][ C0] ? process_scheduled_works+0x976/0x1850 [ 793.902918][ C0] process_scheduled_works+0xa65/0x1850 [ 793.902971][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 793.903011][ C0] ? assign_work+0x364/0x3d0 [ 793.903047][ C0] worker_thread+0x870/0xd30 [ 793.903083][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.903111][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.903138][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 793.903178][ C0] ? __kthread_parkme+0x169/0x1d0 [ 793.903215][ C0] ? __pfx_worker_thread+0x10/0x10 [ 793.903249][ C0] kthread+0x2f2/0x390 [ 793.903272][ C0] ? __pfx_worker_thread+0x10/0x10 [ 793.903305][ C0] ? __pfx_kthread+0x10/0x10 [ 793.903329][ C0] ret_from_fork+0x4d/0x80 [ 793.903364][ C0] ? __pfx_kthread+0x10/0x10 [ 793.903388][ C0] ret_from_fork_asm+0x1a/0x30 [ 793.903436][ C0] [ 793.910897][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 793.910917][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 793.910947][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 793.910964][ T30] Call Trace: [ 793.910975][ T30] [ 793.910988][ T30] dump_stack_lvl+0x241/0x360 [ 793.911025][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 793.911056][ T30] ? __pfx__printk+0x10/0x10 [ 793.911080][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 793.911130][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.911161][ T30] ? vscnprintf+0x5d/0x90 [ 793.911198][ T30] panic+0x349/0x880 [ 793.911223][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.911256][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 793.911294][ T30] ? __pfx_panic+0x10/0x10 [ 793.911318][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 793.911349][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.911379][ T30] ? __irq_work_queue_local+0x137/0x410 [ 793.911419][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.911449][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 793.911479][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 793.911513][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 793.911550][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.911587][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 793.911626][ T30] watchdog+0x1033/0x1040 [ 793.911664][ T30] ? watchdog+0x1ea/0x1040 [ 793.911708][ T30] ? __pfx_watchdog+0x10/0x10 [ 793.911744][ T30] kthread+0x2f2/0x390 [ 793.911771][ T30] ? __pfx_watchdog+0x10/0x10 [ 793.911807][ T30] ? __pfx_kthread+0x10/0x10 [ 793.911835][ T30] ret_from_fork+0x4d/0x80 [ 793.911874][ T30] ? __pfx_kthread+0x10/0x10 [ 793.911901][ T30] ret_from_fork_asm+0x1a/0x30 [ 793.911954][ T30] [ 794.513601][ T30] Kernel Offset: disabled [ 794.517925][ T30] Rebooting in 86400 seconds..