last executing test programs: 38.584292697s ago: executing program 4: r0 = socket(0x0, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setpriority(0x2, 0xff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 37.320160337s ago: executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xffffff00) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) setreuid(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x103}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000ae00)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 7.286337304s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0xf6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x88d5, 0x0, 0x0, 0x0) 5.775200552s ago: executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001100)={0x44, &(0x7f0000000e40)={0x0, 0x0, 0x1, '.'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.200003228s ago: executing program 2: pipe(&(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x2, 0x3, 0x8) getsockopt(r0, 0x0, 0x100000000000001, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000000c0)={@initdev, @multicast2}, &(0x7f0000000180)=0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) listen(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x64, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}}, 0x0) 5.0555908s ago: executing program 2: syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x4) copy_file_range(r5, &(0x7f00000001c0), r4, 0x0, 0xa003e458, 0x700000000000000) copy_file_range(r3, 0x0, r2, 0x0, 0x0, 0x700000000000000) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) sendfile(r6, r6, 0x0, 0x100000000) 4.036347553s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x9c, 0xe3, 0xfe, 0x40, 0x157e, 0x300e, 0xec5f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9f, 0xf, 0x2c}}]}}]}}, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000043c0)={0x2020}, 0x1e0f) 3.39479969s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000200)='L', 0x1}, {&(0x7f0000000380)="7cdfe2285555b9e812d1a9a3fb33b0ed", 0x10}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[], 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044103, &(0x7f0000000080)) 3.265948269s ago: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0xfedd) sendmmsg$inet(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a68759182ab7e144f718ee0b9d487461d1891d71f57a540210b1b32e260da68c9e5042f43d8e39a995d58933e84e8f3166bcc26b57e038599805becad925bd3f30fe3ab8f293da067003b56ad9b156551c", 0x54}, {&(0x7f00000009c0)="83dc92a95db1b8d46cad1f6525a3c18edfd739efb70e1c3242b5170884001db8f8b07f501bc5a5f0d627e60c44654378c5521c7df21d2a1db86c048223de192c648e86b26570d7aff3c83d7a2387e724a6849e9630defb9af001315cbe55abdc4c099dd50ab213b4da3776e2cac3271c2cf8d255cb6fbcca78ae", 0x7a}, {&(0x7f0000000a40)="21f02d2311f55c81f75de721f94193fcba94c81f988b26192586b1586b785fac4c869df7ac4fdb80df219cb24079d2cada7ebb435f87b5b0834d6b2ed27c8c0ebadc122e87dfaa59ca05ea42f441bd71f0a2f5a4df39207ccf5efeb9ee921a0970eb35b2baae9da9d927aa37ff7fd79a0fdefea6ca0777a90fe92f99e05698c4f3d98a752737afe547ff63809e8e932a58cff837e36a9bdcf522c217ec490ad2c9464ce8013cabd36ba31a4a4c9a311c864a0be963fb605d9cf9a3b1972139fc71fdb37f84390f8e8b6f5e4fde2a85f63560ccb027dc25a3a057741872bb1fea64f1b6f9", 0xe4}, {&(0x7f0000000b40)}], 0x4, &(0x7f0000001dc0)=ANY=[@ANYBLOB="280000000000000000000000070000008602940400004410008000000009ffffffc00000000000001c"], 0x48}}], 0x1, 0x0) 3.148516667s ago: executing program 0: pipe(&(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x2, 0x3, 0x8) getsockopt(r0, 0x0, 0x100000000000001, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000000c0)={@initdev, @multicast2}, &(0x7f0000000180)=0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) listen(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x64, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}}, 0x0) 3.017365296s ago: executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) 2.474505748s ago: executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 2.379267322s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xc, 0x5, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x2c00) openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 2.228928925s ago: executing program 3: syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x4) copy_file_range(r4, &(0x7f00000001c0), r3, 0x0, 0xa003e458, 0x700000000000000) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e45c, 0x700000000000000) ftruncate(0xffffffffffffffff, 0x2007ffb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) sendfile(r5, r5, 0x0, 0x100000000) 2.107290833s ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 2.078443638s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x97, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040a4050017000000000001090224000100000000090400000103000000092100000f0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 1.66113466s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000240), 0x4) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) socket$kcm(0x10, 0x2, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}}}]}]}}]}, 0x70}}, 0x0) 1.552051977s ago: executing program 1: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) close(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESOCT=r1]) 1.32918869s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f00000003c0), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r3}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 1.145855828s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000200)='L', 0x1}, {&(0x7f0000000380)="7cdfe2285555b9e812d1a9a3fb33b0ed", 0x10}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[], 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044103, &(0x7f0000000080)) 1.141211508s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0xfedd) sendmmsg$inet(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a68759182ab7e144f718ee0b9d487461d1891d71f57a540210b1b32e260da68c9e5042f43d8e39a995d58933e84e8f3166bcc26b57e038599805becad925bd3f30fe3ab8f293da067003b56ad9b156551c", 0x54}, {&(0x7f00000009c0)="83dc92a95db1b8d46cad1f6525a3c18edfd739efb70e1c3242b5170884001db8f8b07f501bc5a5f0d627e60c44654378c5521c7df21d2a1db86c048223de192c648e86b26570d7aff3c83d7a2387e724a6849e9630defb9af001315cbe55abdc4c099dd50ab213b4da3776e2cac3271c2cf8d255cb6fbcca78ae", 0x7a}, {&(0x7f0000000a40)="21f02d2311f55c81f75de721f94193fcba94c81f988b26192586b1586b785fac4c869df7ac4fdb80df219cb24079d2cada7ebb435f87b5b0834d6b2ed27c8c0ebadc122e87dfaa59ca05ea42f441bd71f0a2f5a4df39207ccf5efeb9ee921a0970eb35b2baae9da9d927aa37ff7fd79a0fdefea6ca0777a90fe92f99e05698c4f3d98a752737afe547ff63809e8e932a58cff837e36a9bdcf522c217ec490ad2c9464ce8013cabd36ba31a4a4c9a311c864a0be963fb605d9cf9a3b1972139fc71fdb37f84390f8e8b6f5e4fde2a85f63560ccb027dc25a3a057741872bb1fea64f1b6f9", 0xe4}, {&(0x7f0000000b40)}], 0x4, &(0x7f0000001dc0)=ANY=[@ANYBLOB="280000000000000000000000070000008602940400004410008000000009ffffffc00000000000001c"], 0x48}}], 0x1, 0x0) 1.092065496s ago: executing program 2: pipe(&(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x2, 0x3, 0x8) getsockopt(r0, 0x0, 0x100000000000001, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000000c0)={@initdev, @multicast2}, &(0x7f0000000180)=0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) listen(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x64, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}}, 0x0) 982.649622ms ago: executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001100)={0x44, &(0x7f0000000e40)={0x0, 0x0, 0x1, '.'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 956.850636ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xc, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x2c00) openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 865.13804ms ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000080)}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x4b67, &(0x7f0000000000)) 809.779718ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x9c, 0xe3, 0xfe, 0x40, 0x157e, 0x300e, 0xec5f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9f, 0xf, 0x2c}}]}}]}}, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000043c0)={0x2020}, 0x1e0f) 565.099465ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0xf6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x88d5, 0x0, 0x0, 0x0) 514.116393ms ago: executing program 4: syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x4) copy_file_range(r4, &(0x7f00000001c0), r3, 0x0, 0xa003e458, 0x700000000000000) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e45c, 0x700000000000000) ftruncate(0xffffffffffffffff, 0x2007ffb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) sendfile(r5, r5, 0x0, 0x100000000) 97.298186ms ago: executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) kernel console output (not intermixed with test programs): 8494][ T7046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7046) [ 244.497712][ T7046] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.570277][ T7046] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 244.583914][ T4236] usb 1-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 244.612785][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.621585][ T7046] BTRFS info (device loop3): using free space tree [ 244.660596][ T4236] usb 1-1: config 0 descriptor?? [ 244.768800][ T7083] device ip6gre0 entered promiscuous mode [ 244.809994][ T7083] device vlan2 entered promiscuous mode [ 244.874045][ T7083] device ip6gre0 left promiscuous mode [ 244.899386][ T7046] BTRFS info (device loop3): enabling ssd optimizations [ 244.926947][ T5100] usb 1-1: USB disconnect, device number 36 [ 245.022721][ T6788] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.232172][ T7064] loop4: detected capacity change from 0 to 32768 [ 245.275228][ T7064] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7064) [ 245.317287][ T7064] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.332984][ T7064] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 245.357421][ T7064] BTRFS info (device loop4): using free space tree [ 245.558655][ T7064] BTRFS info (device loop4): enabling ssd optimizations [ 245.792454][ T3886] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.279484][ T7132] loop0: detected capacity change from 0 to 256 [ 246.976354][ T26] audit: type=1804 audit(1717181254.171:76): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972313536333834313830322F73797A6B616C6C65722E6A384F4A76662F3139342FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048654 res=1 errno=0 [ 247.178622][ T26] audit: type=1804 audit(1717181254.211:77): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972313536333834313830322F73797A6B616C6C65722E6A384F4A76662F3139342FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048654 res=1 errno=0 [ 247.576962][ T41] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 247.584472][ T41] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 247.613562][ T41] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 247.906620][ T41] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 248.286849][ T41] usb 3-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 248.306083][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.338058][ T41] usb 3-1: config 0 descriptor?? [ 248.559112][ T7154] loop0: detected capacity change from 0 to 32768 [ 248.582917][ T7154] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7154) [ 248.594410][ T7140] loop3: detected capacity change from 0 to 40427 [ 248.612616][ T7154] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.614347][ T4158] usb 3-1: USB disconnect, device number 36 [ 248.651514][ T7154] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 248.672039][ T7154] BTRFS info (device loop0): using free space tree [ 248.680179][ T7144] loop4: detected capacity change from 0 to 40427 [ 248.705253][ T7144] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.732182][ T7140] F2FS-fs (loop3): Found nat_bits in checkpoint [ 248.854192][ T7144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 248.946319][ T7154] BTRFS info (device loop0): enabling ssd optimizations [ 248.977173][ T7140] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 249.017115][ T3774] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.327675][ T6788] syz-executor.3: attempt to access beyond end of device [ 249.327675][ T6788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 249.652616][ T7191] loop1: detected capacity change from 0 to 256 [ 249.739066][ T26] audit: type=1804 audit(1717181256.941:78): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3233392FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048656 res=1 errno=0 [ 250.002326][ T26] audit: type=1804 audit(1717181256.941:79): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3233392FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048656 res=1 errno=0 [ 250.928752][ T7204] loop4: detected capacity change from 0 to 512 [ 251.017328][ T5702] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 251.345728][ T3618] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 251.381573][ T3618] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 251.456037][ T3618] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 251.656631][ T3618] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 252.016947][ T3618] usb 1-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 252.031775][ T3618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.059621][ T3618] usb 1-1: config 0 descriptor?? [ 252.096754][ T4159] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 252.233671][ T7210] loop1: detected capacity change from 0 to 40427 [ 252.302432][ T7212] loop4: detected capacity change from 0 to 40427 [ 252.319740][ T4163] usb 1-1: USB disconnect, device number 37 [ 252.328074][ T7210] F2FS-fs (loop1): Found nat_bits in checkpoint [ 252.376901][ T4159] usb 4-1: Using ep0 maxpacket: 8 [ 252.392895][ T7212] F2FS-fs (loop4): Found nat_bits in checkpoint [ 252.476731][ T7210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 252.506812][ T4159] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 252.521856][ T7230] loop2: detected capacity change from 0 to 256 [ 252.523930][ T4159] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.559640][ T4159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.578013][ T7212] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 252.637944][ T26] audit: type=1804 audit(1717181259.841:80): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972313432353532383337302F73797A6B616C6C65722E506569634A4D2F3137342FE91F7189591E9233614B2F6275732F627573 dev="loop2" ino=1048658 res=1 errno=0 [ 252.683151][ T26] audit: type=1804 audit(1717181259.841:81): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972313432353532383337302F73797A6B616C6C65722E506569634A4D2F3137342FE91F7189591E9233614B2F6275732F627573 dev="loop2" ino=1048658 res=1 errno=0 [ 252.723563][ T3886] syz-executor.4: attempt to access beyond end of device [ 252.723563][ T3886] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.897372][ T4163] usb 4-1: USB disconnect, device number 21 [ 253.175459][ T7239] loop0: detected capacity change from 0 to 512 [ 254.595243][ T7265] loop4: detected capacity change from 0 to 256 [ 254.624073][ T7263] loop1: detected capacity change from 0 to 4096 [ 254.659747][ T26] audit: type=1804 audit(1717181261.861:82): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D74657374646972323436333230343737322F73797A6B616C6C65722E4B75575730312F3138352FE91F7189591E9233614B2F6275732F627573 dev="loop4" ino=1048660 res=1 errno=0 [ 254.745589][ T26] audit: type=1804 audit(1717181261.891:83): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D74657374646972323436333230343737322F73797A6B616C6C65722E4B75575730312F3138352FE91F7189591E9233614B2F6275732F627573 dev="loop4" ino=1048660 res=1 errno=0 [ 254.780257][ T7266] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.595031][ T7277] loop4: detected capacity change from 0 to 256 [ 255.668377][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.674809][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.714957][ T7277] FAT-fs (loop4): Directory bread(block 64) failed [ 255.732926][ T7277] FAT-fs (loop4): Directory bread(block 65) failed [ 255.740695][ T7277] FAT-fs (loop4): Directory bread(block 66) failed [ 255.753610][ T7277] FAT-fs (loop4): Directory bread(block 67) failed [ 255.761190][ T7277] FAT-fs (loop4): Directory bread(block 68) failed [ 255.780087][ T7277] FAT-fs (loop4): Directory bread(block 69) failed [ 255.795887][ T7277] FAT-fs (loop4): Directory bread(block 70) failed [ 255.815426][ T7277] FAT-fs (loop4): Directory bread(block 71) failed [ 255.832109][ T7277] FAT-fs (loop4): Directory bread(block 72) failed [ 255.857190][ T7277] FAT-fs (loop4): Directory bread(block 73) failed [ 256.047520][ T7261] loop0: detected capacity change from 0 to 40427 [ 256.070153][ T7259] loop3: detected capacity change from 0 to 40427 [ 256.135122][ T7261] F2FS-fs (loop0): Found nat_bits in checkpoint [ 256.161809][ T7259] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.432072][ T7259] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 256.443292][ T7261] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 257.424214][ T6788] syz-executor.3: attempt to access beyond end of device [ 257.424214][ T6788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.451193][ T7302] loop1: detected capacity change from 0 to 256 [ 257.495631][ T26] audit: type=1804 audit(1717181264.691:84): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3234392FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048663 res=1 errno=0 [ 257.621213][ T26] audit: type=1804 audit(1717181264.701:85): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3234392FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048663 res=1 errno=0 [ 258.000701][ T7317] loop4: detected capacity change from 0 to 256 [ 258.903466][ T7317] FAT-fs (loop4): Directory bread(block 64) failed [ 258.936666][ T7317] FAT-fs (loop4): Directory bread(block 65) failed [ 258.947414][ T7317] FAT-fs (loop4): Directory bread(block 66) failed [ 258.976719][ T7317] FAT-fs (loop4): Directory bread(block 67) failed [ 259.024992][ T7317] FAT-fs (loop4): Directory bread(block 68) failed [ 259.068059][ T7317] FAT-fs (loop4): Directory bread(block 69) failed [ 259.106822][ T7317] FAT-fs (loop4): Directory bread(block 70) failed [ 259.180123][ T7317] FAT-fs (loop4): Directory bread(block 71) failed [ 259.205154][ T7317] FAT-fs (loop4): Directory bread(block 72) failed [ 259.240644][ T7317] FAT-fs (loop4): Directory bread(block 73) failed [ 259.859681][ T7347] loop2: detected capacity change from 0 to 16 [ 259.877787][ T7348] Zero length message leads to an empty skb [ 259.939100][ T5702] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.135176][ T7326] loop0: detected capacity change from 0 to 32768 [ 260.176878][ T7326] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7326) [ 260.216154][ T7354] loop4: detected capacity change from 0 to 512 [ 260.246209][ T7326] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.279203][ T7326] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 260.312426][ T7326] BTRFS info (device loop0): using free space tree [ 260.322263][ T3733] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 261.643556][ T7336] loop3: detected capacity change from 0 to 40427 [ 261.724191][ T7336] F2FS-fs (loop3): Found nat_bits in checkpoint [ 261.775145][ T7326] BTRFS error (device loop0): open_ctree failed [ 262.060413][ T7336] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 262.068571][ T1027] block nbd3: Possible stuck request ffff88801f940000: control (read@0,4096B). Runtime 60 seconds [ 262.400866][ T7406] loop0: detected capacity change from 0 to 256 [ 262.460147][ T7409] loop1: detected capacity change from 0 to 256 [ 262.511017][ T7406] FAT-fs (loop0): Directory bread(block 64) failed [ 262.526838][ T7406] FAT-fs (loop0): Directory bread(block 65) failed [ 262.533623][ T7406] FAT-fs (loop0): Directory bread(block 66) failed [ 262.559456][ T26] audit: type=1804 audit(1717181269.761:86): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3235342FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048666 res=1 errno=0 [ 262.606721][ T7406] FAT-fs (loop0): Directory bread(block 67) failed [ 262.613719][ T7406] FAT-fs (loop0): Directory bread(block 68) failed [ 262.674568][ T7406] FAT-fs (loop0): Directory bread(block 69) failed [ 262.701788][ T7406] FAT-fs (loop0): Directory bread(block 70) failed [ 262.702758][ T26] audit: type=1804 audit(1717181269.791:87): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3235342FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048666 res=1 errno=0 [ 262.733384][ T7406] FAT-fs (loop0): Directory bread(block 71) failed [ 262.801177][ T7406] FAT-fs (loop0): Directory bread(block 72) failed [ 262.825152][ T7406] FAT-fs (loop0): Directory bread(block 73) failed [ 264.753375][ T7441] device syz_tun entered promiscuous mode [ 264.785061][ T7441] device vlan2 entered promiscuous mode [ 264.816447][ T7441] device syz_tun left promiscuous mode [ 264.847329][ T7417] loop4: detected capacity change from 0 to 32768 [ 264.892007][ T7417] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7417) [ 264.984871][ T7417] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.056872][ T7417] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 265.113093][ T7417] BTRFS info (device loop4): using free space tree [ 265.386060][ T7417] BTRFS info (device loop4): enabling ssd optimizations [ 265.433368][ T7471] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 265.512263][ T3886] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.537199][ T7471] cgroup: none used incorrectly [ 265.668661][ T7434] loop1: detected capacity change from 0 to 32768 [ 265.720019][ T7434] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7434) [ 265.912245][ T7434] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 265.971470][ T7434] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 266.017129][ T7480] loop0: detected capacity change from 0 to 256 [ 266.037856][ T7434] BTRFS error (device loop1): unrecognized mount option 'obj_type=btrfs' [ 266.099388][ T7434] BTRFS error (device loop1): open_ctree failed [ 266.187671][ T26] audit: type=1804 audit(1717181273.391:88): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972313536333834313830322F73797A6B616C6C65722E6A384F4A76662F3231352FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048670 res=1 errno=0 [ 266.304956][ T26] audit: type=1804 audit(1717181273.391:89): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972313536333834313830322F73797A6B616C6C65722E6A384F4A76662F3231352FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048670 res=1 errno=0 [ 266.506948][ T7491] device syz_tun entered promiscuous mode [ 266.542283][ T7491] device vlan2 entered promiscuous mode [ 266.574752][ T7491] device syz_tun left promiscuous mode [ 267.132098][ T7504] cgroup: none used incorrectly [ 268.042820][ T7500] loop2: detected capacity change from 0 to 32768 [ 268.052554][ T7500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7500) [ 268.120901][ T7500] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 268.188561][ T7500] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 268.197519][ T7500] BTRFS info (device loop2): using free space tree [ 268.217027][ T7531] loop1: detected capacity change from 0 to 256 [ 268.322891][ T26] audit: type=1804 audit(1717181275.521:90): pid=7531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3235362FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048672 res=1 errno=0 [ 268.420546][ T7541] loop4: detected capacity change from 0 to 2048 [ 268.484348][ T7541] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.611947][ T7541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 268.639896][ T7500] BTRFS info (device loop2): enabling ssd optimizations [ 268.644980][ T26] audit: type=1804 audit(1717181275.521:91): pid=7531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3235362FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048672 res=1 errno=0 [ 268.817098][ T3891] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 268.823788][ T7552] loop3: detected capacity change from 0 to 4096 [ 269.213559][ T7566] input: syz0 as /devices/virtual/input/input12 [ 269.836639][ T4229] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 270.026588][ T4229] usb 2-1: device descriptor read/64, error -71 [ 270.296622][ T4229] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 270.486704][ T4229] usb 2-1: device descriptor read/64, error -71 [ 270.619948][ T4229] usb usb2-port1: attempt power cycle [ 270.626743][ T7557] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 270.703219][ T7557] EXT4-fs (loop4): Remounting filesystem read-only [ 270.725438][ T7580] loop2: detected capacity change from 0 to 32768 [ 270.759391][ T7580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7580) [ 270.823131][ T7580] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.833886][ T7580] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 270.855790][ T7580] BTRFS error (device loop2): unrecognized mount option 'obj_type=btrfs' [ 270.878597][ T7580] BTRFS error (device loop2): open_ctree failed [ 271.036702][ T4229] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 271.136677][ T4229] usb 2-1: device descriptor read/8, error -71 [ 271.406647][ T4229] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 271.496729][ T4229] usb 2-1: device descriptor read/8, error -71 [ 271.617992][ T4229] usb usb2-port1: unable to enumerate USB device [ 271.955390][ T3886] EXT4-fs (loop4): unmounting filesystem. [ 271.972608][ T7580] loop2: detected capacity change from 0 to 40427 [ 272.060252][ T7580] F2FS-fs (loop2): Found nat_bits in checkpoint [ 272.242025][ T7580] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 272.417678][ T7579] dccp_close: ABORT with 28 bytes unread [ 272.685058][ T7602] loop1: detected capacity change from 0 to 256 [ 272.775504][ T26] audit: type=1804 audit(1717181279.971:92): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3236302FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048674 res=1 errno=0 [ 272.880691][ T26] audit: type=1804 audit(1717181280.011:93): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3236302FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048674 res=1 errno=0 [ 273.104004][ T7599] loop4: detected capacity change from 0 to 32768 [ 273.160413][ T7599] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7599) [ 273.244330][ T7599] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.310124][ T7599] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 273.339096][ T7599] BTRFS info (device loop4): using free space tree [ 273.441592][ T7618] device syz_tun entered promiscuous mode [ 273.447647][ T7618] device vlan2 entered promiscuous mode [ 273.456495][ T7618] device syz_tun left promiscuous mode [ 273.512967][ T7597] loop0: detected capacity change from 0 to 40427 [ 273.600762][ T7599] BTRFS info (device loop4): enabling ssd optimizations [ 273.609115][ T7597] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 273.633801][ T7597] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 273.724618][ T7597] F2FS-fs (loop0): invalid crc value [ 273.778328][ T3886] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.799970][ T7597] F2FS-fs (loop0): Found nat_bits in checkpoint [ 274.130710][ T7597] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 274.155814][ T7597] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 274.347450][ T7650] loop2: detected capacity change from 0 to 16 [ 274.464598][ T7650] erofs: (device loop2): mounted with root inode @ nid 36. [ 275.096661][ T4157] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 275.166400][ T7656] loop1: detected capacity change from 0 to 256 [ 275.273488][ T26] audit: type=1804 audit(1717181282.471:94): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3236352FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048676 res=1 errno=0 [ 275.366592][ T4157] usb 3-1: Using ep0 maxpacket: 8 [ 275.436904][ T26] audit: type=1804 audit(1717181282.511:95): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3236352FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048676 res=1 errno=0 [ 275.526872][ T4157] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 275.547950][ T4157] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.579751][ T4157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.728017][ T7663] device syz_tun entered promiscuous mode [ 275.734587][ T7663] device vlan2 entered promiscuous mode [ 275.773520][ T7663] device syz_tun left promiscuous mode [ 275.987119][ T3588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.010387][ T3774] syz-executor.0 (3774) used greatest stack depth: 19032 bytes left [ 276.025093][ T3588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.037716][ T3588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.055174][ T3588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.066467][ T3588] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.074138][ T3588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.134636][ T3747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.317415][ T3747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.449069][ T3747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.541132][ T3747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.808302][ T7667] chnl_net:caif_netlink_parms(): no params data found [ 277.061453][ T7689] loop3: detected capacity change from 0 to 16 [ 277.086091][ T7689] erofs: (device loop3): mounted with root inode @ nid 36. [ 277.195518][ T7666] loop1: detected capacity change from 0 to 32768 [ 277.261216][ T7666] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7666) [ 277.300044][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.329670][ T7666] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.377077][ T7666] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 277.396456][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.409737][ T7666] BTRFS info (device loop1): using free space tree [ 277.419035][ T7667] device bridge_slave_0 entered promiscuous mode [ 277.428410][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.435713][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.444173][ T7667] device bridge_slave_1 entered promiscuous mode [ 277.454184][ T7694] loop3: detected capacity change from 0 to 256 [ 277.591551][ T26] audit: type=1804 audit(1717181284.791:96): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972313331313830313332372F73797A6B616C6C65722E6943384757642F32382FE91F7189591E9233614B2F6275732F627573 dev="loop3" ino=1048678 res=1 errno=0 [ 277.625276][ T26] audit: type=1804 audit(1717181284.821:97): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972313331313830313332372F73797A6B616C6C65722E6943384757642F32382FE91F7189591E9233614B2F6275732F627573 dev="loop3" ino=1048678 res=1 errno=0 [ 277.683803][ T7666] BTRFS info (device loop1): enabling ssd optimizations [ 277.685738][ T7667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.750552][ T7667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.834525][ T4233] usb 3-1: USB disconnect, device number 37 [ 277.901115][ T3572] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.150295][ T3588] Bluetooth: hci2: command tx timeout [ 278.314262][ T7721] device syz_tun entered promiscuous mode [ 278.330588][ T7721] device vlan2 entered promiscuous mode [ 278.362633][ T7721] device syz_tun left promiscuous mode [ 278.451839][ T7667] team0: Port device team_slave_0 added [ 278.509514][ T7667] team0: Port device team_slave_1 added [ 278.711573][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.743537][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.860630][ T7667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.921554][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.931566][ T7747] loop4: detected capacity change from 0 to 256 [ 278.946800][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.059510][ T26] audit: type=1804 audit(1717181286.261:98): pid=7747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D74657374646972323436333230343737322F73797A6B616C6C65722E4B75575730312F3232332FE91F7189591E9233614B2F6275732F627573 dev="loop4" ino=1048680 res=1 errno=0 [ 279.076828][ T7667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.179426][ T26] audit: type=1804 audit(1717181286.311:99): pid=7747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D74657374646972323436333230343737322F73797A6B616C6C65722E4B75575730312F3232332FE91F7189591E9233614B2F6275732F627573 dev="loop4" ino=1048680 res=1 errno=0 [ 279.407637][ T7667] device hsr_slave_0 entered promiscuous mode [ 279.428514][ T7667] device hsr_slave_1 entered promiscuous mode [ 279.445029][ T7667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.460515][ T7667] Cannot create hsr debugfs directory [ 279.725304][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.753096][ T3747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.789980][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.812257][ T3747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.844302][ T3747] device bridge_slave_1 left promiscuous mode [ 279.864856][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.886758][ T4234] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 279.904844][ T3747] device bridge_slave_0 left promiscuous mode [ 279.946902][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.963508][ T3747] device veth1_macvtap left promiscuous mode [ 279.988603][ T3747] device veth0_macvtap left promiscuous mode [ 279.994784][ T3747] device veth1_vlan left promiscuous mode [ 280.008204][ T7734] loop2: detected capacity change from 0 to 32768 [ 280.038711][ T3747] device veth0_vlan left promiscuous mode [ 280.047848][ T7734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7734) [ 280.094306][ T7734] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.136841][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 280.166966][ T7734] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 280.175687][ T7734] BTRFS error (device loop2): unrecognized mount option 'obj_type=btrfs' [ 280.226769][ T3588] Bluetooth: hci2: command tx timeout [ 280.245940][ T7734] BTRFS error (device loop2): open_ctree failed [ 280.256837][ T4234] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 280.296979][ T4234] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.306099][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.637041][ T7752] loop4: detected capacity change from 0 to 32768 [ 280.666785][ T7752] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7752) [ 280.744339][ T7752] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.787762][ T7752] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 280.835504][ T7752] BTRFS info (device loop4): using free space tree [ 280.957926][ T7752] BTRFS info (device loop4): enabling ssd optimizations [ 281.169318][ T3886] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.408433][ T3747] team0 (unregistering): Port device team_slave_1 removed [ 281.509541][ T3747] team0 (unregistering): Port device team_slave_0 removed [ 281.558238][ T3747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.605979][ T3747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.885177][ T3747] bond0 (unregistering): Released all slaves [ 281.996651][ T14] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 282.236764][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 282.306875][ T3588] Bluetooth: hci2: command tx timeout [ 282.356764][ T14] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.364823][ T14] usb 3-1: config 0 has no interface number 0 [ 282.415444][ T14] usb 3-1: config 0 interface 1 altsetting 0 has an invalid endpoint with address 0x62, skipping [ 282.458773][ T14] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 282.484969][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.516105][ T14] usb 3-1: config 0 descriptor?? [ 282.547480][ T7813] loop4: detected capacity change from 0 to 256 [ 282.593636][ T14] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 282.594678][ T26] audit: type=1804 audit(1717181289.791:100): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D74657374646972323436333230343737322F73797A6B616C6C65722E4B75575730312F3232372FE91F7189591E9233614B2F6275732F627573 dev="loop4" ino=1048682 res=1 errno=0 [ 282.696433][ T5100] usb 4-1: USB disconnect, device number 22 [ 282.704654][ T26] audit: type=1804 audit(1717181289.831:101): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D74657374646972323436333230343737322F73797A6B616C6C65722E4B75575730312F3232372FE91F7189591E9233614B2F6275732F627573 dev="loop4" ino=1048682 res=1 errno=0 [ 282.762329][ T7809] device syz_tun entered promiscuous mode [ 282.790140][ T7809] device vlan2 entered promiscuous mode [ 282.803228][ T14] usb 3-1: USB disconnect, device number 38 [ 282.838863][ T7809] device syz_tun left promiscuous mode [ 283.568660][ T7667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.612690][ T7667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.653233][ T7667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.702748][ T7667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.072222][ T7667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.172271][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.185055][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.220138][ T7667] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.264060][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.285295][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.328717][ T4157] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.336099][ T4157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.386751][ T3588] Bluetooth: hci2: command tx timeout [ 284.417376][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.425683][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.434687][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.462786][ T4157] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.470007][ T4157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.529994][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.566719][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.590085][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.604360][ T7823] loop4: detected capacity change from 0 to 32768 [ 284.660285][ T7827] loop1: detected capacity change from 0 to 32768 [ 284.680108][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.697927][ T7827] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7827) [ 284.724332][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.748068][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.764974][ T7667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.777846][ T7667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.777996][ T7827] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 284.799454][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.811469][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.836887][ T7827] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 284.865297][ T7827] BTRFS error (device loop1): unrecognized mount option 'obj_type=btrfs' [ 284.918234][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.979788][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.009785][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.035380][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.037939][ T7827] BTRFS error (device loop1): open_ctree failed [ 285.043710][ T3733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (3733) [ 285.696554][ T7864] loop3: detected capacity change from 0 to 256 [ 285.746952][ T14] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 285.770080][ T26] audit: type=1804 audit(1717181292.971:102): pid=7864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972313331313830313332372F73797A6B616C6C65722E6943384757642F33372FE91F7189591E9233614B2F6275732F627573 dev="loop3" ino=1048684 res=1 errno=0 [ 285.886250][ T26] audit: type=1804 audit(1717181292.971:103): pid=7864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972313331313830313332372F73797A6B616C6C65722E6943384757642F33372FE91F7189591E9233614B2F6275732F627573 dev="loop3" ino=1048684 res=1 errno=0 [ 285.971286][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.987069][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 286.003788][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.039484][ T7667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.107073][ T14] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 286.139455][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 286.169633][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.180420][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.193361][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.270036][ T7873] device syz_tun entered promiscuous mode [ 286.307345][ T7873] device vlan2 entered promiscuous mode [ 286.348414][ T7873] device syz_tun left promiscuous mode [ 286.449911][ T7667] device veth0_vlan entered promiscuous mode [ 286.473006][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.498866][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.544515][ T7667] device veth1_vlan entered promiscuous mode [ 286.594563][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.608847][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.634949][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.710965][ T7877] loop4: detected capacity change from 0 to 4096 [ 286.722783][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.738547][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.768879][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.801298][ T7667] device veth0_macvtap entered promiscuous mode [ 286.848894][ T7667] device veth1_macvtap entered promiscuous mode [ 286.946806][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.986724][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.038202][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.056717][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.073398][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.096328][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.109542][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.120690][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.131377][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.163431][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.229353][ T7667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.261325][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.282095][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.332090][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.378478][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.423537][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.476612][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.506647][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.555815][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.582468][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.596823][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.608653][ T7897] 9pnet_fd: Insufficient options for proto=fd [ 287.624563][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.639414][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.653350][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.664313][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.697422][ T7667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.710454][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.720346][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.728928][ T7902] loop3: detected capacity change from 0 to 128 [ 287.766208][ T7667] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.796636][ T7902] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 287.826824][ T7667] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.835588][ T7667] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.865933][ T7902] sysv_free_block: trying to free block not in datazone [ 287.894332][ T7667] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.101149][ T7912] loop2: detected capacity change from 0 to 256 [ 288.182420][ T6788] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 288.211344][ T7425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.250490][ T7425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.259488][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.270969][ T26] audit: type=1804 audit(1717181295.461:104): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972313432353532383337302F73797A6B616C6C65722E506569634A4D2F3231372FE91F7189591E9233614B2F6275732F627573 dev="loop2" ino=1048686 res=1 errno=0 [ 288.324969][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.373121][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.406633][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.542429][ T14] usb 2-1: USB disconnect, device number 35 [ 288.562099][ T7915] loop3: detected capacity change from 0 to 64 [ 288.584190][ T26] audit: type=1804 audit(1717181295.461:105): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972313432353532383337302F73797A6B616C6C65722E506569634A4D2F3231372FE91F7189591E9233614B2F6275732F627573 dev="loop2" ino=1048686 res=1 errno=0 [ 288.722177][ T7919] device syz_tun entered promiscuous mode [ 288.837170][ T7919] device vlan2 entered promiscuous mode [ 288.854103][ T7919] device syz_tun left promiscuous mode [ 289.296459][ T7939] loop0: detected capacity change from 0 to 64 [ 289.636294][ T7946] loop0: detected capacity change from 0 to 256 [ 289.760251][ T26] audit: type=1804 audit(1717181296.961:106): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972333431393339343138352F73797A6B616C6C65722E66366D464D6F2F342FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048691 res=1 errno=0 [ 289.909882][ T26] audit: type=1804 audit(1717181296.961:107): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972333431393339343138352F73797A6B616C6C65722E66366D464D6F2F342FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048691 res=1 errno=0 [ 290.196585][ T14] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 290.436797][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 290.476482][ T7923] loop1: detected capacity change from 0 to 32768 [ 290.477035][ T14] usb 5-1: no configurations [ 290.485945][ T14] usb 5-1: can't read configurations, error -22 [ 290.647531][ T14] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 290.650586][ T7923] XFS (loop1): Mounting V5 Filesystem [ 290.789185][ T7923] XFS (loop1): Ending clean mount [ 290.825146][ T7923] XFS (loop1): Quotacheck needed: Please wait. [ 290.896797][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 290.902882][ T7923] XFS (loop1): Quotacheck: Done. [ 290.936800][ T14] usb 5-1: no configurations [ 290.941878][ T14] usb 5-1: can't read configurations, error -22 [ 290.991150][ T14] usb usb5-port1: attempt power cycle [ 291.154350][ T7984] XFS (loop1): Metadata CRC error detected at xfs_refcountbt_read_verify+0x39/0xc0, xfs_refcountbt block 0x28 [ 291.218516][ T7984] XFS (loop1): Unmount and run xfs_repair [ 291.254756][ T7984] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 291.289712][ T7984] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 291.333708][ T7984] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 291.426665][ T14] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 291.442718][ T7984] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 291.499149][ T7984] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 291.526981][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 291.566959][ T14] usb 5-1: no configurations [ 291.571415][ T7984] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 291.571724][ T14] usb 5-1: can't read configurations, error -22 [ 291.631709][ T7984] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 291.669401][ T7984] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 291.698991][ T7984] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 291.757033][ T7984] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x28 len 8 error 74 [ 291.795405][ T14] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 291.814192][ T7984] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 291.860230][ T7996] device syz_tun entered promiscuous mode [ 291.872183][ T7984] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 291.885739][ T7996] device vlan2 entered promiscuous mode [ 291.896890][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 291.936982][ T14] usb 5-1: no configurations [ 291.941654][ T14] usb 5-1: can't read configurations, error -22 [ 291.965826][ T14] usb usb5-port1: unable to enumerate USB device [ 291.997479][ T7996] device syz_tun left promiscuous mode [ 292.151657][ T1027] block nbd3: Possible stuck request ffff88801f940000: control (read@0,4096B). Runtime 90 seconds [ 292.254917][ T7963] loop2: detected capacity change from 0 to 32768 [ 292.293333][ T7963] gfs2: fsid=ºÈ­åÊÝëujV•gù×Jõ!}: Trying to join cluster "lock_nolock", "ºÈ­åÊÝëujV•gù×Jõ!}" [ 292.336606][ T7963] gfs2: fsid=ºÈ­åÊÝëujV•gù×Jõ!}: Now mounting FS (format 1801)... [ 292.346833][ T8003] loop0: detected capacity change from 0 to 16 [ 292.421670][ T8003] erofs: (device loop0): mounted with root inode @ nid 36. [ 292.451069][ T3572] XFS (loop1): Unmounting Filesystem [ 292.531722][ T7963] gfs2: fsid=ºÈ­åÊÝëujV•gù×Jõ!}.0: journal 0 mapped with 3 extents in 0ms [ 292.618524][ T5100] gfs2: fsid=ºÈ­åÊÝëujV•gù×Jõ!}.0: jid=0, already locked for use [ 292.629634][ T5100] gfs2: fsid=ºÈ­åÊÝëujV•gù×Jõ!}.0: jid=0: Looking at journal... [ 292.764646][ T5100] gfs2: fsid=ºÈ­åÊÝëujV•gù×Jõ!}.0: jid=0: Journal head lookup took 135ms [ 292.793994][ T5100] gfs2: fsid=ºÈ­åÊÝëujV•gù×Jõ!}.0: jid=0: Done [ 292.825842][ T7963] gfs2: fsid=ºÈ­åÊÝëujV•gù×Jõ!}.0: first mount done, others may mount [ 292.896369][ T7963] gfs2: fsid=ºÈ­åÊÝëujV•gù×Jõ!}.0: can't start logd thread: -4 [ 293.043558][ T8018] loop1: detected capacity change from 0 to 64 [ 293.256915][ T8022] loop3: detected capacity change from 0 to 2048 [ 293.361055][ T8022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.877494][ T8034] loop2: detected capacity change from 0 to 2048 [ 293.910904][ T8042] device syz_tun entered promiscuous mode [ 293.919248][ T8034] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 293.955281][ T8042] device vlan2 entered promiscuous mode [ 293.999530][ T8034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.011089][ T8042] device syz_tun left promiscuous mode [ 294.273849][ T8051] loop0: detected capacity change from 0 to 16 [ 294.292311][ T3891] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 294.310853][ T3891] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 294.357032][ T8051] erofs: (device loop0): mounted with root inode @ nid 36. [ 294.805121][ T3746] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.954378][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.005805][ T3746] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.145684][ T3746] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.280226][ T3746] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.361480][ T8048] loop4: detected capacity change from 0 to 32768 [ 295.408791][ T8071] device syz_tun entered promiscuous mode [ 295.420398][ T8071] device vlan2 entered promiscuous mode [ 295.440186][ T8071] device syz_tun left promiscuous mode [ 295.450573][ T8048] XFS (loop4): Mounting V5 Filesystem [ 295.619210][ T8048] XFS (loop4): Ending clean mount [ 295.700597][ T3586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.711651][ T3586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.723212][ T3586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.759263][ T3586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.767757][ T3586] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 295.775206][ T3586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.154488][ T3886] XFS (loop4): Unmounting Filesystem [ 296.316787][ T5099] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 296.679967][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 296.686955][ T5099] usb 1-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 296.717047][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.751301][ T5099] usb 1-1: config 0 descriptor?? [ 296.865753][ T8085] loop1: detected capacity change from 0 to 40427 [ 297.015438][ T5099] usb 1-1: USB disconnect, device number 38 [ 297.038123][ T8085] F2FS-fs (loop1): Found nat_bits in checkpoint [ 297.165703][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.180464][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.232260][ T8081] device bridge_slave_0 entered promiscuous mode [ 297.246238][ T8085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 297.287178][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.299235][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.309001][ T8116] loop3: detected capacity change from 0 to 256 [ 297.349810][ T8081] device bridge_slave_1 entered promiscuous mode [ 297.350685][ T26] audit: type=1804 audit(1717181304.551:108): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972313331313830313332372F73797A6B616C6C65722E6943384757642F34372FE91F7189591E9233614B2F6275732F627573 dev="loop3" ino=1048693 res=1 errno=0 [ 297.436154][ T3746] device hsr_slave_0 left promiscuous mode [ 297.436333][ T3572] syz-executor.1: attempt to access beyond end of device [ 297.436333][ T3572] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 297.464230][ T3746] device hsr_slave_1 left promiscuous mode [ 297.477029][ T26] audit: type=1804 audit(1717181304.601:109): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972313331313830313332372F73797A6B616C6C65722E6943384757642F34372FE91F7189591E9233614B2F6275732F627573 dev="loop3" ino=1048693 res=1 errno=0 [ 297.509706][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.517318][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.530599][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.548928][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.583640][ T3746] device bridge_slave_1 left promiscuous mode [ 297.606021][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.639720][ T3746] device bridge_slave_0 left promiscuous mode [ 297.646025][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.784241][ T3746] device veth1_macvtap left promiscuous mode [ 297.810120][ T3746] device veth0_macvtap left promiscuous mode [ 297.816376][ T3746] device veth1_vlan left promiscuous mode [ 297.828089][ T3588] Bluetooth: hci4: command tx timeout [ 297.838055][ T3746] device veth0_vlan left promiscuous mode [ 297.997619][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 298.367605][ T3746] team0 (unregistering): Port device team_slave_1 removed [ 298.389287][ T3746] team0 (unregistering): Port device team_slave_0 removed [ 298.413340][ T3746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.445171][ T3746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.476707][ T5100] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 298.545107][ T3746] bond0 (unregistering): Released all slaves [ 298.614613][ T8123] loop4: detected capacity change from 0 to 32768 [ 298.628143][ T8123] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8123) [ 298.655453][ T8123] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.683619][ T8081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.726789][ T5100] usb 2-1: Using ep0 maxpacket: 8 [ 298.738761][ T8123] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 298.759252][ T8123] BTRFS info (device loop4): using free space tree [ 298.762848][ T8081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.846865][ T5100] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.866932][ T5100] usb 2-1: config 0 has no interfaces? [ 298.872740][ T5100] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 298.882621][ T5100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.893048][ T5100] usb 2-1: config 0 descriptor?? [ 298.996394][ T8123] BTRFS info (device loop4): enabling ssd optimizations [ 299.153891][ T8081] team0: Port device team_slave_0 added [ 299.166469][ T8081] team0: Port device team_slave_1 added [ 299.199871][ T3886] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.260601][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.315784][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.486761][ T8081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.549445][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.595765][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.707568][ T8081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.906706][ T3588] Bluetooth: hci4: command tx timeout [ 299.947765][ T8081] device hsr_slave_0 entered promiscuous mode [ 299.969386][ T8081] device hsr_slave_1 entered promiscuous mode [ 299.991022][ T8081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.003705][ T8081] Cannot create hsr debugfs directory [ 300.126704][ T4236] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 300.503958][ T4236] usb 1-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 300.543561][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.584942][ T4236] usb 1-1: config 0 descriptor?? [ 300.683468][ T8160] loop3: detected capacity change from 0 to 40427 [ 300.791000][ T8160] F2FS-fs (loop3): Found nat_bits in checkpoint [ 300.859202][ T4233] usb 1-1: USB disconnect, device number 39 [ 301.026773][ T8160] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 301.145759][ T6788] syz-executor.3: attempt to access beyond end of device [ 301.145759][ T6788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 301.163835][ T8081] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.213668][ T8081] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.250031][ T8081] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.282797][ T4072] usb 2-1: USB disconnect, device number 36 [ 301.297439][ T8081] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.650016][ T8081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.716073][ T8081] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.787782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.795793][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.857472][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.868010][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.887766][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.895045][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.936263][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.988563][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.988841][ T3588] Bluetooth: hci4: command tx timeout [ 302.020297][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.027517][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.124482][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.219999][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.249738][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.284371][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.310920][ T8212] loop3: detected capacity change from 0 to 256 [ 302.324921][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.373768][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.417737][ T26] audit: type=1804 audit(1717181309.621:110): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972313331313830313332372F73797A6B616C6C65722E6943384757642F35322FE91F7189591E9233614B2F6275732F627573 dev="loop3" ino=1048695 res=1 errno=0 [ 302.453682][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.512842][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.525656][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.548734][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.562739][ T26] audit: type=1804 audit(1717181309.651:111): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972313331313830313332372F73797A6B616C6C65722E6943384757642F35322FE91F7189591E9233614B2F6275732F627573 dev="loop3" ino=1048695 res=1 errno=0 [ 302.602642][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.634633][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.675682][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.537149][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.544912][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.584934][ T8207] loop0: detected capacity change from 0 to 32768 [ 303.588689][ T8081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.675338][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.685103][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.694951][ T8207] XFS (loop0): Mounting V5 Filesystem [ 303.803302][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.817733][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.828907][ T8081] device veth0_vlan entered promiscuous mode [ 303.878649][ T8207] XFS (loop0): Ending clean mount [ 303.907186][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.915244][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.980756][ T8081] device veth1_vlan entered promiscuous mode [ 304.066700][ T3588] Bluetooth: hci4: command tx timeout [ 304.091046][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 304.113812][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 304.129715][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.139349][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.151614][ T8081] device veth0_macvtap entered promiscuous mode [ 304.211765][ T8081] device veth1_macvtap entered promiscuous mode [ 304.243799][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.258223][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.293962][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.326086][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.347937][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.366832][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.380328][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.392523][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.398306][ T8221] loop1: detected capacity change from 0 to 32768 [ 304.403382][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.432427][ T8221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (8221) [ 304.469723][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.480258][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.493149][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.525007][ T7667] XFS (loop0): Unmounting Filesystem [ 304.535856][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.543929][ T8221] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 304.566907][ T8221] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 304.580408][ T8221] BTRFS info (device loop1): using free space tree [ 304.582332][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.595392][ T4072] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 304.605574][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.634784][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.686573][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.701134][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.712583][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.722765][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.746591][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.756469][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.786672][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.819098][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.829731][ T8221] BTRFS info (device loop1): enabling ssd optimizations [ 304.881193][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.896921][ T4072] usb 5-1: Using ep0 maxpacket: 8 [ 304.959371][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.006308][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.022959][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.042957][ T4072] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.054806][ T3572] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 305.058475][ T8081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.077298][ T4072] usb 5-1: config 0 has no interfaces? [ 305.083027][ T4072] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 305.094700][ T8081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.106860][ T4072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.130836][ T8081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.148982][ T8081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.169502][ T4072] usb 5-1: config 0 descriptor?? [ 305.200057][ T8234] loop3: detected capacity change from 0 to 40427 [ 305.314995][ T8234] F2FS-fs (loop3): Found nat_bits in checkpoint [ 305.488437][ T8234] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 305.511488][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.544688][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.639528][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.647932][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.665701][ T6788] syz-executor.3: attempt to access beyond end of device [ 305.665701][ T6788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 305.673759][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.708500][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.426284][ T26] audit: type=1804 audit(1717181313.621:112): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1311801327/syzkaller.iC8GWd/57/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 306.526931][ T3616] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 306.818403][ T8313] loop2: detected capacity change from 0 to 256 [ 306.863940][ T26] audit: type=1804 audit(1717181314.061:113): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972333335313233383138372F73797A6B616C6C65722E6F47704466492F312FE91F7189591E9233614B2F6275732F627573 dev="loop2" ino=1048700 res=1 errno=0 [ 306.947573][ T3616] usb 1-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 306.964808][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.995714][ T26] audit: type=1804 audit(1717181314.101:114): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972333335313233383138372F73797A6B616C6C65722E6F47704466492F312FE91F7189591E9233614B2F6275732F627573 dev="loop2" ino=1048700 res=1 errno=0 [ 307.001225][ T3616] usb 1-1: config 0 descriptor?? [ 307.313343][ T7] usb 5-1: USB disconnect, device number 46 [ 308.244753][ T8329] loop4: detected capacity change from 0 to 32768 [ 308.263589][ T8329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8329) [ 308.291571][ T8329] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.302109][ T8329] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 308.311560][ T8329] BTRFS info (device loop4): using free space tree [ 308.395888][ T8329] BTRFS info (device loop4): enabling ssd optimizations [ 308.496591][ T3616] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 308.539712][ T3886] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.768197][ T3616] usb 4-1: Using ep0 maxpacket: 8 [ 308.906950][ T3616] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 308.931931][ T3616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.981015][ T3616] usb 4-1: config 0 descriptor?? [ 309.011566][ T8364] loop2: detected capacity change from 0 to 256 [ 309.072950][ T26] audit: type=1804 audit(1717181316.271:115): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972333335313233383138372F73797A6B616C6C65722E6F47704466492F372FE91F7189591E9233614B2F6275732F627573 dev="loop2" ino=1048702 res=1 errno=0 [ 309.145834][ T26] audit: type=1804 audit(1717181316.311:116): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972333335313233383138372F73797A6B616C6C65722E6F47704466492F372FE91F7189591E9233614B2F6275732F627573 dev="loop2" ino=1048702 res=1 errno=0 [ 309.190543][ T4163] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 309.226992][ T4236] usb 1-1: USB disconnect, device number 40 [ 309.456834][ T4163] usb 5-1: Using ep0 maxpacket: 8 [ 309.597411][ T4163] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 309.634987][ T4163] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.651831][ T4163] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.661172][ T4163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.737889][ T4163] usbtmc 5-1:16.0: bulk endpoints not found [ 309.796827][ T4236] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 310.036659][ T4236] usb 1-1: Using ep0 maxpacket: 8 [ 310.156894][ T4236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.172636][ T4236] usb 1-1: config 0 has no interfaces? [ 310.178534][ T4236] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 310.193353][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.204413][ T4236] usb 1-1: config 0 descriptor?? [ 310.557552][ T26] audit: type=1800 audit(1717181317.761:117): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 310.579214][ T26] audit: type=1800 audit(1717181317.761:118): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 310.623459][ T26] audit: type=1800 audit(1717181317.821:119): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 310.646110][ T26] audit: type=1800 audit(1717181317.821:120): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 310.986709][ T3616] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 311.004780][ T3616] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 311.032283][ T3616] asix: probe of 4-1:0.0 failed with error -71 [ 311.065132][ T3616] usb 4-1: USB disconnect, device number 23 [ 311.168943][ T3643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.265699][ T3643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.283729][ T3579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.295202][ T3579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.305749][ T3579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.315513][ T3579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.323952][ T3579] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 311.332506][ T3579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.367514][ T3643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.416875][ T3643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.455410][ T8397] loop1: detected capacity change from 0 to 256 [ 311.489817][ T26] audit: type=1804 audit(1717181318.691:121): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3239362FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048704 res=1 errno=0 [ 311.556013][ T26] audit: type=1804 audit(1717181318.691:122): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333636303331323837322F73797A6B616C6C65722E4C5167524E642F3239362FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048704 res=1 errno=0 [ 311.917818][ T4163] usb 5-1: USB disconnect, device number 47 [ 311.946770][ T4161] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 312.061212][ T8394] chnl_net:caif_netlink_parms(): no params data found [ 312.347079][ T4161] usb 4-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 312.367009][ T4161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.409904][ T4161] usb 4-1: config 0 descriptor?? [ 312.482868][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.496101][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.541165][ T8394] device bridge_slave_0 entered promiscuous mode [ 312.557458][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.570556][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.580094][ T8394] device bridge_slave_1 entered promiscuous mode [ 312.607523][ T8431] device syz_tun entered promiscuous mode [ 312.612097][ T4161] usb 1-1: USB disconnect, device number 41 [ 312.620618][ T8431] device vlan2 entered promiscuous mode [ 312.639806][ T8431] device syz_tun left promiscuous mode [ 312.774804][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.803756][ T8437] 9pnet_fd: Insufficient options for proto=fd [ 312.837044][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.007499][ T8394] team0: Port device team_slave_0 added [ 313.031579][ T8394] team0: Port device team_slave_1 added [ 313.357012][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.364110][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.412717][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.426835][ T3588] Bluetooth: hci4: command tx timeout [ 313.493671][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.509022][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.573210][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.657078][ T3643] device hsr_slave_0 left promiscuous mode [ 313.675770][ T3643] device hsr_slave_1 left promiscuous mode [ 313.699928][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.726250][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.758390][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.781319][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.813671][ T3643] device bridge_slave_1 left promiscuous mode [ 313.830380][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.868630][ T3643] device bridge_slave_0 left promiscuous mode [ 313.883466][ T3588] Bluetooth: hci1: unexpected cc 0x0402 length: 65 > 1 [ 313.894185][ T3588] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 313.905778][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.952732][ T3643] device veth1_macvtap left promiscuous mode [ 313.962292][ T3643] device veth0_macvtap left promiscuous mode [ 313.979320][ T3643] device veth1_vlan left promiscuous mode [ 313.985233][ T3643] device veth0_vlan left promiscuous mode [ 314.383132][ T8465] nbd4: detected capacity change from 0 to 8388607 [ 314.495624][ T8442] loop0: detected capacity change from 0 to 32768 [ 314.588430][ T8442] XFS (loop0): Mounting V5 Filesystem [ 314.658967][ T4161] usb 4-1: USB disconnect, device number 24 [ 314.734446][ T8442] XFS (loop0): Ending clean mount [ 314.752789][ T8442] XFS (loop0): Quotacheck needed: Please wait. [ 314.820401][ T8442] XFS (loop0): Quotacheck: Done. [ 314.912359][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 314.973016][ T7667] XFS (loop0): Unmounting Filesystem [ 314.979481][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 315.027811][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.063805][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.140863][ T3588] block nbd4: Receive control failed (result -104) [ 315.245823][ T3643] bond0 (unregistering): Released all slaves [ 315.432603][ T8462] loop1: detected capacity change from 0 to 32768 [ 315.491907][ T8394] device hsr_slave_0 entered promiscuous mode [ 315.509987][ T3588] Bluetooth: hci4: command tx timeout [ 315.532389][ T8394] device hsr_slave_1 entered promiscuous mode [ 315.543113][ T8394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.569998][ T8462] XFS (loop1): Mounting V5 Filesystem [ 315.607147][ T8394] Cannot create hsr debugfs directory [ 315.726728][ T4636] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 315.757056][ T8462] XFS (loop1): Ending clean mount [ 315.894940][ T3572] XFS (loop1): Unmounting Filesystem [ 316.146989][ T4636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.172783][ T4636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.213513][ T4636] usb 1-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 316.239122][ T4636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.264817][ T4636] usb 1-1: config 0 descriptor?? [ 316.721272][ T8491] loop3: detected capacity change from 0 to 32768 [ 316.725365][ T8394] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.753823][ T8491] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (8491) [ 316.791274][ T8394] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.817102][ T4636] usbhid 1-1:0.0: can't add hid device: -71 [ 316.823157][ T4636] usbhid: probe of 1-1:0.0 failed with error -71 [ 316.856385][ T8394] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.862216][ T4636] usb 1-1: USB disconnect, device number 42 [ 316.895797][ T8491] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.909250][ T8394] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.927585][ T8491] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 316.959436][ T8491] BTRFS info (device loop3): using free space tree [ 317.110015][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.116380][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.227197][ T8491] BTRFS info (device loop3): enabling ssd optimizations [ 317.429693][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.469543][ T6788] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.483937][ T8394] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.491708][ T8530] loop0: detected capacity change from 0 to 256 [ 317.516691][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.528138][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.540389][ T26] audit: type=1804 audit(1717181324.741:123): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972333431393339343138352F73797A6B616C6C65722E66366D464D6F2F33332FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048706 res=1 errno=0 [ 317.586807][ T3588] Bluetooth: hci4: command tx timeout [ 317.627130][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.635901][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.697838][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.704987][ T4636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.753518][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.767389][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.771639][ T26] audit: type=1804 audit(1717181324.771:124): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972333431393339343138352F73797A6B616C6C65722E66366D464D6F2F33332FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048706 res=1 errno=0 [ 317.776319][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.906667][ T3588] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 317.915405][ T3588] Bluetooth: hci1: Injecting HCI hardware error event [ 317.925405][ T3579] Bluetooth: hci1: hardware error 0x00 [ 317.947223][ T4163] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.954369][ T4163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.962256][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.002202][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.012312][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.022799][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.031729][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.043307][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.052151][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.060920][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.070368][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.083988][ T8394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.110895][ T8394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.120390][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.129844][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.218542][ T8507] loop1: detected capacity change from 0 to 32768 [ 318.409229][ T8507] XFS (loop1): Mounting V5 Filesystem [ 318.607795][ T8507] XFS (loop1): Ending clean mount [ 318.676874][ T5096] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 318.787630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.811675][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.845655][ T8394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.930185][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.938596][ T5096] usb 1-1: Using ep0 maxpacket: 8 [ 318.948161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.012287][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.037624][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.056843][ T5096] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 319.070548][ T8394] device veth0_vlan entered promiscuous mode [ 319.086919][ T5096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.095373][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.114577][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.114729][ T5096] usb 1-1: config 0 descriptor?? [ 319.150619][ T8394] device veth1_vlan entered promiscuous mode [ 319.288666][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 319.307618][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 319.332491][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.345057][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.366438][ T8394] device veth0_macvtap entered promiscuous mode [ 319.384979][ T3572] XFS (loop1): Unmounting Filesystem [ 319.404785][ T8394] device veth1_macvtap entered promiscuous mode [ 319.502083][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.529944][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.541167][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.552873][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.563870][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.574983][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.585630][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.600864][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.612098][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.634111][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.647659][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.656666][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.666070][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.676885][ T3588] Bluetooth: hci4: command tx timeout [ 319.683448][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.700462][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.721282][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.749512][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.801078][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.836448][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.856153][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.874051][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.896738][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.914203][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.924490][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.943527][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.958049][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.977943][ T8573] device syz_tun entered promiscuous mode [ 319.983827][ T8573] device vlan2 entered promiscuous mode [ 320.005902][ T8573] device syz_tun left promiscuous mode [ 320.055778][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.065424][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.079396][ T8394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.095011][ T8394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.108352][ T8394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.125269][ T8394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.227020][ T3579] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 320.336378][ T7425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.359083][ T7425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.380223][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 320.419459][ T7425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.430731][ T7425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.445845][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 320.876615][ T7] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 321.156849][ T5096] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 321.176671][ T5096] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 321.207382][ T5096] asix: probe of 1-1:0.0 failed with error -71 [ 321.217013][ T5096] usb 1-1: USB disconnect, device number 43 [ 321.246854][ T7] usb 4-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 321.255945][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.277601][ T7] usb 4-1: config 0 descriptor?? [ 321.388613][ T14] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 321.389538][ T8592] loop2: detected capacity change from 0 to 40427 [ 321.438572][ T8592] F2FS-fs (loop2): Found nat_bits in checkpoint [ 321.539816][ T8592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 321.626400][ T8394] syz-executor.2: attempt to access beyond end of device [ 321.626400][ T8394] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 321.756845][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.771759][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.789765][ T8621] loop0: detected capacity change from 0 to 256 [ 321.824966][ T14] usb 2-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 321.851921][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.868802][ T26] audit: type=1804 audit(1717181329.071:125): pid=8621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972333431393339343138352F73797A6B616C6C65722E66366D464D6F2F33362FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048711 res=1 errno=0 [ 321.917673][ T14] usb 2-1: config 0 descriptor?? [ 321.945338][ T26] audit: type=1804 audit(1717181329.111:126): pid=8621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972333431393339343138352F73797A6B616C6C65722E66366D464D6F2F33362FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048711 res=1 errno=0 [ 322.232237][ T1027] block nbd3: Possible stuck request ffff88801f940000: control (read@0,4096B). Runtime 120 seconds [ 322.496859][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 322.503173][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 322.528113][ T14] usb 2-1: USB disconnect, device number 37 [ 323.081147][ T8643] loop1: detected capacity change from 0 to 64 [ 323.933111][ T14] usb 4-1: USB disconnect, device number 25 [ 324.243995][ T8654] loop2: detected capacity change from 0 to 64 [ 324.289438][ T8657] loop0: detected capacity change from 0 to 256 [ 324.377791][ T8659] device hsr_slave_0 left promiscuous mode [ 324.387497][ T8657] FAT-fs (loop0): Directory bread(block 64) failed [ 324.394909][ T8657] FAT-fs (loop0): Directory bread(block 65) failed [ 324.407675][ T8659] device hsr_slave_1 left promiscuous mode [ 324.413824][ T8657] FAT-fs (loop0): Directory bread(block 66) failed [ 324.439520][ T8657] FAT-fs (loop0): Directory bread(block 67) failed [ 324.456219][ T8657] FAT-fs (loop0): Directory bread(block 68) failed [ 324.476629][ T14] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 324.484303][ T8657] FAT-fs (loop0): Directory bread(block 69) failed [ 324.491447][ T8657] FAT-fs (loop0): Directory bread(block 70) failed [ 324.498182][ T8657] FAT-fs (loop0): Directory bread(block 71) failed [ 324.504833][ T8657] FAT-fs (loop0): Directory bread(block 72) failed [ 324.516848][ T8657] FAT-fs (loop0): Directory bread(block 73) failed [ 324.654230][ T8661] loop2: detected capacity change from 0 to 16 [ 324.673163][ T8661] erofs: (device loop2): mounted with root inode @ nid 36. [ 324.732344][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 324.856816][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.886574][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 324.905658][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 324.937503][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 324.956409][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.996639][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.005790][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.036688][ T11] kworker/u4:1: attempt to access beyond end of device [ 325.036688][ T11] loop0: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 325.058658][ T8655] loop1: detected capacity change from 0 to 32768 [ 325.077771][ T14] usbtmc: probe of 4-1:16.0 failed with error -22 [ 325.089129][ T8655] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (8655) [ 325.153606][ T8655] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.169241][ T8655] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 325.179306][ T8655] BTRFS error (device loop1): unrecognized mount option 'obj_type=btrfs' [ 325.196077][ T8655] BTRFS error (device loop1): open_ctree failed [ 325.285857][ T4236] usb 4-1: USB disconnect, device number 26 [ 325.287439][ T8665] loop0: detected capacity change from 0 to 4096 [ 325.370600][ T8667] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.741305][ T8663] loop2: detected capacity change from 0 to 32768 [ 325.867805][ T8663] XFS (loop2): Mounting V5 Filesystem [ 326.039302][ T8663] XFS (loop2): Ending clean mount [ 326.446477][ T8655] loop1: detected capacity change from 0 to 40427 [ 326.464246][ T8394] XFS (loop2): Unmounting Filesystem [ 326.556474][ T8655] F2FS-fs (loop1): Found nat_bits in checkpoint [ 326.736840][ T8655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 327.323320][ T3616] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 327.588159][ T8712] loop1: detected capacity change from 0 to 4096 [ 327.597842][ T3616] usb 3-1: Using ep0 maxpacket: 8 [ 327.633424][ T8713] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.696682][ T14] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 327.732572][ T3616] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 327.742612][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.758896][ T3616] usb 3-1: config 0 descriptor?? [ 328.063629][ T14] usb 4-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 328.094547][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.123534][ T14] usb 4-1: config 0 descriptor?? [ 328.390292][ T4236] usb 4-1: USB disconnect, device number 27 [ 328.496812][ T14] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 328.856710][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.875751][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.886956][ T14] usb 1-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 328.896220][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.913832][ T14] usb 1-1: config 0 descriptor?? [ 329.581429][ T8749] loop1: detected capacity change from 0 to 4096 [ 329.603581][ T8750] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.616890][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 329.623334][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 329.638855][ T14] usb 1-1: USB disconnect, device number 44 [ 329.821197][ T3616] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 329.835934][ T3616] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 329.846853][ T3616] asix: probe of 3-1:0.0 failed with error -71 [ 329.856191][ T3616] usb 3-1: USB disconnect, device number 39 [ 330.746615][ T3616] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 331.156800][ T3616] usb 4-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 331.166021][ T5035] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 331.176881][ T3616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.203251][ T3616] usb 4-1: config 0 descriptor?? [ 331.449840][ T14] usb 4-1: USB disconnect, device number 28 [ 331.557419][ T5035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.568480][ T5035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.578528][ T3616] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 331.586449][ T5035] usb 2-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 331.595708][ T5035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.605835][ T5035] usb 2-1: config 0 descriptor?? [ 331.846759][ T3616] usb 3-1: Using ep0 maxpacket: 8 [ 331.983718][ T3616] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 331.996426][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.022964][ T3616] usb 3-1: config 0 descriptor?? [ 332.183513][ T5035] usbhid 2-1:0.0: can't add hid device: -71 [ 332.190253][ T5035] usbhid: probe of 2-1:0.0 failed with error -71 [ 332.214406][ T5035] usb 2-1: USB disconnect, device number 38 [ 332.413277][ T8801] loop0: detected capacity change from 0 to 4096 [ 332.452972][ T8805] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.812507][ T14] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 334.040116][ T3616] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 334.054891][ T3616] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 334.074407][ T3616] asix: probe of 3-1:0.0 failed with error -71 [ 334.095580][ T3616] usb 3-1: USB disconnect, device number 40 [ 334.176982][ T14] usb 1-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 334.198963][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.227591][ T14] usb 1-1: config 0 descriptor?? [ 334.487544][ T4233] usb 1-1: USB disconnect, device number 45 [ 334.606723][ T14] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 334.765174][ T8849] loop2: detected capacity change from 0 to 4096 [ 334.839479][ T8851] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.974255][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.010384][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.076312][ T14] usb 4-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 335.099811][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.142807][ T14] usb 4-1: config 0 descriptor?? [ 335.906866][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 335.912914][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 335.923573][ T14] usb 4-1: USB disconnect, device number 29 [ 336.126757][ T3616] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 336.388841][ T3616] usb 2-1: Using ep0 maxpacket: 8 [ 336.516992][ T3616] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 336.541105][ T3616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.588743][ T3616] usb 2-1: config 0 descriptor?? [ 336.746750][ T4161] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 337.127776][ T4161] usb 4-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 337.156671][ T4161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.189531][ T4161] usb 4-1: config 0 descriptor?? [ 337.260635][ T8901] loop2: detected capacity change from 0 to 4096 [ 337.325050][ T8904] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.439379][ T4161] usb 4-1: USB disconnect, device number 30 [ 338.631426][ T4233] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 338.786987][ T3616] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 338.807221][ T3616] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 338.834463][ T3616] asix: probe of 2-1:0.0 failed with error -71 [ 338.856935][ T3616] usb 2-1: USB disconnect, device number 39 [ 338.997457][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.017275][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.027758][ T4233] usb 3-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 339.037331][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.047884][ T4233] usb 3-1: config 0 descriptor?? [ 339.296592][ T4163] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 339.631447][ T8940] loop3: detected capacity change from 0 to 4096 [ 339.687630][ T8941] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.737003][ T4163] usb 1-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 339.746106][ T4163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.773359][ T4163] usb 1-1: config 0 descriptor?? [ 339.806835][ T4233] usbhid 3-1:0.0: can't add hid device: -71 [ 339.815412][ T4233] usbhid: probe of 3-1:0.0 failed with error -71 [ 339.854416][ T4233] usb 3-1: USB disconnect, device number 41 [ 340.032248][ T3616] usb 1-1: USB disconnect, device number 46 [ 341.026875][ T4163] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 341.306582][ T4163] usb 4-1: Using ep0 maxpacket: 8 [ 341.457034][ T4163] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 341.478351][ T4163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.527039][ T4163] usb 4-1: config 0 descriptor?? [ 341.797083][ T4161] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 342.006714][ T14] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 342.102164][ T8987] loop2: detected capacity change from 0 to 4096 [ 342.143578][ T8988] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.216706][ T4161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.228077][ T4161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.238724][ T4161] usb 1-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 342.249664][ T4161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.268016][ T4161] usb 1-1: config 0 descriptor?? [ 342.366933][ T14] usb 2-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 342.385031][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.409659][ T14] usb 2-1: config 0 descriptor?? [ 342.650007][ T14] usb 2-1: USB disconnect, device number 40 [ 343.037565][ T4161] usbhid 1-1:0.0: can't add hid device: -71 [ 343.043673][ T4161] usbhid: probe of 1-1:0.0 failed with error -71 [ 343.053303][ T4161] usb 1-1: USB disconnect, device number 47 [ 343.536900][ T4163] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 343.568988][ T4163] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 343.624075][ T4163] asix: probe of 4-1:0.0 failed with error -71 [ 343.633631][ T4163] usb 4-1: USB disconnect, device number 31 [ 343.835976][ T9013] loop1: detected capacity change from 0 to 4096 [ 344.007330][ T9019] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.536731][ T4236] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 344.628214][ T1027] block nbd4: Possible stuck request ffff88801f9a8000: control (read@0,4096B). Runtime 30 seconds [ 344.906949][ T4236] usb 4-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 344.924167][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.960934][ T4236] usb 4-1: config 0 descriptor?? [ 345.052229][ T3586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.063896][ T3586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.074671][ T3586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.084726][ T3586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.097097][ T3586] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.104736][ T3586] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.226963][ T4161] usb 4-1: USB disconnect, device number 32 [ 345.256950][ T5035] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 345.363275][ T9041] chnl_net:caif_netlink_parms(): no params data found [ 345.457681][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.465127][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.478909][ T9041] device bridge_slave_0 entered promiscuous mode [ 345.489223][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.497598][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.506534][ T9041] device bridge_slave_1 entered promiscuous mode [ 345.545891][ T9041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.560960][ T9041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.609992][ T9041] team0: Port device team_slave_0 added [ 345.626688][ T5035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.638514][ T9041] team0: Port device team_slave_1 added [ 345.647583][ T5035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.707827][ T5035] usb 2-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 345.724006][ T5035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.777084][ T5035] usb 2-1: config 0 descriptor?? [ 345.809689][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.841136][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.907241][ T9041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.936462][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.957259][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.987481][ T9041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.078047][ T9041] device hsr_slave_0 entered promiscuous mode [ 346.085675][ T9041] device hsr_slave_1 entered promiscuous mode [ 346.102380][ T9041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.113433][ T9041] Cannot create hsr debugfs directory [ 346.196875][ T4236] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 346.248590][ T5035] ortek 0003:05A4:1700.001A: unknown main item tag 0x0 [ 346.255627][ T5035] ortek 0003:05A4:1700.001A: unknown main item tag 0x0 [ 346.287933][ T5035] ortek 0003:05A4:1700.001A: unknown main item tag 0x0 [ 346.305009][ T5035] ortek 0003:05A4:1700.001A: unknown main item tag 0x0 [ 346.312357][ T5035] ortek 0003:05A4:1700.001A: unknown main item tag 0x0 [ 346.331536][ T5035] ortek 0003:05A4:1700.001A: hidraw0: USB HID v0.00 Device [HID 05a4:1700] on usb-dummy_hcd.1-1/input0 [ 346.446738][ T4236] usb 4-1: Using ep0 maxpacket: 8 [ 346.466371][ T3616] usb 2-1: USB disconnect, device number 41 [ 346.566132][ T9041] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.579203][ T4236] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 346.591913][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.611235][ T4236] usb 4-1: config 0 descriptor?? [ 346.644542][ T9066] loop2: detected capacity change from 0 to 4096 [ 346.755787][ T9069] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.770728][ T9041] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.876290][ T9041] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.014428][ T9041] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.188910][ T3579] Bluetooth: hci6: command tx timeout [ 347.332918][ T9041] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.438603][ T9041] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.481467][ T9041] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.500108][ T9041] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.821700][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.882826][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.896047][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.918439][ T9041] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.940578][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.953121][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.965322][ T9083] 9pnet_fd: Insufficient options for proto=fd [ 347.972069][ T4161] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.979268][ T4161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.040262][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.049970][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.067587][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.076144][ T5035] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.083840][ T5035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.118660][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.136980][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.159107][ T4636] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 348.200681][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.233711][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.269699][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.278948][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.288868][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.312726][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.340195][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.354765][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.373458][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.389133][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.576969][ T4636] usb 3-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 348.600127][ T4636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.636321][ T4636] usb 3-1: config 0 descriptor?? [ 348.656820][ T4236] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 348.680255][ T4236] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 348.701472][ T4236] asix: probe of 4-1:0.0 failed with error -71 [ 348.730675][ T4236] usb 4-1: USB disconnect, device number 33 [ 348.848284][ T9041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.864295][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.875576][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.900535][ T5035] usb 3-1: USB disconnect, device number 42 [ 349.278038][ T3586] Bluetooth: hci6: command tx timeout [ 349.339337][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.349280][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.442822][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.454237][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.522472][ T9041] device veth0_vlan entered promiscuous mode [ 349.543883][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.557846][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.595721][ T9041] device veth1_vlan entered promiscuous mode [ 349.642275][ T9110] loop3: detected capacity change from 0 to 4096 [ 349.666739][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.681700][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.691525][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.701545][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.715972][ T9041] device veth0_macvtap entered promiscuous mode [ 349.731710][ T9041] device veth1_macvtap entered promiscuous mode [ 349.762246][ T9117] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.802495][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.825170][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.846238][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.866742][ T14] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 349.876693][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.896581][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.926556][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.936413][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.957145][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.968715][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.979780][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.998025][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.010566][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.026913][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.037774][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.046119][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.091357][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.105339][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.117366][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.130511][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.165396][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.184818][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.189974][ T9120] 9pnet_fd: Insufficient options for proto=fd [ 350.195263][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.220671][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.232867][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.245747][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.268372][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.276922][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.281709][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.298016][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.310265][ T14] usb 1-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 350.314155][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.320204][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.344672][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.354350][ T14] usb 1-1: config 0 descriptor?? [ 350.360223][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.370612][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.382221][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.399057][ T9041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.415162][ T9041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.448066][ T9041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.471501][ T9041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.672958][ T7425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.700222][ T7425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.764956][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.795670][ T7425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.886858][ T7425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.953578][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.012983][ T4233] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 351.109000][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 351.115050][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 351.122079][ T4234] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 351.151003][ T14] usb 1-1: USB disconnect, device number 48 [ 351.219161][ T9145] loop4: detected capacity change from 0 to 4096 [ 351.267487][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 351.295814][ T9147] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.357281][ T3586] Bluetooth: hci6: command tx timeout [ 351.386769][ T4233] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 351.409835][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.457382][ T4233] usb 4-1: config 0 descriptor?? [ 351.496962][ T4234] usb 2-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 351.517183][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.560323][ T4234] usb 2-1: config 0 descriptor?? [ 351.677024][ T27] INFO: task syz-executor.3:6241 blocked for more than 143 seconds. [ 351.687250][ T27] Not tainted 6.1.92-syzkaller #0 [ 351.710089][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/05/31 18:49:18 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 351.731672][ T27] task:syz-executor.3 state:D stack:27560 pid:6241 ppid:3581 flags:0x00004006 [ 351.782516][ T27] Call Trace: [ 351.804387][ T27] [ 351.817132][ T27] __schedule+0x142d/0x4550 [ 351.839998][ T27] ? __sched_text_start+0x8/0x8 [ 351.858593][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 351.880844][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 351.901970][ T27] schedule+0xbf/0x180 [ 351.911839][ T27] schedule_preempt_disabled+0xf/0x20 [ 351.917604][ T4234] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 351.932186][ T27] __mutex_lock+0x6b9/0xd80 [ 351.942763][ T27] ? __mutex_lock+0x53c/0xd80 [ 351.953402][ T27] ? blkdev_get_by_dev+0x148/0xa10 [ 351.964808][ T27] ? mutex_lock_nested+0x10/0x10 [ 351.975656][ T27] ? _atomic_dec_and_lock+0x96/0x130 [ 351.988380][ T27] ? iput+0x401/0x980 [ 351.997041][ T27] ? ilookup+0x1c8/0x200 [ 352.007224][ T27] ? disk_block_events+0xa1/0x110 [ 352.017984][ T27] ? blkdev_get_by_dev+0xe7/0xa10 [ 352.028864][ T27] blkdev_get_by_dev+0x148/0xa10 [ 352.040355][ T27] blkdev_open+0x12e/0x2e0 [ 352.049486][ T27] ? blkdev_mmap+0x1b0/0x1b0 [ 352.059961][ T27] do_dentry_open+0x7f9/0x10f0 [ 352.071731][ T27] path_openat+0x2644/0x2e60 [ 352.082008][ T27] ? mark_lock+0x9a/0x340 [ 352.091207][ T27] ? do_filp_open+0x480/0x480 [ 352.101649][ T27] do_filp_open+0x230/0x480 [ 352.111620][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 352.122043][ T27] ? _raw_spin_unlock+0x24/0x40 [ 352.132716][ T27] ? alloc_fd+0x59c/0x640 [ 352.141668][ T27] do_sys_openat2+0x13b/0x500 [ 352.162465][ T27] ? do_sys_open+0x220/0x220 [ 352.173069][ T27] ? xfd_validate_state+0x6a/0x140 [ 352.183039][ T27] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 352.196605][ T27] __x64_sys_openat+0x243/0x290 [ 352.207311][ T27] ? __ia32_sys_open+0x270/0x270 [ 352.218056][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 352.231301][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 352.242269][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 352.255309][ T27] do_syscall_64+0x3b/0xb0 [ 352.265930][ T27] ? clear_bhb_loop+0x45/0xa0 [ 352.275309][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.288058][ T27] RIP: 0033:0x7f6e3ae7bae0 [ 352.297856][ T27] RSP: 002b:00007f6e3bc68c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 352.308319][ T1027] block nbd3: Possible stuck request ffff88801f940000: control (read@0,4096B). Runtime 150 seconds [ 352.337936][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e3ae7bae0 [ 352.345978][ T27] RDX: 0000000000000000 RSI: 00007f6e3bc68ca0 RDI: 00000000ffffff9c [ 352.367850][ T27] RBP: 00007f6e3bc68ca0 R08: 0000000000000000 R09: 002364626e2f7665 [ 352.375996][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 352.384210][ T27] R13: 000000000000000b R14: 00007f6e3afb3fa0 R15: 00007ffc6b221da8 [ 352.394285][ T27] [ 352.397608][ T27] INFO: task syz-executor.3:6242 blocked for more than 144 seconds. [ 352.405891][ T27] Not tainted 6.1.92-syzkaller #0 [ 352.412593][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.421729][ T27] task:syz-executor.3 state:D stack:27680 pid:6242 ppid:3581 flags:0x00004006 [ 352.431181][ T27] Call Trace: [ 352.434736][ T27] [ 352.437987][ T27] __schedule+0x142d/0x4550 [ 352.442659][ T27] ? __mutex_lock+0x6b4/0xd80 [ 352.447521][ T27] ? __sched_text_start+0x8/0x8 [ 352.452777][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 352.467937][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 352.478625][ T27] schedule+0xbf/0x180 [ 352.486771][ T27] schedule_preempt_disabled+0xf/0x20 [ 352.498707][ T27] __mutex_lock+0x6b9/0xd80 [ 352.509162][ T27] ? __mutex_lock+0x53c/0xd80 [ 352.519985][ T27] ? blkdev_put+0x100/0x750 [ 352.529670][ T27] ? mutex_lock_nested+0x10/0x10 [ 352.540374][ T27] ? __fsnotify_parent+0x50b/0x730 [ 352.551815][ T27] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 352.565470][ T27] blkdev_put+0x100/0x750 [ 352.575610][ T27] ? task_work_run+0x1fc/0x300 [ 352.586301][ T27] blkdev_close+0x56/0x80 [ 352.596074][ T27] ? blkdev_open+0x2e0/0x2e0 [ 352.613406][ T27] __fput+0x3b7/0x890 [