last executing test programs: 35.709695206s ago: executing program 0 (id=321): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f0000000980)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x81}}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd01f}}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@resuid}]}, 0x3, 0x43d, &(0x7f0000000140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) open(0x0, 0x60142, 0x0) timer_create(0x0, &(0x7f00000026c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002700)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 35.12451937s ago: executing program 0 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfe3c) dup2(r1, r0) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x13}, 0x2, 0x0) finit_module(r1, 0x0, 0x0) 34.718507718s ago: executing program 0 (id=327): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 34.360277201s ago: executing program 0 (id=328): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000cc0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xfe, 0x485, &(0x7f0000001040)="$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") chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone3(&(0x7f00000003c0)={0x10004000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0\x00') 33.676588074s ago: executing program 0 (id=332): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d047008476100000001090212"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x7, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99eb, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}}}, 0xb8}}, 0x0) 28.802802682s ago: executing program 0 (id=345): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}}, 0x4000) close(r2) 20.590660797s ago: executing program 2 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff0b358, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000300)='.\x00', 0xc00, 0x0) 20.275564546s ago: executing program 2 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) 20.188826023s ago: executing program 2 (id=372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.106461244s ago: executing program 1 (id=374): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080)=0x505, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1) 19.106046573s ago: executing program 2 (id=375): gettid() timer_create(0x0, 0x0, 0x0) r0 = eventfd(0x0) socket$kcm(0x2, 0x5, 0x84) writev(r0, &(0x7f0000000a40)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x4, 0x12) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00'}, 0x18) 18.463244872s ago: executing program 1 (id=377): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1a, 0xb, 0x4, 0x0, 0x1200, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000740), 0x0, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0) socket(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17.501673841s ago: executing program 1 (id=378): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1a, 0xb, 0x4, 0x0, 0x1200, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000740), 0x0, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) socket(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17.29509186s ago: executing program 1 (id=379): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='alloc_mode=default,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',background_gc=off,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\b'], 0x1, 0x5501, &(0x7f0000005880)="$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") r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000680)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f00000000c0)='./bus\x00', 0x0) 16.090067391s ago: executing program 1 (id=380): memfd_create(0x0, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000"]) r3 = dup(r2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0x1, 0x4}) 15.682874498s ago: executing program 2 (id=381): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15.11866657s ago: executing program 2 (id=383): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c010000170001000000000000000000ff02000000000000000000000000000dcb6e010000000046000000fe8800"/58], 0x13c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 14.883056252s ago: executing program 1 (id=385): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x2a020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081074e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x1, 0x0, "1ac14097b1cb0c926b36cce91131858f73a5a5eed84e9608b399620d17249186cc24ceb201b86e9d91b81646448494c59d0bb17530f92b1f2d50473f905840"}, 0x60) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/424, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000900000000000000000007010000440c0001022101"], 0x230}, 0x0) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f00000001c0)="944b53671a56fe815931169b5777dbfba6a03d4f19cd02cc5b2514d75d0c1592d58c32772b6140b3d3b2166e67730916aa593d2e93eaeae3a34244cda6d12662b15a66cd4df35973c4d7bcdbf8bfede4d29e5af3065b2a6f3653222e6b57b8ba37bfa2be54eb47023c399728d9f251324ae5d875ab6d1f543ff21b808072d53769015ef96bc1655d3b0792328539ef9ac07b63eae55e4029edb09b64fd023daa29") r6 = socket$kcm(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) io_setup(0xffff, &(0x7f0000000140)=0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="04050400c80027"], 0x7) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) io_submit(r8, 0x7, &(0x7f0000000740)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x2, r6, &(0x7f0000000280)="1bdedcd110da9346c17d847d602e45dee630a0d4ad9b043715df65f05a26bb935938d4840cd19f23b866096fd49fecacce69253f6a77e5be25ea7512dba432cef041295ccd96344b02d73d0cd1d96b36e140aead51e21aaa5814f92031", 0x5d, 0x0, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb, 0x3, r1, &(0x7f0000000340)="63a3acd15a89738c2a80faa1912ffe5e1048f208645e090f1f5259013ba6d67463a80c", 0x23, 0x9, 0x0, 0x2, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f00000003c0)="156f565faf6d454f8ba2cba9c1a228b320e91508bc305552bb1aa9286727e51a8498ffeee4fc56cfd5a54e2120438ba762d18afaf023fc20c341b4304df34051ccbb1761214e4397775d8f4590b41dfe68a01d7b0c57b76aa9be0f45a4754954dc488942a3a155d51a8b93eb5aed1763ae6fb41a9053234687b2909bcf87c197", 0x80, 0x200, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x1ff, r7, &(0x7f0000000480)="03dd7408c9164eb9013807333f9cd29f32f788c51196f731707f1dd87ac2ceefbaf1a3ff452b4fe315d318e7ed81cb1a9d599901bedfc8936585a5627e28d439ddd5b82ddd571a090cc4c14c838d7c4bc4c331ce5866dddbfba6465ae18c0e414c1d8081b32543a362252cb8d20e0b3aee560f2c368037759dbbd5a63f2cf3b50d8d1dda2a68c1676f84bdf24c8e124786e8f0298270d799fb9d67f6ca2616f2f4985fca49a28002e1c34fbb6610ad86", 0xb0, 0x8, 0x0, 0x1, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x2, r9, &(0x7f0000000580)="510189ce21d316aab3134873a4b0e29cb73a6d0042594a8eb8a3253ddc7b97bf6a7bbe2b1e91f3b225503617b31e4e05a67ac8bc136373c50cc937616eaa19a15a364c6e988883a78ffe5e4f21f6ba4c07185ba1f1ed3cdaefb7", 0x5a, 0x2, 0x0, 0x4, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1a67, r3, &(0x7f0000000640)="c7b729e9935a2916770354a6c4993102463ee9c6866ba78c4d322684526cbe56e4c6b58b211d75764dcd9c0abf57dfd06319b4d481fc00b58b", 0x39, 0x7, 0x0, 0x1, r7}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x101, r0, &(0x7f0000000880)="1c144d48be0f469f8c2f71341f17b6e79fc5d74788389eb185617d43198af01a7689dce6a55d9aeecaea048c77fb0fbafa198ec7fc397521e0d98d62379d7433bb5b47d6fec62d6637e5890b93b3306d64ba0cd8bb322951e7596970c9ff4e305364fab12f5f53f32caab5e66839c1209f92d60e2fd4048380b3ee789e1965ffb019d251949a947337f5ab98536785209f8a9d7951e695ecfe7207708546be7d21fe548b17b87c28c7dbe0df76cd8d52307dde3e685818c28c170145edf2", 0xbe, 0x3, 0x0, 0x3, r1}]) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r3) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90124fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x400000, 0x54f}) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x19, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 12.930463661s ago: executing program 4 (id=390): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x2) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 9.960748714s ago: executing program 4 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0x25, 0x0, 0x0) 8.994352963s ago: executing program 4 (id=392): bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1331daa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0x4}, 0x23) 7.94250336s ago: executing program 4 (id=394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000300)='./file3/file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") sync() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000280)='./file3/file0\x00', &(0x7f0000000240)='aufs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x389d778c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r2 = dup(0xffffffffffffffff) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x1ca) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ff4f19fe6b85f2339b325756b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f0000000000"], 0x1, 0x17c, &(0x7f0000000a40)="$eJzskbtOAkEUhv9ZhpuFkcSKBhKNYqHsLmqMjZbY+wASWJG4eGFJFEKxxhgKC2PpE/AaJr6AFoZYW1PwAGbNXHacfQbnKzh7/vnnzDmHs+A6yAL4mY+aOAQnhUV8EAIKoESENrOAPIBnS+SfMj6JgHfpO5L6vYzFYDA8b/i+1yvvl1FICMJRAJQUHNxZmPFS0/moyT5OAERRFDGtJezQPakvysvEniIFlvkQkfIwB0vWAVT73atqMBhudrqNttf2Lly3tmtv2/aOWz3t+J4tfon2hBwFLG4AYPvKa+dpAA/Ss4AkRGtNnhP9bkbbYWUledfiG0diPIJXdTeL+P8CjrGGHICbkPypU1GFgo9UB0FKJg7V+hOuHD/Yal76rTEISHxtAqpqON9Iq8TVk9peGLc6lnFVxjrApsREWyOjlEkKlFd4lFkljFvsOcx42+j3ew4rxb9cpblLIbRC7NUXi/DB4uHeLBgMBoPBYDAYDAbDf+c3AAD//6cFc+0=") execve(0x0, 0x0, 0x0) fcntl$setownex(r4, 0xf, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002dbd7000ffdbdf25090000000500150001000000080014001a00000005001300b8000000080014000200000005001d00190000000500130003000000050013001900000005001d000e00000005001d00000000000500150005000000b0907b90e5d51db3076694ce1cb9e78b86d6"], 0x64}, 0x1, 0x0, 0x0, 0x1884}, 0x44890) socket$nl_route(0x10, 0x3, 0x0) 7.93704404s ago: executing program 3 (id=395): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x2a020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081074e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x1, 0x0, "1ac14097b1cb0c926b36cce91131858f73a5a5eed84e9608b399620d17249186cc24ceb201b86e9d91b81646448494c59d0bb17530f92b1f2d50473f905840"}, 0x60) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/424, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000900000000000000000007010000440c0001022101"], 0x230}, 0x0) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f00000001c0)="944b53671a56fe815931169b5777dbfba6a03d4f19cd02cc5b2514d75d0c1592d58c32772b6140b3d3b2166e67730916aa593d2e93eaeae3a34244cda6d12662b15a66cd4df35973c4d7bcdbf8bfede4d29e5af3065b2a6f3653222e6b57b8ba37bfa2be54eb47023c399728d9f251324ae5d875ab6d1f543ff21b808072d53769015ef96bc1655d3b0792328539ef9ac07b63eae55e4029edb09b64fd023daa29") r6 = socket$kcm(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) io_setup(0xffff, &(0x7f0000000140)=0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="04050400c80027"], 0x7) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) io_submit(r8, 0x7, &(0x7f0000000740)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x2, r6, &(0x7f0000000280)="1bdedcd110da9346c17d847d602e45dee630a0d4ad9b043715df65f05a26bb935938d4840cd19f23b866096fd49fecacce69253f6a77e5be25ea7512dba432cef041295ccd96344b02d73d0cd1d96b36e140aead51e21aaa5814f92031", 0x5d, 0x0, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb, 0x3, r1, &(0x7f0000000340)="63a3acd15a89738c2a80faa1912ffe5e1048f208645e090f1f5259013ba6d67463a80c", 0x23, 0x9, 0x0, 0x2, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f00000003c0)="156f565faf6d454f8ba2cba9c1a228b320e91508bc305552bb1aa9286727e51a8498ffeee4fc56cfd5a54e2120438ba762d18afaf023fc20c341b4304df34051ccbb1761214e4397775d8f4590b41dfe68a01d7b0c57b76aa9be0f45a4754954dc488942a3a155d51a8b93eb5aed1763ae6fb41a9053234687b2909bcf87c197", 0x80, 0x200, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x1ff, r7, &(0x7f0000000480)="03dd7408c9164eb9013807333f9cd29f32f788c51196f731707f1dd87ac2ceefbaf1a3ff452b4fe315d318e7ed81cb1a9d599901bedfc8936585a5627e28d439ddd5b82ddd571a090cc4c14c838d7c4bc4c331ce5866dddbfba6465ae18c0e414c1d8081b32543a362252cb8d20e0b3aee560f2c368037759dbbd5a63f2cf3b50d8d1dda2a68c1676f84bdf24c8e124786e8f0298270d799fb9d67f6ca2616f2f4985fca49a28002e1c34fbb6610ad86", 0xb0, 0x8, 0x0, 0x1, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x2, r9, &(0x7f0000000580)="510189ce21d316aab3134873a4b0e29cb73a6d0042594a8eb8a3253ddc7b97bf6a7bbe2b1e91f3b225503617b31e4e05a67ac8bc136373c50cc937616eaa19a15a364c6e988883a78ffe5e4f21f6ba4c07185ba1f1ed3cdaefb7", 0x5a, 0x2, 0x0, 0x4, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1a67, r3, &(0x7f0000000640)="c7b729e9935a2916770354a6c4993102463ee9c6866ba78c4d322684526cbe56e4c6b58b211d75764dcd9c0abf57dfd06319b4d481fc00b58b", 0x39, 0x7, 0x0, 0x1, r7}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x101, r0, &(0x7f0000000880)="1c144d48be0f469f8c2f71341f17b6e79fc5d74788389eb185617d43198af01a7689dce6a55d9aeecaea048c77fb0fbafa198ec7fc397521e0d98d62379d7433bb5b47d6fec62d6637e5890b93b3306d64ba0cd8bb322951e7596970c9ff4e305364fab12f5f53f32caab5e66839c1209f92d60e2fd4048380b3ee789e1965ffb019d251949a947337f5ab98536785209f8a9d7951e695ecfe7207708546be7d21fe548b17b87c28c7dbe0df76cd8d52307dde3e685818c28c170145edf2", 0xbe, 0x3, 0x0, 0x3, r1}]) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r3) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90124fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x400000, 0x54f}) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x19, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 5.190784333s ago: executing program 4 (id=396): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 4.369692389s ago: executing program 3 (id=398): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x0, 0x1}, 0x5}) 3.81162701s ago: executing program 3 (id=399): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c05010203010902"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='attr/prev\x00') syz_open_dev$evdev(0x0, 0x40, 0x0) syz_usb_disconnect(r0) r3 = socket$packet(0x11, 0x3, 0x300) close_range(r3, 0xffffffffffffffff, 0x0) 1.777488277s ago: executing program 4 (id=400): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000550c"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 1.667924127s ago: executing program 3 (id=401): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1a, 0xb, 0x4, 0x0, 0x1200, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0) socket(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 681.489757ms ago: executing program 3 (id=402): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x4, 0x4, 0xff, 0x800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900, @dev, @dev}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=403): fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x710, &(0x7f0000000b00)={[{@resgid={'resgid', 0x3d, r1}}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@errors_remount}, {@resgid={'resgid', 0x3d, r1}}, {@quota}, {@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}], [{@smackfshat={'smackfshat', 0x3d, 'nodelalloc'}}, {@appraise_type}, {@uid_gt={'uid>', r0}}, {@context={'context', 0x3d, 'system_u'}}]}, 0xff, 0x493, &(0x7f0000000640)="$eJzs3M1vFGUYAPBnth9804qIgqCraCR+tLSgcvCgRhMPmpjoAY+1LYgs1NCaCGm0GINHQ+LdeDTxL/DmxagHY+JVE4+GhGhjQvFUM1+w3W5LW9oudH+/ZDvvO5/vMzPv7jvzdiaAtlVN/yQR2yPi94joybNzZ6jmg5npyeHr05PDSczOvvV3ks13bXpyuJy1XG5bkTlUiah8lsSLyfztjp+/cHqoVhs9V+T7J8580D9+/sIzp84MnRw9OXp28Nixo0cGnn9u8NlViTON69q+j8f2733tnctvDB+//O5P36bF2nMgn14fxy1dbxJQE9V0r/0zm2mc9vgyyn432FGXTjpbWBCWpSMi0sPVldX/nuiImwevJ179tKWFA9ZU+tu0aeHJU7PABpZEq0sAtEb5Q59e/5afdWp63BGuvhTRXaRnpieHZ27E3xmVYnzXGm6/GhHHp/77Kv3Ecu9DAACsQNa2ebpZ+68Se7Jh3texs+hD6Y2IeyJiV0TcGxG7I+K+iGze+yPigXzh2Z4lbr/akJ/f/qlcaVrmVZK2/16oa/vN1MVfDHo7ityOLP6u5MSp2ujhYp8ciq5NaX5gkW18/8pvXyw0rb79l37S7ZdtwaIAVzobbtCNDE0MrdZOuHoxYl9ns/iTGz0B6RmwNyL2LW/VO8vEqSe/2b/QTLeOfxGr0M80+3XEE/nxn4qG+EvJ4v2T/ZujNnq4vzwr5vv510tvFsnuxmm3Ff8qSI//1rnnfzHlYjHs+TfJ+2u7olYbPTe+/G1c+uPzBa9pVnr+dydvZ33Wv7yXj/toaGLi3EBEd/J6li93dDZ+8OayZb6cP43/0MHm9X9XsUwa/4MRkZ7EByLioYh4uCj7IxHxaEQcXCT+H19+7P1F4k8iiZYe/5Gm3383zv/epL6/fgWJjtM/fLdQj/nSjv/RmMq+a3PZ998tLLWAt7n7AAAA4K5QiYjtkVT68nR1e1QqfX35//Dvjq2V2tj4xFMnxj48O5I/I9AbXZXyTldP3f3QgWSqWGOeHyzuFZfTjxT3jb/s2JLl+4bHaiMtjh3a3ba59T/K+p/6q6PVpQPWnOe1oH011v9Ki8oBrL+l/P67FoCNqUn939KKcgDrz/U/tK9m9f+Thrz2P2xM8+v/n01eWQdsRNr/0L7Uf2hf6j+0paU+xV++T2HFLwGYkygfFlj5ejYv+Qn/Oy9RXZM1l0doLQu/JW6OicodsTPbJJHWmPXdaJOX1QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyF/g8AAP//Z0bjpw==") r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x23000046) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x199, &(0x7f0000000380)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r4, 0x1000001, 0x0) getdents64(r4, 0x0, 0x0) pwrite64(r3, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) sendfile(r3, r3, &(0x7f0000000080), 0xe0000000) kernel console output (not intermixed with test programs): umber=0 [ 133.929278][ T3651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.938941][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.947625][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.957075][ T3651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.966329][ T3651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.975156][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.996762][ T22] usb 3-1: config 0 descriptor?? [ 134.043472][ T5059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.134457][ T3969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.301001][ T3795] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.374861][ T5059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.434770][ T5059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.462893][ T5170] chnl_net:caif_netlink_parms(): no params data found [ 134.476071][ T22] hid (null): bogus close delimiter [ 134.505361][ T5059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.553362][ T5059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.692365][ T22] usb 3-1: language id specifier not provided by device, defaulting to English [ 134.818828][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.841345][ T5170] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.849305][ T5170] device bridge_slave_0 entered promiscuous mode [ 134.928817][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.941451][ T5170] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.949513][ T5170] device bridge_slave_1 entered promiscuous mode [ 135.137415][ T5170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.197794][ T5170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.285439][ T5059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.325092][ T5170] team0: Port device team_slave_0 added [ 135.331090][ T3651] Bluetooth: hci0: command tx timeout [ 135.381204][ T22] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71 [ 135.399200][ T22] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 135.407459][ T22] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 135.427003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.451557][ T22] usb 3-1: USB disconnect, device number 2 [ 135.458097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.492782][ T5170] team0: Port device team_slave_1 added [ 135.507847][ T5059] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.683306][ T5170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.690280][ T5170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.741163][ T5170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.774113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.810680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.833270][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.840359][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.877172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.891789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.910454][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.917651][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.966294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.989687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.992799][ T5189] loop1: detected capacity change from 0 to 40427 [ 136.015038][ T5189] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 136.051155][ T5189] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 136.060438][ T3643] Bluetooth: hci4: command tx timeout [ 136.081741][ T5170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.088709][ T5170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.122751][ T5189] F2FS-fs (loop1): invalid crc value [ 136.157235][ T5189] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.199373][ T5170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.248417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.281709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.313697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.322951][ T5189] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 136.385687][ T5203] loop2: detected capacity change from 0 to 164 [ 136.443407][ T5203] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 136.587259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.597225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.648015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.673314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.722033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.739730][ T4012] syz-executor: attempt to access beyond end of device [ 136.739730][ T4012] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 136.804613][ T5059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.836339][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.861820][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.874415][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.913818][ T5170] device hsr_slave_0 entered promiscuous mode [ 136.936357][ T5170] device hsr_slave_1 entered promiscuous mode [ 136.972675][ T5170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.007050][ T5170] Cannot create hsr debugfs directory [ 137.177114][ T5213] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.210'. [ 137.211213][ T5213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 137.322394][ T3969] device hsr_slave_0 left promiscuous mode [ 137.341839][ T3969] device hsr_slave_1 left promiscuous mode [ 137.377061][ T3969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.394897][ T3969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.415674][ T3969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.461031][ T3969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.468781][ T3969] device bridge_slave_1 left promiscuous mode [ 137.476658][ T3969] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.486168][ T3969] device bridge_slave_0 left promiscuous mode [ 137.492768][ T3969] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.548018][ T3969] device veth1_macvtap left promiscuous mode [ 137.555635][ T3969] device veth0_macvtap left promiscuous mode [ 137.562330][ T3969] device veth1_vlan left promiscuous mode [ 137.568292][ T3969] device veth0_vlan left promiscuous mode [ 137.785712][ T5230] loop2: detected capacity change from 0 to 128 [ 137.942821][ T5233] loop2: detected capacity change from 0 to 8 [ 138.131285][ T3643] Bluetooth: hci4: command tx timeout [ 138.844600][ T3969] team0 (unregistering): Port device team_slave_1 removed [ 138.991284][ T3969] team0 (unregistering): Port device team_slave_0 removed [ 139.149042][ T3969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.255477][ T3969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.796665][ T5239] loop2: detected capacity change from 0 to 40427 [ 139.832359][ T5239] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 139.848849][ T5239] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.869013][ T5239] F2FS-fs (loop2): invalid crc value [ 139.918475][ T5239] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.053934][ T5239] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 140.065000][ T5239] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.126897][ T27] audit: type=1800 audit(1727554960.399:9): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.214" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 140.184259][ T27] audit: type=1800 audit(1727554960.439:10): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.214" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 140.213109][ T3651] Bluetooth: hci4: command tx timeout [ 140.246934][ T4685] syz-executor: attempt to access beyond end of device [ 140.246934][ T4685] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 140.413737][ T3969] bond0 (unregistering): Released all slaves [ 140.590116][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 140.623376][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 140.961537][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.971134][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.005535][ T5059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.351007][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.526415][ T5263] loop2: detected capacity change from 0 to 256 [ 141.591018][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 141.735985][ T5170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.784243][ T5170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.833623][ T5170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.836456][ T5272] loop2: detected capacity change from 0 to 2048 [ 141.855593][ T5170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.891454][ T22] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 141.910682][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.927173][ T22] usb 2-1: Product: syz [ 141.946879][ T22] usb 2-1: Manufacturer: syz [ 141.963020][ T22] usb 2-1: SerialNumber: syz [ 141.984064][ T5272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 141.992015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.001913][ T22] usb 2-1: config 0 descriptor?? [ 142.009236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.022173][ T5059] device veth0_vlan entered promiscuous mode [ 142.059615][ T22] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 142.086277][ T5059] device veth1_vlan entered promiscuous mode [ 142.105327][ T5272] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.134095][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.153191][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.161578][ T5272] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 142.182696][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.190423][ T5272] EXT4-fs (loop2): This should not happen!! Data will be lost [ 142.190423][ T5272] [ 142.205427][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.215086][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.241023][ T5272] EXT4-fs (loop2): Total free blocks count 0 [ 142.247036][ T5272] EXT4-fs (loop2): Free/Dirty block details [ 142.271263][ T5272] EXT4-fs (loop2): free_blocks=2415919104 [ 142.277082][ T5272] EXT4-fs (loop2): dirty_blocks=16 [ 142.291737][ T3651] Bluetooth: hci4: command tx timeout [ 142.303320][ T5170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.307617][ T5272] EXT4-fs (loop2): Block reservation details [ 142.317422][ T5272] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 142.327084][ T5059] device veth0_macvtap entered promiscuous mode [ 142.349996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.374299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.407832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.419433][ T4685] EXT4-fs (loop2): unmounting filesystem. [ 142.436057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.496898][ T5059] device veth1_macvtap entered promiscuous mode [ 142.536560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.556412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.573722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.593265][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.604228][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.614527][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.625130][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.635225][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.645900][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.655994][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.667260][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.677346][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.688289][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.699902][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.711559][ T5281] netlink: 'syz.2.220': attribute type 10 has an invalid length. [ 142.728510][ T5281] team0: Port device netdevsim0 added [ 142.741139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.750088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.782906][ T5170] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.793168][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.814043][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.844365][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.870008][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.889374][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.900446][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.917773][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.929956][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.947572][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.958304][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.977753][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.988786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.999467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.038962][ T5059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.049784][ T5059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.058979][ T5059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.070135][ T5059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.098296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.107701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.117403][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.124543][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.132359][ T4432] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.140881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.151684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.160111][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.167244][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.175957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.185422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.194813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.234935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.255912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.266264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.275266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.285086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.293813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.302434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.310839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.329801][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.360645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.381421][ T4432] usb 3-1: Using ep0 maxpacket: 16 [ 143.461515][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.499749][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.511449][ T4432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 143.527065][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.547228][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.563852][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.604589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.681195][ T4432] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.695219][ T4432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.726395][ T4432] usb 3-1: Product: syz [ 143.730584][ T4432] usb 3-1: Manufacturer: syz [ 143.755298][ T4432] usb 3-1: SerialNumber: syz [ 143.772030][ T4432] usb 3-1: config 0 descriptor?? [ 143.783421][ T5295] loop4: detected capacity change from 0 to 128 [ 143.815177][ T4432] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.836382][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.851275][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.868025][ T4432] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 143.874664][ T5170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.981922][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.999088][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.006515][ T5295] syz.4.178: attempt to access beyond end of device [ 144.006515][ T5295] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 144.025350][ T22] gspca_stk1135: reg_w 0x200 err -71 [ 144.032370][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 144.038724][ T22] gspca_stk1135: Sensor write failed [ 144.044919][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.054385][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.077353][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 144.081404][ T5170] device veth0_vlan entered promiscuous mode [ 144.084767][ T5295] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 144.100825][ T22] gspca_stk1135: Sensor write failed [ 144.106793][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.116932][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 144.131949][ T22] gspca_stk1135: Sensor read failed [ 144.133693][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.139092][ T5295] syz.4.178: attempt to access beyond end of device [ 144.139092][ T5295] loop4: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 144.161402][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 144.167788][ T22] gspca_stk1135: Sensor read failed [ 144.177151][ T5170] device veth1_vlan entered promiscuous mode [ 144.191079][ T22] gspca_stk1135: Detected sensor type unknown (0x0) [ 144.197700][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 144.219936][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.231041][ T5295] Buffer I/O error on dev loop4, logical block 8833403, async page read [ 144.236512][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.239473][ T5295] syz.4.178: attempt to access beyond end of device [ 144.239473][ T5295] loop4: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 144.250458][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.260695][ T22] gspca_stk1135: Sensor read failed [ 144.278078][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.291995][ T5170] device veth0_macvtap entered promiscuous mode [ 144.326748][ T5170] device veth1_macvtap entered promiscuous mode [ 144.330969][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 144.339358][ T22] gspca_stk1135: Sensor read failed [ 144.364449][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.371045][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 144.381849][ T5295] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 144.390301][ T5295] syz.4.178: attempt to access beyond end of device [ 144.390301][ T5295] loop4: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 144.411759][ T22] gspca_stk1135: Sensor write failed [ 144.417074][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 144.418218][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.441037][ T22] gspca_stk1135: Sensor write failed [ 144.446407][ T22] stk1135: probe of 2-1:0.0 failed with error -71 [ 144.466900][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.483042][ T22] usb 2-1: USB disconnect, device number 3 [ 144.489704][ T5295] Buffer I/O error on dev loop4, logical block 8073606, async page read [ 144.501038][ T4432] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 144.523332][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.544269][ T5295] syz.4.178: attempt to access beyond end of device [ 144.544269][ T5295] loop4: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 144.557959][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.577593][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.594552][ T5295] Buffer I/O error on dev loop4, logical block 3245771, async page read [ 144.606467][ T5295] syz.4.178: attempt to access beyond end of device [ 144.606467][ T5295] loop4: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 144.622103][ T5295] Buffer I/O error on dev loop4, logical block 8834171, async page read [ 144.630469][ T5295] syz.4.178: attempt to access beyond end of device [ 144.630469][ T5295] loop4: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 144.630935][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.661535][ T5295] Buffer I/O error on dev loop4, logical block 13466417, async page read [ 144.697441][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.697579][ T5295] syz.4.178: attempt to access beyond end of device [ 144.697579][ T5295] loop4: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 144.714612][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.743457][ T5295] Buffer I/O error on dev loop4, logical block 8073606, async page read [ 144.756884][ T5295] syz.4.178: attempt to access beyond end of device [ 144.756884][ T5295] loop4: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 144.761434][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.783063][ T5295] Buffer I/O error on dev loop4, logical block 3245774, async page read [ 144.793186][ T5295] syz.4.178: attempt to access beyond end of device [ 144.793186][ T5295] loop4: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 144.803293][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.819939][ T3651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.823056][ T5295] Buffer I/O error on dev loop4, logical block 8834939, async page read [ 144.828273][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.846282][ T3651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.861003][ T3651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.870109][ T3651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.878929][ T5170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.891404][ T3651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.904817][ T3651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.966910][ T4767] ocfs2: Unmounting device (7,0) on (node local) [ 144.983612][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.996081][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.059725][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.121773][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.148647][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.173014][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.191036][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.217794][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.248657][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.261167][ T4432] em28xx 3-1:0.0: board has no eeprom [ 145.296441][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.319712][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.358465][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.388443][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.419353][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.448353][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.469755][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.489148][ T5170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.499605][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.516318][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.580993][ T4432] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 145.588843][ T4432] em28xx 3-1:0.0: dvb set to bulk mode. [ 145.630398][ T4432] usb 3-1: USB disconnect, device number 3 [ 145.644661][ T4432] em28xx 3-1:0.0: Disconnecting em28xx [ 145.669954][ T3787] em28xx 3-1:0.0: Binding DVB extension [ 145.720636][ T5170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.750312][ T5170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.779770][ T5170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.798996][ T5170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.827572][ T3787] em28xx 3-1:0.0: Registering input extension [ 145.860412][ T4432] em28xx 3-1:0.0: Closing input extension [ 145.962775][ T4432] em28xx 3-1:0.0: Freeing device [ 146.024677][ T102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.162795][ T5333] Bluetooth: MGMT ver 1.22 [ 146.273413][ T102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.324608][ T5338] loop2: detected capacity change from 0 to 512 [ 146.354705][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 146.387217][ T5338] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.401370][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 146.417970][ T5338] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.478755][ T5338] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.226: corrupted in-inode xattr [ 146.496208][ T102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.541291][ T5338] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.226: couldn't read orphan inode 15 (err -117) [ 146.569026][ T3969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.583057][ T5338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.601976][ T3969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.649795][ T102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.701311][ T27] audit: type=1804 audit(1727554966.979:11): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.226" name="/newroot/25/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 146.768154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.940835][ T3651] Bluetooth: hci5: command tx timeout [ 147.020174][ T4685] EXT4-fs (loop2): unmounting filesystem. [ 147.031218][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.039338][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.125731][ T5353] "syz.1.228" (5353) uses obsolete ecb(arc4) skcipher [ 147.162976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.218801][ T5309] chnl_net:caif_netlink_parms(): no params data found [ 147.727913][ T5365] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 147.839561][ T5367] netlink: 'syz.2.230': attribute type 10 has an invalid length. [ 147.853502][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.861127][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.887054][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.894245][ T5367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.902328][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.909446][ T5367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.927844][ T5367] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 148.370615][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.382315][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.422167][ T5309] device bridge_slave_0 entered promiscuous mode [ 148.462519][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.469675][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.493281][ T5309] device bridge_slave_1 entered promiscuous mode [ 148.562334][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.590660][ T5391] device batadv_slave_0 entered promiscuous mode [ 148.710459][ T5309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.803358][ T5309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.896636][ T5379] loop2: detected capacity change from 0 to 32768 [ 148.942840][ T3969] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 148.955669][ T5379] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.232 (5379) [ 148.971277][ T27] audit: type=1800 audit(1727554969.249:12): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.235" name="/" dev="fuse" ino=1 res=0 errno=0 [ 148.996773][ T5309] team0: Port device team_slave_0 added [ 149.011112][ T3651] Bluetooth: hci5: command tx timeout [ 149.040166][ T5379] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 149.086290][ T5379] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 149.106399][ T5309] team0: Port device team_slave_1 added [ 149.126209][ T5379] BTRFS info (device loop2): using free space tree [ 149.221337][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.228293][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.291362][ T5309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.335030][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.344389][ T5389] loop3: detected capacity change from 0 to 32768 [ 149.381004][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.432969][ T5379] BTRFS info (device loop2): enabling ssd optimizations [ 149.441153][ T5309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.532569][ T5389] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 149.742454][ T5389] loop3: detected capacity change from 32768 to 11 [ 149.756054][ T5431] syz.3.233: attempt to access beyond end of device [ 149.756054][ T5431] loop3: rw=0, sector=71, nr_sectors = 1 limit=11 [ 149.799907][ T5431] (syz.3.233,5431,1):ocfs2_assign_bh:2414 ERROR: status = -5 [ 149.811499][ T5389] Dev loop3: unable to read RDB block 11 [ 149.817402][ T5389] loop3: unable to read partition table [ 149.826475][ T5309] device hsr_slave_0 entered promiscuous mode [ 149.848424][ T5309] device hsr_slave_1 entered promiscuous mode [ 149.858402][ T5431] (syz.3.233,5431,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -5 [ 149.868584][ T5309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.886729][ T4685] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 149.889146][ T5309] Cannot create hsr debugfs directory [ 149.907042][ T5389] loop3: partition table beyond EOD, truncated [ 149.940441][ T5431] (syz.3.233,5431,0):ocfs2_reserve_suballoc_bits:789 ERROR: status = -5 [ 149.979058][ T5389] loop_reread_partitions: partition scan of loop3 (5A;8R])^\) failed (rc=-5) [ 150.008014][ T5431] (syz.3.233,5431,0):ocfs2_reserve_cluster_bitmap_bits:1133 ERROR: status = -5 [ 150.040070][ T5431] (syz.3.233,5431,0):ocfs2_reserve_clusters_with_limit:1202 ERROR: status = -5 [ 150.101056][ T5431] (syz.3.233,5431,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 150.151243][ T5431] (syz.3.233,5431,1):ocfs2_block_group_alloc:675 ERROR: status = -5 [ 150.159270][ T5431] (syz.3.233,5431,1):ocfs2_block_group_alloc:758 ERROR: status = -5 [ 150.190890][ T5431] (syz.3.233,5431,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -5 [ 150.221632][ T5431] (syz.3.233,5431,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 150.229992][ T5431] (syz.3.233,5431,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -5 [ 150.252682][ T5431] (syz.3.233,5431,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -5 [ 150.281268][ T5431] (syz.3.233,5431,1):ocfs2_init_xattr_set_ctxt:3276 ERROR: status = -5 [ 150.289544][ T5431] (syz.3.233,5431,1):ocfs2_xattr_set:3633 ERROR: status = -5 [ 150.357852][ T102] device hsr_slave_0 left promiscuous mode [ 150.401451][ T102] device hsr_slave_1 left promiscuous mode [ 150.421154][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.428617][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.436817][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.444552][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.461498][ T102] device bridge_slave_1 left promiscuous mode [ 150.467813][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.477403][ T102] device bridge_slave_0 left promiscuous mode [ 150.489415][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.540749][ T102] device veth1_macvtap left promiscuous mode [ 150.546946][ T102] device veth0_macvtap left promiscuous mode [ 150.555333][ T102] device veth1_vlan left promiscuous mode [ 150.561374][ T102] device veth0_vlan left promiscuous mode [ 150.923858][ T5170] syz-executor: attempt to access beyond end of device [ 150.923858][ T5170] loop3: rw=0, sector=17057, nr_sectors = 1 limit=11 [ 150.946920][ T5170] (syz-executor,5170,1):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 150.967684][ T5170] syz-executor: attempt to access beyond end of device [ 150.967684][ T5170] loop3: rw=0, sector=17057, nr_sectors = 1 limit=11 [ 150.995381][ T5170] (syz-executor,5170,1):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 151.091568][ T3651] Bluetooth: hci5: command tx timeout [ 151.440682][ T102] team0 (unregistering): Port device team_slave_1 removed [ 151.528625][ T102] team0 (unregistering): Port device team_slave_0 removed [ 151.608302][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.691760][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.549304][ T102] bond0 (unregistering): Released all slaves [ 152.658378][ T5436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 152.680974][ T5436] netlink: 'syz.2.236': attribute type 15 has an invalid length. [ 152.692416][ T5436] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 152.702148][ T5436] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 152.710862][ T5436] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 152.719769][ T5436] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 152.741170][ T5436] device vxlan0 entered promiscuous mode [ 152.979141][ T5428] jbd2/loop3-75: attempt to access beyond end of device [ 152.979141][ T5428] loop3: rw=38913, sector=640, nr_sectors = 1 limit=11 [ 153.021802][ T5428] Buffer I/O error on dev loop3, logical block 640, lost sync page write [ 153.047332][ T5428] JBD2: I/O error when updating journal superblock for loop3-75. [ 153.076859][ T5428] Aborting journal on device loop3-75. [ 153.092902][ T5428] jbd2/loop3-75: attempt to access beyond end of device [ 153.092902][ T5428] loop3: rw=38913, sector=640, nr_sectors = 1 limit=11 [ 153.168680][ T5428] Buffer I/O error on dev loop3, logical block 640, lost sync page write [ 153.178692][ T3651] Bluetooth: hci5: command tx timeout [ 153.206761][ T5428] JBD2: I/O error when updating journal superblock for loop3-75. [ 153.232690][ T5170] syz-executor: attempt to access beyond end of device [ 153.232690][ T5170] loop3: rw=0, sector=71, nr_sectors = 1 limit=11 [ 153.251159][ T5170] (syz-executor,5170,0):ocfs2_assign_bh:2414 ERROR: status = -5 [ 153.272730][ T5170] (syz-executor,5170,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -5 [ 153.305758][ T5170] (syz-executor,5170,1):ocfs2_shutdown_local_alloc:411 ERROR: status = -5 [ 153.372024][ T5170] syz-executor: attempt to access beyond end of device [ 153.372024][ T5170] loop3: rw=1, sector=17024, nr_sectors = 1 limit=11 [ 153.416054][ T5309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.431256][ T5170] Buffer I/O error on dev loop3, logical block 17024, lost sync page write [ 153.451811][ T5170] (syz-executor,5170,1):ocfs2_write_block:78 ERROR: status = -5 [ 153.459503][ T5170] (syz-executor,5170,1):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 153.471386][ T5309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.499172][ T5309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.511571][ T5170] (syz-executor,5170,1):ocfs2_put_slot:517 ERROR: status = -5 [ 153.519749][ T5170] (syz-executor,5170,1):ocfs2_journal_shutdown:1051 ERROR: status = -5 [ 153.535583][ T5309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.562481][ T5170] ocfs2: Unmounting device (7,3) on (node local) [ 153.682894][ T102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.824975][ T102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.013599][ T102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.082142][ T5309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.102674][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.131860][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.155193][ T5309] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.192617][ T102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.232590][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.281606][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.313092][ T1288] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.320189][ T1288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.481388][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.675605][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.709251][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.738915][ T1288] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.739600][ T3643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.746128][ T1288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.759086][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.769762][ T3643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.779501][ T3643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.788873][ T3643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.797121][ T3643] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.797704][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.805116][ T3643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.911951][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.943772][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.975133][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.016744][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.061939][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.104972][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.271082][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.359759][ T5309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.383235][ T3651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.398197][ T5487] loop1: detected capacity change from 0 to 128 [ 155.402495][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.421043][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.433087][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.441970][ T3651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.449375][ T3651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.456838][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.636502][ T5492] loop1: detected capacity change from 0 to 8 [ 155.659180][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.704428][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.100600][ T5498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.247'. [ 156.118643][ T5498] tipc: Invalid UDP bearer configuration [ 156.119626][ T5498] tipc: Enabling of bearer rejected, failed to enable media [ 156.525510][ T5470] chnl_net:caif_netlink_parms(): no params data found [ 156.851199][ T3651] Bluetooth: hci1: command tx timeout [ 157.016433][ T5483] chnl_net:caif_netlink_parms(): no params data found [ 157.032700][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.040177][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.090829][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.131406][ T5470] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.139563][ T5470] device bridge_slave_0 entered promiscuous mode [ 157.156944][ T5309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.352184][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.379387][ T5470] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.422189][ T5470] device bridge_slave_1 entered promiscuous mode [ 157.491083][ T3651] Bluetooth: hci4: command tx timeout [ 157.601381][ T5525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 157.610296][ T5525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 157.836474][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.885802][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.904101][ T5527] loop1: detected capacity change from 0 to 32768 [ 157.927721][ T5527] XFS (loop1): Mounting V5 Filesystem [ 157.953747][ T5470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.966064][ T5470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.018005][ T5527] XFS (loop1): Ending clean mount [ 158.072660][ T5527] XFS (loop1): Quotacheck needed: Please wait. [ 158.085046][ T3969] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 158.160088][ T3969] XFS (loop1): Unmount and run xfs_repair [ 158.175659][ T3969] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 158.192548][ T3969] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 158.212120][ T3969] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 158.248936][ T5483] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.258822][ T5483] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.266970][ T3969] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 158.287331][ T5483] device bridge_slave_0 entered promiscuous mode [ 158.294343][ T3969] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 158.305239][ T5483] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.312466][ T3969] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 158.321685][ T5483] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.329731][ T5483] device bridge_slave_1 entered promiscuous mode [ 158.337543][ T3969] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 158.369907][ T3969] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 158.382341][ T3969] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 158.403959][ T5470] team0: Port device team_slave_0 added [ 158.413839][ T3969] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74 [ 158.428032][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.444940][ T5527] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 158.483068][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.833245][ T5309] device veth0_vlan entered promiscuous mode [ 158.853504][ T5527] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 158.874007][ T5470] team0: Port device team_slave_1 added [ 158.903304][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.916148][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.924231][ T5527] XFS (loop1): Unmount and run xfs_repair [ 158.931490][ T3651] Bluetooth: hci1: command tx timeout [ 158.943380][ T5527] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 158.991158][ T5527] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 159.000029][ T5527] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 159.032008][ T5527] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 159.079549][ T5527] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 159.111295][ T5527] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.120171][ T5527] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.144771][ T5483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.188774][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.210989][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.238382][ T5527] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.263100][ T5527] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.263780][ T5470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.291843][ T5527] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74 [ 159.312396][ T5527] XFS (loop1): page discard on page ffffea0001076b00, inode 0x244b, pos 0. [ 159.473120][ T102] device hsr_slave_0 left promiscuous mode [ 159.481245][ T102] device hsr_slave_1 left promiscuous mode [ 159.509733][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.612322][ T3651] Bluetooth: hci4: command tx timeout [ 159.624013][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.635845][ T3901] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 159.657906][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.657967][ T3901] XFS (loop1): Unmount and run xfs_repair [ 159.681327][ T3901] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 159.689332][ T3901] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 159.698362][ T3901] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 159.707607][ T3901] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 159.821166][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.828466][ T3901] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 159.848881][ T3901] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.887540][ T3901] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.905963][ T3901] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.919673][ T3901] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.975151][ T3969] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74 [ 159.989750][ T102] device bridge_slave_1 left promiscuous mode [ 159.997316][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.011662][ T3969] XFS (loop1): page discard on page ffffea0001076b00, inode 0x244b, pos 0. [ 160.041390][ T102] device bridge_slave_0 left promiscuous mode [ 160.047609][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.063113][ T4012] XFS (loop1): Unmounting Filesystem [ 160.210575][ T102] device veth1_macvtap left promiscuous mode [ 160.224049][ T102] device veth0_macvtap left promiscuous mode [ 160.250824][ T102] device veth1_vlan left promiscuous mode [ 160.275875][ T102] device veth0_vlan left promiscuous mode [ 160.596790][ T7] libceph: connect (1)[c::]:6789 error -101 [ 160.605351][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 160.623683][ T5576] ceph: No mds server is up or the cluster is laggy [ 160.633778][ T7] libceph: connect (1)[c::]:6789 error -101 [ 160.639770][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 160.991097][ T3797] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.130778][ T3651] Bluetooth: hci1: command tx timeout [ 161.451357][ T3797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.463467][ T3797] usb 3-1: config 0 has no interfaces? [ 161.469058][ T3797] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 161.478414][ T3797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.512355][ T3797] usb 3-1: config 0 descriptor?? [ 161.656376][ T3651] Bluetooth: hci4: command tx timeout [ 161.801194][ T3797] usb 3-1: string descriptor 0 read error: -71 [ 161.851104][ T3797] usb 3-1: USB disconnect, device number 4 [ 161.889347][ T102] team0 (unregistering): Port device team_slave_1 removed [ 161.976352][ T5589] loop1: detected capacity change from 0 to 128 [ 162.001473][ T102] team0 (unregistering): Port device team_slave_0 removed [ 162.033345][ T3628] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.127007][ T5589] loop1: detected capacity change from 0 to 8 [ 162.143192][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.268922][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.171099][ T3651] Bluetooth: hci1: command tx timeout [ 163.736343][ T3651] Bluetooth: hci4: command tx timeout [ 163.990333][ T3797] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.156979][ T102] bond0 (unregistering): Released all slaves [ 164.241026][ T3797] usb 2-1: Using ep0 maxpacket: 32 [ 164.263963][ T5483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.285802][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.293836][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.328353][ T5470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.362076][ T5309] device veth1_vlan entered promiscuous mode [ 164.441616][ T5309] device veth0_macvtap entered promiscuous mode [ 164.531240][ T3797] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 164.532580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.548296][ T3797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.567887][ T3797] usb 2-1: Product: syz [ 164.571762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.574253][ T3797] usb 2-1: Manufacturer: syz [ 164.586484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.598136][ T3797] usb 2-1: SerialNumber: syz [ 164.616347][ T5309] device veth1_macvtap entered promiscuous mode [ 164.637220][ T3797] usb 2-1: config 0 descriptor?? [ 164.658109][ T5483] team0: Port device team_slave_0 added [ 164.693371][ T3797] pvrusb2: Hardware description: Terratec Grabster AV400 [ 164.709066][ T3797] pvrusb2: ********** [ 164.714261][ T3797] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 164.731474][ T3797] pvrusb2: Important functionality might not be entirely working. [ 164.739504][ T3797] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 164.752070][ T3797] pvrusb2: ********** [ 164.870766][ T5483] team0: Port device team_slave_1 added [ 164.915722][ T2037] pvrusb2: Invalid write control endpoint [ 164.967285][ T3797] usb 2-1: USB disconnect, device number 4 [ 165.134510][ T5470] device hsr_slave_0 entered promiscuous mode [ 165.166341][ T5470] device hsr_slave_1 entered promiscuous mode [ 165.243848][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.259738][ T2037] pvrusb2: Invalid write control endpoint [ 165.268567][ T2037] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 165.271530][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.290787][ T2037] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 165.308949][ T2037] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 165.338301][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.342501][ T2037] pvrusb2: Device being rendered inoperable [ 165.357971][ T2037] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 165.371255][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.373266][ T2037] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 165.394764][ T2037] pvrusb2: Attached sub-driver cx25840 [ 165.401501][ T2037] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 165.419814][ T2037] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 165.429347][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.474652][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.612926][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.634989][ T5620] loop1: detected capacity change from 0 to 8 [ 165.643727][ T5620] unable to read xattr id index table [ 165.682253][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.713224][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.765557][ T4523] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.840822][ T5483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.849295][ T5622] loop2: detected capacity change from 0 to 4096 [ 165.855945][ T5483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.884802][ T5620] loop1: detected capacity change from 0 to 1024 [ 165.911999][ T5622] EXT4-fs: Ignoring removed nobh option [ 165.950335][ T5622] EXT4-fs: Ignoring removed i_version option [ 165.995678][ T5483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.000314][ T5622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.037627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.093740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.108506][ T5622] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.267: Invalid inode table block 4 in block_group 0 [ 166.132901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.161623][ T5622] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 166.161953][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.189231][ T5622] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #18: comm syz.2.267: mark_inode_dirty error [ 166.200730][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.221028][ T5622] EXT4-fs error (device loop2): ext4_free_blocks:6212: comm syz.2.267: Freeing blocks not in datazone - block = 160, count = 1 [ 166.237824][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.256807][ T5622] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.267: Invalid inode table block 4 in block_group 0 [ 166.271092][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.283551][ T5622] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 166.302058][ T5622] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #18: comm syz.2.267: mark_inode_dirty error [ 166.308767][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.331267][ T5622] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.267: Invalid inode table block 4 in block_group 0 [ 166.331814][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.353388][ T5622] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 166.372275][ T5622] EXT4-fs error (device loop2): ext4_punch_hole:4151: inode #18: comm syz.2.267: mark_inode_dirty error [ 166.376534][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.420999][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.441880][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.457926][ T4685] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 166.470929][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.502148][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.523455][ T5483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.532712][ T5483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.569317][ T4685] EXT4-fs (loop2): unmounting filesystem. [ 166.591050][ T5483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.642802][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.660086][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.718322][ T5309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.729247][ T5309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.748638][ T5309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.758519][ T5309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.914039][ T5483] device hsr_slave_0 entered promiscuous mode [ 166.928669][ T5483] device hsr_slave_1 entered promiscuous mode [ 166.940070][ T5483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.958755][ T5483] Cannot create hsr debugfs directory [ 167.160780][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.187978][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.270632][ T5470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.392701][ T3703] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 167.441344][ T3703] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.524838][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 167.556237][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.639487][ T5470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.790366][ T3703] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 167.822900][ T3703] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.874442][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.903472][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.960511][ T5470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.007154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.093261][ T3703] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 168.147571][ T3703] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.294782][ T5648] loop0: detected capacity change from 0 to 128 [ 168.337224][ T5470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.517703][ T3643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.530009][ T3643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.540409][ T3643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.559982][ T3643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.572323][ T3643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 168.588993][ T3643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.614680][ T3703] team0: Port device netdevsim0 removed [ 168.672651][ T3703] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 168.701326][ T3703] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.719696][ T5654] loop0: detected capacity change from 0 to 8 [ 169.361576][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 169.369062][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 169.843173][ T5652] chnl_net:caif_netlink_parms(): no params data found [ 170.488601][ T5470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.629240][ T3651] Bluetooth: hci2: command tx timeout [ 170.649180][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.657297][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.666351][ T5652] device bridge_slave_0 entered promiscuous mode [ 170.697168][ T5470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.768229][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.814705][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.863420][ T5652] device bridge_slave_1 entered promiscuous mode [ 170.972243][ T5470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.117542][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.139163][ T5470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.163348][ T5694] loop0: detected capacity change from 0 to 128 [ 171.292908][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.302263][ T3628] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.413971][ T5483] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.468330][ T5699] loop0: detected capacity change from 0 to 8 [ 171.582151][ T5483] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.614108][ T5652] team0: Port device team_slave_0 added [ 171.623460][ T5483] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.659499][ T5483] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.836984][ T5652] team0: Port device team_slave_1 added [ 171.967842][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.985187][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.086476][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.284819][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.302366][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.419260][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.528756][ T3703] device hsr_slave_0 left promiscuous mode [ 172.568418][ T3703] device hsr_slave_1 left promiscuous mode [ 172.601312][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.624840][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.688052][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.695660][ T3651] Bluetooth: hci2: command tx timeout [ 172.704121][ T5698] loop1: detected capacity change from 0 to 32768 [ 172.721379][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.751840][ T3703] device bridge_slave_1 left promiscuous mode [ 172.758055][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.788828][ T3703] device bridge_slave_0 left promiscuous mode [ 172.797535][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.853329][ T5698] XFS (loop1): Mounting V5 Filesystem [ 172.884840][ T3703] device veth1_macvtap left promiscuous mode [ 172.891252][ T3703] device veth0_macvtap left promiscuous mode [ 172.898426][ T3703] device veth1_vlan left promiscuous mode [ 172.905362][ T3703] device veth0_vlan left promiscuous mode [ 173.048304][ T5698] XFS (loop1): Ending clean mount [ 173.068364][ T5698] XFS (loop1): Quotacheck needed: Please wait. [ 173.141263][ T5698] XFS (loop1): Quotacheck: Done. [ 173.227258][ T27] audit: type=1800 audit(1727554993.499:13): pid=5698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.279" name="bus" dev="loop1" ino=9291 res=0 errno=0 [ 173.421792][ T4012] XFS (loop1): Unmounting Filesystem [ 173.966295][ T5734] kernel read not supported for file /#! [ 173.966295][ T5734] 2gv-dt"zRF(vt1RWHz a=ڼ (pid: 5734 comm: syz.1.282) [ 173.992293][ T27] audit: type=1800 audit(1727554994.269:14): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.282" name=2321200ACD3208678A76F42D64DEFE74F822CC7A52B8C9F09946289B029183E47674EE900E01D80F94F8953194529F57487A90EDE3CED0CD208BB361E3E0EF3DDABC dev="mqueue" ino=45995 res=0 errno=0 [ 174.191870][ T5736] kvm: pic: level sensitive irq not supported [ 174.192312][ T5736] kvm: pic: non byte read [ 174.302525][ T3703] team0 (unregistering): Port device team_slave_1 removed [ 174.406325][ T3703] team0 (unregistering): Port device team_slave_0 removed [ 174.606244][ T3703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.719305][ T3703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.771483][ T3651] Bluetooth: hci2: command tx timeout [ 175.943511][ T3703] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 175.963210][ T3703] bond0 (unregistering): Released all slaves [ 176.434051][ T5728] device syzkaller0 entered promiscuous mode [ 176.851279][ T3651] Bluetooth: hci2: command tx timeout [ 182.898429][ T5470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.910571][ T5750] netlink: 56 bytes leftover after parsing attributes in process `syz.1.286'. [ 182.952716][ T5750] Zero length message leads to an empty skb [ 183.005727][ T5652] device hsr_slave_0 entered promiscuous mode [ 183.022325][ T5652] device hsr_slave_1 entered promiscuous mode [ 183.030294][ T5652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.050959][ T5652] Cannot create hsr debugfs directory [ 183.065903][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.076851][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.105783][ T5483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.124354][ T5470] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.185902][ T5764] debugfs: Directory 'netdev:nicvf0' with parent 'phy19' already present! [ 183.252379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.281949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.300583][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.307734][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.336001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.368944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.394566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.457732][ T5483] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.495863][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.514294][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.553272][ T3969] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.560377][ T3969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.608830][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.635619][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.668400][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.696182][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.703353][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.750417][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.774720][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.807453][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.814604][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.951775][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.979997][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.048880][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.077217][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.108250][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.152882][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.183846][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.202848][ T5766] loop0: detected capacity change from 0 to 32768 [ 184.211864][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.242675][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.272533][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.338484][ T5483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.403104][ T5483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.408721][ T5773] loop1: detected capacity change from 0 to 32768 [ 184.420761][ T5766] XFS (loop0): Mounting V5 Filesystem [ 184.429361][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.471858][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.480133][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.489241][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.500603][ T5773] XFS (loop1): Mounting V5 Filesystem [ 184.525182][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.534814][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.544014][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.556567][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.565943][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.579179][ T5766] XFS (loop0): Ending clean mount [ 184.603451][ T5766] XFS (loop0): Quotacheck needed: Please wait. [ 184.669481][ T5773] XFS (loop1): Ending clean mount [ 184.704635][ T5766] XFS (loop0): Quotacheck: Done. [ 184.705783][ T5773] XFS (loop1): Quotacheck needed: Please wait. [ 184.766751][ T5773] XFS (loop1): Quotacheck: Done. [ 184.776519][ T27] audit: type=1804 audit(1727555005.049:15): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.289" name="/newroot/6/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 184.896742][ T27] audit: type=1804 audit(1727555005.109:16): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.289" name="/newroot/6/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 184.994398][ T5309] XFS (loop0): Unmounting Filesystem [ 185.005000][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.034124][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.085365][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.108205][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.117805][ T4012] XFS (loop1): Unmounting Filesystem [ 185.255559][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.712639][ T5483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.720635][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.743937][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.851571][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 185.860467][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 185.918722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.931760][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.026407][ T5470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.050726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.062587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.195411][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.206695][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.242123][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.263397][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.351523][ T5483] device veth0_vlan entered promiscuous mode [ 186.412031][ T5483] device veth1_vlan entered promiscuous mode [ 186.443148][ T5652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.512488][ T5652] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.583885][ T5652] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.628086][ T5652] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.721273][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.729307][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.759508][ T5840] loop0: detected capacity change from 0 to 512 [ 186.765480][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.784822][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.828220][ T5483] device veth0_macvtap entered promiscuous mode [ 186.840756][ T5840] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.295: attempt to clear invalid blocks 2 len 1 [ 186.905899][ T5840] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 186.928405][ T5840] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.295: invalid indirect mapped block 1819239214 (level 0) [ 186.933543][ T5483] device veth1_macvtap entered promiscuous mode [ 186.951485][ T5840] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.295: invalid indirect mapped block 1819239214 (level 1) [ 186.966421][ T5840] EXT4-fs (loop0): 1 truncate cleaned up [ 186.977600][ T5840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 187.127275][ T5840] EXT4-fs (loop0): shut down requested (2) [ 187.206897][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.227435][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.256843][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.272965][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.290926][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.320931][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.330751][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.359293][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.382541][ T5309] EXT4-fs (loop0): unmounting filesystem. [ 187.386404][ T5483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.410600][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.422943][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.448954][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.489042][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.599195][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.613662][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.779270][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.790030][ T1184] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 187.807289][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.833918][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.850180][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.868816][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.889637][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.900561][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.919849][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.935400][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.946765][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.958288][ T5483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.970516][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.001668][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.037470][ T5483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.051237][ T1184] usb 2-1: Using ep0 maxpacket: 16 [ 188.060869][ T5483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.069744][ T5483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.079003][ T5483] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.104880][ T5470] device veth0_vlan entered promiscuous mode [ 188.114233][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.124866][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.134342][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.147125][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.171059][ T1184] usb 2-1: config 0 has no interfaces? [ 188.179827][ T3703] device hsr_slave_0 left promiscuous mode [ 188.191767][ T3703] device hsr_slave_1 left promiscuous mode [ 188.211861][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.231107][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.247509][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.257351][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.274032][ T3703] device bridge_slave_1 left promiscuous mode [ 188.280236][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.304369][ T3703] device bridge_slave_0 left promiscuous mode [ 188.317686][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.349687][ T1184] usb 2-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 188.379601][ T1184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.388094][ T1184] usb 2-1: Product: syz [ 188.402001][ T1184] usb 2-1: Manufacturer: syz [ 188.406610][ T1184] usb 2-1: SerialNumber: syz [ 188.423519][ T3703] device veth1_macvtap left promiscuous mode [ 188.429586][ T3703] device veth0_macvtap left promiscuous mode [ 188.437506][ T1184] usb 2-1: config 0 descriptor?? [ 188.451368][ T3703] device veth1_vlan left promiscuous mode [ 188.457203][ T3703] device veth0_vlan left promiscuous mode [ 188.722434][ T7] usb 2-1: USB disconnect, device number 5 [ 189.421764][ T3703] team0 (unregistering): Port device team_slave_1 removed [ 189.532903][ T3703] team0 (unregistering): Port device team_slave_0 removed [ 189.580126][ T5871] < [ 189.672772][ T3703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.805924][ T3703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.656536][ T3703] bond0 (unregistering): Released all slaves [ 190.807122][ T5470] device veth1_vlan entered promiscuous mode [ 190.837994][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.856419][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.006185][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.047873][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.057126][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.110727][ T5470] device veth0_macvtap entered promiscuous mode [ 191.193404][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.239508][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.283716][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.308201][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.331866][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.338990][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.361521][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.380347][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.405497][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.412655][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.421539][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.430376][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.441019][ T3787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 191.454362][ T5470] device veth1_macvtap entered promiscuous mode [ 191.471980][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.501456][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.537200][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.557371][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.574184][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.618548][ T5652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.662801][ T5652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.704658][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.718100][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.737621][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.750274][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.777159][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.806953][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.841223][ T3787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.862092][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.879019][ T3787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.901187][ T3787] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 191.910566][ T3787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.931194][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.946872][ T3787] usb 2-1: config 0 descriptor?? [ 191.964338][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.984817][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.015771][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.036578][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.062053][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.101100][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.120928][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.149804][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.166622][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.190972][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.208595][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.241054][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.251677][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.270959][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.280811][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.314241][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.340917][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.360924][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.381964][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.389550][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.414112][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.431431][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.474603][ T3787] belkin 0003:1020:0006.0002: report_id 0 is invalid [ 192.489095][ T3787] belkin 0003:1020:0006.0002: item 0 0 1 8 parsing failed [ 192.509425][ T3787] belkin 0003:1020:0006.0002: parse failed [ 192.515347][ T3787] belkin: probe of 0003:1020:0006.0002 failed with error -22 [ 192.562685][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.578645][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.609060][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.625324][ T5470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.630910][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.654399][ T5470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.684051][ T5470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.700996][ T5470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.709265][ T3901] usb 2-1: USB disconnect, device number 6 [ 192.749546][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.805689][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.868037][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.925677][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.956842][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.997726][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.060952][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 193.089492][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.106517][ T1288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.124419][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.135906][ T1288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.141505][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.166320][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.199660][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.285717][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.306596][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.321078][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 193.371740][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.387630][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.409196][ T5652] device veth0_vlan entered promiscuous mode [ 193.428874][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.450194][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.476913][ T5652] device veth1_vlan entered promiscuous mode [ 193.550069][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.575930][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.601274][ T26] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 193.610346][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.625335][ T5652] device veth0_macvtap entered promiscuous mode [ 193.647533][ T5652] device veth1_macvtap entered promiscuous mode [ 193.661793][ T26] usb 1-1: Product: syz [ 193.665982][ T26] usb 1-1: Manufacturer: syz [ 193.686144][ T26] usb 1-1: SerialNumber: syz [ 193.716295][ T26] usb 1-1: config 0 descriptor?? [ 193.723920][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.741147][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.761019][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.776882][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.787345][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.808151][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.819550][ T5938] loop3: detected capacity change from 0 to 4096 [ 193.828699][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.839539][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.841981][ T5938] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 193.859794][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.878898][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.909632][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.929077][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.941796][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.967076][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.991140][ T26] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.994624][ T5938] ntfs3: loop3: failed to convert "c46c" to koi8-r [ 194.008314][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.031408][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.052940][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.059278][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.110523][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.156649][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.197685][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.219815][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.239227][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.249685][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.261255][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.272092][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.284077][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.295263][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.310211][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.364630][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.402812][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.413150][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.444880][ T5652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.465109][ T5652] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.496338][ T5945] loop3: detected capacity change from 0 to 512 [ 194.496643][ T5652] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.529295][ T5652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.551176][ T5945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.610325][ T5945] EXT4-fs (loop3): 1 truncate cleaned up [ 194.653068][ T5945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 194.710033][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.743337][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.807119][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.815366][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.840008][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.858455][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.988726][ T5483] EXT4-fs (loop3): unmounting filesystem. [ 195.271190][ T26] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 195.288230][ T26] usb 1-1: USB disconnect, device number 2 [ 197.436378][ T5953] loop3: detected capacity change from 0 to 32768 [ 197.547125][ T5953] XFS (loop3): Mounting V5 Filesystem [ 197.555492][ T5974] loop0: detected capacity change from 0 to 512 [ 197.569196][ T5974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.668726][ T5953] XFS (loop3): Ending clean mount [ 197.679244][ T5953] XFS (loop3): Quotacheck needed: Please wait. [ 197.724182][ T5974] EXT4-fs (loop0): 1 truncate cleaned up [ 197.762911][ T5974] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 197.828567][ T5953] XFS (loop3): Quotacheck: Done. [ 197.931310][ T27] audit: type=1804 audit(1727555018.209:17): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.316" name="/newroot/3/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 198.012997][ T27] audit: type=1800 audit(1727555018.229:18): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.321" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 198.135475][ T5309] EXT4-fs (loop0): unmounting filesystem. [ 198.180046][ T5483] XFS (loop3): Unmounting Filesystem [ 198.252254][ T5987] loop1: detected capacity change from 0 to 128 [ 198.370272][ T27] audit: type=1804 audit(1727555018.639:19): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.325" name="/newroot/19/bus/bus" dev="overlay" ino=130 res=1 errno=0 [ 198.386688][ T5989] Invalid ELF header magic: != ELF [ 198.540707][ T5991] loop1: detected capacity change from 0 to 8 [ 198.994552][ T5998] loop0: detected capacity change from 0 to 512 [ 199.041283][ T5998] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.328: casefold flag without casefold feature [ 199.184529][ T5998] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.328: couldn't read orphan inode 15 (err -117) [ 199.238665][ T5998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.393819][ T5998] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 36: comm syz.0.328: lblock 0 mapped to illegal pblock 36 (length 1) [ 199.574103][ T5309] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 36: comm syz-executor: lblock 0 mapped to illegal pblock 36 (length 1) [ 199.595146][ T5309] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 199.771389][ T5309] EXT4-fs (loop0): unmounting filesystem. [ 202.991099][ T1851] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 203.230979][ T1851] usb 4-1: Using ep0 maxpacket: 8 [ 203.351109][ T1851] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 203.369473][ T1851] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.379709][ T1851] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.391529][ T1851] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.401809][ T1851] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.429791][ T1851] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.439266][ T1851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.736935][ T1851] usb 4-1: GET_CAPABILITIES returned 0 [ 203.742584][ T1851] usbtmc 4-1:16.0: can't read capabilities [ 204.050086][ T3680] usb 4-1: USB disconnect, device number 2 [ 204.063333][ T6039] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 204.100706][ T6040] usbtmc 4-1:16.0: usb_control_msg returned -19 [ 204.219573][ T6018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'. [ 204.492729][ T6025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.576774][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.601016][ T3855] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 204.642816][ T6025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.782431][ T6025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.927962][ T6054] device syzkaller0 entered promiscuous mode [ 205.044660][ T6025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.055272][ T3855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.085921][ T3855] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 205.106701][ T3855] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 205.145407][ T3855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.155179][ T3643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.164728][ T3643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.172785][ T3643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.181729][ T3643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.189394][ T3643] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 205.196784][ T3643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.205505][ T3855] usb 5-1: config 0 descriptor?? [ 205.274652][ T3855] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 205.311156][ T3855] dvb-usb: bulk message failed: -22 (3/0) [ 205.332004][ T3855] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 205.381624][ T3855] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 205.388977][ T3855] usb 5-1: media controller created [ 205.409755][ T3855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.467907][ T3855] dvb-usb: bulk message failed: -22 (6/0) [ 205.476396][ T3855] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 205.483426][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.504941][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.525022][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.547163][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.547523][ T3855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 205.575322][ T3855] dvb-usb: schedule remote query interval to 150 msecs. [ 205.582520][ T3855] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 205.653300][ T26] usb 5-1: USB disconnect, device number 2 [ 205.698502][ T3793] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 205.771856][ T26] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 205.940964][ T3793] usb 4-1: Using ep0 maxpacket: 32 [ 206.061113][ T3793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.078598][ T3793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.101006][ T3793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.121020][ T3793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 206.133917][ T3793] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 206.143046][ T3793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.167868][ T3793] usb 4-1: config 0 descriptor?? [ 206.683334][ T3793] hid-generic 0003:1B96:9F0A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.3-1/input0 [ 207.252978][ T3651] Bluetooth: hci5: command tx timeout [ 208.174130][ T26] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 209.045359][ T3793] usb 4-1: USB disconnect, device number 3 [ 209.224309][ T6085] loop2: detected capacity change from 0 to 2048 [ 209.332396][ T6085] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 209.351128][ T3651] Bluetooth: hci5: command tx timeout [ 209.472248][ T5801] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.184786][ T6064] chnl_net:caif_netlink_parms(): no params data found [ 210.969988][ T6128] loop3: detected capacity change from 0 to 4096 [ 211.007421][ T6128] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 211.076858][ T6128] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 211.110110][ T6128] ntfs3: loop3: Failed to load $Extend. [ 211.149186][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.179434][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.283460][ T6064] device bridge_slave_0 entered promiscuous mode [ 211.320994][ T27] audit: type=1804 audit(1727555031.589:20): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.363" name="/newroot/14/file0/bus" dev="loop3" ino=33 res=1 errno=0 [ 211.327617][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.380175][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.396589][ T6064] device bridge_slave_1 entered promiscuous mode [ 211.404989][ T27] audit: type=1804 audit(1727555031.679:21): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.363" name="/newroot/14/file0/bus" dev="loop3" ino=33 res=1 errno=0 [ 211.425850][ T3651] Bluetooth: hci5: command tx timeout [ 211.510943][ T27] audit: type=1804 audit(1727555031.719:22): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.363" name="/newroot/14/file0/bus" dev="loop3" ino=33 res=1 errno=0 [ 211.531980][ T3719] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 211.621514][ T6064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.709335][ T6064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.893725][ T6064] team0: Port device team_slave_0 added [ 211.908042][ T6064] team0: Port device team_slave_1 added [ 211.941175][ T3719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.969273][ T3719] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.996222][ T3719] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.018743][ T3719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.072497][ T3719] usb 2-1: config 0 descriptor?? [ 212.220120][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.251339][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.319497][ T6064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.367434][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.418035][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.449870][ T6064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.634472][ T3719] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 212.665794][ T3719] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 212.691402][ T3719] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 212.713076][ T3719] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 212.726898][ T3719] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 212.756068][ T3719] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 212.858472][ T6064] device hsr_slave_0 entered promiscuous mode [ 212.884228][ T3719] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 212.931912][ T6064] device hsr_slave_1 entered promiscuous mode [ 213.045653][ T3719] usb 2-1: USB disconnect, device number 7 [ 213.106387][ T6163] loop3: detected capacity change from 0 to 4096 [ 213.145681][ T6163] NILFS (loop3): invalid segment: Checksum error in segment payload [ 213.153870][ T6163] NILFS (loop3): trying rollback from an earlier position [ 213.170654][ T6163] NILFS (loop3): recovery complete [ 213.190663][ T6174] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.208917][ T6163] overlayfs: upper fs does not support tmpfile. [ 213.216130][ T6163] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 213.225538][ T6163] overlayfs: failed to set xattr on upper [ 213.231627][ T6163] overlayfs: ...falling back to index=off,metacopy=off. [ 213.249570][ T6064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.293040][ T6064] Cannot create hsr debugfs directory [ 213.491190][ T3651] Bluetooth: hci5: command tx timeout [ 213.510240][ T6025] device hsr_slave_0 left promiscuous mode [ 213.557906][ T6025] device hsr_slave_1 left promiscuous mode [ 213.565443][ T6025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.577822][ T6025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.753318][ T6025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.831845][ T6025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.976307][ T6025] device bridge_slave_1 left promiscuous mode [ 214.324786][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.379503][ T6025] device bridge_slave_0 left promiscuous mode [ 214.387620][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.481413][ T6025] device veth1_macvtap left promiscuous mode [ 214.499086][ T6025] device veth0_macvtap left promiscuous mode [ 214.518272][ T6025] device veth1_vlan left promiscuous mode [ 214.538163][ T6025] device veth0_vlan left promiscuous mode [ 215.790586][ T6025] team0 (unregistering): Port device team_slave_1 removed [ 216.138312][ T6025] team0 (unregistering): Port device team_slave_0 removed [ 216.223827][ T6025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.335951][ T6025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.554338][ T6203] loop1: detected capacity change from 0 to 40427 [ 216.576657][ T6203] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 216.589263][ T6203] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 216.677933][ T6203] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.768026][ T6203] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 216.790100][ T6203] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.097319][ T4012] syz-executor: attempt to access beyond end of device [ 217.097319][ T4012] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 217.162254][ T4012] syz-executor: attempt to access beyond end of device [ 217.162254][ T4012] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 217.280298][ T3724] kworker/u4:7: attempt to access beyond end of device [ 217.280298][ T3724] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 217.300035][ T6025] bond0 (unregistering): Released all slaves [ 217.355492][ T3724] kworker/u4:7: attempt to access beyond end of device [ 217.355492][ T3724] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 217.460503][ T6186] netlink: 'syz.3.376': attribute type 9 has an invalid length. [ 217.477453][ T6186] netlink: 'syz.3.376': attribute type 7 has an invalid length. [ 217.491859][ T6186] netlink: 'syz.3.376': attribute type 8 has an invalid length. [ 217.896425][ T6215] device syzkaller0 entered promiscuous mode [ 219.546900][ T3643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.556954][ T3643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.564930][ T3643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.573623][ T3643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.581517][ T3643] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.589660][ T3643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.650981][ T3785] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 221.101196][ T3785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.140899][ T3785] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.177581][ T3785] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.201805][ T3785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.243623][ T3785] usb 5-1: config 0 descriptor?? [ 221.658690][ T3643] Bluetooth: hci3: command tx timeout [ 221.733619][ T3785] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 221.784475][ T3785] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 222.723826][ T3785] usb 5-1: USB disconnect, device number 3 [ 223.735841][ T3643] Bluetooth: hci3: command tx timeout [ 225.821134][ T3643] Bluetooth: hci3: command tx timeout [ 227.901076][ T3643] Bluetooth: hci3: command tx timeout [ 228.471788][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 228.499691][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 228.778075][ T6025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.968827][ T6293] ALSA: seq fatal error: cannot create timer (-22) [ 229.003325][ T6025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.035252][ T3651] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.047163][ T3651] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.056733][ T3651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.066124][ T3651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.074684][ T3651] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 229.082013][ T3651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.483604][ T6025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.716716][ T6025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.731317][ T3785] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 229.753506][ T6064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.819701][ T6064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.877075][ T6244] chnl_net:caif_netlink_parms(): no params data found [ 229.885817][ T6064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.933511][ T6064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.001005][ T3785] usb 4-1: Using ep0 maxpacket: 32 [ 230.121086][ T3785] usb 4-1: config 0 has no interfaces? [ 230.304654][ T3785] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 230.331355][ T3785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.339441][ T3785] usb 4-1: Product: syz [ 230.350897][ T3785] usb 4-1: Manufacturer: syz [ 230.356887][ T3785] usb 4-1: SerialNumber: syz [ 230.376727][ T3785] usb 4-1: config 0 descriptor?? [ 230.517114][ T6294] chnl_net:caif_netlink_parms(): no params data found [ 230.529049][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.537547][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.548574][ T6244] device bridge_slave_0 entered promiscuous mode [ 230.632962][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.650611][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.717272][ T6244] device bridge_slave_1 entered promiscuous mode [ 231.078471][ T26] usb 4-1: USB disconnect, device number 4 [ 231.093680][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.179051][ T3651] Bluetooth: hci6: command tx timeout [ 231.293437][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.311065][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.319143][ T6294] device bridge_slave_0 entered promiscuous mode [ 231.331378][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.370605][ T6064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.422927][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.436067][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.456960][ T6294] device bridge_slave_1 entered promiscuous mode [ 231.498838][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.531524][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.633914][ T6244] team0: Port device team_slave_0 added [ 231.654956][ T6064] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.693110][ T6244] team0: Port device team_slave_1 added [ 231.804162][ T3797] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 231.830007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.853355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.032091][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.039180][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.123942][ T3797] usb 5-1: Using ep0 maxpacket: 16 [ 232.179260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.194077][ T6294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.232796][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.250140][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.282621][ T3797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.305838][ T3797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.307648][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.321192][ T3797] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 232.335872][ T3797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.353271][ T3797] usb 5-1: config 0 descriptor?? [ 232.502521][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.541904][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.584019][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.591152][ T3703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.615761][ T6294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.669148][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.681668][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.770217][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.854361][ T3797] wacom 0003:056A:0300.0006: unknown main item tag 0x0 [ 232.867356][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.882499][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.892989][ T3797] wacom 0003:056A:0300.0006: unknown main item tag 0x0 [ 232.905662][ T3797] wacom 0003:056A:0300.0006: unknown main item tag 0x0 [ 232.918587][ T3797] wacom 0003:056A:0300.0006: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 232.940577][ T3797] wacom 0003:056A:0300.0006: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.4-1/input0 [ 232.967767][ T3797] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0300.0006/input/input7 [ 233.120228][ T3797] usb 5-1: USB disconnect, device number 4 [ 233.156021][ T6294] team0: Port device team_slave_0 added [ 233.259551][ T3651] Bluetooth: hci6: command tx timeout [ 233.276596][ T3855] ------------[ cut here ]------------ [ 233.282689][ T3855] WARNING: CPU: 0 PID: 3855 at net/wireless/core.h:231 disconnect_work+0x246/0x340 [ 233.292053][ T3855] Modules linked in: [ 233.295971][ T3855] CPU: 0 PID: 3855 Comm: kworker/0:10 Not tainted 6.1.111-syzkaller #0 [ 233.304263][ T3855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.314398][ T3855] Workqueue: events disconnect_work [ 233.319617][ T3855] RIP: 0010:disconnect_work+0x246/0x340 [ 233.325210][ T3855] Code: e8 9f 31 d0 f7 48 8b 1b 4c 39 fb 0f 84 8f 00 00 00 e8 4e af 78 f7 e9 67 fe ff ff e8 44 af 78 f7 e9 5a ff ff ff e8 3a af 78 f7 <0f> 0b e9 c1 fe ff ff e8 2e af 78 f7 0f 0b eb ad 48 c7 c1 24 1a 9a [ 233.344859][ T3855] RSP: 0018:ffffc90005257c10 EFLAGS: 00010293 [ 233.350975][ T3855] RAX: ffffffff8a120006 RBX: ffff8880207e0ca0 RCX: ffff888026e39dc0 [ 233.358972][ T3855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.367003][ T3855] RBP: 0000000000000000 R08: ffffffff8a11feba R09: fffffbfff1c9f2ea [ 233.375020][ T3855] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880207e0c90 [ 233.383031][ T3855] R13: 1ffff11004cf3d63 R14: dffffc0000000000 R15: ffff88804dd88dd0 [ 233.391040][ T3855] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 233.399982][ T3855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.406613][ T3855] CR2: 00007fec7d931480 CR3: 00000000286bb000 CR4: 00000000003506f0 [ 233.414630][ T3855] Call Trace: [ 233.417915][ T3855] [ 233.420881][ T3855] ? __warn+0x15a/0x520 [ 233.425046][ T3855] ? disconnect_work+0x246/0x340 [ 233.430005][ T3855] ? report_bug+0x2af/0x500 [ 233.434554][ T3855] ? disconnect_work+0x246/0x340 [ 233.439515][ T3855] ? handle_bug+0x3d/0x70 [ 233.443886][ T3855] ? exc_invalid_op+0x16/0x40 [ 233.448585][ T3855] ? asm_exc_invalid_op+0x16/0x20 [ 233.453664][ T3855] ? disconnect_work+0xfa/0x340 [ 233.458526][ T3855] ? disconnect_work+0x246/0x340 [ 233.463513][ T3855] ? disconnect_work+0x246/0x340 [ 233.468478][ T3855] ? process_one_work+0x7a9/0x11d0 [ 233.473641][ T3855] process_one_work+0x8a9/0x11d0 [ 233.478606][ T3855] ? worker_detach_from_pool+0x260/0x260 [ 233.484290][ T3855] ? _raw_spin_lock_irqsave+0x120/0x120 [ 233.489864][ T3855] ? kthread_data+0x4e/0xc0 [ 233.494429][ T3855] ? wq_worker_running+0x97/0x190 [ 233.499480][ T3855] worker_thread+0xa47/0x1200 [ 233.504245][ T3855] kthread+0x28d/0x320 [ 233.508327][ T3855] ? worker_clr_flags+0x190/0x190 [ 233.513399][ T3855] ? kthread_blkcg+0xd0/0xd0 [ 233.518001][ T3855] ret_from_fork+0x1f/0x30 [ 233.522487][ T3855] [ 233.525525][ T3855] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 233.532818][ T3855] CPU: 0 PID: 3855 Comm: kworker/0:10 Not tainted 6.1.111-syzkaller #0 [ 233.541075][ T3855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.551132][ T3855] Workqueue: events disconnect_work [ 233.556348][ T3855] Call Trace: [ 233.559629][ T3855] [ 233.562562][ T3855] dump_stack_lvl+0x1e3/0x2cb [ 233.567250][ T3855] ? nf_tcp_handle_invalid+0x642/0x642 [ 233.572720][ T3855] ? panic+0x764/0x764 [ 233.576798][ T3855] ? vscnprintf+0x59/0x80 [ 233.581140][ T3855] panic+0x318/0x764 [ 233.585041][ T3855] ? __warn+0x169/0x520 [ 233.589198][ T3855] ? memcpy_page_flushcache+0xfc/0xfc [ 233.594587][ T3855] ? ret_from_fork+0x1f/0x30 [ 233.599236][ T3855] __warn+0x348/0x520 [ 233.603239][ T3855] ? disconnect_work+0x246/0x340 [ 233.608188][ T3855] report_bug+0x2af/0x500 [ 233.612524][ T3855] ? disconnect_work+0x246/0x340 [ 233.617478][ T3855] handle_bug+0x3d/0x70 [ 233.621636][ T3855] exc_invalid_op+0x16/0x40 [ 233.626143][ T3855] asm_exc_invalid_op+0x16/0x20 [ 233.631014][ T3855] RIP: 0010:disconnect_work+0x246/0x340 [ 233.636566][ T3855] Code: e8 9f 31 d0 f7 48 8b 1b 4c 39 fb 0f 84 8f 00 00 00 e8 4e af 78 f7 e9 67 fe ff ff e8 44 af 78 f7 e9 5a ff ff ff e8 3a af 78 f7 <0f> 0b e9 c1 fe ff ff e8 2e af 78 f7 0f 0b eb ad 48 c7 c1 24 1a 9a [ 233.645498][ T6359] loop3: detected capacity change from 0 to 512 [ 233.662398][ T3855] RSP: 0018:ffffc90005257c10 EFLAGS: 00010293 [ 233.668473][ T3855] RAX: ffffffff8a120006 RBX: ffff8880207e0ca0 RCX: ffff888026e39dc0 [ 233.669111][ T6359] ext4: Unknown parameter 'smackfshat' [ 233.681888][ T3855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.689846][ T3855] RBP: 0000000000000000 R08: ffffffff8a11feba R09: fffffbfff1c9f2ea [ 233.697802][ T3855] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880207e0c90 [ 233.705761][ T3855] R13: 1ffff11004cf3d63 R14: dffffc0000000000 R15: ffff88804dd88dd0 [ 233.713735][ T3855] ? disconnect_work+0xfa/0x340 [ 233.718598][ T3855] ? disconnect_work+0x246/0x340 [ 233.723544][ T3855] ? process_one_work+0x7a9/0x11d0 [ 233.728668][ T3855] process_one_work+0x8a9/0x11d0 [ 233.733602][ T3855] ? worker_detach_from_pool+0x260/0x260 [ 233.739234][ T3855] ? _raw_spin_lock_irqsave+0x120/0x120 [ 233.744768][ T3855] ? kthread_data+0x4e/0xc0 [ 233.749265][ T3855] ? wq_worker_running+0x97/0x190 [ 233.754274][ T3855] worker_thread+0xa47/0x1200 [ 233.758955][ T3855] kthread+0x28d/0x320 [ 233.763018][ T3855] ? worker_clr_flags+0x190/0x190 [ 233.768038][ T3855] ? kthread_blkcg+0xd0/0xd0 [ 233.772619][ T3855] ret_from_fork+0x1f/0x30 [ 233.777044][ T3855] [ 233.780274][ T3855] Kernel Offset: disabled [ 233.784639][ T3855] Rebooting in 86400 seconds..