last executing test programs: 5.663033392s ago: executing program 4: r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r1, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r2) openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x657, 0xfeffffff) 4.710293638s ago: executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='cpu.pressure\x00', 0xe0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0x5451, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) fcntl$lock(r5, 0x7, &(0x7f00000006c0)={0x1}) dup3(r0, r5, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() accept4$unix(r3, 0x0, 0x0, 0x0) 4.492667161s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) read$char_usb(0xffffffffffffffff, &(0x7f0000000840)=""/171, 0xab) close(0xffffffffffffffff) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000020c0)=ANY=[], 0x2b) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000008800)='./file0\x00', 0x0) 4.383815217s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) 3.572139472s ago: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(0xffffffffffffffff) 3.332482469s ago: executing program 4: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.747712879s ago: executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d0f7b08cd0c390087b0000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.454366217s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f0000000680)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000c00)='ext4_journal_start\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) 1.444563328s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000004c0)=""/91, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x3, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000079b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 1.412395123s ago: executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xed) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086466670211ffe80000000000000", @ANYRESDEC], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.406661364s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x23b, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x80040, 0x0) 1.382760937s ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000540)=@framed={{0x18, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) 1.335103975s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 1.303632269s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) 1.273548724s ago: executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x5, &(0x7f0000000240)=@raw=[@generic, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @map_fd], 0x0, 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x6a) 1.225927681s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x301) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 1.206398515s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x101, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000020000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x400200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000010000000000b705000001ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_type(r1, &(0x7f0000000000), 0x9) 1.180853619s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={0x0, &(0x7f0000000180)=""/220, 0x4a, 0xdc, 0x1}, 0x20) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 1.17114948s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.113072179s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xa0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 1.099188931s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x4, 0xb10}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) 1.055387737s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x13, &(0x7f0000000680)=@ringbuf={{}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 1.033776121s ago: executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) gettid() timer_create(0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 998.487366ms ago: executing program 2: bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%+9llu \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 984.001928ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x101, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 972.68909ms ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x400) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x2a, &(0x7f0000000140), 0x4) syz_genetlink_get_family_id$wireguard(0x0, r1) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) close(r3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4, 0x36e}, 0x48) 886.569683ms ago: executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d0f7b08cd0c390087b0000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 802.171496ms ago: executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 203.925808ms ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x101, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 4: bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x6300}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): entered blocking state [ 90.491770][ T4090] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.528519][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 90.534327][ T4090] device bridge_slave_0 entered promiscuous mode [ 90.563626][ T4090] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.604907][ T4090] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.632134][ T4090] device bridge_slave_1 entered promiscuous mode [ 90.758361][ T4090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.800843][ T4090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.939794][ T4090] team0: Port device team_slave_0 added [ 90.973660][ T4090] team0: Port device team_slave_1 added [ 91.139648][ T4090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.166418][ T4090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.193263][ T4137] loop2: detected capacity change from 0 to 40427 [ 91.264337][ T4090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.303297][ T4137] F2FS-fs (loop2): invalid crc value [ 91.315935][ T4090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.347130][ T4090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.353530][ T4137] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.441364][ T4090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.489536][ T4156] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.534556][ T4137] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.649011][ T4090] device hsr_slave_0 entered promiscuous mode [ 91.733116][ T4090] device hsr_slave_1 entered promiscuous mode [ 91.755616][ T4090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.797793][ T4090] Cannot create hsr debugfs directory [ 91.946257][ T4170] syz-executor.2[4170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.946797][ T4170] syz-executor.2[4170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.687923][ T3577] Bluetooth: hci2: command 0x041b tx timeout [ 92.876914][ T3889] attempt to access beyond end of device [ 92.876914][ T3889] loop2: rw=524288, want=45072, limit=40427 [ 92.940943][ T3889] attempt to access beyond end of device [ 92.940943][ T3889] loop2: rw=0, want=45072, limit=40427 [ 93.038294][ T4090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.142204][ T4090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.175819][ T3811] attempt to access beyond end of device [ 93.175819][ T3811] loop2: rw=2049, want=45120, limit=40427 [ 93.366744][ T4090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.493715][ T4090] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.607693][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.708472][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.839166][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.921927][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.042457][ T3889] syz-executor.2 (3889) used greatest stack depth: 19328 bytes left [ 94.428079][ T4090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.453609][ T4090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.553799][ T4090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.572417][ T4090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.758606][ T1068] Bluetooth: hci2: command 0x040f tx timeout [ 95.008768][ T4090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.047197][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.055272][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.140997][ T4090] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.258166][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.267008][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.297697][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.304808][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.321225][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.334318][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.346963][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.354183][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.399734][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.411988][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.422376][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.463042][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.476462][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.496417][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.531879][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.578334][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.586992][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.681493][ T4090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.714907][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.745144][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.760044][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.794977][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.808326][ T4207] chnl_net:caif_netlink_parms(): no params data found [ 95.959325][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 96.100312][ T4222] loop4: detected capacity change from 0 to 40427 [ 96.099887][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.206313][ T4207] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.222310][ T4222] F2FS-fs (loop4): invalid crc value [ 96.244944][ T4207] device bridge_slave_0 entered promiscuous mode [ 96.264528][ T4222] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.345488][ T4090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.378622][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.387545][ T4207] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.395716][ T4207] device bridge_slave_1 entered promiscuous mode [ 96.405698][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.413885][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.457381][ T4222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 96.628845][ T4207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.735856][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 96.759285][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.791032][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.850301][ T3574] Bluetooth: hci2: command 0x0419 tx timeout [ 96.865201][ T4305] syz-executor.4[4305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.865764][ T4305] syz-executor.4[4305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.600812][ T4207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.783981][ T3526] attempt to access beyond end of device [ 97.783981][ T3526] loop4: rw=524288, want=45072, limit=40427 [ 97.839972][ T4207] team0: Port device team_slave_0 added [ 97.886845][ T3526] attempt to access beyond end of device [ 97.886845][ T3526] loop4: rw=0, want=45072, limit=40427 [ 97.910795][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.939080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.988931][ T4207] team0: Port device team_slave_1 added [ 98.024836][ T4090] device veth0_vlan entered promiscuous mode [ 98.041518][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.054680][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.115041][ T4207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.136025][ T4207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.196442][ T4207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.240760][ T4090] device veth1_vlan entered promiscuous mode [ 98.261030][ T154] device hsr_slave_0 left promiscuous mode [ 98.276152][ T154] device hsr_slave_1 left promiscuous mode [ 98.298274][ T3809] attempt to access beyond end of device [ 98.298274][ T3809] loop4: rw=2049, want=45120, limit=40427 [ 98.323097][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.339116][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.355786][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.365295][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.421084][ T154] device bridge_slave_1 left promiscuous mode [ 98.466158][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.523843][ T154] device bridge_slave_0 left promiscuous mode [ 98.566537][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.621957][ T154] device hsr_slave_0 left promiscuous mode [ 98.641742][ T154] device hsr_slave_1 left promiscuous mode [ 98.687433][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.694893][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.710846][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.840892][ T3577] Bluetooth: hci3: command 0x041b tx timeout [ 98.847720][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.877858][ T154] device bridge_slave_1 left promiscuous mode [ 98.884235][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.400026][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 99.668658][ T154] device bridge_slave_0 left promiscuous mode [ 99.675036][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.748804][ T154] device veth1_macvtap left promiscuous mode [ 99.754969][ T154] device veth0_macvtap left promiscuous mode [ 99.763011][ T154] device veth1_vlan left promiscuous mode [ 99.781597][ T154] device veth0_vlan left promiscuous mode [ 99.828666][ T154] device veth1_macvtap left promiscuous mode [ 99.834769][ T154] device veth0_macvtap left promiscuous mode [ 99.854972][ T154] device veth1_vlan left promiscuous mode [ 99.861712][ T154] device veth0_vlan left promiscuous mode [ 100.044253][ T4339] loop1: detected capacity change from 0 to 2048 [ 100.187902][ T4340] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.924346][ T4081] Bluetooth: hci3: command 0x040f tx timeout [ 101.392563][ T154] team0 (unregistering): Port device team_slave_1 removed [ 101.426831][ T154] team0 (unregistering): Port device team_slave_0 removed [ 101.476140][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.494959][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.607391][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 101.616416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 101.626967][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 101.636987][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 101.648969][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 101.663222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 101.672463][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 101.684977][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 101.697961][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 104.335300][ T3519] Bluetooth: hci3: command 0x0419 tx timeout [ 104.434562][ T154] bond0 (unregistering): Released all slaves [ 106.029629][ T154] team0 (unregistering): Port device team_slave_1 removed [ 106.045143][ T154] team0 (unregistering): Port device team_slave_0 removed [ 106.094793][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.127197][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.195735][ T4360] loop1: detected capacity change from 0 to 40427 [ 106.234165][ T4360] F2FS-fs (loop1): invalid crc value [ 106.249786][ T4360] F2FS-fs (loop1): Found nat_bits in checkpoint [ 106.329136][ T4360] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.584750][ T154] bond0 (unregistering): Released all slaves [ 106.647285][ T4371] syz-executor.1[4371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.647806][ T4371] syz-executor.1[4371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.488787][ T4207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.510563][ T4373] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 107.514465][ T4207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.558880][ T4207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.638759][ T4207] device hsr_slave_0 entered promiscuous mode [ 107.646295][ T4207] device hsr_slave_1 entered promiscuous mode [ 107.693682][ T3868] attempt to access beyond end of device [ 107.693682][ T3868] loop1: rw=524288, want=45072, limit=40427 [ 107.709560][ T3868] attempt to access beyond end of device [ 107.709560][ T3868] loop1: rw=0, want=45072, limit=40427 [ 107.769484][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.780494][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.884271][ T144] attempt to access beyond end of device [ 107.884271][ T144] loop1: rw=2049, want=45120, limit=40427 [ 107.989689][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.999069][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.017552][ T4090] device veth0_macvtap entered promiscuous mode [ 108.067512][ T4090] device veth1_macvtap entered promiscuous mode [ 108.114121][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.125378][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.135769][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.146706][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.160251][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.171128][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.193200][ T4090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.217857][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.226799][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.237972][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.246816][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.259226][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.273214][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.284077][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.295082][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.305613][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.318613][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.331166][ T4090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.359895][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.406517][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.469214][ T4090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.518149][ T4090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.555544][ T4090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.597562][ T4090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.960683][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.016461][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.111120][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.136927][ T3809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.173308][ T3809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.250275][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.489739][ T4207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.544340][ T4207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.599973][ T4207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.661347][ T4207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.102870][ T4207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.453578][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.510327][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.712071][ T3574] Bluetooth: hci0: command 0x0409 tx timeout [ 111.747988][ T4207] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.836309][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.871357][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.902009][ T3571] Bluetooth: hci1: command 0x0409 tx timeout [ 111.918150][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.925251][ T4081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.999406][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.012016][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.028808][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.042371][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.049506][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.064236][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.127649][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.136653][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.150578][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.162694][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.175728][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.206786][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.298829][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.354575][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.442925][ T4394] chnl_net:caif_netlink_parms(): no params data found [ 112.506058][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.526721][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.659405][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.684302][ T4443] loop0: detected capacity change from 0 to 2048 [ 112.914175][ T4450] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.047754][ T4402] chnl_net:caif_netlink_parms(): no params data found [ 113.086847][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.132123][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.198597][ T4394] device bridge_slave_0 entered promiscuous mode [ 113.296558][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.312718][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.330692][ T4394] device bridge_slave_1 entered promiscuous mode [ 113.368232][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.375734][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.494027][ T4207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.622202][ T4394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.635304][ T4394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.664674][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.675888][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.698548][ T4402] device bridge_slave_0 entered promiscuous mode [ 113.839385][ T4081] Bluetooth: hci0: command 0x041b tx timeout [ 113.908862][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.918314][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.950784][ T4402] device bridge_slave_1 entered promiscuous mode [ 113.962766][ T3574] Bluetooth: hci1: command 0x041b tx timeout [ 114.121562][ T4402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.175706][ T4394] team0: Port device team_slave_0 added [ 114.216721][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.254966][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.292419][ T4402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.364991][ T4394] team0: Port device team_slave_1 added [ 114.484521][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.503482][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.533609][ T4207] device veth0_vlan entered promiscuous mode [ 114.721738][ T4402] team0: Port device team_slave_0 added [ 114.742998][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.756459][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.839464][ T4394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.846434][ T4394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.941256][ T4394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.964970][ T4402] team0: Port device team_slave_1 added [ 114.979911][ T4207] device veth1_vlan entered promiscuous mode [ 115.059619][ T4394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.071611][ T4394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.140271][ T4394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.283897][ T4207] device veth0_macvtap entered promiscuous mode [ 115.329273][ T4402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.337121][ T3605] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.346144][ T4402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.385852][ T4402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.408065][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.418004][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.440518][ T4394] device hsr_slave_0 entered promiscuous mode [ 115.458337][ T4394] device hsr_slave_1 entered promiscuous mode [ 115.466516][ T4394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.484858][ T4394] Cannot create hsr debugfs directory [ 115.502277][ T4207] device veth1_macvtap entered promiscuous mode [ 115.524544][ T4402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.542237][ T4402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.581845][ T4402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.603797][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.617407][ T3605] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 115.623101][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.698892][ T3605] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.722791][ T3605] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.752751][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.757331][ T3605] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.777797][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.812938][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.884322][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.894786][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.905790][ T3605] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.914796][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.924873][ T3605] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.936050][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.946708][ T3605] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.953422][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.979371][ T4207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.018644][ T3577] Bluetooth: hci0: command 0x040f tx timeout [ 116.037203][ T3577] Bluetooth: hci1: command 0x040f tx timeout [ 116.044884][ T3605] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.055342][ T3605] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.066596][ T3605] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.074806][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.086722][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.886057][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.897633][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.907939][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.919426][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.929651][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.940607][ T3605] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.960887][ T3605] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.972757][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.982763][ T4207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.992345][ T3605] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.993300][ T4207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.013065][ T4207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.038369][ T4402] device hsr_slave_0 entered promiscuous mode [ 117.077523][ T4402] device hsr_slave_1 entered promiscuous mode [ 117.097116][ T4402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.115674][ T4402] Cannot create hsr debugfs directory [ 117.178087][ T3605] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.186940][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.187000][ T3605] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.205881][ T3605] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.224677][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.240641][ T4207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.275931][ T4207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.286230][ T4207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.300335][ T4207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.313416][ T3605] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.575012][ T3605] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.855118][ T3605] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.972442][ T3605] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.001005][ T3605] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.037522][ T3577] Bluetooth: hci0: command 0x0419 tx timeout [ 118.047359][ T3605] usb 4-1: config 0 interface 0 has no altsetting 0 [ 118.125035][ T3577] Bluetooth: hci1: command 0x0419 tx timeout [ 118.137211][ T3605] usb 4-1: unable to read config index 7 descriptor/start: -71 [ 118.145117][ T3605] usb 4-1: can't read configurations, error -71 [ 118.179816][ T4394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.274629][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.287238][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.314400][ T4394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.373470][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.403083][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.479408][ T4394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.528569][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.546049][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.556342][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.585548][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.633645][ T4394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.677460][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.725774][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.802336][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.924151][ T4538] loop3: detected capacity change from 0 to 32768 [ 118.987234][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 119.019666][ T4538] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4538) [ 119.108239][ T13] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 119.109497][ T4394] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.127962][ T13] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 119.136706][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 119.184012][ T13] usb 1-1: config 1 has no interface number 0 [ 119.204752][ T13] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.237347][ T13] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 119.271193][ T13] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 119.300449][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.327331][ T4538] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 119.351584][ T4394] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.366295][ T4538] BTRFS info (device loop3): using free space tree [ 119.379946][ T4394] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.391409][ T13] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 119.405774][ T4538] BTRFS info (device loop3): has skinny extents [ 119.427835][ T4551] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.488612][ T4394] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.608831][ T13] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 119.769399][ T4538] BTRFS info (device loop3): enabling ssd optimizations [ 119.851544][ T4394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.917669][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.926158][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.977727][ T4394] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.042985][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.058862][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.078703][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.085807][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.206766][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.214269][ T4596] loop2: detected capacity change from 0 to 2048 [ 120.238841][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.249900][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.267971][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.275071][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.337905][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.379323][ T4597] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.385069][ T4402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.726547][ T4615] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 120.766605][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.778123][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.812796][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.842264][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.873230][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.913309][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.933655][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.969058][ T4402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.984210][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.997800][ T4394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.043313][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.056649][ T4402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.106030][ T4402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.178000][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.198551][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.289410][ T3574] usb 1-1: USB disconnect, device number 3 [ 121.308867][ T3574] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 121.452072][ T4402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.510057][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.530281][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.543421][ T4402] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.556564][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.566407][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.575141][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.582243][ T4617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.603814][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.622742][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.637718][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.646384][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.653521][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.662769][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.743766][ T4394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.785776][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.815362][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.886504][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.906849][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.074477][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.076748][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.088409][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.098598][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.196366][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.205754][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.215487][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.225610][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.249526][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.975289][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.005550][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.205673][ T4394] device veth0_vlan entered promiscuous mode [ 124.266816][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.292508][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.369990][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.378618][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.400606][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.426105][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.468221][ T4394] device veth1_vlan entered promiscuous mode [ 124.503241][ T4402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.616941][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.639138][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.669652][ T4394] device veth0_macvtap entered promiscuous mode [ 124.702562][ T154] device hsr_slave_0 left promiscuous mode [ 124.719685][ T154] device hsr_slave_1 left promiscuous mode [ 124.732687][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.812736][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.865303][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.883096][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.939585][ T154] device bridge_slave_1 left promiscuous mode [ 124.954287][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.999231][ T154] device bridge_slave_0 left promiscuous mode [ 125.036281][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.153980][ T154] device hsr_slave_0 left promiscuous mode [ 125.187738][ T4688] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.194984][ T154] device hsr_slave_1 left promiscuous mode [ 125.209910][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.253316][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.316670][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.340771][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.365216][ T154] device bridge_slave_1 left promiscuous mode [ 125.381030][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.402169][ T154] device bridge_slave_0 left promiscuous mode [ 125.436393][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.496347][ T154] device veth1_macvtap left promiscuous mode [ 125.536546][ T154] device veth0_macvtap left promiscuous mode [ 125.562993][ T154] device veth1_vlan left promiscuous mode [ 125.579418][ T4691] loop2: detected capacity change from 0 to 2048 [ 125.591781][ T154] device veth0_vlan left promiscuous mode [ 125.615014][ T154] device veth1_macvtap left promiscuous mode [ 125.639075][ T154] device veth0_macvtap left promiscuous mode [ 125.663810][ T154] device veth1_vlan left promiscuous mode [ 125.670977][ T154] device veth0_vlan left promiscuous mode [ 125.751372][ T4694] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.118486][ T4704] loop3: detected capacity change from 0 to 256 [ 127.367404][ T1068] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.449620][ T4709] loop2: detected capacity change from 0 to 4096 [ 127.482555][ T154] team0 (unregistering): Port device team_slave_1 removed [ 127.494053][ T4709] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 127.531469][ T154] team0 (unregistering): Port device team_slave_0 removed [ 127.555575][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.631172][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.724173][ T4709] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 127.767135][ T1068] usb 1-1: Using ep0 maxpacket: 32 [ 127.773060][ T154] bond0 (unregistering): Released all slaves [ 127.987410][ T1068] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 127.995828][ T1068] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 128.085873][ T1068] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 128.108769][ T1068] usb 1-1: config 1 has no interface number 0 [ 128.114917][ T1068] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.134642][ T1068] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 128.164876][ T26] audit: type=1800 audit(1719029927.504:4): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 128.207210][ T1068] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 128.249402][ T1068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.384188][ T4207] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 128.394406][ T1068] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 128.605217][ T1068] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 128.787373][ T3574] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.821285][ T154] team0 (unregistering): Port device team_slave_1 removed [ 128.862777][ T154] team0 (unregistering): Port device team_slave_0 removed [ 128.899631][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.932867][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.060766][ T154] bond0 (unregistering): Released all slaves [ 129.067367][ T1068] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.187403][ T3574] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.199520][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.210701][ T3574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.211781][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.249112][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.262120][ T4394] device veth1_macvtap entered promiscuous mode [ 129.288334][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.327449][ T3574] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.336967][ T3574] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.338064][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.345265][ T3574] usb 4-1: Manufacturer: syz [ 129.380982][ T4402] device veth0_vlan entered promiscuous mode [ 129.394035][ T3574] usb 4-1: config 0 descriptor?? [ 129.430331][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.449357][ T3574] igorplugusb 4-1:0.0: incorrect number of endpoints [ 129.454325][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.481378][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.496953][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.512284][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.523954][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.534232][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.544739][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.585213][ T4394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.601524][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.613170][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.627427][ T1068] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 129.638408][ T1068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.650182][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.661223][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.678704][ T1068] usb 3-1: Product: syz [ 129.686920][ T1068] usb 3-1: Manufacturer: syz [ 129.692768][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.709629][ T1068] usb 3-1: SerialNumber: syz [ 129.734198][ T4081] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 129.750934][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.763237][ T1068] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 129.796527][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.840875][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.861974][ T4394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.891443][ T4402] device veth1_vlan entered promiscuous mode [ 129.903820][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.915621][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.934361][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.951478][ T4394] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.974768][ T4394] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.991337][ T4394] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.010683][ T4394] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.045594][ T4616] usb 1-1: USB disconnect, device number 4 [ 130.068447][ T4616] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 130.124474][ T4014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.159454][ T4014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.168766][ T4014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.193061][ T4402] device veth0_macvtap entered promiscuous mode [ 130.505378][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.569924][ T4402] device veth1_macvtap entered promiscuous mode [ 130.637842][ T4081] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 130.776194][ T4402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.847921][ T4402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.879773][ T4402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.895006][ T4402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.906409][ T4402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.932246][ T4402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.963468][ T4402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.045829][ T4402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.066518][ T3605] usb 3-1: USB disconnect, device number 2 [ 131.096688][ T4402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.118939][ T3811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.144582][ T4402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.165721][ T3811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.226969][ T4402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.237063][ T4402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.248297][ T4402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.258228][ T4402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.272427][ T4402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.285930][ T4402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.497919][ T4402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.518359][ T4402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.544433][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.580620][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.590257][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.598187][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.606795][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.630484][ T4402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.664430][ T3519] usb 4-1: USB disconnect, device number 4 [ 131.667997][ T4402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.717339][ T4402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.726085][ T4402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.727416][ T4081] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 131.748172][ T4740] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 131.763574][ T4081] ath9k_htc: Failed to initialize the device [ 131.772551][ T3605] usb 3-1: ath9k_htc: USB layer deinitialized [ 132.589668][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.667364][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.703989][ T4014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.839550][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.845976][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.960408][ T4756] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 133.645473][ T4759] loop2: detected capacity change from 0 to 1024 [ 133.746171][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.783103][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.831740][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.831984][ T4759] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.856211][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.876564][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.893189][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.157084][ T4759] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,bsddf,nojournal_checksum,norecovery,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 134.287126][ T3605] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.387258][ T4776] 9pnet: Insufficient options for proto=fd [ 134.647628][ T3605] usb 4-1: Using ep0 maxpacket: 32 [ 134.778305][ T3605] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 134.903451][ T3605] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 134.975879][ T3605] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 135.039015][ T3605] usb 4-1: config 1 has no interface number 0 [ 135.045166][ T3605] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.113128][ T3605] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 135.153421][ T3605] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 136.005250][ T3605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.070095][ T3605] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 136.088619][ T4081] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 136.277949][ T3605] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 136.355074][ T4764] loop4: detected capacity change from 0 to 40427 [ 136.535651][ T4764] F2FS-fs (loop4): invalid crc value [ 137.438015][ T4764] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 137.448041][ T4081] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 137.456408][ T4081] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.468988][ T4617] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 138.452953][ T3577] usb 4-1: USB disconnect, device number 5 [ 138.461015][ T3577] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 138.477254][ T4081] usb 2-1: string descriptor 0 read error: -71 [ 138.483476][ T4081] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 138.569391][ T4081] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 138.751645][ T4081] usb 2-1: config 0 descriptor?? [ 139.701183][ T4081] usb 2-1: can't set config #0, error -71 [ 139.766176][ T4081] usb 2-1: USB disconnect, device number 2 [ 140.840051][ T4828] 9pnet: Insufficient options for proto=fd [ 140.869668][ T4830] device macsec1 entered promiscuous mode [ 140.878723][ T4830] device macvlan1 entered promiscuous mode [ 140.918418][ T4830] device macvlan1 left promiscuous mode [ 141.088731][ T4837] loop4: detected capacity change from 0 to 256 [ 141.316494][ T4617] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.567577][ T4617] usb 1-1: Using ep0 maxpacket: 16 [ 141.973582][ T4617] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.023806][ T4837] FAT-fs (loop4): Unrecognized mount option "uaefree" or missing value [ 142.056472][ T4617] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 142.101967][ T4617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.136061][ T4617] usb 1-1: config 0 descriptor?? [ 142.190195][ T4617] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 142.417199][ T4605] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 142.448048][ T4081] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.455835][ T2948] bcm5974 1-1:0.0: could not read from device [ 142.482935][ T4617] usb 1-1: USB disconnect, device number 5 [ 142.497450][ T4832] bcm5974 1-1:0.0: could not read from device [ 142.521063][ T2948] bcm5974 1-1:0.0: could not read from device [ 142.649746][ T3574] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.687089][ T4605] usb 3-1: Using ep0 maxpacket: 16 [ 142.717383][ T4081] usb 2-1: Using ep0 maxpacket: 32 [ 142.807303][ T4605] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.827156][ T4605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.839098][ T4837] loop4: detected capacity change from 0 to 32768 [ 142.849978][ T4605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.861835][ T4605] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 142.873125][ T4605] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.883727][ T4081] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 142.916754][ T4081] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 142.931650][ T4081] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 142.956035][ T4081] usb 2-1: config 1 has no interface number 0 [ 142.977316][ T4605] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 142.996763][ T4081] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.007333][ T4605] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.016140][ T4605] usb 3-1: Manufacturer: syz [ 143.026818][ T4837] [ 143.026818][ T4837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.026818][ T4837] [ 143.036907][ T4081] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 143.091180][ T4605] usb 3-1: config 0 descriptor?? [ 143.116843][ T4081] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 143.137172][ T3574] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 143.175239][ T3574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.196846][ T4081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.206032][ T4837] [ 143.206032][ T4837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.206032][ T4837] [ 143.261630][ T4837] [ 143.261630][ T4837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.261630][ T4837] [ 143.404720][ T4081] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 143.416935][ T4850] [ 143.416935][ T4850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.416935][ T4850] [ 143.438716][ T4837] [ 143.438716][ T4837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.438716][ T4837] [ 143.449436][ T3574] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 143.471726][ T3574] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 144.293908][ T4605] rc_core: IR keymap rc-hauppauge not found [ 144.367293][ T3574] usb 4-1: Manufacturer: syz [ 144.379353][ T3574] usb 4-1: config 0 descriptor?? [ 144.391702][ T4837] [ 144.391702][ T4837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.391702][ T4837] [ 144.408345][ T4081] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 144.425567][ T4605] Registered IR keymap rc-empty [ 144.427387][ T4850] [ 144.427387][ T4850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.427387][ T4850] [ 144.443050][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 144.444924][ T3574] igorplugusb 4-1:0.0: incorrect number of endpoints [ 144.487362][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 144.507446][ T4850] jfs: Unrecognized mount option "1844674407370955161500000000000000000000000Xcv:Q"Co"'ή_0-%+ t6P'k;/|%T9i(%Z@G~ͱ\%S:UVTOvO7MfOJjN"Bn]XZ [ 144.507446][ T4850] o*e4bL*" or missing value [ 144.551455][ T4605] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 144.586657][ T4605] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 144.604092][ T4837] [ 144.604092][ T4837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.604092][ T4837] [ 145.142231][ T4837] [ 145.142231][ T4837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.142231][ T4837] [ 145.488154][ T3574] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 145.499550][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.520172][ T275] [ 145.520172][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.520172][ T275] [ 145.558150][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.583086][ T4394] [ 145.583086][ T4394] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.583086][ T4394] [ 145.597445][ T4394] [ 145.597445][ T4394] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.597445][ T4394] [ 145.619071][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.707359][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.715424][ T4871] loop0: detected capacity change from 0 to 8 [ 145.715698][ T3605] usb 4-1: USB disconnect, device number 6 [ 145.777270][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.807413][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.827495][ T4617] usb 2-1: USB disconnect, device number 3 [ 145.834767][ T4617] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 145.870850][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.957174][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.012540][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.077248][ T4605] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.118788][ T4605] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 146.152147][ T4605] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 146.305753][ T4871] SQUASHFS error: Failed to read block 0x4e8: -5 [ 147.287558][ T4605] usb 3-1: USB disconnect, device number 3 [ 147.297328][ T4871] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 147.347577][ T26] audit: type=1800 audit(1719029946.694:5): pid=4871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 147.420519][ T4893] 9pnet: Insufficient options for proto=fd [ 149.774664][ T4903] device vlan2 entered promiscuous mode [ 149.857334][ T4903] device team0 entered promiscuous mode [ 149.863135][ T4903] device team_slave_0 entered promiscuous mode [ 149.877462][ T4903] device team_slave_1 entered promiscuous mode [ 149.929116][ T4905] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.987604][ T4906] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.112558][ T4906] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.123442][ T4919] loop4: detected capacity change from 0 to 512 [ 150.207360][ T4906] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.233608][ T4906] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.360801][ T4919] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.402326][ T4919] ext4 filesystem being mounted at /root/syzkaller-testdir1914583528/syzkaller.HU42pZ/8/bus supports timestamps until 2038 (0x7fffffff) [ 150.409702][ T4617] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.897725][ T4617] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 150.924273][ T4931] loop1: detected capacity change from 0 to 1024 [ 150.934083][ T4617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.972365][ T4933] 9pnet: Insufficient options for proto=fd [ 151.037559][ T4617] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 151.062456][ T4617] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 151.109240][ T4617] usb 4-1: Manufacturer: syz [ 151.259290][ T4617] usb 4-1: config 0 descriptor?? [ 151.301902][ T4912] loop0: detected capacity change from 0 to 32768 [ 151.429048][ T4617] igorplugusb 4-1:0.0: incorrect number of endpoints [ 151.447327][ T4942] loop4: detected capacity change from 0 to 764 [ 152.310667][ T1427] hfsplus: b-tree write err: -5, ino 4 [ 152.598975][ T4962] loop2: detected capacity change from 0 to 128 [ 153.600328][ T3574] usb 4-1: USB disconnect, device number 7 [ 153.620307][ T4962] loop2: detected capacity change from 0 to 4096 [ 153.923732][ T4976] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.972679][ T26] audit: type=1800 audit(1719029953.304:6): pid=4962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 155.557191][ T4081] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.997278][ T4081] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 156.022648][ T4081] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.070786][ T4993] loop3: detected capacity change from 0 to 32768 [ 156.137305][ T4993] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4993) [ 156.167217][ T4081] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 156.185275][ T4081] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 156.225316][ T4081] usb 2-1: Manufacturer: syz [ 156.254482][ T4081] usb 2-1: config 0 descriptor?? [ 156.257500][ T4993] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 156.311892][ T4993] BTRFS info (device loop3): using free space tree [ 156.335692][ T4081] igorplugusb 2-1:0.0: incorrect number of endpoints [ 157.266924][ T4993] BTRFS info (device loop3): has skinny extents [ 157.452752][ T5029] loop2: detected capacity change from 0 to 512 [ 157.649997][ T4993] BTRFS info (device loop3): enabling ssd optimizations [ 157.651218][ T5029] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 157.730453][ T5029] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 157.812939][ T5029] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,debug_want_extra_isize=0x0000000000000008,usrjquota=,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 157.958034][ T3823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (3823) [ 158.468581][ T5068] loop2: detected capacity change from 0 to 256 [ 158.572776][ T5068] mmap: syz-executor.2 (5068) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 158.815522][ T5078] syz-executor.3 sent an empty control message without MSG_MORE. [ 159.066333][ T5084] device vlan2 entered promiscuous mode [ 159.172289][ T5060] usb 2-1: USB disconnect, device number 4 [ 159.237191][ T5059] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.295183][ T5088] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.345447][ T5089] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.649357][ T5059] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.672788][ T5077] loop0: detected capacity change from 0 to 32768 [ 159.687530][ T5059] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 159.713072][ T5059] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.733783][ T5059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.767429][ T5081] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 159.808238][ T5077] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5077) [ 159.943954][ T5077] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 159.991023][ T5077] BTRFS info (device loop0): metadata ratio 2 [ 160.031547][ T5077] BTRFS info (device loop0): force zlib compression, level 3 [ 160.077380][ T5077] BTRFS info (device loop0): enabling auto defrag [ 160.112502][ T5077] BTRFS info (device loop0): max_inline at 0 [ 160.150943][ T5077] BTRFS info (device loop0): using free space tree [ 160.195271][ T5077] BTRFS info (device loop0): has skinny extents [ 160.986647][ T5116] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 161.444565][ T5120] loop1: detected capacity change from 0 to 256 [ 161.770829][ T5127] loop1: detected capacity change from 0 to 128 [ 161.786560][ T4967] syz-executor.4 (4967): drop_caches: 1 [ 161.867597][ T5131] UBIFS error (pid: 5131): cannot open "/dev/sg0", error -22 [ 161.878282][ T5127] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.897764][ T5127] ext4 filesystem being mounted at /root/syzkaller-testdir3702908565/syzkaller.zh0WXV/19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 161.933858][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.111698][ T4081] usb 4-1: USB disconnect, device number 8 [ 162.247190][ T5137] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.394744][ T5135] team0: Port device team_slave_0 removed [ 162.401499][ T5135] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 162.772150][ T5152] loop3: detected capacity change from 0 to 1024 [ 162.832657][ T5152] EXT4-fs (loop3): Ignoring removed orlov option [ 162.863916][ T5152] EXT4-fs (loop3): can't mount with commit=6, fs mounted w/o journal [ 163.001926][ T5139] loop1: detected capacity change from 0 to 32768 [ 163.090273][ T5139] XFS: ikeep mount option is deprecated. [ 163.180480][ T5146] loop2: detected capacity change from 0 to 32768 [ 163.213788][ T5139] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 163.228510][ T5146] ======================================================= [ 163.228510][ T5146] WARNING: The mand mount option has been deprecated and [ 163.228510][ T5146] and is ignored by this kernel. Remove the mand [ 163.228510][ T5146] option from the mount to silence this warning. [ 163.228510][ T5146] ======================================================= [ 163.263662][ T5139] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 163.290080][ T5139] XFS (loop1): Mounting V5 Filesystem [ 163.328347][ T5150] loop0: detected capacity change from 0 to 40427 [ 163.371921][ T5146] jfs_strtoUCS: char2uni returned -22. [ 163.382316][ T5146] charset = euc-jp, char = 0xff [ 163.387671][ T5150] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 163.394999][ T5150] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 163.436856][ T5171] loop3: detected capacity change from 0 to 2048 [ 163.459404][ T5150] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.486603][ T5139] XFS (loop1): Ending clean mount [ 163.580379][ T5171] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.630701][ T5139] XFS (loop1): Quotacheck needed: Please wait. [ 163.658107][ T26] audit: type=1804 audit(1719029962.994:7): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir20341384/syzkaller.bPgPk1/40/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 163.735716][ T5150] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 163.750527][ T5150] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.793178][ T5139] XFS (loop1): Quotacheck: Done. [ 163.793274][ T5170] attempt to access beyond end of device [ 163.793274][ T5170] loop0: rw=2049, want=45104, limit=40427 [ 163.969486][ T4402] XFS (loop1): Unmounting Filesystem [ 164.201708][ T5190] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.401974][ T5196] team0: Port device team_slave_0 removed [ 164.409080][ T5196] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 164.512374][ T26] audit: type=1804 audit(1719029963.854:8): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3702908565/syzkaller.zh0WXV/21/bus" dev="sda1" ino=1963 res=1 errno=0 [ 164.521999][ T5199] syz-executor.1 (pid 5199) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 164.592797][ T5205] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 164.897229][ T5208] loop3: detected capacity change from 0 to 32768 [ 165.024248][ T5208] jfs_strtoUCS: char2uni returned -22. [ 165.030336][ T5208] charset = euc-jp, char = 0xff [ 165.398199][ T5219] loop4: detected capacity change from 0 to 2048 [ 165.423602][ T5221] loop2: detected capacity change from 0 to 8 [ 165.496380][ T5219] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nogrpid,,errors=continue. Quota mode: none. [ 165.512883][ T5230] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 165.541260][ T5219] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.674730][ T5221] SQUASHFS error: Failed to read block 0x4e8: -5 [ 165.713669][ T5221] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 165.724304][ T5233] 9pnet: Insufficient options for proto=fd [ 165.764303][ T26] audit: type=1800 audit(1719029965.104:9): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 166.242758][ T5252] loop3: detected capacity change from 0 to 1024 [ 166.347743][ T26] audit: type=1804 audit(1719029965.454:10): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir20341384/syzkaller.bPgPk1/47/file0" dev="sda1" ino=1964 res=1 errno=0 [ 166.443473][ T5253] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.567641][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.677206][ T5054] Bluetooth: hci0: command 0x0c20 tx timeout [ 167.178355][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.378249][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.442338][ T5264] device bridge_slave_1 left promiscuous mode [ 167.458133][ T5264] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.513243][ T5264] device bridge_slave_0 left promiscuous mode [ 167.532405][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.625632][ T5248] loop4: detected capacity change from 0 to 32768 [ 167.711634][ T5248] jfs_strtoUCS: char2uni returned -22. [ 167.731092][ T5273] team0: Port device team_slave_0 removed [ 167.737153][ T5248] charset = euc-jp, char = 0xff [ 167.753343][ T5273] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 167.988853][ T5286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.002956][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.236270][ T5296] loop2: detected capacity change from 0 to 1024 [ 168.243943][ T26] audit: type=1804 audit(1719029967.514:11): pid=5296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1209200004/syzkaller.lqElb6/51/file0" dev="sda1" ino=1959 res=1 errno=0 [ 168.925868][ T4081] Bluetooth: hci0: command 0x0401 tx timeout [ 169.002756][ T5298] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 169.015558][ T5298] overlayfs: missing 'lowerdir' [ 169.072999][ T5304] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.345023][ T5332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.367990][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.477087][ T4603] Bluetooth: hci5: command 0x1003 tx timeout [ 169.485166][ T3542] Bluetooth: hci5: sending frame failed (-49) [ 169.644712][ T5326] loop0: detected capacity change from 0 to 32768 [ 169.784391][ T5340] loop4: detected capacity change from 0 to 1024 [ 169.791515][ T26] audit: type=1804 audit(1719029969.074:12): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1914583528/syzkaller.HU42pZ/21/file0" dev="sda1" ino=1964 res=1 errno=0 [ 169.904819][ T5326] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5326) [ 170.579813][ T5326] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 170.597928][ T5326] BTRFS info (device loop0): disabling free space tree [ 170.605121][ T5326] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 170.655112][ T5326] BTRFS info (device loop0): trying to use backup root at mount time [ 170.664408][ T5342] loop4: detected capacity change from 0 to 4096 [ 170.677202][ T5326] BTRFS info (device loop0): enabling disk space caching [ 170.684651][ T5326] BTRFS error (device loop0): cannot disable free space tree [ 170.728409][ T5326] BTRFS error (device loop0): open_ctree failed [ 170.734958][ T5342] ntfs3: loop4: Failed to load $BadClus. [ 170.783403][ T5329] loop3: detected capacity change from 0 to 32768 [ 170.849289][ T5329] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 170.877086][ T5329] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 170.948992][ T5329] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 170.987090][ T4603] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 170.987889][ T5346] loop0: detected capacity change from 0 to 256 [ 170.995753][ T5335] loop2: detected capacity change from 0 to 32768 [ 171.007435][ T4603] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 171.016826][ T4603] attempt to access beyond end of device [ 171.016826][ T4603] loop3: rw=0, want=262088, limit=32768 [ 171.052818][ T4603] gfs2: fsid=syz:syz.0: jid=0: Failed [ 171.060306][ T5329] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 171.123567][ T5335] XFS (loop2): Mounting V5 Filesystem [ 171.201783][ T5335] XFS (loop2): Ending clean mount [ 171.231206][ T5335] XFS (loop2): Quotacheck needed: Please wait. [ 171.288631][ T5335] XFS (loop2): Quotacheck: Done. [ 171.337375][ T4207] XFS (loop2): Unmounting Filesystem [ 171.563321][ T4081] Bluetooth: hci5: command 0x1001 tx timeout [ 171.569584][ T3542] Bluetooth: hci5: sending frame failed (-49) [ 171.744096][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.767733][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.981239][ T5382] loop4: detected capacity change from 0 to 1024 [ 171.988830][ T26] audit: type=1804 audit(1719029971.264:13): pid=5382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1914583528/syzkaller.HU42pZ/24/file0" dev="sda1" ino=1965 res=1 errno=0 [ 173.258826][ T5416] loop3: detected capacity change from 0 to 1024 [ 173.287540][ T26] audit: type=1804 audit(1719029972.544:14): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir20341384/syzkaller.bPgPk1/62/file0" dev="sda1" ino=1965 res=1 errno=0 [ 173.899925][ T5054] Bluetooth: hci5: command 0x1009 tx timeout [ 174.416735][ T5422] sctp: [Deprecated]: syz-executor.3 (pid 5422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.416735][ T5422] Use struct sctp_sack_info instead [ 174.494376][ T5432] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.566424][ T5440] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.599699][ T5440] loop3: detected capacity change from 0 to 256 [ 174.602705][ T5439] kvm: vcpu 0: requested 208 ns lapic timer period limited to 200000 ns [ 174.660251][ T5440] FAT-fs (loop3): Unrecognized mount option "cvw!discard" or missing value [ 174.757410][ T5054] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 175.047442][ T5054] usb 3-1: Using ep0 maxpacket: 32 [ 175.467269][ T5054] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 175.481073][ T5054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.520987][ T5054] usb 3-1: config 0 descriptor?? [ 175.531460][ T5445] block nbd4: shutting down sockets [ 175.580742][ T5054] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 175.658715][ T5453] loop4: detected capacity change from 0 to 1024 [ 175.812419][ T3810] hfsplus: b-tree write err: -5, ino 4 [ 175.890117][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 175.950066][ T26] audit: type=1804 audit(1719029975.294:15): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1914583528/syzkaller.HU42pZ/35/bus" dev="sda1" ino=1964 res=1 errno=0 [ 175.977769][ T5455] loop3: detected capacity change from 0 to 32768 [ 175.987313][ T5054] gspca_vc032x: reg_w err -71 [ 175.994448][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.001589][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.007071][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.012744][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.019055][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.024556][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.032253][ T5455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5455) [ 176.034684][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.058564][ T5460] loop4: detected capacity change from 0 to 512 [ 176.065065][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.070544][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.076295][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.082217][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.088848][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.095540][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.115628][ T5455] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 176.126311][ T5455] BTRFS info (device loop3): setting nodatacow, compression disabled [ 176.127834][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.134736][ T5455] BTRFS info (device loop3): enabling disk space caching [ 176.146370][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.147349][ T5455] BTRFS info (device loop3): max_inline at 0 [ 176.152567][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.174270][ T5455] BTRFS error (device loop3): cannot disable free space tree [ 176.175054][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.191889][ T5054] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.198276][ T5054] gspca_vc032x: Unknown sensor... [ 176.207291][ T5054] vc032x: probe of 3-1:0.0 failed with error -22 [ 176.227596][ T5054] usb 3-1: USB disconnect, device number 4 [ 176.275613][ T5460] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 176.296840][ T5460] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 176.297336][ T5455] BTRFS error (device loop3): open_ctree failed [ 176.317789][ T5460] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 176.338923][ T5460] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 176.358543][ T5460] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 176.376261][ T5460] EXT4-fs (loop4): 1 orphan inode deleted [ 176.382261][ T5460] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 177.288070][ T5480] Zero length message leads to an empty skb [ 177.623188][ T5482] loop3: detected capacity change from 0 to 256 [ 177.686140][ T5482] FAT-fs (loop3): Unrecognized mount option "cvw!discard" or missing value [ 177.861790][ T26] audit: type=1326 audit(1719029977.204:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5489 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51fa9380a9 code=0x7ffc0000 [ 177.944090][ T26] audit: type=1326 audit(1719029977.234:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5489 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f51fa9380a9 code=0x7ffc0000 [ 178.208735][ T5493] block nbd4: shutting down sockets [ 178.234159][ T26] audit: type=1326 audit(1719029977.234:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5489 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51fa9380a9 code=0x7ffc0000 [ 179.904605][ T26] audit: type=1800 audit(1719029979.244:19): pid=5502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 179.943013][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 179.965324][ T26] audit: type=1800 audit(1719029979.274:20): pid=5502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 180.019353][ T5054] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 180.264428][ T5508] libceph: resolve '. [ 180.264428][ T5508] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 180.264428][ T5508] ' (ret=-3): failed [ 180.283353][ T5054] usb 2-1: Using ep0 maxpacket: 8 [ 180.418592][ T5054] usb 2-1: config 0 has no interfaces? [ 180.424167][ T5054] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 180.455965][ T5054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.488531][ T5515] netlink: 87 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.510721][ T5054] usb 2-1: config 0 descriptor?? [ 180.771394][ T5060] usb 2-1: USB disconnect, device number 5 [ 181.015928][ T5505] loop0: detected capacity change from 0 to 32768 [ 181.046370][ T5529] libceph: resolve '. [ 181.046370][ T5529] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 181.046370][ T5529] ' (ret=-3): failed [ 181.064454][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.183983][ T5505] XFS (loop0): Mounting V5 Filesystem [ 181.335411][ T5505] XFS (loop0): Ending clean mount [ 181.553331][ T5528] loop2: detected capacity change from 0 to 32768 [ 181.611235][ T5528] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5528) [ 181.680521][ T5528] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 181.701525][ T5528] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 181.751369][ T5528] BTRFS info (device loop2): force lzo compression, level 0 [ 181.770724][ T5541] loop1: detected capacity change from 0 to 2048 [ 181.843220][ T5541] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 181.870658][ T5541] NILFS (loop1): mounting unchecked fs [ 181.916222][ T5541] NILFS (loop1): recovery complete [ 181.926388][ T5528] BTRFS info (device loop2): force clearing of disk cache [ 181.969360][ T5544] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.996626][ T5528] BTRFS info (device loop2): using free space tree [ 182.013286][ T5528] BTRFS info (device loop2): has skinny extents [ 182.304165][ T5528] BTRFS info (device loop2): enabling ssd optimizations [ 182.360274][ T5528] BTRFS info (device loop2): clearing free space tree [ 182.385711][ T5528] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.397811][ T5528] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.685006][ T5528] BTRFS info (device loop2): creating free space tree [ 182.709976][ T5528] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.767191][ T5528] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.835345][ T5528] BTRFS error (device loop2): balance: invalid convert data profile single [ 183.276715][ T5553] loop1: detected capacity change from 0 to 32768 [ 183.342326][ T5553] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5553) [ 183.404485][ T5553] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 183.433741][ T5553] BTRFS info (device loop1): using free space tree [ 183.447296][ T5553] BTRFS info (device loop1): has skinny extents [ 183.495284][ T5602] loop2: detected capacity change from 0 to 2048 [ 183.543315][ T5602] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 183.557222][ T5051] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 183.573634][ T5602] NILFS (loop2): mounting unchecked fs [ 183.591434][ T3536] XFS (loop0): Unmounting Filesystem [ 183.661405][ T5602] NILFS (loop2): recovery complete [ 183.668437][ T5553] BTRFS info (device loop1): enabling ssd optimizations [ 183.715634][ T5620] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.836912][ T5624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.847748][ T5051] usb 4-1: Using ep0 maxpacket: 8 [ 183.977166][ T5051] usb 4-1: config 0 has no interfaces? [ 183.983170][ T5051] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 184.003394][ T5051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.034048][ T5051] usb 4-1: config 0 descriptor?? [ 184.315414][ T5051] usb 4-1: USB disconnect, device number 9 [ 185.563654][ T5640] libceph: resolve '. [ 185.563654][ T5640] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 185.563654][ T5640] ' (ret=-3): failed [ 185.658850][ T5639] loop3: detected capacity change from 0 to 8192 [ 185.683466][ T5628] loop2: detected capacity change from 0 to 32768 [ 185.740617][ T5628] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5628) [ 185.844011][ T5628] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 185.879425][ T5628] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 185.961344][ T5628] BTRFS info (device loop2): force lzo compression, level 0 [ 186.051125][ T5628] BTRFS info (device loop2): force clearing of disk cache [ 186.088021][ T5628] BTRFS info (device loop2): using free space tree [ 186.099414][ T5628] BTRFS info (device loop2): has skinny extents [ 186.255133][ T5628] BTRFS info (device loop2): enabling ssd optimizations [ 186.265911][ T5628] BTRFS info (device loop2): clearing free space tree [ 186.273252][ T5628] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.285670][ T5628] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 186.329238][ T5628] BTRFS info (device loop2): creating free space tree [ 186.339167][ T5628] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.367286][ T5628] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 186.498963][ T5628] BTRFS error (device loop2): balance: invalid convert data profile single [ 187.634480][ T5687] loop3: detected capacity change from 0 to 1024 [ 188.791518][ T5687] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,barrier,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 188.846377][ T5681] block nbd4: shutting down sockets [ 188.943320][ T26] audit: type=1800 audit(1719029988.284:21): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 188.974779][ T26] audit: type=1800 audit(1719029988.314:22): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 189.184205][ T5698] loop1: detected capacity change from 0 to 2048 [ 189.278675][ T5706] overlayfs: statfs failed on './file0' [ 189.280093][ T5698] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 189.305855][ T5698] NILFS (loop1): mounting unchecked fs [ 189.340413][ T5698] NILFS (loop1): recovery complete [ 189.353461][ T5708] loop3: detected capacity change from 0 to 2048 [ 189.372953][ T5709] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.462801][ T5708] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.480944][ T5708] ext4 filesystem being mounted at /root/syzkaller-testdir20341384/syzkaller.bPgPk1/82/bus supports timestamps until 2038 (0x7fffffff) [ 189.545865][ T5718] loop1: detected capacity change from 0 to 2048 [ 189.626051][ T5718] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.633833][ T5719] loop4: detected capacity change from 0 to 8192 [ 189.649365][ T5718] ext4 filesystem being mounted at /root/syzkaller-testdir3702908565/syzkaller.zh0WXV/35/bus supports timestamps until 2038 (0x7fffffff) [ 189.674721][ T5703] loop0: detected capacity change from 0 to 32768 [ 189.711226][ T5718] fs-verity: sha512 using implementation "sha512-avx2" [ 189.731615][ T5703] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5703) [ 189.828307][ T5703] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 189.856758][ T5703] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 189.885425][ T5701] overlayfs: statfs failed on './file0' [ 189.927507][ T5703] BTRFS info (device loop0): force lzo compression, level 0 [ 189.942547][ T5703] BTRFS info (device loop0): force clearing of disk cache [ 189.964908][ T5703] BTRFS info (device loop0): using free space tree [ 189.979297][ T5703] BTRFS info (device loop0): has skinny extents [ 190.020171][ T5731] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.136055][ T5749] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.151913][ T5752] libceph: resolve '. [ 190.151913][ T5752] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 190.151913][ T5752] ' (ret=-3): failed [ 190.239274][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 190.260306][ T5703] BTRFS info (device loop0): enabling ssd optimizations [ 190.270660][ T5752] Restarting kernel threads ... [ 190.271312][ T5703] BTRFS info (device loop0): clearing free space tree [ 190.273518][ T5752] done. [ 190.287913][ T5703] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.317487][ T5703] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.358874][ T5703] BTRFS info (device loop0): creating free space tree [ 190.386190][ T5703] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.413574][ T5703] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.617341][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.678779][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.689075][ T5703] BTRFS error (device loop0): balance: invalid convert data profile single [ 190.723959][ T13] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 190.799715][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.832655][ T13] usb 3-1: config 0 descriptor?? [ 191.345859][ T5764] nft_compat: unsupported protocol 5 [ 191.594639][ T5770] loop0: detected capacity change from 0 to 2048 [ 191.745479][ T5770] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.757193][ T5770] ext4 filesystem being mounted at /root/syzkaller-testdir261081632/syzkaller.etAvbY/149/bus supports timestamps until 2038 (0x7fffffff) [ 191.887313][ T13] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 191.910121][ T13] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 191.936786][ T13] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 191.963886][ T13] usb 3-1: USB disconnect, device number 5 [ 192.195137][ T5723] loop3: detected capacity change from 0 to 131072 [ 192.205417][ T5794] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.235717][ T5723] F2FS-fs (loop3): invalid crc value [ 192.260553][ T5723] F2FS-fs (loop3): Found nat_bits in checkpoint [ 192.329605][ T5723] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 192.384052][ T26] audit: type=1800 audit(1719029991.724:23): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 192.404616][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.467512][ T5801] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.612176][ T5792] loop4: detected capacity change from 0 to 32768 [ 192.638679][ T5806] libceph: resolve '. [ 192.638679][ T5806] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 192.638679][ T5806] ' (ret=-3): failed [ 192.721857][ T5792] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5792) [ 192.827463][ T5792] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 192.837916][ T5792] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 192.847891][ T5792] BTRFS info (device loop4): force lzo compression, level 0 [ 192.856821][ T5792] BTRFS info (device loop4): force clearing of disk cache [ 192.916149][ T5792] BTRFS info (device loop4): using free space tree [ 192.932393][ T5792] BTRFS info (device loop4): has skinny extents [ 193.230687][ T5792] BTRFS info (device loop4): enabling ssd optimizations [ 193.246400][ T5792] BTRFS info (device loop4): clearing free space tree [ 193.290201][ T5792] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.367674][ T5792] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.399326][ T5792] BTRFS info (device loop4): creating free space tree [ 193.413958][ T5792] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.458670][ T5792] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.697348][ T5792] BTRFS error (device loop4): balance: invalid convert data profile single [ 194.282502][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.290069][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.499577][ T5838] loop3: detected capacity change from 0 to 128 [ 194.785338][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 195.124778][ T5859] loop2: detected capacity change from 0 to 512 [ 195.182813][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.206912][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.233828][ T5835] device bridge_slave_0 entered promiscuous mode [ 195.269264][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.297738][ T5859] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.317358][ T5859] ext4 filesystem being mounted at /root/syzkaller-testdir1209200004/syzkaller.lqElb6/87/file0 supports timestamps until 2038 (0x7fffffff) [ 195.398358][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.405454][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.464647][ T5835] device bridge_slave_1 entered promiscuous mode [ 195.501684][ T5859] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz-executor.2: corrupted inode contents [ 195.554645][ T5859] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #2: comm syz-executor.2: mark_inode_dirty error [ 195.570567][ T5875] loop4: detected capacity change from 0 to 2048 [ 195.582834][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.615845][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.625315][ T5859] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz-executor.2: corrupted inode contents [ 195.648775][ T5859] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz-executor.2: mark_inode_dirty error [ 195.687341][ T5875] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.705648][ T5835] team0: Port device team_slave_0 added [ 195.713928][ T5875] ext4 filesystem being mounted at /root/syzkaller-testdir1914583528/syzkaller.HU42pZ/66/bus supports timestamps until 2038 (0x7fffffff) [ 195.790512][ T5835] team0: Port device team_slave_1 added [ 195.904510][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.944941][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.005333][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.036020][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.076250][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.180917][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.232618][ T5881] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 196.306493][ T5886] bond1: (slave geneve2): Enslaving as a backup interface with an up link [ 196.341690][ T5889] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 196.357169][ T3577] Bluetooth: hci1: command 0x0409 tx timeout [ 196.434926][ T5889] bond1 (unregistering): Released all slaves [ 196.632944][ T5835] device hsr_slave_0 entered promiscuous mode [ 196.677817][ T5835] device hsr_slave_1 entered promiscuous mode [ 196.695273][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.715433][ T5835] Cannot create hsr debugfs directory [ 196.997818][ T5835] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.042780][ T5907] loop3: detected capacity change from 0 to 512 [ 197.092399][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.122088][ T5835] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.190842][ T5907] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.231775][ T5907] ext4 filesystem being mounted at /root/syzkaller-testdir20341384/syzkaller.bPgPk1/91/file0 supports timestamps until 2038 (0x7fffffff) [ 197.256270][ T5835] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.319493][ T5907] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #2: comm syz-executor.3: corrupted inode contents [ 197.332437][ T5907] EXT4-fs error (device loop3): ext4_dirty_inode:5993: inode #2: comm syz-executor.3: mark_inode_dirty error [ 197.345374][ T5907] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #2: comm syz-executor.3: corrupted inode contents [ 197.364413][ T5907] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz-executor.3: mark_inode_dirty error [ 197.403639][ T5835] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.562415][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.573463][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.586064][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.606782][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.810084][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.841560][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.867831][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.898466][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.937853][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.946646][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.974653][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.981789][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.032408][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.042434][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.062751][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.092191][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.099414][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.125747][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.172041][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.198294][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.228376][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.248060][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.268055][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.315982][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.357522][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.399780][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.436490][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.447375][ T5054] Bluetooth: hci1: command 0x041b tx timeout [ 198.461922][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.495107][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.524406][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.551751][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.789703][ T770] device hsr_slave_0 left promiscuous mode [ 198.806026][ T770] device hsr_slave_1 left promiscuous mode [ 198.837308][ T770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.856027][ T770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.866756][ T770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.881212][ T770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.891498][ T770] device bridge_slave_1 left promiscuous mode [ 198.897861][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.907137][ T770] device bridge_slave_0 left promiscuous mode [ 198.913489][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.959009][ T770] device veth1_macvtap left promiscuous mode [ 198.985911][ T770] device veth0_macvtap left promiscuous mode [ 199.005723][ T770] device veth1_vlan left promiscuous mode [ 199.023202][ T770] device veth0_vlan left promiscuous mode [ 199.614696][ T770] team0 (unregistering): Port device team_slave_1 removed [ 199.665594][ T770] team0 (unregistering): Port device team_slave_0 removed [ 199.704956][ T770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.733195][ T4081] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 199.765719][ T770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.944923][ T770] bond0 (unregistering): Released all slaves [ 199.952133][ T4081] usb 1-1: device descriptor read/64, error -71 [ 200.234268][ T5054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.241807][ T4081] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 200.257710][ T5054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.810205][ T5056] Bluetooth: hci1: command 0x040f tx timeout [ 200.821159][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.929777][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.942236][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.951991][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.967165][ T4081] usb 1-1: device descriptor read/64, error -71 [ 200.974000][ T5835] device veth0_vlan entered promiscuous mode [ 200.983152][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.992706][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.028668][ T5835] device veth1_vlan entered promiscuous mode [ 201.035599][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.047755][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.065949][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.117322][ T4081] usb usb1-port1: attempt power cycle [ 201.142135][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.157657][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.177700][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.208628][ T5835] device veth0_macvtap entered promiscuous mode [ 201.239959][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.259270][ T5835] device veth1_macvtap entered promiscuous mode [ 201.366219][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.391456][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.407040][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.417710][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.427587][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.438241][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.448398][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.459025][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.503686][ T5982] loop3: detected capacity change from 0 to 16 [ 201.549438][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.603598][ T5982] erofs: (device loop3): mounted with root inode @ nid 36. [ 201.685230][ T3527] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000] [ 201.780476][ T26] audit: type=1800 audit(1719030001.124:24): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 201.804264][ T4081] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.852746][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.904372][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.947353][ T4081] usb 1-1: device descriptor read/8, error -71 [ 201.958860][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.007172][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.039963][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.050571][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.060785][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.075194][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.086761][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.099755][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.111908][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.115186][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.136883][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.146576][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.167783][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.176527][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.186939][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.195794][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.222704][ T4081] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 202.337391][ T4081] usb 1-1: device descriptor read/8, error -71 [ 202.388175][ T5996] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 202.457421][ T4081] usb usb1-port1: unable to enumerate USB device [ 202.480262][ T5998] bond1: (slave geneve2): Enslaving as a backup interface with an up link [ 202.560420][ T5449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.582553][ T5449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.627961][ T5996] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 202.668796][ T5996] bond1 (unregistering): Released all slaves [ 202.710851][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.718958][ T5449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.740062][ T5449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.787751][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.837529][ T5683] Bluetooth: hci1: command 0x0419 tx timeout [ 202.884958][ T5991] loop3: detected capacity change from 0 to 32768 [ 202.992997][ T5991] XFS (loop3): Mounting V5 Filesystem [ 203.064035][ T5991] XFS (loop3): Ending clean mount [ 203.241205][ T4090] XFS (loop3): Unmounting Filesystem [ 203.701478][ T6063] loop3: detected capacity change from 0 to 1024 [ 203.882840][ T6063] EXT4-fs (loop3): Test dummy encryption mode enabled [ 203.893012][ T6063] EXT4-fs (loop3): Ignoring removed orlov option [ 203.949369][ T6063] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 204.103737][ T6063] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 206.747200][ T4612] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 206.777079][ T5683] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 206.787069][ T3571] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 206.797260][ T4081] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.037288][ T5683] usb 4-1: Using ep0 maxpacket: 16 [ 207.057224][ T4081] usb 1-1: Using ep0 maxpacket: 32 [ 207.117171][ T4612] usb 2-1: config 0 has no interfaces? [ 207.147259][ T3571] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 207.167400][ T5683] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 207.177586][ T5683] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 207.191381][ T4081] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 207.197532][ T4612] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 207.201655][ T5683] usb 4-1: config 0 interface 0 has no altsetting 0 [ 207.217302][ T4612] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 207.217331][ T4612] usb 2-1: Manufacturer: syz [ 207.219337][ T4612] usb 2-1: config 0 descriptor?? [ 207.247782][ T3571] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.256876][ T3571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 207.265065][ T3571] usb 5-1: SerialNumber: syz [ 207.397258][ T5054] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 207.404956][ T4081] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 207.414211][ T5683] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 207.423611][ T4081] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 207.432589][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.440791][ T5683] usb 4-1: Product: syz [ 207.445096][ T5683] usb 4-1: Manufacturer: syz [ 207.449791][ T4081] usb 1-1: Product: syz [ 207.453964][ T4081] usb 1-1: Manufacturer: syz [ 207.458864][ T4081] usb 1-1: SerialNumber: syz [ 207.464015][ T5683] usb 4-1: SerialNumber: syz [ 207.470438][ T4081] usb 1-1: config 0 descriptor?? [ 207.473489][ T4612] usb 2-1: USB disconnect, device number 6 [ 207.476435][ T5683] usb 4-1: config 0 descriptor?? [ 207.487545][ T6129] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 207.541905][ T5683] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 207.677261][ T5054] usb 3-1: Using ep0 maxpacket: 8 [ 207.742011][ T4612] usb 4-1: USB disconnect, device number 10 [ 207.797476][ T5054] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 207.806688][ T5054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.816141][ T5054] usb 3-1: config 0 descriptor?? [ 207.869923][ T5054] pvrusb2: Hardware description: Terratec Grabster AV400 [ 207.877171][ T5054] pvrusb2: ********** [ 207.881205][ T5054] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 207.891426][ T5054] pvrusb2: Important functionality might not be entirely working. [ 207.899309][ T5054] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 207.910580][ T4610] usb 1-1: USB disconnect, device number 10 [ 207.916609][ T5054] pvrusb2: ********** [ 207.975413][ T3571] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 208.081615][ T2114] pvrusb2: Invalid write control endpoint [ 208.089735][ T5054] usb 3-1: USB disconnect, device number 6 [ 208.134521][ T2114] pvrusb2: Invalid write control endpoint [ 208.142026][ T2114] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 208.153852][ T2114] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 208.165859][ T2114] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 208.179127][ T2114] pvrusb2: Device being rendered inoperable [ 208.189369][ T2114] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 208.199048][ T2114] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 208.211834][ T2114] pvrusb2: Attached sub-driver cx25840 [ 208.217832][ T2114] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 208.228071][ T2114] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 208.451709][ T6157] device syzkaller0 entered promiscuous mode [ 208.666487][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 209.297983][ T3571] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 209.627329][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 209.748340][ T3571] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 209.754944][ T4081] usb 5-1: USB disconnect, device number 5 [ 209.757624][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.764812][ T4081] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 209.774524][ T3571] usb 3-1: config 0 descriptor?? [ 209.829310][ T3571] pvrusb2: Hardware description: Terratec Grabster AV400 [ 209.836771][ T3571] pvrusb2: ********** [ 209.837402][ T6198] [ 209.840902][ T3571] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 209.843105][ T6198] ====================================================== [ 209.843115][ T6198] WARNING: possible circular locking dependency detected [ 209.853363][ T3571] pvrusb2: Important functionality might not be entirely working. [ 209.860161][ T6198] 5.15.161-syzkaller #0 Not tainted [ 209.860174][ T6198] ------------------------------------------------------ [ 209.860182][ T6198] syz-executor.4/6198 is trying to acquire lock: [ 209.860194][ T6198] ffff8880b9b35ca8 [ 209.867374][ T3571] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 209.875023][ T6198] ( [ 209.880523][ T3571] pvrusb2: ********** [ 209.887304][ T6198] lock){..-.}-{2:2}, at: local_lock_acquire+0x7/0x130 [ 209.887365][ T6198] [ 209.887365][ T6198] but task is already holding lock: [ 209.887371][ T6198] ffff88807d7525b8 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 209.938218][ T6198] [ 209.938218][ T6198] which lock already depends on the new lock. [ 209.938218][ T6198] [ 209.948609][ T6198] [ 209.948609][ T6198] the existing dependency chain (in reverse order) is: [ 209.957611][ T6198] [ 209.957611][ T6198] -> #1 (&trie->lock){....}-{2:2}: [ 209.964901][ T6198] lock_acquire+0x1db/0x4f0 [ 209.969921][ T6198] _raw_spin_lock_irqsave+0xd1/0x120 [ 209.975720][ T6198] trie_delete_elem+0x90/0x690 [ 209.981004][ T6198] 0xffffffffa0010f62 [ 209.985501][ T6198] bpf_trace_run1+0x168/0x2f0 [ 209.990700][ T6198] __bpf_trace_mm_page_free_batched+0x41/0x60 [ 209.997285][ T6198] free_unref_page_list+0x79b/0x8e0 [ 210.003086][ T6198] release_pages+0x1bb9/0x1f40 [ 210.008451][ T6198] __pagevec_release+0x80/0xf0 [ 210.013731][ T6198] shmem_undo_range+0x67a/0x1b50 [ 210.019185][ T6198] shmem_evict_inode+0x21b/0xa00 [ 210.024637][ T6198] evict+0x2a4/0x620 [ 210.029131][ T6198] __dentry_kill+0x436/0x650 [ 210.034238][ T6198] dentry_kill+0xbb/0x290 [ 210.039080][ T6198] dput+0xd8/0x1a0 [ 210.043314][ T6198] __fput+0x5ec/0x890 [ 210.047822][ T6198] task_work_run+0x129/0x1a0 [ 210.052930][ T6198] do_exit+0x6a3/0x2480 [ 210.057600][ T6198] do_group_exit+0x144/0x310 [ 210.062705][ T6198] get_signal+0xc66/0x14e0 [ 210.067631][ T6198] arch_do_signal_or_restart+0xc3/0x1890 [ 210.073782][ T6198] exit_to_user_mode_loop+0x97/0x130 [ 210.079668][ T6198] exit_to_user_mode_prepare+0xb1/0x140 [ 210.085740][ T6198] syscall_exit_to_user_mode+0x5d/0x240 [ 210.091869][ T6198] do_syscall_64+0x47/0xb0 [ 210.096886][ T6198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.103291][ T6198] [ 210.103291][ T6198] -> #0 (lock){..-.}-{2:2}: [ 210.109970][ T6198] validate_chain+0x1649/0x5930 [ 210.115340][ T6198] __lock_acquire+0x1295/0x1ff0 [ 210.120703][ T6198] lock_acquire+0x1db/0x4f0 [ 210.125725][ T6198] local_lock_acquire+0x23/0x130 [ 210.131271][ T6198] get_page_from_freelist+0x27cc/0x33c0 [ 210.137330][ T6198] __alloc_pages+0x272/0x700 [ 210.142434][ T6198] new_slab+0xbb/0x4b0 [ 210.147022][ T6198] ___slab_alloc+0x6f6/0xe10 [ 210.152126][ T6198] __kmalloc_node+0x1fa/0x390 [ 210.157318][ T6198] bpf_map_kmalloc_node+0xdb/0x160 [ 210.162944][ T6198] trie_update_elem+0x1cb/0xc00 [ 210.168308][ T6198] bpf_map_update_value+0x5d7/0x6c0 [ 210.174021][ T6198] generic_map_update_batch+0x54d/0x8b0 [ 210.180105][ T6198] bpf_map_do_batch+0x4d0/0x620 [ 210.185502][ T6198] __sys_bpf+0x55c/0x670 [ 210.190349][ T6198] __x64_sys_bpf+0x78/0x90 [ 210.195279][ T6198] do_syscall_64+0x3b/0xb0 [ 210.200207][ T6198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.206702][ T6198] [ 210.206702][ T6198] other info that might help us debug this: [ 210.206702][ T6198] [ 210.216917][ T6198] Possible unsafe locking scenario: [ 210.216917][ T6198] [ 210.224352][ T6198] CPU0 CPU1 [ 210.229705][ T6198] ---- ---- [ 210.235142][ T6198] lock(&trie->lock); [ 210.239204][ T6198] lock(lock); [ 210.245174][ T6198] lock(&trie->lock); [ 210.251756][ T6198] lock(lock); [ 210.255302][ T6198] [ 210.255302][ T6198] *** DEADLOCK *** [ 210.255302][ T6198] [ 210.263430][ T6198] 2 locks held by syz-executor.4/6198: [ 210.268874][ T6198] #0: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 210.278270][ T6198] #1: ffff88807d7525b8 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 210.287575][ T6198] [ 210.287575][ T6198] stack backtrace: [ 210.293459][ T6198] CPU: 1 PID: 6198 Comm: syz-executor.4 Not tainted 5.15.161-syzkaller #0 [ 210.302055][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 210.312108][ T6198] Call Trace: [ 210.315389][ T6198] [ 210.318317][ T6198] dump_stack_lvl+0x1e3/0x2d0 [ 210.323000][ T6198] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 210.328631][ T6198] ? print_circular_bug+0x12b/0x1a0 [ 210.333826][ T6198] check_noncircular+0x2f8/0x3b0 [ 210.338847][ T6198] ? add_chain_block+0x850/0x850 [ 210.343787][ T6198] ? lockdep_lock+0x11f/0x2a0 [ 210.348560][ T6198] ? validate_chain+0x112/0x5930 [ 210.353494][ T6198] validate_chain+0x1649/0x5930 [ 210.358432][ T6198] ? rcu_is_watching+0x11/0xa0 [ 210.363190][ T6198] ? __lock_acquire+0x1ff0/0x1ff0 [ 210.368208][ T6198] ? reacquire_held_locks+0x660/0x660 [ 210.373570][ T6198] ? deref_stack_reg+0xbe/0x110 [ 210.378504][ T6198] ? is_bpf_text_address+0x24f/0x260 [ 210.383784][ T6198] ? stack_trace_save+0x1c0/0x1c0 [ 210.388799][ T6198] ? __kernel_text_address+0x94/0x100 [ 210.394169][ T6198] ? unwind_get_return_address+0x49/0x80 [ 210.399797][ T6198] ? arch_stack_walk+0xf3/0x140 [ 210.404644][ T6198] ? mark_lock+0x98/0x340 [ 210.409058][ T6198] __lock_acquire+0x1295/0x1ff0 [ 210.413907][ T6198] lock_acquire+0x1db/0x4f0 [ 210.418406][ T6198] ? local_lock_acquire+0x7/0x130 [ 210.423513][ T6198] ? lockdep_lock+0x2a0/0x2a0 [ 210.428190][ T6198] ? read_lock_is_recursive+0x10/0x10 [ 210.433572][ T6198] ? validate_chain+0x13bd/0x5930 [ 210.438592][ T6198] ? __zone_watermark_ok+0x8d/0x3e0 [ 210.443796][ T6198] local_lock_acquire+0x23/0x130 [ 210.448724][ T6198] ? local_lock_acquire+0x7/0x130 [ 210.453747][ T6198] get_page_from_freelist+0x27cc/0x33c0 [ 210.459290][ T6198] ? reacquire_held_locks+0x660/0x660 [ 210.464659][ T6198] ? is_bpf_text_address+0x24f/0x260 [ 210.470024][ T6198] ? stack_trace_save+0x1c0/0x1c0 [ 210.475055][ T6198] ? __lock_acquire+0x1295/0x1ff0 [ 210.480163][ T6198] ? __alloc_pages+0x700/0x700 [ 210.484919][ T6198] ? __next_zones_zonelist+0xa4/0x130 [ 210.490288][ T6198] ? prepare_alloc_pages+0x35d/0x5b0 [ 210.495571][ T6198] __alloc_pages+0x272/0x700 [ 210.500163][ T6198] ? __rmqueue_pcplist+0x2030/0x2030 [ 210.505462][ T6198] ? __lock_acquire+0x1ff0/0x1ff0 [ 210.510506][ T6198] ? alloc_pages+0x458/0x570 [ 210.515100][ T6198] new_slab+0xbb/0x4b0 [ 210.519177][ T6198] ___slab_alloc+0x6f6/0xe10 [ 210.523774][ T6198] ? bpf_map_kmalloc_node+0xdb/0x160 [ 210.529064][ T6198] __kmalloc_node+0x1fa/0x390 [ 210.533830][ T6198] ? bpf_map_kmalloc_node+0xdb/0x160 [ 210.539136][ T6198] ? _raw_spin_lock+0x40/0x40 [ 210.543818][ T6198] bpf_map_kmalloc_node+0xdb/0x160 [ 210.548928][ T6198] trie_update_elem+0x1cb/0xc00 [ 210.553782][ T6198] ? __lock_acquire+0x1ff0/0x1ff0 [ 210.558806][ T6198] ? migrate_enable+0x199/0x270 [ 210.563969][ T6198] bpf_map_update_value+0x5d7/0x6c0 [ 210.569179][ T6198] generic_map_update_batch+0x54d/0x8b0 [ 210.574905][ T6198] ? rcu_read_unlock+0x90/0x90 [ 210.579686][ T6198] ? __fdget+0x191/0x220 [ 210.583935][ T6198] ? rcu_read_unlock+0x90/0x90 [ 210.588699][ T6198] bpf_map_do_batch+0x4d0/0x620 [ 210.593551][ T6198] __sys_bpf+0x55c/0x670 [ 210.597792][ T6198] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 210.603170][ T6198] ? syscall_enter_from_user_mode+0x2e/0x240 [ 210.609146][ T6198] ? lockdep_hardirqs_on+0x94/0x130 [ 210.614349][ T6198] __x64_sys_bpf+0x78/0x90 [ 210.618760][ T6198] do_syscall_64+0x3b/0xb0 [ 210.623170][ T6198] ? clear_bhb_loop+0x15/0x70 [ 210.627931][ T6198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.633831][ T6198] RIP: 0033:0x7fbad79f30a9 [ 210.638249][ T6198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 210.657935][ T6198] RSP: 002b:00007fbad656c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.666341][ T6198] RAX: ffffffffffffffda RBX: 00007fbad7b29f80 RCX: 00007fbad79f30a9 [ 210.674306][ T6198] RDX: 0000000000000038 RSI: 0000000020000240 RDI: 000000000000001a 2024/06/22 04:20:10 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 210.682268][ T6198] RBP: 00007fbad7a62074 R08: 0000000000000000 R09: 0000000000000000 [ 210.690449][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.698421][ T6198] R13: 000000000000000b R14: 00007fbad7b29f80 R15: 00007fff20370e28 [ 210.706405][ T6198] [ 210.767333][ T2114] pvrusb2: Invalid write control endpoint [ 210.767989][ T3571] usb 3-1: USB disconnect, device number 7 [ 210.845787][ T2114] pvrusb2: Invalid write control endpoint [ 210.864402][ T2114] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 210.897129][ T2114] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 210.909809][ T2114] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 210.949182][ T2114] pvrusb2: Device being rendered inoperable [ 210.955144][ T2114] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 210.977539][ T2114] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 210.985571][ T2114] pvrusb2: Attached sub-driver cx25840 [ 210.993683][ T2114] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 211.003835][ T2114] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.