last executing test programs: 1m51.629076503s ago: executing program 4 (id=2273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @link_id}, 0x20) 1m51.4387631s ago: executing program 4 (id=2278): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$igmp(0x2, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) r1 = syz_io_uring_setup(0x279, 0x0, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x2003, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x2, 0x60b}]}, 0x78) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x2818c02, &(0x7f0000002580)=ANY=[], 0x1, 0xc3b, &(0x7f0000001940)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1m51.261826798s ago: executing program 4 (id=2283): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000240)=[{0x7, 0x7fff}], 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000140)=[{0x7}], 0x1, &(0x7f00000001c0)={0x0, r1+60000000}) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000500)=0xdf6d) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x13, 0xd, 0x121, &(0x7f00000007c0)}) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000580)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000be80)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000007c0)}, {0x0}, {&(0x7f0000000200)="c304f827ea68295eb5e0b2878d9d25e6fd9058bbd2f4e37b0f529afe151f6397158ad93c3b62661dcf6a1718daaf1ebccb4eee54ab7d702c186a75c22a6d07b5e300a3731a6ee62e33636f45202366cbbd0389e07f8b9f16cd80e07d8360d503e7bdf08c9e71686d21dad0fe30c934699ab736cd41a185746f55901ffcb16b00d1a304686b9262f122de4c97bb4fb461658b970096680278f85362826bead59cb3121f6347debc2ca0d01f6d7a8d26123014bb6aa8c9", 0xb6}], 0x3, 0x0, 0x0, 0x4044005}}, {{0x0, 0x0, &(0x7f000000bd00)}}], 0x3, 0x48045) 1m4.550866023s ago: executing program 4 (id=2283): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000240)=[{0x7, 0x7fff}], 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000140)=[{0x7}], 0x1, &(0x7f00000001c0)={0x0, r1+60000000}) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000500)=0xdf6d) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x13, 0xd, 0x121, &(0x7f00000007c0)}) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000580)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000be80)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000007c0)}, {0x0}, {&(0x7f0000000200)="c304f827ea68295eb5e0b2878d9d25e6fd9058bbd2f4e37b0f529afe151f6397158ad93c3b62661dcf6a1718daaf1ebccb4eee54ab7d702c186a75c22a6d07b5e300a3731a6ee62e33636f45202366cbbd0389e07f8b9f16cd80e07d8360d503e7bdf08c9e71686d21dad0fe30c934699ab736cd41a185746f55901ffcb16b00d1a304686b9262f122de4c97bb4fb461658b970096680278f85362826bead59cb3121f6347debc2ca0d01f6d7a8d26123014bb6aa8c9", 0xb6}], 0x3, 0x0, 0x0, 0x4044005}}, {{0x0, 0x0, &(0x7f000000bd00)}}], 0x3, 0x48045) 25.925051511s ago: executing program 4 (id=2283): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000240)=[{0x7, 0x7fff}], 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000140)=[{0x7}], 0x1, &(0x7f00000001c0)={0x0, r1+60000000}) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000500)=0xdf6d) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x13, 0xd, 0x121, &(0x7f00000007c0)}) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000580)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000be80)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000007c0)}, {0x0}, {&(0x7f0000000200)="c304f827ea68295eb5e0b2878d9d25e6fd9058bbd2f4e37b0f529afe151f6397158ad93c3b62661dcf6a1718daaf1ebccb4eee54ab7d702c186a75c22a6d07b5e300a3731a6ee62e33636f45202366cbbd0389e07f8b9f16cd80e07d8360d503e7bdf08c9e71686d21dad0fe30c934699ab736cd41a185746f55901ffcb16b00d1a304686b9262f122de4c97bb4fb461658b970096680278f85362826bead59cb3121f6347debc2ca0d01f6d7a8d26123014bb6aa8c9", 0xb6}], 0x3, 0x0, 0x0, 0x4044005}}, {{0x0, 0x0, &(0x7f000000bd00)}}], 0x3, 0x48045) 6.366205364s ago: executing program 2 (id=2787): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) mkdir(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) 5.853607073s ago: executing program 0 (id=2793): mknod(&(0x7f0000000540)='./file1\x00', 0x1000, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x8a80, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x802, 0x0) 5.373559065s ago: executing program 2 (id=2799): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000070000000000000018000000000000000000000000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8f600000000bfa200000000000007020000f8ffffffb703001b08000000b7040000000000008500000082000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b702000000000000850000000600000005000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0xe2, &(0x7f00000001c0)=""/226}, 0x23) truncate(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, &(0x7f0000fee000/0xf000)=nil, 0xf000}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ff2000/0x1000)=nil, 0x1000}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000ac0)={0x18, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) write(r2, &(0x7f0000000140)='/', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) shmget$private(0x0, 0x4000, 0x6d0f63f3bdfa3a9a, &(0x7f0000ff4000/0x4000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x81, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/321], &(0x7f0000000780)='syzkaller\x00', 0x7fff, 0xbc, &(0x7f00000007c0)=""/188, 0x41000, 0xc, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0), &(0x7f0000000900)=[{0x4, 0x1, 0x9, 0x7}], 0x10, 0x2}, 0x90) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000008c0)={0x7fff, 0x42, {0xffffffffffffffff}, {0xee00}, 0x8, 0x27fc63fb}) capset(&(0x7f0000000a00)={0x20071026, r7}, &(0x7f0000000a40)={0x41, 0x7000, 0x4, 0xffffffff, 0x9, 0x10000}) sendfile(r2, r2, &(0x7f0000001000), 0xfec) setxattr$security_evm(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), &(0x7f0000000640)=ANY=[@ANYBLOB="040b3685f6e56031a0995b14cf07dde1b62a7cc4e96692d06d56d1ca7214b410"], 0x4, 0x0) 4.718898833s ago: executing program 0 (id=2805): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x6, 0x4) 4.00785968s ago: executing program 3 (id=2806): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) acct(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) read$eventfd(r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r6 = getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r8 = syz_usbip_server_init(0x5) kcmp(r6, r7, 0x2, r0, r8) 3.76844561s ago: executing program 4 (id=2283): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000240)=[{0x7, 0x7fff}], 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000140)=[{0x7}], 0x1, &(0x7f00000001c0)={0x0, r1+60000000}) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000500)=0xdf6d) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x13, 0xd, 0x121, &(0x7f00000007c0)}) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000580)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000be80)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000007c0)}, {0x0}, {&(0x7f0000000200)="c304f827ea68295eb5e0b2878d9d25e6fd9058bbd2f4e37b0f529afe151f6397158ad93c3b62661dcf6a1718daaf1ebccb4eee54ab7d702c186a75c22a6d07b5e300a3731a6ee62e33636f45202366cbbd0389e07f8b9f16cd80e07d8360d503e7bdf08c9e71686d21dad0fe30c934699ab736cd41a185746f55901ffcb16b00d1a304686b9262f122de4c97bb4fb461658b970096680278f85362826bead59cb3121f6347debc2ca0d01f6d7a8d26123014bb6aa8c9", 0xb6}], 0x3, 0x0, 0x0, 0x4044005}}, {{0x0, 0x0, &(0x7f000000bd00)}}], 0x3, 0x48045) 3.704314716s ago: executing program 0 (id=2809): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.010576267s ago: executing program 0 (id=2810): syz_mount_image$bcachefs(&(0x7f0000000200), &(0x7f0000005b40)='./file2\x00', 0x0, &(0x7f0000005b80)=ANY=[@ANYBLOB='0'], 0x3, 0x5afb, &(0x7f0000005bc0)="$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") llistxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=""/162, 0xa2) 3.006733378s ago: executing program 2 (id=2812): r0 = syz_io_uring_setup(0x70c, &(0x7f0000000480), &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x41, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x18}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.79177145s ago: executing program 2 (id=2815): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x11}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0), 0x8}, 0x90) 2.764145877s ago: executing program 3 (id=2816): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000080342, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x20000) 2.599693902s ago: executing program 2 (id=2818): syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00ad4da59bd78a248060eb7e05f7e56b446305d49c3e5d3120577c4e2b73c6db3384cc496525aa5a1e3f87e283e57448d56ced36ed336d8f77b350d227"], 0x1, 0x1ce, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000900)='./file0/file0\x00', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000940)="bf", 0xfdef}], 0x2, 0x5000000, 0x0) 2.296165201s ago: executing program 2 (id=2819): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x8, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x36) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010003704000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c000280060008003f00000008000200ac14140008000300e0"], 0x48}}, 0x0) 2.248676749s ago: executing program 5 (id=2820): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x9, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 2.042165178s ago: executing program 5 (id=2822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.878269998s ago: executing program 1 (id=2823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d3174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c8c536f64df3ead70943de5d656df13bb45b52f00"/219, @ANYRESDEC], 0x1, 0x368, &(0x7f0000000180)="$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") socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000040)=0x1f, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x9000, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x4}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x20) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.85010188s ago: executing program 5 (id=2824): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000140)={0x0, 0x2}) 1.792352507s ago: executing program 3 (id=2825): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) 1.620536423s ago: executing program 5 (id=2826): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x44}}, 0x0) 1.547835668s ago: executing program 3 (id=2827): r0 = syz_io_uring_setup(0x70c, &(0x7f0000000480), &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x41, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x18}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.384870202s ago: executing program 0 (id=2828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 1.383971386s ago: executing program 3 (id=2829): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) acct(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) read$eventfd(r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r6 = getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r8 = syz_usbip_server_init(0x5) kcmp(r6, r7, 0x2, r0, r8) 1.178800949s ago: executing program 0 (id=2830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904", @ANYRES64], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'wg1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'pimreg0\x00', 'wg2\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit]}, &(0x7f0000000500)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r9, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 881.044256ms ago: executing program 1 (id=2831): syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00ad4da59bd78a248060eb7e05f7e56b446305d49c3e5d3120577c4e2b73c6db3384cc496525aa5a1e3f87e283e57448d56ced36ed336d8f77b350d227"], 0x1, 0x1ce, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000900)='./file0/file0\x00', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000940)="bf", 0xfdef}], 0x2, 0x5000000, 0x0) 683.82036ms ago: executing program 1 (id=2832): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file2\x00', 0x0, &(0x7f0000000b80)={[{@nls={'nls', 0x3d, 'macturkish'}}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@barrier}, {@part={'part', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 457.03807ms ago: executing program 3 (id=2833): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) mkdir(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) 359.686139ms ago: executing program 1 (id=2834): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x9, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 247.319602ms ago: executing program 5 (id=2835): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x6, 0x4) 116.997757ms ago: executing program 1 (id=2836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.372247ms ago: executing program 1 (id=2837): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x705b, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r5) 0s ago: executing program 5 (id=2838): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000140)={0x0, 0x2}) kernel console output (not intermixed with test programs): 2397] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.441629][T12397] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.475045][ T5096] wacom 0003:056A:0314.000C: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.4-1/input0 [ 601.494778][T12397] bridge_slave_0: entered allmulticast mode [ 601.509426][T12397] bridge_slave_0: entered promiscuous mode [ 601.522702][ T5096] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0314.000C/input/input20 [ 601.545730][T12397] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.576262][T12397] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.591045][ T5096] usb 5-1: USB disconnect, device number 13 [ 601.593677][T12397] bridge_slave_1: entered allmulticast mode [ 601.612447][T12397] bridge_slave_1: entered promiscuous mode [ 601.665664][T12397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.685234][T12397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.695160][ T5101] Bluetooth: hci7: command tx timeout [ 601.750027][T12397] team0: Port device team_slave_0 added [ 601.763984][T12397] team0: Port device team_slave_1 added [ 601.806498][T12397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.813494][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.839535][T12397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.852732][T12397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.859815][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.902562][T12397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.990012][T12397] hsr_slave_0: entered promiscuous mode [ 601.997807][T12397] hsr_slave_1: entered promiscuous mode [ 602.004068][T12397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.011720][T12397] Cannot create hsr debugfs directory [ 602.237417][T12397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.349493][T12397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.455658][T12397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.571799][T12397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.739794][T12397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 602.750152][T12397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 602.760865][T12397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 602.774256][T12397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 602.898138][T12397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.928713][T12397] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.942191][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.949514][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.967919][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.975125][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.166369][T12423] loop2: detected capacity change from 0 to 2048 [ 603.202364][T12423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.755404][T12431] bio_check_eod: 24 callbacks suppressed [ 603.755501][T12431] syz.2.2187: attempt to access beyond end of device [ 603.755501][T12431] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 603.774161][T12431] qnx4: unable to read the superblock [ 603.814761][ T5101] Bluetooth: hci7: command tx timeout [ 604.844158][T12440] loop2: detected capacity change from 0 to 40427 [ 605.023101][ T5660] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 605.300622][T12434] loop3: detected capacity change from 0 to 4096 [ 605.380417][T12447] loop2: detected capacity change from 0 to 256 [ 605.864637][ T5101] Bluetooth: hci7: command tx timeout [ 606.406521][T12434] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 607.240655][ T5660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.252251][ T5660] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.269891][ T5660] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.375421][ T5660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.519556][ T5660] usb 2-1: config 0 descriptor?? [ 607.577588][ T5660] usb 2-1: can't set config #0, error -71 [ 607.598357][T12444] loop4: detected capacity change from 0 to 2048 [ 607.601394][T12434] ntfs3: loop3: Failed to read $UpCase (-4). [ 607.619252][ T5660] usb 2-1: USB disconnect, device number 18 [ 607.718341][T12444] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.2196: bad orphan inode 8192 [ 607.753445][T12444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.813772][ T29] audit: type=1800 audit(1720413980.445:335): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2196" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 607.865830][T12397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.940706][ T5101] Bluetooth: hci7: command tx timeout [ 608.014716][T10962] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 608.070129][ T29] audit: type=1326 audit(1720413980.705:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12462 comm="syz.1.2201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f763e775bd9 code=0x0 [ 608.309864][ T5155] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 608.344085][T12397] veth0_vlan: entered promiscuous mode [ 608.532025][T12397] veth1_vlan: entered promiscuous mode [ 608.648412][T12397] veth0_macvtap: entered promiscuous mode [ 608.667711][ T5155] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 608.686081][ T5155] usb 4-1: config 0 has no interface number 0 [ 608.693445][T12397] veth1_macvtap: entered promiscuous mode [ 608.715174][ T5155] usb 4-1: New USB device found, idVendor=1c9e, idProduct=9801, bcdDevice=25.d8 [ 608.747195][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.773425][ T5155] usb 4-1: Product: syz [ 608.782700][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.803282][ T5155] usb 4-1: Manufacturer: syz [ 608.810012][ T5155] usb 4-1: SerialNumber: syz [ 608.826003][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.846064][ T5155] usb 4-1: config 0 descriptor?? [ 608.858359][ T5155] usb 4-1: bad CDC descriptors [ 608.867131][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.892359][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.917386][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.920499][T10962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.944052][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.958926][T10962] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 608.967240][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.972389][T10962] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 608.991350][T10962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.993984][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.010907][T10962] usb 6-1: config 0 descriptor?? [ 609.018838][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.029639][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.040917][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.053870][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.077594][T12397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.108254][T10678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.120736][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.137434][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.152464][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.163213][ T9] usb 4-1: USB disconnect, device number 19 [ 609.163478][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.212145][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.234634][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.245077][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.260537][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.270492][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.281218][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.291192][T12397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.301945][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.316963][T12397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.336902][T12397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.346500][T12397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.357254][T12397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.367630][T12397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.484770][ T5096] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 609.549072][T10893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.586401][T10893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.620917][T10962] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 609.648387][T10962] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 609.673387][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.686719][ T5096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.697343][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.705653][ T5096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.727673][ T5096] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.761199][ T5096] usb 2-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 609.781949][ T5096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.804171][ T5096] usb 2-1: config 0 descriptor?? [ 612.188256][T12448] usb 6-1: USB disconnect, device number 9 [ 612.410820][T12468] loop1: detected capacity change from 0 to 8192 [ 612.443894][ T29] audit: type=1326 audit(1720413985.075:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.2214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f043bd75bd9 code=0x0 [ 612.476788][T12468] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 612.649294][ T4484] Bluetooth: hci5: Malformed LE Event: 0x0d [ 612.913380][ T5096] wacom 0003:056A:0314.000E: unknown main item tag 0x0 [ 612.932483][ T5096] wacom 0003:056A:0314.000E: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 612.975569][ T5096] wacom 0003:056A:0314.000E: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.1-1/input0 [ 613.029769][ T5096] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0314.000E/input/input23 [ 613.142561][ T5096] usb 2-1: USB disconnect, device number 19 [ 613.154845][ T29] audit: type=1326 audit(1720413985.785:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12497 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031ef75bd9 code=0x7fc00000 [ 613.797222][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2230'. [ 614.105475][ T5101] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 614.112697][ T5101] Bluetooth: hci5: command 0x206a tx timeout [ 614.166793][T12542] loop2: detected capacity change from 0 to 4096 [ 614.180594][T12542] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 614.209268][T12542] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 614.310874][T12551] loop4: detected capacity change from 0 to 1024 [ 614.357109][T12551] EXT4-fs: Ignoring removed orlov option [ 614.392771][T12551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 614.481800][T12551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.825586][ T29] audit: type=1326 audit(1720413987.455:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031ef75bd9 code=0x7fc00000 [ 614.848114][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.212772][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'. [ 617.386058][T12594] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.2250'. [ 617.415866][T12583] loop3: detected capacity change from 0 to 4096 [ 617.422352][T12594] netlink: 'syz.0.2250': attribute type 2 has an invalid length. [ 617.468777][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'. [ 617.500822][T12583] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 617.693070][T12583] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 617.950218][T10678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.724593][ T29] audit: type=1326 audit(1720413991.355:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625f375bd9 code=0x7fc00000 [ 619.359604][T12629] loop3: detected capacity change from 0 to 256 [ 619.607019][T12634] kernel profiling enabled (shift: 9) [ 619.858662][T12610] loop1: detected capacity change from 0 to 32768 [ 620.041179][ T5101] Bluetooth: hci5: unexpected event for opcode 0x2010 [ 621.196072][T10883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.627623][T10883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.932933][T12687] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 621.936322][T10883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.975943][T12687] overlayfs: failed to set xattr on upper [ 621.981692][T12687] overlayfs: ...falling back to redirect_dir=nofollow. [ 622.032691][T12687] overlayfs: ...falling back to index=off. [ 622.042741][T12687] overlayfs: ...falling back to uuid=null. [ 622.073123][ T4484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 622.084417][ T4484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 622.108003][ T4484] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 622.137042][ T4484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 622.145745][ T4484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 622.153205][ T4484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 622.164764][ T5657] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 622.240563][T10883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.415979][ T5657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.448058][ T5657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.478031][ T5657] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.502133][ T5657] usb 6-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 622.512709][ T5657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.527405][ T5657] usb 6-1: config 0 descriptor?? [ 622.965520][T10883] bridge_slave_1: left allmulticast mode [ 622.971190][T10883] bridge_slave_1: left promiscuous mode [ 623.031938][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.108100][T10883] bridge_slave_0: left allmulticast mode [ 623.174603][T10883] bridge_slave_0: left promiscuous mode [ 623.185723][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.595951][ T5101] Bluetooth: hci6: Malformed LE Event: 0x0d [ 623.666749][T12703] loop1: detected capacity change from 0 to 32768 [ 623.689276][T12703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2295 (12703) [ 623.740917][T12703] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 623.768458][ T29] audit: type=1326 audit(1720413996.385:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12726 comm="syz.2.2304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625f375bd9 code=0x0 [ 623.801293][T12703] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 623.819819][T12703] BTRFS info (device loop1): using free-space-tree [ 623.830508][ T5657] wacom 0003:056A:0314.000F: unknown main item tag 0x0 [ 623.862187][ T5657] wacom 0003:056A:0314.000F: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 623.953332][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.961088][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.971483][ T5657] wacom 0003:056A:0314.000F: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.5-1/input0 [ 624.016466][ T5657] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0314.000F/input/input26 [ 624.103475][ T5657] usb 6-1: USB disconnect, device number 10 [ 624.227236][T11786] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 624.255353][ T5101] Bluetooth: hci3: command tx timeout [ 624.904936][ T5101] Bluetooth: hci6: command 0x206a tx timeout [ 624.911265][ T4484] Bluetooth: hci6: Opcode 0x206a failed: -110 [ 625.201133][ T5101] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 625.212747][ T5101] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 625.223139][ T5101] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 625.311448][ T5101] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 625.332275][ T5101] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 625.354170][ T5101] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 625.553544][T10883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.623896][T10883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.647691][T12781] netlink: 'syz.1.2320': attribute type 2 has an invalid length. [ 625.671676][T10883] bond0 (unregistering): Released all slaves [ 625.684684][T12781] netlink: 'syz.1.2320': attribute type 1 has an invalid length. [ 625.854308][T12777] loop2: detected capacity change from 0 to 32768 [ 625.888149][T12777] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2318 (12777) [ 625.905617][T12785] loop1: detected capacity change from 0 to 256 [ 625.951698][T12777] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 625.976317][T10883] IPVS: stopping backup sync thread 12286 ... [ 625.985149][T12777] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 626.033000][T12777] BTRFS info (device loop2): using free-space-tree [ 626.264772][T12777] BTRFS info (device loop2): rebuilding free space tree [ 626.339138][ T5101] Bluetooth: hci3: command tx timeout [ 626.501057][ T29] audit: type=1326 audit(1720413999.135:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.1.2324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f763e775bd9 code=0x0 [ 626.650238][T12697] chnl_net:caif_netlink_parms(): no params data found [ 626.662027][T10592] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 626.756832][T10883] hsr_slave_0: left promiscuous mode [ 626.780255][T10883] hsr_slave_1: left promiscuous mode [ 626.806085][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.818584][T10883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.839359][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.853670][T10883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.011965][T10883] veth1_macvtap: left promiscuous mode [ 627.024936][T10883] veth0_macvtap: left promiscuous mode [ 627.040835][T10883] veth1_vlan: left promiscuous mode [ 627.050877][T10883] veth0_vlan: left promiscuous mode [ 627.308646][ T29] audit: type=1326 audit(1720413999.915:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.5.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0896d75bd9 code=0x7ffc0000 [ 627.366365][T12819] Bluetooth: MGMT ver 1.22 [ 627.394605][ T29] audit: type=1326 audit(1720413999.915:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.5.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0896d75bd9 code=0x7ffc0000 [ 627.456268][ T5101] Bluetooth: hci8: command tx timeout [ 627.469228][ T29] audit: type=1326 audit(1720413999.945:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.5.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f0896d75bd9 code=0x7ffc0000 [ 627.562959][ T29] audit: type=1326 audit(1720413999.945:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.5.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0896d75bd9 code=0x7ffc0000 [ 627.600580][ T29] audit: type=1326 audit(1720413999.945:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.5.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0896d75bd9 code=0x7ffc0000 [ 627.651987][T12828] netlink: 'syz.5.2332': attribute type 2 has an invalid length. [ 627.660064][T12828] netlink: 'syz.5.2332': attribute type 1 has an invalid length. [ 627.738741][T12832] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2333'. [ 627.748535][T12832] openvswitch: netlink: Multiple metadata blocks provided [ 628.414940][ T5101] Bluetooth: hci3: command tx timeout [ 629.185007][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 629.363272][T12838] loop1: detected capacity change from 0 to 32768 [ 629.405402][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.430954][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.461227][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 629.504214][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 629.523836][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.534831][ T5101] Bluetooth: hci8: command tx timeout [ 629.554572][ T9] usb 6-1: config 0 descriptor?? [ 629.954030][T10883] team0 (unregistering): Port device team_slave_1 removed [ 629.986724][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 630.035369][ T9] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 630.057897][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 630.117676][T10883] team0 (unregistering): Port device team_slave_0 removed [ 630.254949][ T5657] usb 6-1: USB disconnect, device number 11 [ 630.494940][ T5101] Bluetooth: hci3: command tx timeout [ 631.616525][ T5101] Bluetooth: hci8: command tx timeout [ 631.713492][T12864] netlink: 'syz.1.2346': attribute type 2 has an invalid length. [ 631.723809][T12864] netlink: 'syz.1.2346': attribute type 1 has an invalid length. [ 631.746981][T10930] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 631.902469][ T5096] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 631.941057][T10930] usb 1-1: Using ep0 maxpacket: 8 [ 631.966935][T10930] usb 1-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 631.983681][T10930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.015673][T10930] usb 1-1: config 0 descriptor?? [ 632.107010][ T5096] usb 6-1: Using ep0 maxpacket: 16 [ 632.127016][ T5096] usb 6-1: config 8 has an invalid interface number: 19 but max is 0 [ 632.135648][ T5096] usb 6-1: config 8 has an invalid interface number: 239 but max is 0 [ 632.143839][ T5096] usb 6-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 632.163851][ T5096] usb 6-1: config 8 has no interface number 0 [ 632.170278][ T5096] usb 6-1: config 8 has no interface number 1 [ 632.187247][ T5096] usb 6-1: config 8 interface 19 altsetting 129 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 632.210513][ T5096] usb 6-1: config 8 interface 19 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 632.224336][ T5096] usb 6-1: config 8 interface 19 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 632.244866][ T5096] usb 6-1: config 8 interface 19 altsetting 129 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 632.264614][ T926] usb 1-1: USB disconnect, device number 15 [ 632.281050][ T5096] usb 6-1: config 8 interface 19 altsetting 129 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 632.295640][ T5096] usb 6-1: too many endpoints for config 8 interface 239 altsetting 35: 141, using maximum allowed: 30 [ 632.310667][ T5096] usb 6-1: config 8 interface 239 altsetting 35 has a duplicate endpoint with address 0xE, skipping [ 632.322072][ T5096] usb 6-1: config 8 interface 239 altsetting 35 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 632.337146][ T5096] usb 6-1: config 8 interface 239 altsetting 35 bulk endpoint 0x1 has invalid maxpacket 16 [ 632.357251][ T5096] usb 6-1: config 8 interface 239 altsetting 35 has a duplicate endpoint with address 0x1, skipping [ 632.369136][ T5096] usb 6-1: config 8 interface 239 altsetting 35 has 5 endpoint descriptors, different from the interface descriptor's value: 141 [ 632.403088][ T5096] usb 6-1: config 8 interface 19 has no altsetting 0 [ 632.425123][ T5096] usb 6-1: config 8 interface 239 has no altsetting 0 [ 632.436992][T12813] tipc: Enabling of bearer rejected, failed to enable media [ 632.461710][ T5096] usb 6-1: New USB device found, idVendor=0b05, idProduct=18f0, bcdDevice=5a.43 [ 632.499095][ T5096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.556921][ T5096] usb 6-1: Product: О [ 632.561060][ T5096] usb 6-1: Manufacturer: Ð¥ [ 632.574644][ T5096] usb 6-1: SerialNumber: Ñ [ 632.898125][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.924994][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.945013][T12697] bridge_slave_0: entered allmulticast mode [ 632.955748][T12855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.964344][T12855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.977204][T12697] bridge_slave_0: entered promiscuous mode [ 633.017145][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.024466][T12697] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.079681][T12697] bridge_slave_1: entered allmulticast mode [ 633.104177][T12697] bridge_slave_1: entered promiscuous mode [ 633.240637][T12870] loop1: detected capacity change from 0 to 32768 [ 633.335094][T12870] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 633.498755][T12870] XFS (loop1): Ending clean mount [ 633.526459][T12870] XFS (loop1): Quotacheck needed: Please wait. [ 633.582078][T12697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.646964][T12870] XFS (loop1): Quotacheck: Done. [ 633.677529][T12697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.679512][ T5096] usb 6-1: USB disconnect, device number 12 [ 633.694853][ T5101] Bluetooth: hci8: command tx timeout [ 633.812638][T12880] loop2: detected capacity change from 0 to 32768 [ 633.843477][T12880] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2352 (12880) [ 633.868652][T11786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 633.883520][T12697] team0: Port device team_slave_0 added [ 633.898247][T12880] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 633.900350][T12772] chnl_net:caif_netlink_parms(): no params data found [ 633.916709][T12880] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 633.935259][T12880] BTRFS info (device loop2): using free-space-tree [ 633.973348][T12697] team0: Port device team_slave_1 added [ 634.255410][T10592] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 634.690477][T12697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.722186][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.764566][ T926] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 634.807261][T12697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.839153][T12697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.877414][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.916505][T12697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.957389][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.014614][ T926] usb 1-1: Using ep0 maxpacket: 32 [ 635.064857][ T926] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 635.073997][ T926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.135658][ T926] usb 1-1: Product: syz [ 635.140356][ T926] usb 1-1: Manufacturer: syz [ 635.194599][ T926] usb 1-1: SerialNumber: syz [ 635.206003][ T926] usb 1-1: config 0 descriptor?? [ 635.415322][ T29] audit: type=1326 audit(1720414008.055:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.5.2362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0896d75bd9 code=0x0 [ 635.587727][ T926] rtl8150 1-1:0.0: couldn't reset the device [ 635.622935][ T926] rtl8150 1-1:0.0: probe with driver rtl8150 failed with error -5 [ 635.682596][ T926] usb 1-1: USB disconnect, device number 16 [ 635.695291][T12772] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.708446][T12919] loop1: detected capacity change from 0 to 32768 [ 635.724859][T12772] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.752881][T12772] bridge_slave_0: entered allmulticast mode [ 635.759463][T12919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2356 (12919) [ 635.786282][T12772] bridge_slave_0: entered promiscuous mode [ 635.826633][T12919] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 635.848488][T12919] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 635.890448][T12919] BTRFS info (device loop1): using free-space-tree [ 635.902141][T12697] hsr_slave_0: entered promiscuous mode [ 635.920582][T12697] hsr_slave_1: entered promiscuous mode [ 635.972894][T12697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.005867][T12697] Cannot create hsr debugfs directory [ 636.017864][T12772] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.061639][T12772] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.074969][T12772] bridge_slave_1: entered allmulticast mode [ 636.133182][T12772] bridge_slave_1: entered promiscuous mode [ 636.437125][T12772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.573312][T12772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.741326][T11786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 636.812004][T12772] team0: Port device team_slave_0 added [ 636.897482][T12772] team0: Port device team_slave_1 added [ 637.310403][T12978] loop2: detected capacity change from 0 to 4096 [ 637.330786][T12772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.339834][T12978] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 637.355539][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.381455][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.400914][T12978] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 637.431459][T12772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.461466][T10883] bridge_slave_1: left allmulticast mode [ 637.474531][T10883] bridge_slave_1: left promiscuous mode [ 637.496064][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.545054][T10883] bridge_slave_0: left allmulticast mode [ 637.570417][T10883] bridge_slave_0: left promiscuous mode [ 637.591732][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.609112][T12978] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 637.972356][ C1] vkms_vblank_simulate: vblank timer overrun [ 639.093495][T13005] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2383'. [ 639.144721][T13005] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 639.437042][T10883] team0: Port device bridge1 removed [ 639.480276][T13012] loop1: detected capacity change from 0 to 512 [ 639.518482][T13012] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.2385: Parent and EA inode have the same ino 15 [ 639.567111][T13012] EXT4-fs (loop1): Remounting filesystem read-only [ 639.573815][T13012] EXT4-fs (loop1): 1 orphan inode deleted [ 639.599312][T13012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.672642][T12992] loop2: detected capacity change from 0 to 32768 [ 639.760913][T12992] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 639.953449][T12992] XFS (loop2): Ending clean mount [ 639.970438][T12992] XFS (loop2): Quotacheck needed: Please wait. [ 640.111541][T10883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.151841][T12992] XFS (loop2): Quotacheck: Done. [ 640.169194][T10883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.201074][T10883] bond0 (unregistering): Released all slaves [ 640.275572][T12772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.312123][T10592] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 640.321447][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.381273][T12772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.421318][T12810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.831351][T13033] misc userio: Can't change port type on an already running userio instance [ 641.194087][T12772] hsr_slave_0: entered promiscuous mode [ 641.255284][T12772] hsr_slave_1: entered promiscuous mode [ 641.272509][T12772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.280236][T12772] Cannot create hsr debugfs directory [ 641.545994][T10883] hsr_slave_0: left promiscuous mode [ 641.572436][T10883] hsr_slave_1: left promiscuous mode [ 641.579038][T10883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.588911][T10883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.824732][ T5586] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 642.026902][ T5586] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 642.046500][ T5586] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 642.072501][ T5586] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 642.103418][ T5586] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.170007][ T5586] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 642.198815][ T5586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.231732][ T5586] usbtmc 1-1:16.0: bulk endpoints not found [ 642.253357][ T4484] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 642.271302][ T4484] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 642.281966][ T4484] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 642.291605][ T4484] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 642.344725][ T4484] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 642.355768][ T4484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.444150][ T5586] usb 1-1: USB disconnect, device number 17 [ 642.919365][T10883] team0 (unregistering): Port device team_slave_1 removed [ 642.945570][T13059] loop2: detected capacity change from 0 to 32768 [ 642.971898][T13059] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 643.010712][T10883] team0 (unregistering): Port device team_slave_0 removed [ 643.183514][T13059] XFS (loop2): Ending clean mount [ 643.209147][T13059] XFS (loop2): Quotacheck needed: Please wait. [ 643.295841][T13059] XFS (loop2): Quotacheck: Done. [ 643.392244][T10592] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 644.504738][ T5101] Bluetooth: hci2: command tx timeout [ 645.114910][T10883] IPVS: stop unused estimator thread 0... [ 645.202248][T13093] loop2: detected capacity change from 0 to 4096 [ 645.232618][T13093] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 645.246889][T12697] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 645.271585][T12697] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 645.358954][T12697] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 645.417102][T12697] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 645.469827][T13056] chnl_net:caif_netlink_parms(): no params data found [ 645.530879][T13101] devtmpfs: Too few inodes for current use [ 645.682733][T13105] netlink: 'syz.2.2414': attribute type 2 has an invalid length. [ 645.694213][T13105] netlink: 'syz.2.2414': attribute type 1 has an invalid length. [ 645.711422][T10883] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.974437][T10883] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.072536][T13118] 9pnet_fd: Insufficient options for proto=fd [ 646.348408][T10883] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.464717][T13056] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.494709][T13056] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.502052][T13056] bridge_slave_0: entered allmulticast mode [ 646.504280][ T5101] Bluetooth: hci4: command 0x0406 tx timeout [ 646.512224][T13056] bridge_slave_0: entered promiscuous mode [ 646.546245][T13056] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.553439][T13056] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.574801][ T5101] Bluetooth: hci2: command tx timeout [ 646.615167][T13056] bridge_slave_1: entered allmulticast mode [ 646.642794][T13056] bridge_slave_1: entered promiscuous mode [ 646.737027][T10883] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.892900][T13133] loop2: detected capacity change from 0 to 1024 [ 646.897886][T13056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.915504][T13133] EXT4-fs: Ignoring removed orlov option [ 646.921173][T13133] EXT4-fs: Ignoring removed nomblk_io_submit option [ 646.977902][T13056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.008686][T13133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.240003][T13056] team0: Port device team_slave_0 added [ 647.321612][T13056] team0: Port device team_slave_1 added [ 647.474639][T13144] misc userio: Can't change port type on an already running userio instance [ 647.507544][T13056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.524710][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.561119][T13056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.603836][T12772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 647.623589][T13056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.647056][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.689975][T13056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.721366][T12772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 647.740354][T12772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 647.810429][T13148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.868482][T10883] bridge_slave_1: left allmulticast mode [ 647.874230][T10883] bridge_slave_1: left promiscuous mode [ 647.884792][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.894671][T13148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.928166][T10883] bridge_slave_0: left allmulticast mode [ 647.933858][T10883] bridge_slave_0: left promiscuous mode [ 647.955924][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.654669][ T4484] Bluetooth: hci2: command tx timeout [ 648.938532][T10592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.655815][T10883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.689953][T13176] netlink: 'syz.0.2438': attribute type 2 has an invalid length. [ 650.699923][T13176] netlink: 'syz.0.2438': attribute type 1 has an invalid length. [ 650.701276][T10883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.733367][T10883] bond0 (unregistering): Released all slaves [ 650.744692][ T4484] Bluetooth: hci2: command tx timeout [ 650.777688][T12772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 650.793873][T13178] misc userio: Can't change port type on an already running userio instance [ 650.869055][T13056] hsr_slave_0: entered promiscuous mode [ 650.883775][T13056] hsr_slave_1: entered promiscuous mode [ 650.892960][T13056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.905904][T13056] Cannot create hsr debugfs directory [ 651.158140][T12697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.216440][T13184] loop2: detected capacity change from 0 to 16 [ 651.260081][T13184] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 652.498100][T12697] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.613676][T10883] hsr_slave_0: left promiscuous mode [ 652.670208][T10883] hsr_slave_1: left promiscuous mode [ 652.689467][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.714665][T10883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.722870][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.735006][T10883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.832593][T10883] veth1_macvtap: left promiscuous mode [ 653.855712][T10883] veth0_macvtap: left promiscuous mode [ 653.861416][T10883] veth1_vlan: left promiscuous mode [ 653.884828][T10883] veth0_vlan: left promiscuous mode [ 654.217768][T13226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.260265][T13226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.310722][T10883] team0 (unregistering): Port device team_slave_1 removed [ 657.381171][T10883] team0 (unregistering): Port device team_slave_0 removed [ 658.011752][T10930] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.019001][T10930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.039311][T10930] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.046578][T10930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.421254][T13247] loop2: detected capacity change from 0 to 128 [ 658.554707][ T29] audit: type=1804 audit(1720414031.185:349): pid=13247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2461" name="/newroot/135/file0/bus" dev="loop2" ino=1048890 res=1 errno=0 [ 658.630933][ T29] audit: type=1800 audit(1720414031.225:350): pid=13247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2461" name="bus" dev="loop2" ino=1048890 res=0 errno=0 [ 658.701980][T12772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.866865][T12772] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.926949][ T926] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.934161][ T926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.046287][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.053470][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.255030][T13056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 659.305522][T13056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 659.332864][T13056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 659.431458][T13056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 659.484086][T12697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.897307][T13056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.006693][T13056] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.062783][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.070053][ T5660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.100954][ T5657] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.108196][ T5657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.253674][T12772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.463970][T12697] veth0_vlan: entered promiscuous mode [ 661.533233][T12772] veth0_vlan: entered promiscuous mode [ 661.548834][ T29] audit: type=1326 audit(1720414034.185:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13310 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043bd75bd9 code=0x7ffc0000 [ 661.563335][T12772] veth1_vlan: entered promiscuous mode [ 661.646269][ T29] audit: type=1326 audit(1720414034.185:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13310 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043bd75bd9 code=0x7ffc0000 [ 661.660001][T12697] veth1_vlan: entered promiscuous mode [ 661.741014][ T29] audit: type=1326 audit(1720414034.215:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13310 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f043bd75bd9 code=0x7ffc0000 [ 661.814923][ T29] audit: type=1326 audit(1720414034.215:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13310 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043bd75bd9 code=0x7ffc0000 [ 661.890828][T12772] veth0_macvtap: entered promiscuous mode [ 661.907417][ T29] audit: type=1326 audit(1720414034.215:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13310 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043bd75bd9 code=0x7ffc0000 [ 661.944037][T12697] veth0_macvtap: entered promiscuous mode [ 661.973493][T12772] veth1_macvtap: entered promiscuous mode [ 661.978387][ T29] audit: type=1326 audit(1720414034.215:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13310 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f043bd75bd9 code=0x7ffc0000 [ 662.017488][ T29] audit: type=1326 audit(1720414034.235:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13310 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043bd75bd9 code=0x7ffc0000 [ 662.041197][ T29] audit: type=1326 audit(1720414034.235:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13310 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f043bd75bd9 code=0x7ffc0000 [ 662.129209][T12697] veth1_macvtap: entered promiscuous mode [ 662.180263][T13056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.815711][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.867457][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.912442][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.954908][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.004645][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.054784][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.094687][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.154648][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.165065][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.193711][T13330] loop2: detected capacity change from 0 to 512 [ 663.200146][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.239828][T12697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.278955][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.318159][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.325631][T13330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.358418][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.361807][T13330] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 663.374526][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.389839][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.400603][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.410538][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.421157][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.431749][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.442213][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.458202][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.472479][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.485000][T12772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.501550][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.523343][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.534958][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.554675][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.571144][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.594561][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.618103][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.632472][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.652737][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.689012][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.711594][T12772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.747947][T10592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.767806][T12772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.794535][T12772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.803256][T12772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.827326][T12772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.131163][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.329650][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.590005][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.674548][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.714530][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.734935][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.759265][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.780120][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.790233][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.801741][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.820928][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.831798][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.846926][T12697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.909525][T12697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.919210][T12697] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.935265][T12697] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.949308][T12697] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.057931][T13056] veth0_vlan: entered promiscuous mode [ 665.188441][T13056] veth1_vlan: entered promiscuous mode [ 665.312719][T10883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.333415][T10883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.458293][T10883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.474546][T10883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.558782][T13056] veth0_macvtap: entered promiscuous mode [ 665.579449][ T5299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.595391][ T5299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.653466][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.659021][T13056] veth1_macvtap: entered promiscuous mode [ 665.696554][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.762516][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.790329][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.813991][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.834726][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.847255][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.859329][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.872612][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.887576][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.897543][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.922435][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.932468][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.947782][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.957795][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.968388][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.007751][T13056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.058208][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.114233][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.140760][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.169134][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.189428][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.200241][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.231653][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.259552][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.279798][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.295190][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.305415][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.317377][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.341221][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.362183][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.383358][T13056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.451230][T13056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.491384][T13056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.514616][T13056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.523790][T13056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.073044][T10904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.243537][T10904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.335555][T10869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.347893][T10869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.612701][T10904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.708850][T13425] loop2: detected capacity change from 0 to 4096 [ 667.784387][T13425] NILFS (loop2): invalid segment: Checksum error in segment payload [ 667.802122][T13431] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2525'. [ 667.815849][T13425] NILFS (loop2): trying rollback from an earlier position [ 668.191445][T13425] NILFS (loop2): recovery complete [ 668.294343][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 668.332482][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 668.353397][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 668.389045][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.390255][T13439] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 668.470828][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 668.525617][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 668.678538][T10904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.857560][ T5299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.870999][T13448] loop3: detected capacity change from 0 to 2048 [ 668.899529][ T5299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.930852][T13450] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 669.142604][T13451] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 126976 lbcount: 131072 extent 129+95232 [ 669.477984][T10904] bridge_slave_1: left allmulticast mode [ 669.483693][T10904] bridge_slave_1: left promiscuous mode [ 669.510328][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.548229][T10904] bridge_slave_0: left allmulticast mode [ 669.568969][T10904] bridge_slave_0: left promiscuous mode [ 669.588252][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.883551][ T5101] Bluetooth: hci3: command tx timeout [ 672.702632][T13504] input: syz1 as /devices/virtual/input/input34 [ 672.715029][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.756487][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.796225][T10904] bond0 (unregistering): Released all slaves [ 672.821974][T13497] loop3: detected capacity change from 0 to 40427 [ 672.832489][T13497] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 672.840866][T13497] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 672.887019][T13497] F2FS-fs (loop3): invalid crc value [ 672.894968][ T5101] Bluetooth: hci3: command tx timeout [ 672.960623][T13497] F2FS-fs (loop3): Found nat_bits in checkpoint [ 673.042566][T13487] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 673.237538][T13497] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 673.255025][T13497] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 673.382247][T13497] syz.3.2545: attempt to access beyond end of device [ 673.382247][T13497] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 673.491112][T13497] syz.3.2545: attempt to access beyond end of device [ 673.491112][T13497] loop3: rw=34817, sector=77960, nr_sectors = 880 limit=40427 [ 673.566530][T13524] loop2: detected capacity change from 0 to 1024 [ 673.608939][T13524] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 673.671567][T10883] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 673.672549][T13434] chnl_net:caif_netlink_parms(): no params data found [ 673.693778][T10883] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 673.712488][T13524] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f05cc01c, mo2=0002] [ 673.714951][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'. [ 673.725159][T13524] System zones: 0-1, 3-36 [ 673.741603][T13533] netlink: 'syz.1.2555': attribute type 13 has an invalid length. [ 673.760931][T13533] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.771121][T13533] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.781468][T13533] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.783908][T13524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.790451][T13533] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.814968][T13533] vxlan0: entered promiscuous mode [ 673.894567][T10962] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 673.930613][T10904] hsr_slave_0: left promiscuous mode [ 673.951486][T10904] hsr_slave_1: left promiscuous mode [ 673.960335][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.984744][T10904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.024697][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.032169][T10904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.048257][T10592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.097789][T10962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.112458][T10904] veth1_macvtap: left promiscuous mode [ 674.121067][T10962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.135163][T10904] veth0_macvtap: left promiscuous mode [ 674.140855][T10904] veth1_vlan: left promiscuous mode [ 674.158113][T10962] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 674.177309][T10904] veth0_vlan: left promiscuous mode [ 674.184677][T10962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.225510][T10962] usb 1-1: config 0 descriptor?? [ 674.749372][T10962] wacom 0003:056A:0331.0011: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 674.974821][ T5101] Bluetooth: hci3: command tx timeout [ 675.271879][T13539] IPVS: set_ctl: invalid protocol: 115 0.0.128.1:20003 [ 676.123004][T10962] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 676.281314][T13537] loop2: detected capacity change from 0 to 32768 [ 676.367435][T13537] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 676.555559][T13537] XFS (loop2): Ending clean mount [ 676.578565][T13537] XFS (loop2): Quotacheck needed: Please wait. [ 676.778515][T13537] XFS (loop2): Quotacheck: Done. [ 676.935744][T10592] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 676.974445][T13544] loop1: detected capacity change from 0 to 32768 [ 677.050143][T13544] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 677.059757][ T5101] Bluetooth: hci3: command tx timeout [ 677.078316][T13544] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 677.351339][T13544] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 677.441686][T10930] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 677.462412][T10930] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 677.720452][ T9] usb 1-1: USB disconnect, device number 18 [ 678.535066][T10930] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1072ms [ 678.554447][T10930] gfs2: fsid=syz:syz.0: jid=0: Done [ 678.566560][T13544] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 678.922445][T10904] team0 (unregistering): Port device team_slave_1 removed [ 679.092251][T10904] team0 (unregistering): Port device team_slave_0 removed [ 679.123668][T13580] x_tables: ip_tables: l2tp match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD/OUTPUT [ 680.004118][T13558] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 680.042535][T13572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2564'. [ 680.054819][T13572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2564'. [ 680.245312][T13595] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 680.591760][T13434] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.617080][T13434] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.660850][T13434] bridge_slave_0: entered allmulticast mode [ 680.687229][T13434] bridge_slave_0: entered promiscuous mode [ 680.719320][T13434] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.772530][T13434] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.798827][T13434] bridge_slave_1: entered allmulticast mode [ 680.826062][T13434] bridge_slave_1: entered promiscuous mode [ 680.922459][T13598] loop1: detected capacity change from 0 to 32768 [ 680.946493][T13598] XFS: ikeep mount option is deprecated. [ 681.002871][T13598] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 681.091520][T13434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.152590][T13434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.175210][T13598] XFS (loop1): Ending clean mount [ 681.219827][T13598] XFS (loop1): Quotacheck needed: Please wait. [ 681.359658][T13598] XFS (loop1): Quotacheck: Done. [ 681.379332][T13434] team0: Port device team_slave_0 added [ 681.447366][T13434] team0: Port device team_slave_1 added [ 681.474623][ T5096] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 681.592492][T13056] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 681.662915][T13434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.696326][T13434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.727438][ T5096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.740896][T13434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.758504][T13593] loop3: detected capacity change from 0 to 40427 [ 681.789617][T13434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.799870][ T5096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.810181][T13593] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 681.814893][ T5096] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 681.870646][T13593] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 681.874072][ T5096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.889893][T13434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.907076][ T5096] usb 3-1: config 0 descriptor?? [ 681.964670][T13593] F2FS-fs (loop3): invalid crc value [ 681.985756][T13434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.017675][T13593] F2FS-fs (loop3): Found nat_bits in checkpoint [ 682.127983][T13635] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 682.434790][T13593] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 682.443739][T13593] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 682.460527][ T5096] wacom 0003:056A:0331.0012: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 682.492156][T13434] hsr_slave_0: entered promiscuous mode [ 682.516126][T13434] hsr_slave_1: entered promiscuous mode [ 682.546224][T13434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.561785][T13434] Cannot create hsr debugfs directory [ 682.624409][T13593] syz.3.2570: attempt to access beyond end of device [ 682.624409][T13593] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 682.792694][T13652] syz.3.2570: attempt to access beyond end of device [ 682.792694][T13652] loop3: rw=34817, sector=77960, nr_sectors = 880 limit=40427 [ 682.890074][T13654] loop1: detected capacity change from 0 to 164 [ 683.001302][T13654] isofs_fill_super: root inode is not a directory. Corrupted media? [ 683.026005][T13638] loop2: detected capacity change from 0 to 512 [ 683.056639][T13638] EXT4-fs (loop2): filesystem is read-only [ 683.074664][ T5299] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 683.107324][ T5299] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 683.211863][T13654] loop1: detected capacity change from 0 to 128 [ 683.225880][T13654] ufs: Invalid option: "ð—~" or missing value [ 683.250145][T13654] ufs: wrong mount options [ 683.695149][T10930] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 683.888133][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 684.001673][T13434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 684.049536][T13434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 684.070702][T13434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 684.105188][T13434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 684.114730][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 684.132805][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 684.152318][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.180368][ T9] usb 1-1: Product: syz [ 684.197075][ T9] usb 1-1: Manufacturer: syz [ 684.217331][ T9] usb 1-1: SerialNumber: syz [ 684.243858][ T9] usb 1-1: config 0 descriptor?? [ 684.411290][T13434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.480846][T13434] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.528866][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.536140][ T5586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.626911][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.634179][ T5586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.676035][T13667] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 684.771709][T13667] loop3: detected capacity change from 0 to 1024 [ 685.102984][T13667] loop3: detected capacity change from 0 to 4096 [ 685.113138][T13657] team0: entered promiscuous mode [ 685.144418][T13657] team_slave_0: entered promiscuous mode [ 685.165566][T13657] team_slave_1: entered promiscuous mode [ 685.205587][T13657] team0: left promiscuous mode [ 685.214597][T13657] team_slave_0: left promiscuous mode [ 685.236052][T13676] loop1: detected capacity change from 0 to 2048 [ 685.250825][T13657] team_slave_1: left promiscuous mode [ 685.494425][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.500951][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.501019][T13679] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 687.710904][T13676] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=2048, inode=0, rec_len=0, name_len=0 [ 687.835209][ T5586] usb 1-1: USB disconnect, device number 19 [ 687.872919][T13676] Remounting filesystem read-only [ 687.911161][T13676] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2199023257600 exceeds block count 1 [ 687.979499][ T5096] usb 3-1: USB disconnect, device number 14 [ 687.987212][T13434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.004616][T13676] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=2048, inode=0, rec_len=0, name_len=0 [ 688.115192][T13699] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2600'. [ 688.170168][T13056] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 688.204568][T13056] NILFS (loop1): discard dirty block: blocknr=26, size=2048 [ 688.211972][T13056] NILFS (loop1): discard dirty block: blocknr=27, size=2048 [ 688.256896][T13056] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 688.263879][T13056] NILFS (loop1): discard dirty block: blocknr=28, size=2048 [ 688.291633][T13056] NILFS (loop1): discard dirty block: blocknr=29, size=2048 [ 688.897638][T13717] loop1: detected capacity change from 0 to 256 [ 688.928350][ T5586] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 689.084009][ T5101] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 689.100024][ T5101] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 689.108322][ T5101] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 689.117440][ T5101] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 689.128522][ T5101] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 689.135989][ T5101] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 689.189586][ T5586] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 689.218221][ T5586] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 689.231660][ T5586] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 689.232007][T13717] FAT-fs (loop1): Directory bread(block 64) failed [ 689.248118][T13717] FAT-fs (loop1): Directory bread(block 65) failed [ 689.255121][T13717] FAT-fs (loop1): Directory bread(block 66) failed [ 689.264662][ T5586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.282487][T13713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 689.292933][T13717] FAT-fs (loop1): Directory bread(block 67) failed [ 689.301338][T13717] FAT-fs (loop1): Directory bread(block 68) failed [ 689.308440][T13717] FAT-fs (loop1): Directory bread(block 69) failed [ 689.315841][T13717] FAT-fs (loop1): Directory bread(block 70) failed [ 689.331858][T13717] FAT-fs (loop1): Directory bread(block 71) failed [ 689.339358][T13717] FAT-fs (loop1): Directory bread(block 72) failed [ 689.346456][T13717] FAT-fs (loop1): Directory bread(block 73) failed [ 689.763205][T13729] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 689.801966][T13730] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 689.835470][ T5299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.290323][T13434] veth0_vlan: entered promiscuous mode [ 690.417054][ T5660] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 690.707649][ T5157] usb 3-1: USB disconnect, device number 15 [ 691.135461][ T5660] usb 6-1: Using ep0 maxpacket: 16 [ 691.162037][ T5660] usb 6-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 691.178248][ T5660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.205763][ T5660] usb 6-1: Product: syz [ 691.210406][ T5660] usb 6-1: Manufacturer: syz [ 691.215390][ T4484] Bluetooth: hci5: command tx timeout [ 691.239243][ T5660] usb 6-1: SerialNumber: syz [ 691.247533][ T5660] usb 6-1: config 0 descriptor?? [ 691.325702][ T5299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.388154][T13738] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 691.435777][T13434] veth1_vlan: entered promiscuous mode [ 691.505473][T13740] loop1: detected capacity change from 0 to 2048 [ 691.556935][ T5299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.604763][T13743] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 691.692801][T13740] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=2048, inode=0, rec_len=0, name_len=0 [ 691.770199][T13740] Remounting filesystem read-only [ 691.799622][T13740] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2199023257600 exceeds block count 1 [ 691.823713][ T5299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.900048][T13740] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=2048, inode=0, rec_len=0, name_len=0 [ 691.940446][T13732] team0: entered promiscuous mode [ 691.946078][T13732] team_slave_0: entered promiscuous mode [ 691.952052][T13732] team_slave_1: entered promiscuous mode [ 691.963010][T13732] team0: left promiscuous mode [ 691.968243][T13732] team_slave_0: left promiscuous mode [ 691.974026][T13732] team_slave_1: left promiscuous mode [ 692.000802][T13056] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 692.008577][T13056] NILFS (loop1): discard dirty block: blocknr=26, size=2048 [ 692.016990][T13056] NILFS (loop1): discard dirty block: blocknr=27, size=2048 [ 692.029003][T13056] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 692.036483][T13056] NILFS (loop1): discard dirty block: blocknr=28, size=2048 [ 692.043867][T13056] NILFS (loop1): discard dirty block: blocknr=29, size=2048 [ 692.101657][T13434] veth0_macvtap: entered promiscuous mode [ 692.179500][ T5660] usb 6-1: USB disconnect, device number 13 [ 692.240816][T13434] veth1_macvtap: entered promiscuous mode [ 692.340881][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.402270][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.448009][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.484614][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.500780][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.531039][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.555303][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.571061][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.582704][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.593732][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.604602][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.618878][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.643310][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.664682][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.697727][T13434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.816774][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.855791][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.880304][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.907069][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.954625][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.000654][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.069804][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.114673][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.144691][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.183178][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.218031][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.248480][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.299376][ T4484] Bluetooth: hci5: command tx timeout [ 693.318644][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.333438][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.346439][T13434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.396870][T13777] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2628'. [ 693.505864][T13434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.529429][T13434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.564703][T13434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.573429][T13434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.635436][ T5299] bridge_slave_1: left allmulticast mode [ 693.649088][ T5299] bridge_slave_1: left promiscuous mode [ 693.659769][T13767] loop2: detected capacity change from 0 to 32768 [ 693.668815][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.678692][T13767] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2625 (13767) [ 693.696545][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.727722][T13767] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 693.742281][T13767] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 693.751638][T13767] BTRFS info (device loop2): using free-space-tree [ 693.893143][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 693.893166][ T29] audit: type=1800 audit(1720414066.525:415): pid=13767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2625" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 694.055722][T10592] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 694.415497][T13818] loop1: detected capacity change from 0 to 256 [ 695.282637][ T5299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.340946][ T5299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.374934][ T4484] Bluetooth: hci5: command tx timeout [ 695.400917][ T5299] bond0 (unregistering): Released all slaves [ 695.425157][T13719] chnl_net:caif_netlink_parms(): no params data found [ 696.230259][T13829] loop2: detected capacity change from 0 to 32768 [ 696.245131][T13829] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2635 (13829) [ 696.514759][T13829] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 696.534964][T13829] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 696.543415][T13829] BTRFS info (device loop2): using free-space-tree [ 697.468914][ T4484] Bluetooth: hci5: command tx timeout [ 697.512818][ T29] audit: type=1800 audit(1720414070.135:416): pid=13829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 697.616276][ T29] audit: type=1800 audit(1720414070.145:417): pid=13829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 697.649859][ T29] audit: type=1800 audit(1720414070.225:418): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 697.681961][ T29] audit: type=1800 audit(1720414070.255:419): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 697.782911][T13719] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.830068][T13719] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.857692][T13719] bridge_slave_0: entered allmulticast mode [ 697.879521][T13719] bridge_slave_0: entered promiscuous mode [ 697.900248][T13719] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.917674][T13719] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.935741][T13719] bridge_slave_1: entered allmulticast mode [ 697.952256][T13719] bridge_slave_1: entered promiscuous mode [ 698.069766][T10592] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 698.089161][ T5299] hsr_slave_0: left promiscuous mode [ 698.142133][ T5299] hsr_slave_1: left promiscuous mode [ 698.188530][ T5299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.214831][ T5299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.243169][ T5299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.274692][ T5299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.387009][ T5299] veth1_macvtap: left promiscuous mode [ 698.392611][ T5299] veth0_macvtap: left promiscuous mode [ 698.606685][ T5299] veth1_vlan: left promiscuous mode [ 698.642129][ T5299] veth0_vlan: left promiscuous mode [ 700.088174][T13929] netlink: 'syz.5.2679': attribute type 8 has an invalid length. [ 700.107250][T13929] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2679'. [ 700.596706][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 700.809040][ T5657] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 700.811400][ T9] usb 6-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01 [ 700.834666][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.865297][ T9] usb 6-1: config 0 descriptor?? [ 701.007675][ T5657] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 701.014276][T10962] kernel write not supported for file /vcsa1 (pid: 10962 comm: kworker/0:5) [ 701.035946][ T5657] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 701.036016][ T5657] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 701.036048][ T5657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.041713][T13930] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 701.072621][T13938] netlink: 'syz.0.2683': attribute type 27 has an invalid length. [ 701.654333][T13946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2683'. [ 701.697837][ T5299] team0 (unregistering): Port device team_slave_1 removed [ 702.238752][ T5660] usb 2-1: USB disconnect, device number 20 [ 702.395895][ T5299] team0 (unregistering): Port device team_slave_0 removed [ 703.258119][T13945] loop2: detected capacity change from 0 to 32768 [ 703.279625][T13945] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 703.288104][T13945] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 703.351819][T13945] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 703.401051][ T5157] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 703.414778][ T5157] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 703.641295][T13955] loop1: detected capacity change from 0 to 512 [ 703.651167][ T5157] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 236ms [ 703.652215][T13955] EXT4-fs: Ignoring removed nobh option [ 703.667173][T13955] EXT4-fs: quotafile must be on filesystem root [ 703.679468][ T5157] gfs2: fsid=syz:syz.0: jid=0: Done [ 703.697704][T13945] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 703.800346][T13955] loop1: detected capacity change from 0 to 2048 [ 703.842465][T13955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.911477][ T29] audit: type=1800 audit(1720414076.535:420): pid=13955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2687" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 704.342991][T13929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2679'. [ 704.357947][T13933] IPVS: Unknown mcast interface: ip6erspan0 [ 704.391069][T13719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.451810][T13719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.493620][T10904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.520835][T10904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.566800][T13056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.607187][T10904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.616502][T10904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.660644][ T9] mxuport 6-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 704.680552][ T9] mxuport 6-1:0.0: probe with driver mxuport failed with error -5 [ 704.764855][ T9] usb 6-1: USB disconnect, device number 14 [ 704.851765][T13719] team0: Port device team_slave_0 added [ 704.916653][T13719] team0: Port device team_slave_1 added [ 704.950888][T10930] kernel write not supported for file /vcsa1 (pid: 10930 comm: kworker/0:4) [ 705.068046][T13719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.111188][T13719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.160403][T13719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.295030][ T5157] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 705.311930][T13719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.311952][T13719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.311988][T13719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.497908][ T5157] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 705.499601][T13719] hsr_slave_0: entered promiscuous mode [ 705.536972][T13719] hsr_slave_1: entered promiscuous mode [ 705.539176][ T5157] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 705.558518][T13719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.575826][T13719] Cannot create hsr debugfs directory [ 705.590964][ T5157] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 705.635486][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.692091][T13993] loop1: detected capacity change from 0 to 256 [ 705.706949][T13983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 705.910434][ T5299] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.955728][T13993] FAT-fs (loop1): Directory bread(block 64) failed [ 705.963186][T13993] FAT-fs (loop1): Directory bread(block 65) failed [ 705.984138][T13993] FAT-fs (loop1): Directory bread(block 66) failed [ 705.993688][T13993] FAT-fs (loop1): Directory bread(block 67) failed [ 706.000859][T13993] FAT-fs (loop1): Directory bread(block 68) failed [ 706.007924][T13993] FAT-fs (loop1): Directory bread(block 69) failed [ 706.019552][T13993] FAT-fs (loop1): Directory bread(block 70) failed [ 706.028838][T13993] FAT-fs (loop1): Directory bread(block 71) failed [ 706.046614][T13993] FAT-fs (loop1): Directory bread(block 72) failed [ 706.061763][T13993] FAT-fs (loop1): Directory bread(block 73) failed [ 707.968464][ T5299] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.234155][ T5542] usb 1-1: USB disconnect, device number 20 [ 708.889066][ T5299] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.918786][T14018] loop1: detected capacity change from 0 to 2048 [ 709.152097][T14018] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 709.252257][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 709.285201][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 709.298742][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 709.313013][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 709.325335][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 709.334770][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 709.920468][ T5299] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.149969][ T29] audit: type=1326 audit(1720414082.785:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14031 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043bd75bd9 code=0x7ffc0000 [ 710.165169][T14035] netlink: 'syz.5.2717': attribute type 27 has an invalid length. [ 710.226030][ T29] audit: type=1326 audit(1720414082.785:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14031 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043bd75bd9 code=0x7ffc0000 [ 710.603815][ T5299] bridge_slave_1: left allmulticast mode [ 710.614732][ T5299] bridge_slave_1: left promiscuous mode [ 710.632491][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.652994][ T5299] bridge_slave_0: left allmulticast mode [ 710.664632][ T5299] bridge_slave_0: left promiscuous mode [ 710.685048][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.793659][T14047] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2717'. [ 710.874895][T12448] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 710.956514][T14050] loop2: detected capacity change from 0 to 47 [ 710.963873][T14050] minix: Unknown parameter '0x0000000000000000' [ 711.057043][T12448] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 711.087049][T12448] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 711.087808][T14050] loop2: detected capacity change from 0 to 764 [ 711.124738][T12448] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 711.151549][T12448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.176727][T14046] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 711.225952][T14050] usb usb5: usbfs: process 14050 (syz.2.2721) did not claim interface 0 before use [ 711.454909][ T5101] Bluetooth: hci3: command tx timeout [ 711.533564][ T5660] kernel write not supported for file /vcsa1 (pid: 5660 comm: kworker/1:17) [ 712.220553][T10930] usb 1-1: USB disconnect, device number 21 [ 712.524042][ T5299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.580945][ T5299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.619823][ T5299] bond0 (unregistering): Released all slaves [ 713.094846][ T5101] Bluetooth: hci6: command 0x206a tx timeout [ 713.765839][ T5101] Bluetooth: hci3: command tx timeout [ 714.459632][T14022] chnl_net:caif_netlink_parms(): no params data found [ 714.875591][ T5299] hsr_slave_0: left promiscuous mode [ 714.899946][ T5299] hsr_slave_1: left promiscuous mode [ 714.955556][ T5299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.989682][ T5299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.029668][ T5299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.050000][ T5299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.139235][T14080] loop2: detected capacity change from 0 to 32768 [ 715.158145][ T5299] veth1_macvtap: left promiscuous mode [ 715.174742][ T5299] veth0_macvtap: left promiscuous mode [ 715.184404][ T5299] veth1_vlan: left promiscuous mode [ 715.189866][T14080] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 715.195550][ T5299] veth0_vlan: left promiscuous mode [ 715.293899][T14080] XFS (loop2): Ending clean mount [ 715.781697][ T4484] Bluetooth: hci3: command tx timeout [ 715.919660][T10592] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 715.928526][ T5542] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 [ 715.950898][ T5542] XFS (loop2): Unmount and run xfs_repair [ 715.960873][ T5542] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 715.984792][ T5542] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 715.993685][ T5542] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 716.006814][ T5542] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 716.040217][ T5542] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 716.050203][ T5542] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 716.060655][ T5542] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 716.069903][ T5542] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 716.090069][ T5542] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 716.118994][ T5657] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74 [ 716.121168][ T5657] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 716.121228][ T5657] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 716.393080][T14137] loop1: detected capacity change from 0 to 2048 [ 716.460293][T14137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 716.799989][T14149] loop1: detected capacity change from 0 to 764 [ 716.825305][T14149] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 717.462738][ T5299] team0 (unregistering): Port device team_slave_1 removed [ 717.837735][ T5299] team0 (unregistering): Port device team_slave_0 removed [ 717.915028][ T4484] Bluetooth: hci3: command tx timeout [ 718.700650][T14141] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 718.836807][T13719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 718.891195][T13719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 718.947935][T14022] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.966273][T14022] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.973529][T14022] bridge_slave_0: entered allmulticast mode [ 719.009466][T14022] bridge_slave_0: entered promiscuous mode [ 719.034217][T13719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 719.059744][T13719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 719.074771][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 719.117055][T14022] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.124254][T14022] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.156822][T14022] bridge_slave_1: entered allmulticast mode [ 719.164977][T14022] bridge_slave_1: entered promiscuous mode [ 719.388750][T14022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.415917][T14180] trusted_key: syz.5.2764 sent an empty control message without MSG_MORE. [ 719.436234][T14177] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 719.439446][T14022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.442763][T14177] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 719.442917][T14177] vhci_hcd vhci_hcd.0: Device attached [ 719.465798][T14181] vhci_hcd: connection closed [ 719.473576][T10883] vhci_hcd: stop threads [ 719.482817][T10883] vhci_hcd: release socket [ 719.490308][T10883] vhci_hcd: disconnect device [ 719.557428][T14022] team0: Port device team_slave_0 added [ 719.584363][T14022] team0: Port device team_slave_1 added [ 719.638214][T14022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.647426][T14022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.673808][T14022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.687335][T14022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.694291][T14022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.728313][T14022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.814416][T14022] hsr_slave_0: entered promiscuous mode [ 719.821736][T14022] hsr_slave_1: entered promiscuous mode [ 719.832641][T14022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.841958][T14022] Cannot create hsr debugfs directory [ 720.090041][T13719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.142612][T13719] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.159332][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.166573][ T5660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.191854][ T5657] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.199071][ T5657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.538285][T14022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 720.550916][T14022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 720.565405][T14022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 720.583045][T14022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 720.619710][T13719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.723431][T13719] veth0_vlan: entered promiscuous mode [ 720.753212][T13719] veth1_vlan: entered promiscuous mode [ 720.840291][T13719] veth0_macvtap: entered promiscuous mode [ 720.855845][T13719] veth1_macvtap: entered promiscuous mode [ 720.873595][T14022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.922474][T14022] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.937504][ T5657] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.944699][ T5657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.953643][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.969794][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.984071][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.996487][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.006452][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.018452][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.028442][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.038970][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.048937][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.062274][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.072168][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.087810][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.103991][T13719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.131532][ T5657] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.138715][ T5657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.163656][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.174231][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.187009][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.198291][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.208565][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.225632][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.238177][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.250085][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.260035][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.270705][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.282878][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.293360][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.307380][T13719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.351129][T13719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.361503][T13719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.370393][T13719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.379351][T13719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.577222][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.600356][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.667261][ T5299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.686171][ T5299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.898690][T14022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.299139][ T53] Bluetooth: hci7: command 0x0406 tx timeout [ 723.861293][T14022] veth0_vlan: entered promiscuous mode [ 723.912453][T14022] veth1_vlan: entered promiscuous mode [ 723.969912][T14223] input: syz0 as /devices/virtual/input/input41 [ 723.988443][T14225] loop3: detected capacity change from 0 to 64 [ 724.007566][T14225] minix: Unknown parameter '18446744073709551615' [ 724.045766][T14022] veth0_macvtap: entered promiscuous mode [ 724.100302][T14022] veth1_macvtap: entered promiscuous mode [ 724.191870][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.212759][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.223030][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.244725][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.291917][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.314326][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.324220][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.324250][T14238] loop3: detected capacity change from 0 to 1024 [ 724.335985][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.404163][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.444618][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.495567][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.514682][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.534724][ T5096] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 724.550976][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.608751][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.638329][T14022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.693404][T14237] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 724.734903][ T5096] usb 2-1: Using ep0 maxpacket: 8 [ 724.752408][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.762545][ T5096] usb 2-1: config 32 has an invalid interface number: 255 but max is 0 [ 724.779133][ T5096] usb 2-1: config 32 has an invalid descriptor of length 255, skipping remainder of the config [ 724.785326][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.799802][ T5096] usb 2-1: config 32 has no interface number 0 [ 724.810492][ T5096] usb 2-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 724.823886][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.832560][ T5096] usb 2-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 724.848954][ T5096] usb 2-1: config 32 interface 255 has no altsetting 0 [ 724.852368][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.859418][ T5096] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 724.876814][ T5096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.879771][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.898149][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.909211][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.920276][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.931676][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.942488][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.952593][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.963376][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.976751][T14022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.997595][T14022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.038201][T14022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.058225][T14254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2785'. [ 725.089325][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 725.096229][T14022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.152083][T14022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.184840][T14022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.204648][T14022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.265460][ T5096] usb 2-1: string descriptor 0 read error: -71 [ 725.308985][ T5096] hub 2-1:32.255: bad descriptor, ignoring hub [ 725.315951][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 725.330065][ T5096] hub 2-1:32.255: probe with driver hub failed with error -5 [ 725.340809][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 725.363537][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 725.390463][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 725.401504][ T9] usb 4-1: string descriptor 0 read error: -22 [ 725.408826][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 725.431045][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.464957][ T5096] usb 2-1: USB disconnect, device number 21 [ 725.484102][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.508728][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.599373][T10903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.613137][T10903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.945252][ T9] cdc_ncm 4-1:1.0: bind() failure [ 725.969765][ T9] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 725.987577][ T9] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 726.012696][ T9] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 726.062375][ T9] usb 4-1: USB disconnect, device number 20 [ 726.076011][T14282] loop1: detected capacity change from 0 to 64 [ 726.098076][T14282] minix: Unknown parameter '18446744073709551615' [ 726.249093][T14288] usb usb5: usbfs: process 14288 (syz.5.2800) did not claim interface 0 before use [ 727.894653][T14307] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 727.901429][T14307] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 727.909395][T14307] vhci_hcd vhci_hcd.0: Device attached [ 727.920469][T14314] vhci_hcd: connection closed [ 727.944872][T10904] vhci_hcd: stop threads [ 727.985013][T10904] vhci_hcd: release socket [ 727.989481][T10904] vhci_hcd: disconnect device [ 728.062764][ T5299] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.599326][ T5299] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.860102][ T5299] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.916293][T14336] loop2: detected capacity change from 0 to 256 [ 729.075728][ T5299] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.150055][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 729.165779][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 729.174925][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 729.196345][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 729.208710][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 729.219947][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 729.655857][ T5299] bridge_slave_1: left allmulticast mode [ 729.661556][ T5299] bridge_slave_1: left promiscuous mode [ 729.708452][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.725325][T14350] loop1: detected capacity change from 0 to 256 [ 729.759258][ T5299] bridge_slave_0: left allmulticast mode [ 729.778181][ T5299] bridge_slave_0: left promiscuous mode [ 729.804901][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.864639][T14350] FAT-fs (loop1): Directory bread(block 64) failed [ 729.877904][T14350] FAT-fs (loop1): Directory bread(block 65) failed [ 729.908292][T14350] FAT-fs (loop1): Directory bread(block 66) failed [ 729.938388][T14350] FAT-fs (loop1): Directory bread(block 67) failed [ 729.968534][T14350] FAT-fs (loop1): Directory bread(block 68) failed [ 729.995735][T14350] FAT-fs (loop1): Directory bread(block 69) failed [ 730.011859][T14350] FAT-fs (loop1): Directory bread(block 70) failed [ 730.029851][T14350] FAT-fs (loop1): Directory bread(block 71) failed [ 730.061672][T14350] FAT-fs (loop1): Directory bread(block 72) failed [ 730.094813][T14350] FAT-fs (loop1): Directory bread(block 73) failed [ 730.234059][ T29] audit: type=1800 audit(1720414102.865:423): pid=14350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2823" name="bus" dev="loop1" ino=1048923 res=0 errno=0 [ 730.274039][T14361] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 730.280588][T14361] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 730.289609][T14361] vhci_hcd vhci_hcd.0: Device attached [ 730.305295][T14363] vhci_hcd: connection closed [ 730.333893][T10903] vhci_hcd: stop threads [ 730.343115][T10903] vhci_hcd: release socket [ 730.351503][T10903] vhci_hcd: disconnect device [ 730.401907][T14350] syz.1.2823: attempt to access beyond end of device [ 730.401907][T14350] loop1: rw=2049, sector=1296, nr_sectors = 4 limit=256 [ 730.448916][T14350] syz.1.2823: attempt to access beyond end of device [ 730.448916][T14350] loop1: rw=2051, sector=1224, nr_sectors = 96 limit=256 [ 730.496052][T14368] x_tables: unsorted underflow at hook 3 [ 730.513275][ T29] audit: type=1326 audit(1720414103.145:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14349 comm="syz.1.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d1575bd9 code=0x7ffc0000 [ 730.584005][ T29] audit: type=1326 audit(1720414103.155:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14349 comm="syz.1.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d1575bd9 code=0x7ffc0000 [ 730.625753][ T5096] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 730.687473][T14370] loop1: detected capacity change from 0 to 256 [ 730.844599][ T5096] usb 1-1: Using ep0 maxpacket: 8 [ 730.873877][ T5096] usb 1-1: config 32 has an invalid interface number: 255 but max is 0 [ 730.890758][ T5096] usb 1-1: config 32 has an invalid descriptor of length 255, skipping remainder of the config [ 730.901896][ T5096] usb 1-1: config 32 has no interface number 0 [ 730.909954][ T5096] usb 1-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 730.931649][T14372] loop1: detected capacity change from 0 to 1024 [ 730.932767][ T5096] usb 1-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 730.951613][ T5096] usb 1-1: config 32 interface 255 has no altsetting 0 [ 730.996522][ T5096] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 731.008836][ T5096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.014357][T14372] hfsplus: bad catalog entry type [ 731.044204][ T5299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.057226][T10904] hfsplus: b-tree write err: -5, ino 4 [ 731.104981][ T5299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.131580][ T5299] bond0 (unregistering): Released all slaves [ 731.204267][T14343] IPv6: sit1: Disabled Multicast RS [ 731.306850][ T5101] Bluetooth: hci3: command tx timeout [ 731.416047][ T5096] usb 1-1: string descriptor 0 read error: -71 [ 731.427325][ T5096] hub 1-1:32.255: bad descriptor, ignoring hub [ 731.453830][ T5096] hub 1-1:32.255: probe with driver hub failed with error -5 [ 731.460179][ T30] INFO: task syz.5.2060:11956 blocked for more than 143 seconds. [ 731.471246][ T30] Not tainted 6.10.0-rc7-syzkaller #0 [ 731.477322][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 731.491849][ T30] task:syz.5.2060 state:D stack:23704 pid:11956 tgid:11955 ppid:11061 flags:0x00004006 [ 731.502441][ T30] Call Trace: [ 731.506093][ T30] [ 731.509117][ T30] __schedule+0x17e8/0x4a20 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 731.514290][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.534560][ T30] ? __pfx___schedule+0x10/0x10 [ 731.545224][ T30] ? __pfx_lock_release+0x10/0x10 [ 731.555886][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.574046][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.603667][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 731.634695][ T5096] usb 1-1: USB disconnect, device number 23 [ 731.653060][ T30] ? schedule+0x90/0x320 [ 731.666942][ T30] schedule+0x14b/0x320 [ 731.671179][ T30] io_schedule+0x8d/0x110 [ 731.725126][ T30] folio_wait_bit_common+0x882/0x12b0 [ 731.730662][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 731.749600][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 731.764612][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.770329][ T30] ? jfs_error+0x2bb/0x2e0 [ 731.788563][ T30] ? __pfx_folio_mark_accessed+0x10/0x10 [ 731.794239][ T30] ? __get_metapage+0x555/0x1050 [ 731.804929][ T30] release_metapage+0x8c/0x870 [ 731.809730][ T30] ? __pfx_metapage_read_folio+0x10/0x10 [ 731.829605][ T30] __get_metapage+0xb1d/0x1050 [ 731.834419][ T30] dtSplitPage+0x8e7/0x3ed0 [ 731.842270][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.848039][ T30] ? up_write+0x1a9/0x590 [ 731.852398][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.858116][ T30] ? __pfx_up_write+0x10/0x10 [ 731.862833][ T30] ? __pfx_dtSplitPage+0x10/0x10 [ 731.867919][ T30] ? __pfx_dbAlloc+0x10/0x10 [ 731.872541][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.878255][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 731.883053][ T30] ? dtInsert+0x885/0x6b00 [ 731.887614][ T30] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 731.893041][ T30] dtInsert+0x1500/0x6b00 [ 731.897564][ T30] ? __pfx_dtInsert+0x10/0x10 [ 731.902260][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.907975][ T30] ? txLock+0x2b5/0x21a0 [ 731.912247][ T30] ? __pfx_lock_release+0x10/0x10 [ 731.917348][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 731.922413][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 731.933728][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.942178][ T30] ? dtInitRoot+0x234/0x6a0 [ 731.946985][ T30] jfs_mkdir+0x7fb/0xb90 [ 731.951272][ T30] ? __pfx_jfs_mkdir+0x10/0x10 [ 731.956147][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.961792][ T30] ? generic_permission+0x1e0/0x550 [ 731.967120][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.972772][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.978461][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.984112][ T30] ? security_inode_mkdir+0xc2/0x110 [ 731.989487][ T30] vfs_mkdir+0x2fb/0x4f0 [ 731.993766][ T30] do_mkdirat+0x264/0x3a0 [ 731.998176][ T30] ? __might_fault+0xc6/0x120 [ 732.002898][ T30] ? __pfx_do_mkdirat+0x10/0x10 [ 732.007908][ T30] ? getname_flags+0x1fe/0x4f0 [ 732.012717][ T30] __x64_sys_mkdirat+0x89/0xa0 [ 732.017856][ T30] do_syscall_64+0xf3/0x230 [ 732.022412][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.028432][ T30] RIP: 0033:0x7fd6a8b75bd9 [ 732.035880][ T30] RSP: 002b:00007fd6a9893048 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 732.044356][ T30] RAX: ffffffffffffffda RBX: 00007fd6a8d03f60 RCX: 00007fd6a8b75bd9 [ 732.063461][ T30] RDX: 0000000000000000 RSI: 0000000020000340 RDI: ffffffffffffff9c [ 732.071630][ T30] RBP: 00007fd6a8be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 732.079909][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.087977][ T30] R13: 000000000000000b R14: 00007fd6a8d03f60 R15: 00007ffe07460b18 [ 732.097330][ T30] [ 732.100485][ T30] [ 732.100485][ T30] Showing all locks held in the system: [ 732.131527][ T30] 1 lock held by khungtaskd/30: [ 732.154694][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 732.204580][ T30] 2 locks held by getty/4853: [ 732.209297][ T30] #0: ffff88802ec690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 732.274806][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 732.304539][ T30] 3 locks held by kworker/1:7/5157: [ 732.309766][ T30] 6 locks held by kworker/u8:9/5299: [ 732.335123][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 732.384557][ T30] #1: ffffc90003e57d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 732.414582][ T30] #2: ffffffff8f5da590 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 732.424062][ T30] #3: ffffffff8f5e6dc8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 732.454541][ T30] #4: ffff88801fd60768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x1a8/0x1490 [ 732.474547][ T30] #5: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 732.507117][ T30] 3 locks held by kworker/1:14/5657: [ 732.512421][ T30] #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 732.544534][ T30] #1: ffffc90009597d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 732.574786][ T30] #2: ffffffff8f5e6dc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 732.583834][ T30] 4 locks held by kworker/u8:13/10872: [ 732.607139][ T30] #0: ffff888018ee3948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 732.624532][ T30] #1: ffffc90003c97d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 732.654081][ T30] #2: ffff88807a2be0e0 (&type->s_umount_key#84){++++}-{3:3}, at: super_trylock_shared+0x22/0xf0 [ 732.665441][ T30] #3: ffff888057f59d88 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x24a/0x590 [ 732.676018][ T30] 4 locks held by kworker/u8:22/10898: [ 732.681486][ T30] #0: ffff888018ee3948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 732.692862][ T30] #1: ffffc90002d4fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 732.705482][ T30] #2: ffff88805ec260e0 (&type->s_umount_key#84){++++}-{3:3}, at: super_trylock_shared+0x22/0xf0 [ 732.716127][ T30] #3: ffff888060a870c8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x24a/0x590 [ 732.728296][ T30] 3 locks held by kworker/u8:25/10904: [ 732.733746][ T30] #0: ffff88802a7a1948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 732.749466][ T30] #1: ffffc9000337fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 732.762490][ T30] #2: ffffffff8f5e6dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 732.772138][ T30] 2 locks held by kworker/0:4/10930: [ 732.777493][ T30] #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 732.788586][ T30] #1: ffffc900031cfd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 732.798969][ T30] 4 locks held by syz.5.2060/11956: [ 732.804169][ T30] #0: ffff88807a2be420 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 732.813535][ T30] #1: ffff888057f5a140 (&type->i_mutex_dir_key#17/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 [ 732.824430][ T30] #2: ffff888057f59d88 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_mkdir+0x238/0xb90 [ 732.834253][ T30] #3: ffff888060a80b08 (&jfs_ip->commit_mutex/1){+.+.}-{3:3}, at: jfs_mkdir+0x253/0xb90 [ 732.846762][ T30] 4 locks held by syz.0.2122/12210: [ 732.854421][ T30] #0: ffff88805ec26420 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 732.865190][ T30] #1: ffff888060a87480 (&type->i_mutex_dir_key#17/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 [ 732.876053][ T30] #2: ffff888060a870c8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_mkdir+0x238/0xb90 [ 732.885847][ T30] #3: ffff888057f5d508 (&jfs_ip->commit_mutex/1){+.+.}-{3:3}, at: jfs_mkdir+0x253/0xb90 [ 732.895874][ T30] 3 locks held by syz.5.2462/13244: [ 732.901066][ T30] #0: ffff888027c8cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 732.911097][ T30] #1: ffff888027c8c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 732.920773][ T30] #2: ffffffff8f7514c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 732.930951][ T30] 1 lock held by syz-executor/14337: [ 732.936283][ T30] #0: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 732.947369][ T30] 2 locks held by syz.2.2819/14342: [ 732.957111][ T30] #0: ffffffff8f5da590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 732.966712][ T30] #1: ffffffff8f5e6dc8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 732.977203][ T30] 3 locks held by syz.0.2830/14365: [ 732.982413][ T30] #0: ffff88806b6b8d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 732.992451][ T30] #1: ffff88806b6b8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 733.002155][ T30] #2: ffffffff8f7514c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 733.012295][ T30] 3 locks held by syz.3.2833/14374: [ 733.017535][ T30] #0: ffff888068d2cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 733.027563][ T30] #1: ffff888068d2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 733.037285][ T30] #2: ffffffff8f7514c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 733.047428][ T30] 3 locks held by syz.1.2837/14388: [ 733.052655][ T30] #0: ffff88806755cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 733.067248][ T30] #1: ffff88806755c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 733.077080][ T30] #2: ffffffff8f7514c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 733.087670][ T30] [ 733.090010][ T30] ============================================= [ 733.090010][ T30] [ 733.098944][ T30] NMI backtrace for cpu 1 [ 733.103282][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller #0 [ 733.111469][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 733.121548][ T30] Call Trace: [ 733.124830][ T30] [ 733.127764][ T30] dump_stack_lvl+0x241/0x360 [ 733.132471][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.137778][ T30] ? __pfx__printk+0x10/0x10 [ 733.142381][ T30] ? vprintk_emit+0x631/0x770 [ 733.147073][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 733.152121][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 733.157085][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 733.162553][ T30] ? _printk+0xd5/0x120 [ 733.166727][ T30] ? __pfx__printk+0x10/0x10 [ 733.171332][ T30] ? __wake_up_klogd+0xcc/0x110 [ 733.176208][ T30] ? __pfx__printk+0x10/0x10 [ 733.180815][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.186450][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 733.191494][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 733.197489][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 733.203485][ T30] watchdog+0xfde/0x1020 [ 733.207741][ T30] ? watchdog+0x1ea/0x1020 [ 733.212172][ T30] ? __pfx_watchdog+0x10/0x10 [ 733.216856][ T30] kthread+0x2f2/0x390 [ 733.220940][ T30] ? __pfx_watchdog+0x10/0x10 [ 733.225623][ T30] ? __pfx_kthread+0x10/0x10 [ 733.230223][ T30] ret_from_fork+0x4d/0x80 [ 733.234652][ T30] ? __pfx_kthread+0x10/0x10 [ 733.239252][ T30] ret_from_fork_asm+0x1a/0x30 [ 733.244048][ T30] [ 733.249128][ T30] Sending NMI from CPU 1 to CPUs 0: [ 733.254353][ C0] NMI backtrace for cpu 0 [ 733.254367][ C0] CPU: 0 PID: 14337 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller #0 [ 733.254390][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 733.254404][ C0] RIP: 0010:free_unref_page_commit+0x6f5/0x1140 [ 733.254444][ C0] Code: f7 be 08 00 00 00 e8 8a 75 0d 00 f0 41 80 26 fb 48 c7 84 24 80 00 00 00 0e 36 e0 45 48 8b 44 24 78 49 c7 44 05 00 00 00 00 00 <65> 48 8b 04 25 28 00 00 00 48 3b 84 24 c0 00 00 00 0f 85 25 0a 00 [ 733.254464][ C0] RSP: 0018:ffffc90004bcf760 EFLAGS: 00000293 [ 733.254488][ C0] RAX: 1ffff92000979efc RBX: ffff8880b9444704 RCX: 000000000000003f [ 733.254508][ C0] RDX: ffff8880b94446c0 RSI: 0000000000000008 RDI: ffff88813fffad38 [ 733.254526][ C0] RBP: ffffc90004bcf868 R08: 1ffff110172888e0 R09: 0000000000000000 [ 733.254544][ C0] R10: 1ffff110172888e3 R11: ffff8880b9444700 R12: 000000000000156d [ 733.254562][ C0] R13: dffffc0000000000 R14: 00000000000000ec R15: ffff8880b9444718 [ 733.254584][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 733.254606][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 733.254623][ C0] CR2: 0000001b32d1dff8 CR3: 000000000e132000 CR4: 0000000000350ef0 [ 733.254643][ C0] Call Trace: [ 733.254652][ C0] [ 733.254662][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 733.254691][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 733.254722][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 733.254748][ C0] ? nmi_handle+0x2a/0x5a0 [ 733.254801][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 733.254832][ C0] ? nmi_handle+0x151/0x5a0 [ 733.254871][ C0] ? nmi_handle+0x2a/0x5a0 [ 733.254913][ C0] ? free_unref_page_commit+0x6f5/0x1140 [ 733.254951][ C0] ? default_do_nmi+0x63/0x160 [ 733.254980][ C0] ? exc_nmi+0x123/0x1f0 [ 733.255007][ C0] ? end_repeat_nmi+0xf/0x53 [ 733.255058][ C0] ? free_unref_page_commit+0x6f5/0x1140 [ 733.255098][ C0] ? free_unref_page_commit+0x6f5/0x1140 [ 733.255137][ C0] ? free_unref_page_commit+0x6f5/0x1140 [ 733.255181][ C0] [ 733.255189][ C0] [ 733.255212][ C0] ? __pfx_free_unref_page_commit+0x10/0x10 [ 733.255249][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.255283][ C0] free_unref_page+0x622/0xea0 [ 733.255330][ C0] vfree+0x186/0x2e0 [ 733.255357][ C0] kcov_close+0x2b/0x50 [ 733.255384][ C0] ? __pfx_kcov_close+0x10/0x10 [ 733.255410][ C0] __fput+0x24c/0x8a0 [ 733.255447][ C0] task_work_run+0x251/0x310 [ 733.255490][ C0] ? __pfx_task_work_run+0x10/0x10 [ 733.255528][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.255553][ C0] ? kmem_cache_free+0x145/0x350 [ 733.255597][ C0] do_exit+0xa27/0x27e0 [ 733.255634][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.255659][ C0] ? __pfx_do_exit+0x10/0x10 [ 733.255690][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 733.255729][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.255752][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 733.255779][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 733.255804][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 733.255846][ C0] do_group_exit+0x207/0x2c0 [ 733.255877][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.255898][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.255921][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 733.255955][ C0] get_signal+0x16a1/0x1740 [ 733.256003][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 733.256031][ C0] ? __pfx_get_signal+0x10/0x10 [ 733.256076][ C0] arch_do_signal_or_restart+0x96/0x860 [ 733.256110][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 733.256139][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 733.256181][ C0] ? syscall_exit_to_user_mode+0xa3/0x360 [ 733.256218][ C0] syscall_exit_to_user_mode+0xc9/0x360 [ 733.256254][ C0] do_syscall_64+0x100/0x230 [ 733.256293][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.256327][ C0] RIP: 0033:0x7f837657796c [ 733.256346][ C0] Code: Unable to access opcode bytes at 0x7f8376577942. [ 733.256358][ C0] RSP: 002b:00007ffccc1007e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 733.256381][ C0] RAX: 000000000000003c RBX: 00007f8377234620 RCX: 00007f837657796c [ 733.256397][ C0] RDX: 000000000000003c RSI: 00007f8377234670 RDI: 0000000000000003 [ 733.256413][ C0] RBP: 0000000000000000 R08: 00007ffccc100834 R09: 000000000000000c [ 733.256428][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 733.256443][ C0] R13: 0000000000000000 R14: 00007f8377234670 R15: 0000000000000000 [ 733.256472][ C0] [ 733.724735][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 733.731646][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller #0 [ 733.739803][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 733.749856][ T30] Call Trace: [ 733.753133][ T30] [ 733.756066][ T30] dump_stack_lvl+0x241/0x360 [ 733.760764][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.765979][ T30] ? __pfx__printk+0x10/0x10 [ 733.770588][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 733.776597][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.782237][ T30] ? vscnprintf+0x5d/0x90 [ 733.786573][ T30] panic+0x349/0x860 [ 733.790479][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.796116][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 733.802276][ T30] ? __pfx_panic+0x10/0x10 [ 733.806699][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 733.812089][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.817724][ T30] ? __irq_work_queue_local+0x137/0x410 [ 733.823278][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.828912][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 733.834288][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 733.840446][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 733.846606][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.852240][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 733.858403][ T30] watchdog+0x101d/0x1020 [ 733.862743][ T30] ? watchdog+0x1ea/0x1020 [ 733.867175][ T30] ? __pfx_watchdog+0x10/0x10 [ 733.871858][ T30] kthread+0x2f2/0x390 [ 733.875941][ T30] ? __pfx_watchdog+0x10/0x10 [ 733.880624][ T30] ? __pfx_kthread+0x10/0x10 [ 733.885230][ T30] ret_from_fork+0x4d/0x80 [ 733.889658][ T30] ? __pfx_kthread+0x10/0x10 [ 733.894258][ T30] ret_from_fork_asm+0x1a/0x30 [ 733.899054][ T30] [ 733.902300][ T30] Kernel Offset: disabled [ 733.906618][ T30] Rebooting in 86400 seconds..