last executing test programs: 23.044799908s ago: executing program 2 (id=486): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) read(r1, 0x0, 0x58) ioctl$SG_IO(r1, 0x2285, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x50) 22.812511776s ago: executing program 2 (id=490): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000100)=ANY=[], 0x85, 0x676, &(0x7f0000000180)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf, 0x13, r2, 0x0) gettid() sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x42400) 21.363822685s ago: executing program 2 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 20.802407891s ago: executing program 2 (id=499): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020) 20.501861225s ago: executing program 2 (id=501): capset(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003240)={0x2020}, 0x1b11) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getpid() openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsync(r0) 20.038183203s ago: executing program 2 (id=502): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000380)={{0x3, 0x0, 0x1, 0x3}}) 19.651540704s ago: executing program 3 (id=506): kexec_load(0x0, 0x2, &(0x7f0000000380)=[{0x0}, {0x0, 0x0, 0x0, 0x3e0000000000}], 0x0) 18.398056277s ago: executing program 3 (id=509): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x200000, 0x0, 0x0, 0x0, 0x25}, 0x9c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r2, 0x114, 0x2714, 0x0, 0x20000000) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000100}]}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000074c0)={0x42}, 0x10) sendmsg$tipc(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001d80)="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", 0xd9e}, {0x0, 0x12}], 0x2}, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000040)={0x20, 0x0, 0x10, "67f4e2bad4f1980920f6ce99088752c2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1, "99"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x2f}) 15.79050446s ago: executing program 3 (id=524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) munlock(&(0x7f0000bac000/0x4000)=nil, 0x4000) 13.275497026s ago: executing program 3 (id=532): rseq(&(0x7f0000001200), 0x20, 0x0, 0x0) unshare(0x4040600) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}]}, 0x3, 0x4cf, &(0x7f0000000740)="$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") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 12.60629674s ago: executing program 3 (id=535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000251, 0x0, &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.396820629s ago: executing program 0 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 11.333387704s ago: executing program 3 (id=538): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000380009ffe3000000000000000300000004"], 0x20}}, 0x0) 11.288158638s ago: executing program 0 (id=539): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) close(r0) 11.01570663s ago: executing program 0 (id=541): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1, 0x271, &(0x7f00000005c0)="$eJzs3c9qG1cUB+Az+mNL7UJedFUKHagXXRm7T2BTXCg1FFq0aLuoTW1DsYShBkHbkIlXeYI8QZ4nm5AXyAMkZBcvTCZIGksiGdlWkC2TfN/Gh7n3N/fcaxutZrT7Vfdo//jk8PTe82g0kqhsxmacJbESlbjwIEo9e1l+HQC4487yPF7lfc0Zk7XKDbUEANyw8ed/ni+6FwDgdvz62+8/be3sbP+Spo2I7sNeO4nhz+H41mH8HZ04iPVoxXlEPjKsf/hxZztqad9KrHazXruf7P75pLj/1ouIQX4jWrFSnt9Ih2J1Ny/yWa9dj8+K9Tc7cfDz42jFF+X570b50fpZtJfi228m+l+LVjz9K46jE/vRz47z9zfS9Pv80ev//+h33M8nWa+9PJg3lldv/ZcDAAAAAAAAAAAAAAAAAAAAAMBHay0dmXx/T9ZrV88H42vTxof5ae8Hyiber7Oepulysd44X4sva1Fb4NYBAAAAAAAAAAAAAAAAAADgzjj597+jvU7n4J+5FheP9ZcMxZv5LFH5sOajWrTWSSJmi9eL5PxPrNnv5+rJjemn+n6RjK40J4e+jvFazWER11u9tMjeudKIQXHx13W0l8QV92lcbzszF3nJQVWnppZmuHPzkjlLn893F0lE1EeHefnkeulQWqRn/08BAAAAAAAAAAAAAAAAAABu2fih35LB0wU0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALMP7+/xmKrAhfPrkWRbHgLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAJeBsAAP//VsZmLQ==") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xff9abde846838636) 10.853835763s ago: executing program 0 (id=542): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose\x00nobfrrier,gid=', @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1408}}], 0x1, 0x0) syz_clone(0x21104000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000780)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a6", 0x9e, 0x0, 0x0, 0x0) 9.447308758s ago: executing program 0 (id=543): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2a}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 5.936806945s ago: executing program 0 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 4.475258794s ago: executing program 4 (id=570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) 4.326958836s ago: executing program 4 (id=571): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000980)={0xe, 0x938}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r5, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) close(r4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) 3.381122563s ago: executing program 4 (id=572): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000600)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpjquota_path={'grpjquota', 0x3d, './control'}}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@nomblk_io_submit}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@test_dummy_encryption}], [{@pcr={'pcr', 0x3d, 0x3d}}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x404a, &(0x7f0000000300), 0x1, 0x751, &(0x7f0000002880)="$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") gettid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0xc0680, 0x3e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$binfmt_script(r4, &(0x7f00000001c0), 0x6a) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000300)=""/56, 0x38}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 835.838751ms ago: executing program 4 (id=575): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0xc, r2}, 0x10) 768.849066ms ago: executing program 1 (id=576): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 586.618262ms ago: executing program 1 (id=577): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1803000000000000000000004b64ffec8500000099000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 541.731825ms ago: executing program 1 (id=578): r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4}, 0x1c) 467.956671ms ago: executing program 1 (id=579): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x2, 0x2a8, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 361.04928ms ago: executing program 4 (id=580): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="208588", @ANYBLOB="588c90aadaedde6a2e64f465b00fbdb8b6449c2f317140214a9be29c9e467325a38e1b43cddd210783f3dc0839b6d8f856404dbf1065b435e3"], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 278.278157ms ago: executing program 1 (id=581): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0711090800c8"], 0xa) 125.498999ms ago: executing program 1 (id=582): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) r0 = dup(0xffffffffffffffff) signalfd(r0, &(0x7f0000000a40)={[0x1]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004040), &(0x7f0000004080)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) dup3(r2, 0xffffffffffffffff, 0x80000) getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x5451, 0x0) accept$unix(r4, &(0x7f0000000ac0)=@abs, &(0x7f0000000740)=0x6e) dup3(r7, r3, 0x80000) openat$urandom(0xffffffffffffff9c, &(0x7f00000033c0), 0x606000, 0x0) r8 = semget(0xffffffffffffffff, 0x8, 0x10) shmat(r8, &(0x7f0000ffa000/0x4000)=nil, 0x0) 0s ago: executing program 4 (id=583): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) kernel console output (not intermixed with test programs): 85] betop 0003:11C2:2208.000B: item fetching failed at offset 4/5 [ 151.452305][ T5052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.496767][ T3885] betop 0003:11C2:2208.000B: parse failed [ 151.498196][ T5052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.511609][ T3885] betop: probe of 0003:11C2:2208.000B failed with error -22 [ 151.538085][ T5124] loop3: detected capacity change from 0 to 4096 [ 151.551354][ T5124] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 151.577845][ T5124] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 151.598846][ T5052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.612368][ T5052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.630916][ T5124] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 151.668546][ T5052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.698289][ T1173] usb 1-1: USB disconnect, device number 6 [ 151.755701][ T5124] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 151.773388][ T5124] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 151.801774][ T5124] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 151.810506][ T5124] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 151.834359][ T5124] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 151.853848][ T5124] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 151.890578][ T5124] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 151.905120][ T5052] device hsr_slave_0 entered promiscuous mode [ 151.915046][ T5124] ntfs: volume version 3.1. [ 151.926452][ T5052] device hsr_slave_1 entered promiscuous mode [ 151.936472][ T5052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.964357][ T5052] Cannot create hsr debugfs directory [ 152.146944][ T3642] Bluetooth: hci1: command tx timeout [ 152.356194][ T3968] device hsr_slave_0 left promiscuous mode [ 152.378048][ T3968] device hsr_slave_1 left promiscuous mode [ 152.390942][ T1173] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 152.398833][ T3968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.424142][ T3968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.433764][ T3968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.440918][ T5149] loop3: detected capacity change from 0 to 128 [ 152.441149][ T3968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.455687][ T3968] device bridge_slave_1 left promiscuous mode [ 152.462236][ T3968] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.470866][ T3968] device bridge_slave_0 left promiscuous mode [ 152.487733][ T3968] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.502836][ T5149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 152.512074][ T5149] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 152.545066][ T3968] device veth1_macvtap left promiscuous mode [ 152.551135][ T3968] device veth0_macvtap left promiscuous mode [ 152.561953][ T3968] device veth1_vlan left promiscuous mode [ 152.567804][ T3968] device veth0_vlan left promiscuous mode [ 152.654007][ T4440] EXT4-fs (loop3): unmounting filesystem. [ 152.662585][ T1173] usb 3-1: Using ep0 maxpacket: 32 [ 152.791688][ T1173] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 152.800245][ T1173] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 152.811210][ T1173] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 152.825558][ T1173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.835310][ T1173] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.845012][ T1173] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.859561][ T1173] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 152.868865][ T1173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.881403][ T1173] usb 3-1: config 0 descriptor?? [ 153.021750][ T4759] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.105835][ T3968] team0 (unregistering): Port device team_slave_1 removed [ 153.145546][ T3968] team0 (unregistering): Port device team_slave_0 removed [ 153.174544][ T1173] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 153.193861][ T3968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.243723][ T3968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.261613][ T4759] usb 1-1: Using ep0 maxpacket: 16 [ 153.384209][ T4759] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 153.395637][ T4759] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 153.405077][ T4759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.412021][ T152] usb 3-1: USB disconnect, device number 7 [ 153.427940][ T4759] usb 1-1: config 0 descriptor?? [ 153.429942][ T152] usblp0: removed [ 153.655088][ T3968] bond0 (unregistering): Released all slaves [ 153.999916][ T5153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.034593][ T5153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.120984][ T4759] hid (null): nested delimiters [ 154.126347][ T4759] hid (null): nested delimiters [ 154.147033][ T4759] hid (null): nested delimiters [ 154.155684][ T4759] hid (null): report_id 24797 is invalid [ 154.167252][ T4759] hid (null): bogus close delimiter [ 154.187212][ T4759] hid (null): unknown global tag 0xd [ 154.207304][ T4759] hid (null): report_id 2838798905 is invalid [ 154.221660][ T3642] Bluetooth: hci1: command tx timeout [ 154.228095][ T4759] hid (null): unknown global tag 0xc [ 154.258358][ T4759] hid (null): unknown global tag 0xc [ 154.292839][ T4759] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 154.341522][ T4759] hid-generic 0003:0158:0100.000C: unexpected long global item [ 154.355766][ T4759] hid-generic: probe of 0003:0158:0100.000C failed with error -22 [ 154.387243][ T4759] usb 1-1: USB disconnect, device number 7 [ 155.234643][ T5052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.295562][ T5052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.342383][ T5052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.352789][ T5052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.301879][ T3642] Bluetooth: hci1: command tx timeout [ 156.365937][ T5200] loop3: detected capacity change from 0 to 512 [ 156.371662][ T5052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.395153][ T5200] ext4: Unknown parameter 'obj_type' [ 156.434331][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.452163][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.464250][ T5052] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.481654][ T3682] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 156.506898][ T3783] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.529931][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.552410][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.560934][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.568080][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.586652][ T5200] overlayfs: missing 'lowerdir' [ 156.622121][ T3642] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 156.631212][ T3642] Bluetooth: hci3: Injecting HCI hardware error event [ 156.642422][ T3651] Bluetooth: hci3: hardware error 0x00 [ 156.653831][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.662978][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.672339][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.679462][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.705297][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.715215][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.724536][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.742411][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.752140][ T3682] usb 1-1: Using ep0 maxpacket: 16 [ 156.758455][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.767403][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.777083][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.792652][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.811162][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.835837][ T5052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.857509][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.880268][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.889244][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.911152][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.041697][ T3682] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 157.047658][ T5217] loop3: detected capacity change from 0 to 1024 [ 157.050753][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.050794][ T3682] usb 1-1: Product: syz [ 157.131534][ T3682] usb 1-1: Manufacturer: syz [ 157.136170][ T3682] usb 1-1: SerialNumber: syz [ 157.173624][ T3682] usb 1-1: config 0 descriptor?? [ 157.214806][ T3682] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 157.255619][ T5217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.517561][ T5052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.568702][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.576950][ T4440] EXT4-fs (loop3): unmounting filesystem. [ 157.586977][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.665290][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.694498][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.747889][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.767219][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.794571][ T5052] device veth0_vlan entered promiscuous mode [ 157.816436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.829144][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.852697][ T5187] program syz.0.313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.868311][ T5052] device veth1_vlan entered promiscuous mode [ 157.893709][ T3682] gp8psk: usb out operation failed. [ 157.898970][ T3682] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 157.948294][ T3682] dvb_usb_gp8psk: probe of 1-1:0.0 failed with error -22 [ 157.958219][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.977272][ T3682] usb 1-1: USB disconnect, device number 8 [ 157.986363][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.020336][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.058037][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.077643][ T5052] device veth0_macvtap entered promiscuous mode [ 158.104210][ T5052] device veth1_macvtap entered promiscuous mode [ 158.130214][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.172437][ T3686] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 158.179951][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.179973][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.179990][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.180005][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.180018][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.180034][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.244209][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.254163][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.264659][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.277168][ T5052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.289010][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.297863][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.322614][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.331433][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.363148][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.375680][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.386244][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.396973][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.415225][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.441854][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.452073][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.482257][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.501502][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.532744][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.561712][ T5052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.586704][ T5052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.600106][ T5052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.619368][ T5052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.631834][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.667292][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.681672][ T5052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.717850][ T3686] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 158.731358][ T4555] EXT4-fs (loop4): unmounting filesystem. [ 158.771844][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.790833][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.880820][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.023432][ T3651] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 159.204877][ T3686] usb 4-1: config 0 descriptor?? [ 159.738542][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.779667][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.877193][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.911272][ T3707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.950174][ T3707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.002652][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.003785][ T3686] petalynx 0003:18B1:0037.000D: item fetching failed at offset 2/5 [ 160.092533][ T3686] petalynx 0003:18B1:0037.000D: parse failed [ 160.123329][ T3686] petalynx: probe of 0003:18B1:0037.000D failed with error -22 [ 160.367888][ T3651] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 160.388028][ T3885] usb 4-1: USB disconnect, device number 9 [ 161.250258][ C0] eth0: bad gso: type: 1, size: 1408 [ 161.312506][ T3687] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 161.325758][ T5319] loop1: detected capacity change from 0 to 128 [ 161.338573][ T5319] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 161.357909][ T5319] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 161.404028][ T5052] EXT4-fs (loop1): unmounting filesystem. [ 161.506700][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 161.571641][ T3687] usb 4-1: Using ep0 maxpacket: 32 [ 161.811836][ T3687] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 161.830990][ T3687] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 162.862180][ T3687] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.984239][ T5345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.346'. [ 163.031621][ T3687] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.031662][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.050886][ T3687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.081513][ T3687] usb 4-1: Product: syz [ 163.081885][ T3686] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.085710][ T3687] usb 4-1: Manufacturer: syz [ 163.141516][ T3687] usb 4-1: SerialNumber: syz [ 163.266265][ T5351] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.291677][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 163.331344][ T5352] loop1: detected capacity change from 0 to 1024 [ 163.374860][ T5352] EXT4-fs (loop1): filesystem is read-only [ 163.391225][ T5352] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 163.431971][ T22] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 163.451367][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.481403][ T22] usb 1-1: config 0 descriptor?? [ 163.491742][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.510414][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.541216][ T3686] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 163.553590][ T22] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 163.564823][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.592480][ T3686] usb 5-1: config 0 descriptor?? [ 163.771738][ T3076] bcm5974 1-1:0.0: could not read from device [ 163.819400][ T22] usb 1-1: USB disconnect, device number 9 [ 163.861882][ T3687] usb 4-1: 0:2 : does not exist [ 163.901080][ T3687] usb 4-1: USB disconnect, device number 10 [ 164.174884][ T3783] udevd[3783]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.284338][ T3686] petalynx 0003:18B1:0037.000E: item fetching failed at offset 2/5 [ 164.293636][ T3686] petalynx 0003:18B1:0037.000E: parse failed [ 164.299657][ T3686] petalynx: probe of 0003:18B1:0037.000E failed with error -22 [ 165.011427][ T22] usb 5-1: USB disconnect, device number 7 [ 165.043374][ T5355] loop1: detected capacity change from 0 to 32768 [ 165.102287][ T5365] netlink: 'syz.2.351': attribute type 5 has an invalid length. [ 165.116515][ T5355] XFS (loop1): Mounting V5 Filesystem [ 165.180205][ T5363] loop0: detected capacity change from 0 to 2048 [ 165.247837][ T5355] XFS (loop1): Ending clean mount [ 165.261827][ T5363] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.292132][ T5355] XFS (loop1): Quotacheck needed: Please wait. [ 165.369720][ T5355] XFS (loop1): Quotacheck: Done. [ 165.738908][ T5388] netlink: 2 bytes leftover after parsing attributes in process `syz.3.353'. [ 165.805443][ T5388] loop3: detected capacity change from 0 to 1024 [ 165.900784][ T5388] input: syz0 as /devices/virtual/input/input12 [ 166.387417][ T5052] XFS (loop1): Unmounting Filesystem [ 166.877752][ T4845] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 166.899714][ T5394] loop3: detected capacity change from 0 to 4096 [ 166.944844][ T5394] __ntfs_error: 10 callbacks suppressed [ 166.944862][ T5394] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 166.968362][ T4845] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 167.027799][ T5394] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 167.085662][ T5394] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 167.211052][ T5404] loop1: detected capacity change from 0 to 256 [ 167.519844][ T5404] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 168.667153][ T5413] loop3: detected capacity change from 0 to 256 [ 168.758836][ T5413] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.857072][ T26] audit: type=1326 audit(1722954578.699:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac2d779f9 code=0x7ffc0000 [ 168.912078][ T26] audit: type=1326 audit(1722954578.699:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac2d779f9 code=0x7ffc0000 [ 168.955619][ T26] audit: type=1326 audit(1722954578.759:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ac2d779f9 code=0x7ffc0000 [ 169.088417][ T26] audit: type=1326 audit(1722954578.759:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac2d779f9 code=0x7ffc0000 [ 169.154020][ T26] audit: type=1326 audit(1722954578.759:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac2d779f9 code=0x7ffc0000 [ 169.196560][ T26] audit: type=1326 audit(1722954578.759:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ac2d779f9 code=0x7ffc0000 [ 169.761433][ T4761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.798851][ T26] audit: type=1326 audit(1722954578.829:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac2d779f9 code=0x7ffc0000 [ 170.017399][ T4761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.049629][ T5430] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 170.093754][ T5433] loop1: detected capacity change from 0 to 164 [ 170.188774][ T5433] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 170.199766][ T4761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.296850][ T5433] overlayfs: failed to verify origin (/, ino=1792, err=-1) [ 170.365179][ T5433] overlayfs: failed to verify upper root origin [ 170.385505][ T4761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.453768][ T3642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.463688][ T3642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.482045][ T3655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.494975][ T3655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.503845][ T3655] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.511146][ T3655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.549595][ T5443] loop1: detected capacity change from 0 to 1024 [ 170.575676][ T5443] hfsplus: unable to parse mount options [ 170.772122][ T5447] loop3: detected capacity change from 0 to 64 [ 170.798331][ T5447] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 170.850733][ T5443] loop1: detected capacity change from 0 to 512 [ 171.581446][ T5451] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 171.593834][ T5443] EXT4-fs (loop1): orphan cleanup on readonly fs [ 171.639610][ T5443] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.374: casefold flag without casefold feature [ 171.764959][ T5443] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.374: missing EA_INODE flag [ 171.828050][ T5443] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.374: error while reading EA inode 12 err=-117 [ 171.897467][ T5443] EXT4-fs (loop1): 1 orphan inode deleted [ 171.931591][ T5443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.613475][ T3651] Bluetooth: hci2: command tx timeout [ 173.119236][ T5440] chnl_net:caif_netlink_parms(): no params data found [ 173.140063][ T5052] EXT4-fs (loop1): unmounting filesystem. [ 173.201710][ T3686] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.402033][ T5491] loop1: detected capacity change from 0 to 4096 [ 173.426505][ T5491] __ntfs_error: 19 callbacks suppressed [ 173.426522][ T5491] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 173.441325][ T5491] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 173.454396][ T3686] usb 4-1: Using ep0 maxpacket: 32 [ 173.459651][ T5491] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 173.566886][ T5499] loop1: detected capacity change from 0 to 256 [ 173.573666][ T3686] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 173.597682][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.619319][ T3686] usb 4-1: config 0 descriptor?? [ 173.630034][ T5499] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.641362][ T5440] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.648638][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.664597][ T3686] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 173.675005][ T5440] device bridge_slave_0 entered promiscuous mode [ 173.725994][ T5440] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.738061][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.747625][ T5440] device bridge_slave_1 entered promiscuous mode [ 173.880920][ T5502] loop4: detected capacity change from 0 to 2048 [ 173.963645][ T5440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.021370][ T5440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.103833][ T5502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.376853][ T5513] netlink: 264 bytes leftover after parsing attributes in process `syz.2.384'. [ 174.552370][ T5502] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 174.621782][ T3651] Bluetooth: hci2: command tx timeout [ 174.837832][ T5502] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 22 with error 28 [ 174.990810][ T3076] bcm5974 4-1:0.0: could not read from device [ 174.997993][ T5502] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.997993][ T5502] [ 174.999493][ T5440] team0: Port device team_slave_0 added [ 175.007724][ T5502] EXT4-fs (loop4): Total free blocks count 0 [ 175.007744][ T5502] EXT4-fs (loop4): Free/Dirty block details [ 175.007759][ T5502] EXT4-fs (loop4): free_blocks=2415919120 [ 175.007775][ T5502] EXT4-fs (loop4): dirty_blocks=32 [ 175.007789][ T5502] EXT4-fs (loop4): Block reservation details [ 175.007803][ T5502] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 175.024293][ T5502] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 4 with max blocks 1 with error 28 [ 175.066551][ T3686] usb 4-1: USB disconnect, device number 11 [ 175.315614][ T5440] team0: Port device team_slave_1 added [ 175.700988][ T5526] input: syz0 as /devices/virtual/input/input14 [ 175.782248][ T5525] netlink: 2 bytes leftover after parsing attributes in process `syz.2.385'. [ 176.141577][ T4761] device hsr_slave_0 left promiscuous mode [ 176.193911][ T4761] device hsr_slave_1 left promiscuous mode [ 176.202132][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.252158][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.274813][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.288522][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.321146][ T4761] device bridge_slave_1 left promiscuous mode [ 176.336868][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.370187][ T4761] device bridge_slave_0 left promiscuous mode [ 176.389640][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.439226][ T4761] device veth1_macvtap left promiscuous mode [ 176.453176][ T4761] device veth0_macvtap left promiscuous mode [ 176.460855][ T4761] device veth1_vlan left promiscuous mode [ 176.476940][ T4761] device veth0_vlan left promiscuous mode [ 176.661275][ T5546] loop3: detected capacity change from 0 to 1024 [ 176.700146][ T5546] hfsplus: unable to parse mount options [ 176.712107][ T3651] Bluetooth: hci2: command tx timeout [ 176.783868][ T5466] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.831600][ T5546] loop3: detected capacity change from 0 to 512 [ 176.872459][ T5546] EXT4-fs (loop3): orphan cleanup on readonly fs [ 176.885814][ T5546] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.391: casefold flag without casefold feature [ 176.926018][ T5546] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.391: missing EA_INODE flag [ 176.947250][ T5546] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.391: error while reading EA inode 12 err=-117 [ 176.965932][ T5546] EXT4-fs (loop3): 1 orphan inode deleted [ 176.968312][ T5555] loop1: detected capacity change from 0 to 2048 [ 176.979400][ T5546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 177.491216][ T4761] team0 (unregistering): Port device team_slave_1 removed [ 177.524608][ T4761] team0 (unregistering): Port device team_slave_0 removed [ 177.557645][ T4761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.592966][ T4761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.929347][ T4761] bond0 (unregistering): Released all slaves [ 178.008554][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.018499][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.045485][ T5440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.105069][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.119137][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.127748][ T5565] MTD: Couldn't look up 'memory.events': -15 [ 178.147176][ T5440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.373294][ T5440] device hsr_slave_0 entered promiscuous mode [ 178.398892][ T5440] device hsr_slave_1 entered promiscuous mode [ 178.411114][ T5440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.419280][ T5440] Cannot create hsr debugfs directory [ 178.591761][ T3682] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 178.674463][ T3655] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3 [ 178.781668][ T3655] Bluetooth: hci2: command tx timeout [ 178.951854][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.001780][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.041602][ T3682] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 179.082664][ T5597] netlink: 'syz.4.404': attribute type 29 has an invalid length. [ 179.097455][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.122528][ T3682] usb 2-1: config 0 descriptor?? [ 179.149126][ T5597] netlink: 'syz.4.404': attribute type 29 has an invalid length. [ 179.161803][ T5599] netlink: 'syz.4.404': attribute type 29 has an invalid length. [ 179.199347][ T5601] netlink: 'syz.4.404': attribute type 29 has an invalid length. [ 179.321566][ T3684] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.375260][ T5605] loop4: detected capacity change from 0 to 256 [ 179.445144][ T5605] FAT-fs (loop4): Directory bread(block 64) failed [ 179.453740][ T5605] FAT-fs (loop4): Directory bread(block 65) failed [ 179.460336][ T5605] FAT-fs (loop4): Directory bread(block 66) failed [ 179.474223][ T5605] FAT-fs (loop4): Directory bread(block 67) failed [ 179.480814][ T5605] FAT-fs (loop4): Directory bread(block 68) failed [ 179.492819][ T5605] FAT-fs (loop4): Directory bread(block 69) failed [ 179.499724][ T5605] FAT-fs (loop4): Directory bread(block 70) failed [ 179.528583][ T5605] FAT-fs (loop4): Directory bread(block 71) failed [ 179.550488][ T5605] FAT-fs (loop4): Directory bread(block 72) failed [ 179.561564][ T3684] usb 3-1: Using ep0 maxpacket: 32 [ 179.567987][ T5605] FAT-fs (loop4): Directory bread(block 73) failed [ 179.636326][ T5440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.687911][ T3684] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 179.721691][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.743780][ T3684] usb 3-1: config 0 descriptor?? [ 179.754348][ T5440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.800991][ T3684] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 179.814929][ T5440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.833690][ T3682] petalynx 0003:18B1:0037.000F: item fetching failed at offset 2/5 [ 179.844574][ T3682] petalynx 0003:18B1:0037.000F: parse failed [ 179.850618][ T3682] petalynx: probe of 0003:18B1:0037.000F failed with error -22 [ 179.869061][ T5440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.107238][ T5440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.149535][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.167082][ T152] usb 2-1: USB disconnect, device number 5 [ 180.173328][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.196054][ T5440] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.239995][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.250084][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.265784][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.272946][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.294769][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.315931][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.328205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.340334][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.347504][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.364355][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.377884][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.411989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.429244][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.438741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.454756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.467311][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.476122][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.489492][ T5440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.506220][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.518613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.535612][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.550990][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.702143][ T3655] Bluetooth: hci4: command 0x0406 tx timeout [ 180.724342][ T3076] bcm5974 3-1:0.0: could not read from device [ 180.781736][ T3684] usb 3-1: USB disconnect, device number 8 [ 180.972104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.980211][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.028541][ T5440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.117029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.133210][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.183832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.202972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.228082][ T5440] device veth0_vlan entered promiscuous mode [ 181.243590][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.258376][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.282496][ T5440] device veth1_vlan entered promiscuous mode [ 181.331425][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.340637][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.366543][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.395535][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.433060][ T5440] device veth0_macvtap entered promiscuous mode [ 181.464651][ T5440] device veth1_macvtap entered promiscuous mode [ 181.471555][ T3684] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.499676][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.527910][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.549190][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.581556][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.598272][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.621480][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.641581][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.664540][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.688609][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.721628][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.721707][ T3684] usb 5-1: Using ep0 maxpacket: 16 [ 181.776781][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.834366][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.849542][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.859164][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.875085][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.885924][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.906055][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.925180][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.938787][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.955316][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.968471][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.976026][ T5643] loop1: detected capacity change from 0 to 4096 [ 181.982573][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.001178][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.017766][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.028846][ T3684] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 182.038235][ T3684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.046968][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.057137][ T3684] usb 5-1: Product: syz [ 182.061304][ T3684] usb 5-1: Manufacturer: syz [ 182.066232][ T3684] usb 5-1: SerialNumber: syz [ 182.072272][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.098890][ T3684] usb 5-1: config 0 descriptor?? [ 182.108247][ T5440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.150781][ T5440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.189300][ T3684] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 182.211898][ T5440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.220617][ T5440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.266200][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.283223][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.418181][ T3767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.447481][ T3767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.488649][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.511900][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 182.564220][ T5460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.595946][ T5460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.640222][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.715359][ T4440] EXT4-fs (loop3): unmounting filesystem. [ 182.775071][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 182.823260][ T5659] loop0: detected capacity change from 0 to 256 [ 182.823879][ T5620] program syz.4.407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.921598][ T3684] gp8psk: usb out operation failed. [ 182.921796][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 182.926852][ T3684] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 182.926897][ T3684] dvb_usb_gp8psk: probe of 5-1:0.0 failed with error -22 [ 182.991316][ T7] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 183.010910][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.039354][ T7] usb 3-1: config 0 descriptor?? [ 183.068202][ T3684] usb 5-1: USB disconnect, device number 8 [ 183.093197][ C0] eth0: bad gso: type: 1, size: 1408 [ 183.132313][ T5440] FAT-fs (loop0): error, invalid access to FAT (entry 0x000004ff) [ 183.227685][ T5440] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 183.393166][ T5677] vivid-002: disconnect [ 183.439226][ T5673] vivid-002: reconnect [ 183.609032][ T5646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.642014][ T5646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.672940][ T7] hid (null): nested delimiters [ 183.678166][ T7] hid (null): nested delimiters [ 183.710789][ T7] hid (null): nested delimiters [ 183.716110][ T7] hid (null): report_id 24797 is invalid [ 183.732277][ T7] hid (null): bogus close delimiter [ 183.744737][ T7] hid (null): unknown global tag 0xd [ 183.750803][ T5687] netlink: 3316 bytes leftover after parsing attributes in process `syz.3.419'. [ 183.761169][ T7] hid (null): report_id 2838798905 is invalid [ 183.768225][ T5687] netlink: 1659 bytes leftover after parsing attributes in process `syz.3.419'. [ 183.778242][ T7] hid (null): unknown global tag 0xc [ 183.784650][ T7] hid (null): unknown global tag 0xc [ 183.793596][ T7] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1 [ 183.811351][ T7] hid-generic 0003:0158:0100.0010: unexpected long global item [ 183.824098][ T7] hid-generic: probe of 0003:0158:0100.0010 failed with error -22 [ 183.956612][ T3686] usb 3-1: USB disconnect, device number 9 [ 184.030219][ T5693] loop4: detected capacity change from 0 to 512 [ 184.037230][ T5693] ext4: Unknown parameter 'permit_directio' [ 185.031520][ T3686] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 185.040153][ T3684] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.294804][ T3686] usb 4-1: Using ep0 maxpacket: 16 [ 185.413657][ T3684] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 185.431970][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.479683][ T3684] usb 2-1: config 0 descriptor?? [ 185.571797][ T3686] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=8a.ce [ 185.591907][ T3686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.654888][ T3686] usb 4-1: Product: syz [ 185.659078][ T3686] usb 4-1: Manufacturer: syz [ 185.692975][ T3686] usb 4-1: SerialNumber: syz [ 185.719854][ T3686] usb 4-1: config 0 descriptor?? [ 185.991803][ T3684] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 186.011720][ T3686] cdc_subset: probe of 4-1:0.0 failed with error -71 [ 186.034083][ T3686] usb 4-1: USB disconnect, device number 12 [ 186.120873][ C0] eth0: bad gso: type: 1, size: 1408 [ 186.402462][ T26] audit: type=1326 audit(1722954596.249:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260ed779f9 code=0x7ffc0000 [ 186.491593][ T26] audit: type=1326 audit(1722954596.249:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f260ed779f9 code=0x7ffc0000 [ 186.631522][ T152] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 186.651928][ T26] audit: type=1326 audit(1722954596.249:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260ed779f9 code=0x7ffc0000 [ 186.675297][ T3642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.685442][ T3642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.694848][ T3642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.706599][ T3642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.714062][ T26] audit: type=1326 audit(1722954596.249:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f260ed779f9 code=0x7ffc0000 [ 186.736892][ T26] audit: type=1326 audit(1722954596.249:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260ed779f9 code=0x7ffc0000 [ 186.759257][ T3642] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 186.768446][ T26] audit: type=1326 audit(1722954596.249:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f260ed775fb code=0x7ffc0000 [ 186.790837][ T3642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.799942][ T26] audit: type=1326 audit(1722954596.249:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f260ed775fb code=0x7ffc0000 [ 186.826564][ T26] audit: type=1326 audit(1722954596.279:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f260eda99e5 code=0x7ffc0000 [ 186.850074][ T26] audit: type=1326 audit(1722954596.479:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260ed779f9 code=0x7ffc0000 [ 186.874828][ T26] audit: type=1326 audit(1722954596.489:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f260ed779f9 code=0x7ffc0000 [ 186.921537][ T152] usb 3-1: Using ep0 maxpacket: 16 [ 187.201750][ T152] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 187.220196][ T152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.238652][ T152] usb 3-1: Product: syz [ 187.242927][ T152] usb 3-1: Manufacturer: syz [ 187.247633][ T152] usb 3-1: SerialNumber: syz [ 187.262970][ T152] usb 3-1: config 0 descriptor?? [ 187.303714][ T152] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 187.331578][ T3686] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 187.357568][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 187.550114][ T5770] loop3: detected capacity change from 0 to 32768 [ 187.550495][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.564287][ T5770] XFS: ikeep mount option is deprecated. [ 187.585502][ T3686] usb 5-1: Using ep0 maxpacket: 16 [ 187.611676][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.630556][ T5767] device bridge_slave_0 entered promiscuous mode [ 187.651903][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.659067][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.666377][ T5770] XFS (loop3): Mounting V5 Filesystem [ 187.674171][ T5767] device bridge_slave_1 entered promiscuous mode [ 187.711758][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 187.734346][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.752144][ T3686] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 187.769687][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.785557][ T3687] usb 2-1: USB disconnect, device number 6 [ 187.821448][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.872177][ T3686] usb 5-1: config 0 descriptor?? [ 187.897171][ T5770] XFS (loop3): Ending clean mount [ 187.909293][ T5770] XFS (loop3): Quotacheck needed: Please wait. [ 187.947824][ T5752] program syz.2.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.993932][ T5767] team0: Port device team_slave_0 added [ 188.002626][ T152] gp8psk: usb out operation failed. [ 188.004366][ T5770] XFS (loop3): Quotacheck: Done. [ 188.016306][ T152] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 188.045082][ T152] dvb_usb_gp8psk: probe of 3-1:0.0 failed with error -22 [ 188.046293][ T5767] team0: Port device team_slave_1 added [ 188.070940][ T152] usb 3-1: USB disconnect, device number 10 [ 188.134703][ T4761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.140007][ T4440] XFS (loop3): Unmounting Filesystem [ 188.301711][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.308786][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.336832][ T3687] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 188.352350][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.425267][ T4761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.446679][ T5806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.475621][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.483695][ T5806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.501856][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.532500][ T3686] hid (null): nested delimiters [ 188.537393][ T3686] hid (null): nested delimiters [ 188.561206][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.561340][ T3686] hid (null): nested delimiters [ 188.587129][ T3686] hid (null): report_id 24797 is invalid [ 188.597403][ T3686] hid (null): bogus close delimiter [ 188.617492][ T3686] hid (null): unknown global tag 0xd [ 188.618373][ T3687] usb 2-1: Using ep0 maxpacket: 32 [ 188.634205][ T3686] hid (null): report_id 2838798905 is invalid [ 188.642807][ T4761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.672824][ T3686] hid (null): unknown global tag 0xc [ 188.678492][ T3686] hid (null): unknown global tag 0xc [ 188.696286][ T3686] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 188.715982][ T3686] hid-generic 0003:0158:0100.0011: unexpected long global item [ 188.728796][ T3686] hid-generic: probe of 0003:0158:0100.0011 failed with error -22 [ 188.765020][ T3686] usb 5-1: USB disconnect, device number 9 [ 188.772071][ T3687] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 188.780438][ T3687] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 188.821234][ T3687] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 188.865016][ T3642] Bluetooth: hci2: command tx timeout [ 188.871535][ T3687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.894256][ T3687] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 188.905306][ T3687] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.934858][ T3687] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 188.948211][ T3687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.963291][ T3687] usb 2-1: config 0 descriptor?? [ 188.997266][ T4761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.015266][ T5767] device hsr_slave_0 entered promiscuous mode [ 189.034330][ T5767] device hsr_slave_1 entered promiscuous mode [ 189.051313][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.061545][ T3684] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.070372][ T5767] Cannot create hsr debugfs directory [ 189.226069][ T3687] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 189.237722][ T3682] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 189.303238][ T3684] usb 4-1: Using ep0 maxpacket: 32 [ 189.421861][ T3684] usb 4-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 189.488446][ T3687] usb 2-1: USB disconnect, device number 7 [ 189.497226][ T3687] usblp0: removed [ 189.602134][ T3684] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 189.612105][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.633488][ T3684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.649531][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.659444][ T3684] usb 4-1: Product: syz [ 189.669623][ T3682] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 189.687266][ T3684] usb 4-1: Manufacturer: syz [ 189.692127][ T3684] usb 4-1: SerialNumber: syz [ 189.698485][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.732519][ T3684] usb 4-1: config 0 descriptor?? [ 189.741194][ T3682] usb 3-1: config 0 descriptor?? [ 189.772678][ T3684] usb 4-1: bad CDC descriptors [ 189.778691][ T3684] usb 4-1: unsupported MDLM descriptors [ 189.975546][ T4289] usb 4-1: USB disconnect, device number 13 [ 190.031689][ T152] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 190.303925][ T3682] petalynx 0003:18B1:0037.0012: item fetching failed at offset 2/5 [ 190.332202][ T3682] petalynx 0003:18B1:0037.0012: parse failed [ 190.341778][ T3682] petalynx: probe of 0003:18B1:0037.0012 failed with error -22 [ 190.401830][ T152] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 190.413004][ T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.424137][ T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.449747][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.471641][ T152] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 190.591693][ T152] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 190.602525][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.622675][ T3885] usb 3-1: USB disconnect, device number 11 [ 190.634029][ T152] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 190.677122][ T152] usb 5-1: Manufacturer: syz [ 190.692743][ T152] usb 5-1: config 0 descriptor?? [ 190.717286][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.768336][ T5855] loop1: detected capacity change from 0 to 32768 [ 190.817882][ T5868] cannot load conntrack support for proto=3 [ 190.896007][ T5855] loop1: detected capacity change from 32768 to 64 [ 190.909891][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.925864][ T5870] syz.1.445: attempt to access beyond end of device [ 190.925864][ T5870] loop1: rw=0, sector=288, nr_sectors = 8 limit=64 [ 190.941747][ T3651] Bluetooth: hci2: command tx timeout [ 190.966197][ T5870] metapage_read_end_io: I/O error [ 190.971417][ T5870] read_mapping_page failed! [ 190.980251][ T5870] diRead: read_metapage failed [ 190.988542][ T5870] jfs_lookup: iget failed on inum 32 [ 191.030105][ T3687] kernel write not supported for file /input/mice (pid: 3687 comm: kworker/0:4) [ 191.086145][ T5052] syz-executor: attempt to access beyond end of device [ 191.086145][ T5052] loop1: rw=2049, sector=30744, nr_sectors = 8 limit=64 [ 191.108676][ T5052] lbmIODone: I/O error in JFS log [ 191.112698][ T5874] loop3: detected capacity change from 0 to 512 [ 191.119686][ T134] jfsCommit: attempt to access beyond end of device [ 191.119686][ T134] loop1: rw=0, sector=160, nr_sectors = 8 limit=64 [ 191.142164][ T5052] syz-executor: attempt to access beyond end of device [ 191.142164][ T5052] loop1: rw=0, sector=288, nr_sectors = 8 limit=64 [ 191.164758][ T134] metapage_read_end_io: I/O error [ 191.169816][ T134] read_mapping_page failed! [ 191.176432][ T5874] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 191.185708][ T5052] metapage_read_end_io: I/O error [ 191.190754][ T5052] read_mapping_page failed! [ 191.197469][ T152] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 191.204251][ T5874] EXT4-fs (loop3): 1 truncate cleaned up [ 191.208343][ T152] appleir 0003:05AC:8243.0013: No inputs registered, leaving [ 191.229748][ T152] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 191.231523][ T5874] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.243682][ T5052] diRead: read_metapage failed [ 191.254600][ T5052] jfs_lookup: iget failed on inum 32 [ 191.260171][ T5052] syz-executor: attempt to access beyond end of device [ 191.260171][ T5052] loop1: rw=0, sector=288, nr_sectors = 8 limit=64 [ 191.276464][ T5052] metapage_read_end_io: I/O error [ 191.281586][ T5052] read_mapping_page failed! [ 191.286108][ T5052] diRead: read_metapage failed [ 191.290906][ T5052] jfs_lookup: iget failed on inum 32 [ 191.328212][ T4761] device hsr_slave_0 left promiscuous mode [ 191.368205][ T4761] device hsr_slave_1 left promiscuous mode [ 191.388074][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.414787][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.430387][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.441070][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.452721][ T4761] device bridge_slave_1 left promiscuous mode [ 191.460546][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.501203][ T3682] usb 5-1: USB disconnect, device number 10 [ 192.516891][ T5874] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 4: comm syz.3.450: lblock 0 mapped to illegal pblock 4 (length 1) [ 192.556437][ T4761] device bridge_slave_0 left promiscuous mode [ 192.571646][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.586495][ T4440] EXT4-fs (loop3): unmounting filesystem. [ 192.644038][ T4761] device veth1_macvtap left promiscuous mode [ 192.650303][ T4761] device veth0_macvtap left promiscuous mode [ 192.656786][ T4761] device veth1_vlan left promiscuous mode [ 192.663186][ T4761] device veth0_vlan left promiscuous mode [ 193.024504][ T3651] Bluetooth: hci2: command tx timeout [ 193.090998][ T4761] team0 (unregistering): Port device team_slave_1 removed [ 193.177492][ T4761] team0 (unregistering): Port device team_slave_0 removed [ 193.222534][ T4761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.259046][ T4761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.461643][ T3682] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 193.619254][ T4761] bond0 (unregistering): Released all slaves [ 193.711574][ T3682] usb 5-1: Using ep0 maxpacket: 32 [ 193.732116][ T5881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'. [ 193.758342][ T5884] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 193.841808][ T3682] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 193.860661][ T3682] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 193.871851][ T3682] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 193.881136][ T3682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.894814][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.916048][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.928901][ T11] kworker/u4:1: attempt to access beyond end of device [ 193.928901][ T11] loop1: rw=1, sector=264, nr_sectors = 8 limit=64 [ 193.931226][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.963923][ T3682] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.964132][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.974029][ T11] metapage_write_end_io: I/O error [ 193.987699][ T3682] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.994084][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.004211][ T11] kworker/u4:1: attempt to access beyond end of device [ 194.004211][ T11] loop1: rw=2049, sector=30752, nr_sectors = 8 limit=64 [ 194.007604][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.041146][ T3682] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 194.052101][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.060832][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.068915][ T11] lbmIODone: I/O error in JFS log [ 194.071090][ T134] jfsCommit: attempt to access beyond end of device [ 194.071090][ T134] loop1: rw=0, sector=160, nr_sectors = 8 limit=64 [ 194.077741][ T4759] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.095569][ T4759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.097808][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.121514][ T134] metapage_read_end_io: I/O error [ 194.126575][ T134] read_mapping_page failed! [ 194.128655][ T3682] usb 5-1: config 0 descriptor?? [ 194.131350][ T134] jfsCommit: attempt to access beyond end of device [ 194.131350][ T134] loop1: rw=0, sector=160, nr_sectors = 8 limit=64 [ 194.152931][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.162152][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.170677][ T4759] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.177845][ T4759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.186536][ T134] metapage_read_end_io: I/O error [ 194.191997][ T134] read_mapping_page failed! [ 194.197007][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.206294][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.225805][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.234201][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.244199][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.253560][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.263672][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.272559][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.281086][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.295394][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.319167][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.328832][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.338091][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.346707][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.393377][ T5052] syz-executor: attempt to access beyond end of device [ 194.393377][ T5052] loop1: rw=1, sector=264, nr_sectors = 8 limit=64 [ 194.397052][ T3682] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 194.417846][ T5052] metapage_write_end_io: I/O error [ 194.429968][ T5052] metapage_write_end_io: I/O error [ 194.448398][ T5052] metapage_write_end_io: I/O error [ 194.467082][ T5052] metapage_write_end_io: I/O error [ 194.480590][ T5052] metapage_write_end_io: I/O error [ 194.506199][ T5052] metapage_write_end_io: I/O error [ 194.513027][ T5052] metapage_write_end_io: I/O error [ 194.518294][ T5052] metapage_write_end_io: I/O error [ 194.525093][ T5052] lbmIODone: I/O error in JFS log [ 194.530715][ T5052] lbmIODone: I/O error in JFS log [ 194.571839][ T5052] lbmIODone: I/O error in JFS log [ 194.577351][ T5052] lmLogShutdown: exit(-5) [ 194.612200][ T5052] jfs_umount failed with return code -5 [ 194.678078][ T3682] usb 5-1: USB disconnect, device number 11 [ 194.703966][ T3682] usblp0: removed [ 194.774303][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.782541][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.792539][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.828977][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.838429][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.888770][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.905755][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.919675][ T5767] device veth0_vlan entered promiscuous mode [ 194.930600][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.945765][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.966280][ T5767] device veth1_vlan entered promiscuous mode [ 195.037758][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.046499][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.054838][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.063610][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.074207][ T5767] device veth0_macvtap entered promiscuous mode [ 195.092215][ T5767] device veth1_macvtap entered promiscuous mode [ 195.101970][ T3651] Bluetooth: hci2: command tx timeout [ 195.132776][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.144077][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.154234][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.165403][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.175520][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.187003][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.197195][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.208580][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.219374][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.230159][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.246774][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.272174][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.282747][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.294132][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.304750][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.315660][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.327163][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.341240][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.366389][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.383186][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.398346][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.413218][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.423726][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.437592][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.447952][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.461149][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.470132][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.485159][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.499501][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.518087][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.527087][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.536007][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.616775][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.641545][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.658480][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.673813][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.682953][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.697778][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.800095][ T5899] netlink: 2272 bytes leftover after parsing attributes in process `syz.0.431'. [ 196.054381][ T5907] loop0: detected capacity change from 0 to 1024 [ 196.266586][ T5907] hfsplus: unable to parse mount options [ 196.480511][ T5910] loop4: detected capacity change from 0 to 1024 [ 197.217618][ T5907] loop0: detected capacity change from 0 to 512 [ 197.335312][ T5907] EXT4-fs (loop0): orphan cleanup on readonly fs [ 197.408374][ T5907] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.457: casefold flag without casefold feature [ 197.430004][ T5913] loop3: detected capacity change from 0 to 2048 [ 197.467779][ T5907] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.457: missing EA_INODE flag [ 197.581115][ T5907] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.457: error while reading EA inode 12 err=-117 [ 197.664228][ T5907] EXT4-fs (loop0): 1 orphan inode deleted [ 197.702150][ T5907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 198.435567][ T3642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.456884][ T3642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.490968][ T3642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.512446][ T3642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.576539][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.593980][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.616322][ T5767] EXT4-fs (loop0): unmounting filesystem. [ 199.894640][ T4761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.039698][ T4761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.320571][ T4761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.418065][ T4761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.451750][ T22] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 200.493854][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 200.593469][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.601323][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.609468][ T5923] device bridge_slave_0 entered promiscuous mode [ 200.623599][ T3651] Bluetooth: hci1: command tx timeout [ 200.663594][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.674476][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.689663][ T5923] device bridge_slave_1 entered promiscuous mode [ 200.701715][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 200.724004][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.736517][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.805942][ T5923] team0: Port device team_slave_0 added [ 200.816304][ T5923] team0: Port device team_slave_1 added [ 200.821764][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 200.842501][ T22] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 200.852287][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.862978][ T22] usb 4-1: config 0 descriptor?? [ 200.905632][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.912969][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.949169][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.990978][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.000866][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.035762][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.084244][ T5962] sched: RT throttling activated [ 204.155230][ T3651] Bluetooth: hci1: command tx timeout [ 204.287920][ T5923] device hsr_slave_0 entered promiscuous mode [ 204.297516][ T5923] device hsr_slave_1 entered promiscuous mode [ 204.321752][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 204.327761][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 204.346007][ T22] usb 4-1: USB disconnect, device number 14 [ 204.398850][ T5923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.401690][ T3649] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.408839][ T5923] Cannot create hsr debugfs directory [ 204.708897][ T3649] usb 1-1: Using ep0 maxpacket: 32 [ 204.749648][ T5983] loop4: detected capacity change from 0 to 8192 [ 204.768997][ T5983] FAT-fs (loop4): Unrecognized mount option "GPL" or missing value [ 204.790304][ T5979] device syzkaller1 entered promiscuous mode [ 204.829382][ T5466] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.841947][ T3649] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 204.861006][ T3649] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 204.896409][ T3649] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 204.928770][ T3649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.948271][ T3649] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 204.971143][ T3649] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.992242][ T3649] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 205.001310][ T3649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.051847][ T3649] usb 1-1: config 0 descriptor?? [ 205.177563][ T3649] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 205.254135][ T3649] usb 1-1: USB disconnect, device number 10 [ 205.305715][ T3649] usblp0: removed [ 206.235221][ T3651] Bluetooth: hci1: command tx timeout [ 206.821046][ T4761] device hsr_slave_0 left promiscuous mode [ 206.852136][ T4761] device hsr_slave_1 left promiscuous mode [ 206.862719][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.880487][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.899469][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.917280][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.935807][ T4761] device bridge_slave_1 left promiscuous mode [ 206.945400][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.967153][ T4761] device bridge_slave_0 left promiscuous mode [ 206.981720][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.051395][ T4761] device veth1_macvtap left promiscuous mode [ 207.061766][ T4761] device veth0_macvtap left promiscuous mode [ 207.071933][ T4761] device veth1_vlan left promiscuous mode [ 207.094766][ T4761] device veth0_vlan left promiscuous mode [ 207.136849][ T6020] loop3: detected capacity change from 0 to 32768 [ 207.191295][ T6020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.484 (6020) [ 207.260608][ T6020] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.299566][ T6020] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 207.321860][ T6020] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 207.340056][ T6020] BTRFS info (device loop3): use zstd compression, level 3 [ 207.364901][ T6020] BTRFS info (device loop3): using free space tree [ 207.429014][ T6020] BTRFS info (device loop3): enabling ssd optimizations [ 207.869813][ T4761] team0 (unregistering): Port device team_slave_1 removed [ 207.874215][ T4440] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.940197][ T4761] team0 (unregistering): Port device team_slave_0 removed [ 208.079895][ T4761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.129169][ T4761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.311774][ T3651] Bluetooth: hci1: command tx timeout [ 208.505196][ T4761] bond0 (unregistering): Released all slaves [ 208.780646][ T5923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.799419][ T5923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.814920][ T5923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.868112][ T5923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.022772][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.048100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.056783][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.085289][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.097115][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.106972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.123972][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.131088][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.159834][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.173761][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.187445][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.198513][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.205662][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.222608][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.233218][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.265429][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.275689][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.284880][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.294192][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.311431][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.320220][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.336466][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.356377][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.370864][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.390574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.647663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.663253][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.676240][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.703637][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.718389][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.755579][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.768080][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.779997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.792454][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.807443][ T5923] device veth0_vlan entered promiscuous mode [ 209.833990][ T5923] device veth1_vlan entered promiscuous mode [ 209.877293][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.892783][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.900912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.915998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.929971][ T5923] device veth0_macvtap entered promiscuous mode [ 209.955983][ T5923] device veth1_macvtap entered promiscuous mode [ 209.979662][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.000530][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.010842][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.028147][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.038305][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.058888][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.070438][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.087342][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.099155][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.115063][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.128999][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.146200][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.165673][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.174628][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.183858][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.195107][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.206934][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.220791][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.239152][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.249553][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.269516][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.279952][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.297191][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.308345][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.320405][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.332321][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.343393][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.353060][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.364644][ T5923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.375285][ T5923] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.384552][ T5923] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.393956][ T5923] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.476356][ T3767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.501804][ T3767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.513000][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.527301][ T4711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.544311][ T4711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.571530][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.845834][ T6098] loop1: detected capacity change from 0 to 256 [ 211.900397][ T5466] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.916663][ T3682] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.261546][ T3682] usb 2-1: Using ep0 maxpacket: 16 [ 213.381850][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 213.450354][ T3682] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 213.549914][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.194288][ T3682] usb 2-1: config 0 descriptor?? [ 214.504342][ T6165] loop0: detected capacity change from 0 to 164 [ 214.765267][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 214.769329][ T6165] device syzkaller0 entered promiscuous mode [ 214.776431][ T6117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.846294][ T6117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.912562][ T3682] hid (null): nested delimiters [ 214.917467][ T3682] hid (null): nested delimiters [ 214.951531][ T3682] hid (null): nested delimiters [ 214.956482][ T3682] hid (null): report_id 24797 is invalid [ 214.987591][ T6176] loop4: detected capacity change from 0 to 4096 [ 214.991731][ T3682] hid (null): bogus close delimiter [ 214.999174][ T3682] hid (null): unknown global tag 0xd [ 215.005629][ T6176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 215.052581][ T3682] hid (null): report_id 2838798905 is invalid [ 215.061753][ T6176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 215.070596][ T6176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 215.078958][ T3682] hid (null): unknown global tag 0xc [ 215.092322][ T6125] loop3: detected capacity change from 0 to 40427 [ 215.108207][ T3682] hid (null): unknown global tag 0xc [ 215.126111][ T3682] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 215.142345][ T6125] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 215.150206][ T3682] hid-generic 0003:0158:0100.0014: unexpected long global item [ 215.158715][ T6176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 215.171743][ T6125] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 215.190929][ T3682] hid-generic: probe of 0003:0158:0100.0014 failed with error -22 [ 215.209130][ T6176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 215.251097][ T3682] usb 2-1: USB disconnect, device number 8 [ 215.253833][ T6176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 215.273038][ T6176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 215.281171][ T6125] F2FS-fs (loop3): Found nat_bits in checkpoint [ 215.294595][ T6176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 215.348079][ T6176] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 215.380515][ T6176] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 215.402390][ T6125] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 215.409692][ T6125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 215.761410][ T6185] loop4: detected capacity change from 0 to 256 [ 215.847418][ T5466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.644331][ T6194] loop1: detected capacity change from 0 to 256 [ 216.716177][ T6194] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 217.010732][ T3651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.021505][ T3651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.066754][ T3651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.083767][ T3651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.092036][ T3651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.106702][ T3651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.317245][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 217.317269][ T26] audit: type=1326 audit(1722954627.159:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f31779f9 code=0x7fc00000 [ 217.348487][ T26] audit: type=1326 audit(1722954627.169:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd7f31779f9 code=0x7fc00000 [ 217.753459][ T152] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 218.003887][ T152] usb 4-1: Using ep0 maxpacket: 16 [ 218.033583][ T26] audit: type=1326 audit(1722954627.869:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f31779f9 code=0x7fc00000 [ 218.058295][ T26] audit: type=1326 audit(1722954627.869:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd7f31779f9 code=0x7fc00000 [ 218.088208][ T26] audit: type=1326 audit(1722954627.869:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f31779f9 code=0x7fc00000 [ 218.122868][ T26] audit: type=1326 audit(1722954627.869:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f31779f9 code=0x7fc00000 [ 218.146264][ T26] audit: type=1326 audit(1722954627.869:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f31779f9 code=0x7fc00000 [ 218.169576][ T26] audit: type=1326 audit(1722954627.869:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f31779f9 code=0x7fc00000 [ 218.192345][ T26] audit: type=1326 audit(1722954627.869:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f31779f9 code=0x7fc00000 [ 218.214803][ T26] audit: type=1326 audit(1722954627.869:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f31779f9 code=0x7fc00000 [ 218.317492][ T152] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 218.326640][ T152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.337876][ T152] usb 4-1: Product: syz [ 218.348214][ T152] usb 4-1: Manufacturer: syz [ 218.353311][ T152] usb 4-1: SerialNumber: syz [ 218.366948][ T152] usb 4-1: config 0 descriptor?? [ 218.413629][ T152] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 218.647568][ T6214] tmpfs: Bad value for 'mpol' [ 218.829842][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 219.046735][ T6202] program syz.3.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.121555][ T152] gp8psk: usb out operation failed. [ 219.126833][ T152] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 219.159284][ T152] dvb_usb_gp8psk: probe of 4-1:0.0 failed with error -22 [ 219.182041][ T3655] Bluetooth: hci5: command tx timeout [ 219.191145][ T152] usb 4-1: USB disconnect, device number 15 [ 219.321713][ T6222] loop4: detected capacity change from 0 to 764 [ 219.453624][ T6195] chnl_net:caif_netlink_parms(): no params data found [ 219.493117][ T4555] Symlink component flag not implemented [ 219.596821][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.611609][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.619801][ T6195] device bridge_slave_0 entered promiscuous mode [ 219.629316][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.636884][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.645223][ T6195] device bridge_slave_1 entered promiscuous mode [ 219.661362][ T152] kernel write not supported for file bpf-prog (pid: 152 comm: kworker/1:2) [ 219.724379][ T6195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.786939][ T6236] loop0: detected capacity change from 0 to 256 [ 219.815169][ T6195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.825949][ T6236] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 219.847595][ T6240] netlink: 44 bytes leftover after parsing attributes in process `syz.4.523'. [ 219.949447][ T4761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.035908][ T6245] loop1: detected capacity change from 0 to 256 [ 220.114152][ T5466] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 220.148042][ T4761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.444912][ T6195] team0: Port device team_slave_0 added [ 221.664496][ T3655] Bluetooth: hci5: command tx timeout [ 222.012983][ T4761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.050257][ T6195] team0: Port device team_slave_1 added [ 222.114177][ T4761] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.176634][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.226224][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.318736][ T6195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.362894][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.369884][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.408996][ T6195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.455846][ T6266] loop3: detected capacity change from 0 to 512 [ 222.523647][ T6264] loop1: detected capacity change from 0 to 4096 [ 222.532953][ T6266] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.551723][ T4289] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 222.579769][ T6264] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 222.597064][ T6195] device hsr_slave_0 entered promiscuous mode [ 222.625751][ T6266] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.532: invalid indirect mapped block 4294967295 (level 1) [ 222.656151][ T6195] device hsr_slave_1 entered promiscuous mode [ 222.684163][ T6195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.693457][ T6266] EXT4-fs (loop3): Remounting filesystem read-only [ 222.700020][ T6266] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.532: invalid indirect mapped block 4294967295 (level 1) [ 222.723038][ T6195] Cannot create hsr debugfs directory [ 222.792842][ T6266] EXT4-fs (loop3): 2 truncates cleaned up [ 222.801831][ T6266] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 222.917063][ T4440] EXT4-fs error (device loop3): ext4_lookup:1856: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 222.921698][ T6260] loop0: detected capacity change from 0 to 32768 [ 222.941786][ T4289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.981784][ T4440] EXT4-fs (loop3): Remounting filesystem read-only [ 223.006634][ T4289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.051809][ T4440] EXT4-fs error (device loop3): ext4_lookup:1856: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 223.053122][ T4289] usb 5-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 223.082886][ T4289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.093702][ T4289] usb 5-1: config 0 descriptor?? [ 223.093992][ T6269] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 223.120083][ T6260] XFS (loop0): Mounting V5 Filesystem [ 223.285037][ T6260] XFS (loop0): Ending clean mount [ 223.336426][ T6260] XFS (loop0): Quotacheck needed: Please wait. [ 223.446110][ T6260] XFS (loop0): Quotacheck: Done. [ 223.580630][ T4289] hid-generic 0003:0EEF:C002.0015: unbalanced delimiter at end of report description [ 223.590500][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 223.607216][ T5767] XFS (loop0): Unmounting Filesystem [ 223.620320][ T4289] hid-generic: probe of 0003:0EEF:C002.0015 failed with error -22 [ 223.748402][ T3651] Bluetooth: hci5: command tx timeout [ 223.841538][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 224.111125][ T4440] EXT4-fs (loop3): unmounting filesystem. [ 224.121685][ T22] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 224.171646][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.189898][ T22] usb 2-1: Product: syz [ 224.205732][ T22] usb 2-1: Manufacturer: syz [ 224.222275][ T22] usb 2-1: SerialNumber: syz [ 224.230723][ T6195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.247087][ T22] usb 2-1: config 0 descriptor?? [ 224.302266][ T22] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 224.423360][ T6195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.437681][ T6195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.451110][ T6195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.646879][ T6318] loop0: detected capacity change from 0 to 256 [ 224.790502][ T4761] device hsr_slave_0 left promiscuous mode [ 224.802419][ T4761] device hsr_slave_1 left promiscuous mode [ 224.815049][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.832917][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.854047][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.872719][ T6322] loop0: detected capacity change from 0 to 1024 [ 224.903479][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.027893][ T6280] program syz.1.534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.072106][ T22] gp8psk: usb out operation failed. [ 225.077935][ T22] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 225.557195][ T4761] device bridge_slave_1 left promiscuous mode [ 225.815916][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.832477][ T22] dvb_usb_gp8psk: probe of 2-1:0.0 failed with error -22 [ 225.874107][ T3655] Bluetooth: hci5: command tx timeout [ 225.901875][ T22] usb 2-1: USB disconnect, device number 9 [ 226.001118][ T4761] device bridge_slave_0 left promiscuous mode [ 226.021826][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.116170][ T3651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.125906][ T3642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.160758][ T3719] usb 5-1: USB disconnect, device number 12 [ 226.201715][ T3651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.210605][ T3651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.220781][ T4761] device veth1_macvtap left promiscuous mode [ 226.241810][ T3651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 226.251928][ T3651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.255534][ T4761] device veth0_macvtap left promiscuous mode [ 226.356475][ T4761] device veth1_vlan left promiscuous mode [ 226.362506][ T4761] device veth0_vlan left promiscuous mode [ 226.515524][ T6342] loop1: detected capacity change from 0 to 512 [ 226.540740][ T6342] EXT4-fs: Ignoring removed orlov option [ 226.569443][ T6342] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 226.636036][ T6342] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.546: casefold flag without casefold feature [ 226.686082][ T6342] EXT4-fs (loop1): Remounting filesystem read-only [ 226.693212][ T6342] EXT4-fs (loop1): 1 truncate cleaned up [ 226.699085][ T6342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 226.728683][ T6342] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #2: comm syz.1.546: invalid size [ 226.799081][ T6342] EXT4-fs (loop1): Remounting filesystem read-only [ 226.860794][ T5923] EXT4-fs (loop1): unmounting filesystem. [ 226.918192][ T6344] loop4: detected capacity change from 0 to 32768 [ 226.948726][ T6344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.547 (6344) [ 226.972707][ T6344] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.003051][ T6344] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 227.003919][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 227.047537][ T6344] BTRFS info (device loop4): using free space tree [ 227.320091][ T6344] BTRFS info (device loop4): enabling ssd optimizations [ 227.517138][ T4555] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.532929][ T4761] team0 (unregistering): Port device team_slave_1 removed [ 227.603675][ T4761] team0 (unregistering): Port device team_slave_0 removed [ 227.981146][ T6386] loop1: detected capacity change from 0 to 4096 [ 228.009312][ T4761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.010438][ T6386] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 228.291511][ T4761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.302874][ T3655] Bluetooth: hci3: command tx timeout [ 228.832918][ T6390] loop4: detected capacity change from 0 to 256 [ 228.876070][ T6390] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 228.938131][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 229.260191][ T4761] bond0 (unregistering): Released all slaves [ 229.510842][ T6195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.550091][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.561130][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.587444][ T6195] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.732385][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.751534][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.761624][ T3885] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.768739][ T3885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.817600][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.827118][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.836297][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.845669][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.852838][ T3649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.861170][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.870206][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.879465][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.890962][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.899188][ T6399] loop4: detected capacity change from 0 to 8192 [ 229.910132][ T6399] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.932226][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.989362][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.007222][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.021234][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.044950][ T6330] chnl_net:caif_netlink_parms(): no params data found [ 230.058813][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.074087][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.083099][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.092464][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.381638][ T3655] Bluetooth: hci3: command tx timeout [ 230.442133][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.449285][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.462057][ T3692] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 230.476410][ T6330] device bridge_slave_0 entered promiscuous mode [ 230.510251][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.533142][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.571728][ T6330] device bridge_slave_1 entered promiscuous mode [ 230.652423][ T3642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.662932][ T3642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.670761][ T3642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.681675][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.689142][ T3651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 230.698157][ T3651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.751727][ T3692] usb 2-1: Using ep0 maxpacket: 32 [ 230.766307][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.813834][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.821265][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.850244][ T6195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.860353][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.871818][ T3692] usb 2-1: config 5 has an invalid interface number: 19 but max is 0 [ 230.889148][ T3692] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 230.906205][ T3692] usb 2-1: config 5 has no interface number 0 [ 230.912770][ T3692] usb 2-1: config 5 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.989156][ T6330] team0: Port device team_slave_0 added [ 231.050534][ T6330] team0: Port device team_slave_1 added [ 231.081668][ T3692] usb 2-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=96.38 [ 231.121138][ T3692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.134113][ T3692] usb 2-1: Product: syz [ 231.138304][ T3692] usb 2-1: Manufacturer: syz [ 231.152894][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.153171][ T3692] usb 2-1: SerialNumber: syz [ 231.190519][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.232431][ T3692] hub 2-1:5.19: bad descriptor, ignoring hub [ 231.238653][ T3692] hub: probe of 2-1:5.19 failed with error -5 [ 231.270463][ T3692] sierra 2-1:5.19: Sierra USB modem converter detected [ 231.281012][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.303808][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.339092][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.363289][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.370259][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.625746][ T3692] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 231.766071][ T3692] usb 2-1: USB disconnect, device number 10 [ 231.945449][ T3692] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 232.008449][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.086901][ T3692] sierra 2-1:5.19: device disconnected [ 232.197842][ T6195] device veth0_vlan entered promiscuous mode [ 232.222486][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.240951][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.261323][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.271289][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.330413][ T6431] loop4: detected capacity change from 0 to 512 [ 232.366358][ T6330] device hsr_slave_0 entered promiscuous mode [ 232.376474][ T6431] EXT4-fs: quotafile must be on filesystem root [ 232.392136][ T6330] device hsr_slave_1 entered promiscuous mode [ 232.405684][ T6195] device veth1_vlan entered promiscuous mode [ 232.461619][ T3655] Bluetooth: hci3: command tx timeout [ 232.517053][ T6431] loop4: detected capacity change from 0 to 2048 [ 232.592479][ T6431] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.572: casefold flag without casefold feature [ 232.659196][ T6431] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 232.680257][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.694068][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.708248][ T6195] device veth0_macvtap entered promiscuous mode [ 232.718421][ T6436] loop1: detected capacity change from 0 to 2048 [ 232.737791][ T6418] chnl_net:caif_netlink_parms(): no params data found [ 232.760897][ T6431] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 232.776562][ T6431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 232.790954][ T6195] device veth1_macvtap entered promiscuous mode [ 232.792651][ T3655] Bluetooth: hci2: command tx timeout [ 232.811331][ T6436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 233.026050][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.048021][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.067093][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.081157][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.125308][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.861516][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.891464][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.922268][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.939818][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.951169][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.963808][ T5923] EXT4-fs (loop1): unmounting filesystem. [ 233.980883][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.069202][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.078025][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.086725][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.101052][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.116715][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.135733][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.148613][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.167584][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.179801][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.190516][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.200533][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.211202][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.221663][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.232415][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.244372][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.277678][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.286532][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.294376][ T6441] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.572: Directory hole found for htree leaf block 0 [ 234.305041][ T6195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.329981][ T6195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.351405][ T6441] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.572: Directory hole found for htree leaf block 0 [ 234.367157][ T6195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.384493][ T6195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.404782][ T6418] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.413194][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.420980][ T6418] device bridge_slave_0 entered promiscuous mode [ 234.429799][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.437037][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.445410][ T6418] device bridge_slave_1 entered promiscuous mode [ 234.504050][ T6330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.541768][ T3655] Bluetooth: hci3: command tx timeout [ 234.555242][ T6418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.574114][ T6418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.607039][ T6418] team0: Port device team_slave_0 added [ 234.638999][ T6330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.735379][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.757437][ T6418] team0: Port device team_slave_1 added [ 234.779520][ T4555] EXT4-fs (loop4): unmounting filesystem. [ 234.801286][ T6330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.868994][ T3655] Bluetooth: hci2: command tx timeout [ 234.925953][ T6453] binder: 6451:6453 ioctl c0306201 0 returned -14 [ 234.963987][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.998089][ T6330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.011286][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.038991][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.099808][ T6418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.113829][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.120964][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.165524][ T6418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.175688][ T6460] loop1: detected capacity change from 0 to 256 [ 235.187694][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.235890][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.284385][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.318581][ T6462] loop0: detected capacity change from 0 to 7 [ 235.328424][ T6462] Dev loop0: unable to read RDB block 7 [ 235.336790][ T6462] loop0: unable to read partition table [ 235.339685][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.400047][ T6462] loop0: partition table beyond EOD, truncated [ 235.424516][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.454436][ T6462] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 235.454436][ T6462] ) failed (rc=-5) [ 235.534999][ T6418] device hsr_slave_0 entered promiscuous mode [ 235.546431][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.556563][ T6418] device hsr_slave_1 entered promiscuous mode [ 235.562907][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.573259][ T6418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.580945][ T6418] Cannot create hsr debugfs directory [ 235.587507][ T28] INFO: task syz.2.95:4149 blocked for more than 143 seconds. [ 235.598075][ T28] Not tainted 6.1.103-syzkaller #0 [ 235.611622][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.620346][ T28] task:syz.2.95 state:D stack:25376 pid:4149 ppid:3641 flags:0x00004004 [ 235.680771][ T28] Call Trace: [ 235.692509][ T28] [ 235.695501][ T28] __schedule+0x143f/0x4570 [ 235.700051][ T28] ? release_firmware_map_entry+0x186/0x186 [ 235.707533][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 235.714215][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 235.731139][ T28] ? print_irqtrace_events+0x210/0x210 [ 235.736959][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 235.742517][ T28] schedule+0xbf/0x180 [ 235.746628][ T28] io_schedule+0x88/0x100 [ 235.750987][ T28] folio_wait_bit_common+0x878/0x1290 [ 235.758571][ T28] ? folio_wait_bit+0x20/0x20 [ 235.764226][ T28] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 235.770684][ T28] ? jfs_error+0x219/0x2e0 [ 235.775462][ T28] ? __get_metapage+0x551/0x1040 [ 235.780441][ T28] release_metapage+0x88/0x9b0 [ 235.788779][ T28] ? PageHeadHuge+0x8e/0x1c0 [ 235.794482][ T28] __get_metapage+0xb15/0x1040 [ 235.799286][ T28] jfs_readdir+0x2907/0x4620 [ 235.804359][ T28] ? dtInitRoot+0x690/0x690 [ 235.808898][ T28] ? down_write_killable_nested+0x90/0x90 [ 235.815066][ T28] ? end_current_label_crit_section+0x147/0x170 [ 235.821330][ T28] ? common_file_perm+0x17d/0x1d0 [ 235.826505][ T28] ? iterate_dir+0x131/0x560 [ 235.831119][ T28] iterate_dir+0x224/0x560 [ 235.835630][ T28] __se_sys_getdents64+0x209/0x4f0 [ 235.840757][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 235.846861][ T28] ? __x64_sys_getdents64+0x80/0x80 [ 235.852169][ T28] ? filldir+0x6f0/0x6f0 [ 235.857637][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 235.864378][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 235.869590][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 235.875703][ T28] do_syscall_64+0x3b/0xb0 [ 235.880152][ T28] ? clear_bhb_loop+0x45/0xa0 [ 235.884956][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.890873][ T28] RIP: 0033:0x7f5631f779f9 [ 235.895373][ T28] RSP: 002b:00007f5632d90038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 235.911668][ T28] RAX: ffffffffffffffda RBX: 00007f5632106058 RCX: 00007f5631f779f9 [ 235.919661][ T28] RDX: 0000000000001000 RSI: 0000000020000f80 RDI: 0000000000000006 [ 235.927738][ T28] RBP: 00007f5631fe58ee R08: 0000000000000000 R09: 0000000000000000 [ 235.935776][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.943885][ T28] R13: 0000000000000001 R14: 00007f5632106058 R15: 00007ffd5ffaca18 [ 235.951925][ T28] [ 235.955005][ T28] [ 235.955005][ T28] Showing all locks held in the system: [ 235.995486][ T28] 1 lock held by rcu_tasks_kthre/12: [ 236.000921][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 236.015209][ T28] 1 lock held by rcu_tasks_trace/13: [ 236.020534][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 236.039834][ T28] 1 lock held by khungtaskd/28: [ 236.044844][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 236.055002][ T28] 5 locks held by kworker/u4:4/56: [ 236.060127][ T28] #0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 236.071455][ T28] #1: ffffc90001577d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 236.082221][ T28] #2: ffffffff8e4eb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 236.091661][ T28] #3: ffff88801f8ce2f8 (&devlink->lock_key#13){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x130/0x2c0 [ 236.103023][ T28] #4: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: fib_seq_sum+0x31/0x290 [ 236.112021][ T28] 2 locks held by getty/3393: [ 236.116735][ T28] #0: ffff88814bef2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 236.126615][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 236.136815][ T28] 1 lock held by syz-executor/3626: [ 236.142762][ T28] 3 locks held by kworker/0:3/3649: [ 236.147981][ T28] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 236.158435][ T28] #1: ffffc9000417fd20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 236.170991][ T28] #2: ffff8880565d4240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 236.181236][ T28] 3 locks held by kworker/u5:8/3655: [ 236.186647][ T28] #0: ffff8880218da138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 236.197569][ T28] #1: ffffc9000451fd20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 236.209646][ T28] #2: ffff8880735ed0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1dc/0x400 [ 236.219621][ T28] 3 locks held by kworker/1:6/3684: [ 236.225574][ T28] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 236.236027][ T28] #1: ffffc900041cfd20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 236.248164][ T28] #2: ffff88807d4f1240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 236.258341][ T28] 2 locks held by kworker/0:5/3692: [ 236.263661][ T28] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 236.275056][ T28] #1: ffffc90004807d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 236.286725][ T28] 2 locks held by syz.2.95/4149: [ 236.291728][ T28] #0: ffff8880775d74e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 236.300987][ T28] #1: ffff8880704733c0 (&type->i_mutex_dir_key#12){++++}-{3:3}, at: iterate_dir+0x131/0x560 [ 236.312303][ T28] 2 locks held by kworker/u4:14/4758: [ 236.317694][ T28] #0: ffff8880b993a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 236.327732][ T28] #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a3/0x770 [ 236.339269][ T28] 6 locks held by syz-executor/6195: [ 236.344640][ T28] #0: ffff88807b132460 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 236.353772][ T28] #1: ffff88805b6ae488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 236.363610][ T28] #2: ffffffff8d3537e8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xe5/0x290 [ 236.375686][ T28] #3: ffffffff8d1c83b0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x19c/0x650 [ 236.389097][ T28] #4: ffffffff8d3539d0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x1b1/0x650 [ 236.400495][ T28] #5: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 236.416558][ T28] 7 locks held by syz-executor/6330: [ 236.422588][ T28] #0: ffff88807f760460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 236.431799][ T28] #1: ffff88805a64a088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 236.441641][ T28] #2: ffff888144f39e88 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 236.451843][ T28] #3: ffffffff8de21548 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800 [ 236.462582][ T28] #4: ffff888057ebf0e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 236.472926][ T28] #5: ffff8880569b92f8 (&devlink->lock_key#16){+.+.}-{3:3}, at: nsim_drv_probe+0xc9/0xb20 [ 236.483033][ T28] #6: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x30c/0x3f0 [ 236.496954][ T28] 2 locks held by syz-executor/6418: [ 236.502379][ T28] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 236.512062][ T28] #1: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 236.532580][ T28] [ 236.534933][ T28] ============================================= [ 236.534933][ T28] [ 236.564548][ T28] NMI backtrace for cpu 0 [ 236.568901][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 236.576817][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 236.586901][ T28] Call Trace: [ 236.590186][ T28] [ 236.593131][ T28] dump_stack_lvl+0x1e3/0x2cb [ 236.597836][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 236.603312][ T28] ? panic+0x764/0x764 [ 236.607376][ T28] ? vprintk_emit+0x622/0x740 [ 236.612053][ T28] ? printk_sprint+0x490/0x490 [ 236.616818][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 236.621946][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 236.626932][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 236.633093][ T28] ? _printk+0xd1/0x111 [ 236.637249][ T28] ? panic+0x764/0x764 [ 236.641323][ T28] ? __wake_up_klogd+0xcc/0x100 [ 236.646167][ T28] ? panic+0x764/0x764 [ 236.650233][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 236.656302][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 236.662373][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 236.668367][ T28] watchdog+0xf88/0xfd0 [ 236.672528][ T28] ? watchdog+0x1f8/0xfd0 [ 236.676868][ T28] kthread+0x28d/0x320 [ 236.680933][ T28] ? hungtask_pm_notify+0x50/0x50 [ 236.685952][ T28] ? kthread_blkcg+0xd0/0xd0 [ 236.690532][ T28] ret_from_fork+0x1f/0x30 [ 236.694955][ T28] [ 236.698861][ T28] Sending NMI from CPU 0 to CPUs 1: [ 236.704499][ C1] NMI backtrace for cpu 1 [ 236.704509][ C1] CPU: 1 PID: 4758 Comm: kworker/u4:14 Not tainted 6.1.103-syzkaller #0 [ 236.704523][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 236.704532][ C1] Workqueue: bat_events batadv_nc_worker [ 236.704554][ C1] RIP: 0010:lock_acquire+0x18d/0x5a0 [ 236.704577][ C1] Code: 8d bc 24 80 00 00 00 4c 89 fb 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 ff e8 f0 a9 77 00 48 c7 84 24 80 00 00 00 00 00 00 00 9c <8f> 84 24 80 00 00 00 42 80 3c 2b 00 74 08 4c 89 ff e8 4d a9 77 00 [ 236.704594][ C1] RSP: 0018:ffffc90004f57a78 EFLAGS: 00000246 [ 236.704606][ C1] RAX: 0000000000000000 RBX: 1ffff920009eaf60 RCX: ffffffff816a72bb [ 236.704616][ C1] RDX: 0000000000000000 RSI: ffffffff8b5d5dc0 RDI: ffffffff8b5d5d80 [ 236.704626][ C1] RBP: ffffc90004f57be0 R08: dffffc0000000000 R09: fffffbfff1d33896 [ 236.704637][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920009eaf58 [ 236.704646][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90004f57b00 [ 236.704657][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 236.704669][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.704680][ C1] CR2: 000055f45d29a000 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 236.704692][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.704700][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.704709][ C1] Call Trace: [ 236.704713][ C1] [ 236.704718][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 236.704739][ C1] ? read_lock_is_recursive+0x10/0x10 [ 236.704762][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 236.704783][ C1] ? nmi_handle+0x25/0x440 [ 236.704812][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 236.704834][ C1] ? nmi_handle+0x12e/0x440 [ 236.704856][ C1] ? nmi_handle+0x25/0x440 [ 236.704877][ C1] ? lock_acquire+0x18d/0x5a0 [ 236.704897][ C1] ? default_do_nmi+0x62/0x150 [ 236.704918][ C1] ? exc_nmi+0xa8/0x100 [ 236.704944][ C1] ? end_repeat_nmi+0x16/0x31 [ 236.704966][ C1] ? lock_acquire+0xeb/0x5a0 [ 236.704987][ C1] ? lock_acquire+0x18d/0x5a0 [ 236.705007][ C1] ? lock_acquire+0x18d/0x5a0 [ 236.705028][ C1] ? lock_acquire+0x18d/0x5a0 [ 236.705049][ C1] [ 236.705052][ C1] [ 236.705060][ C1] ? read_lock_is_recursive+0x10/0x10 [ 236.705082][ C1] ? batadv_nc_worker+0xc7/0x610 [ 236.705101][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 236.705123][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 236.705149][ C1] batadv_nc_worker+0xe8/0x610 [ 236.705166][ C1] ? batadv_nc_worker+0xc7/0x610 [ 236.705183][ C1] ? batadv_nc_worker+0xc7/0x610 [ 236.705203][ C1] ? process_one_work+0x7a9/0x11d0 [ 236.705219][ C1] process_one_work+0x8a9/0x11d0 [ 236.705243][ C1] ? worker_detach_from_pool+0x260/0x260 [ 236.705261][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 236.705277][ C1] ? kthread_data+0x4e/0xc0 [ 236.705300][ C1] ? wq_worker_running+0x97/0x190 [ 236.705323][ C1] worker_thread+0xa47/0x1200 [ 236.705342][ C1] ? release_firmware_map_entry+0x186/0x186 [ 236.705371][ C1] kthread+0x28d/0x320 [ 236.705383][ C1] ? worker_clr_flags+0x190/0x190 [ 236.705398][ C1] ? kthread_blkcg+0xd0/0xd0 [ 236.705412][ C1] ret_from_fork+0x1f/0x30 [ 236.705438][ C1] [ 236.708253][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 237.021878][ T3651] Bluetooth: hci0: command 0x0406 tx timeout [ 237.042008][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 237.049898][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 237.059954][ T28] Call Trace: [ 237.063231][ T28] [ 237.066239][ T28] dump_stack_lvl+0x1e3/0x2cb [ 237.070921][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 237.076386][ T28] ? panic+0x764/0x764 [ 237.080466][ T28] ? llist_add_batch+0x160/0x1d0 [ 237.085413][ T28] ? vscnprintf+0x59/0x80 [ 237.089754][ T28] panic+0x318/0x764 [ 237.093653][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 237.099836][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 237.105210][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 237.111374][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 237.117539][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 237.123738][ T28] watchdog+0xfc7/0xfd0 [ 237.127907][ T28] ? watchdog+0x1f8/0xfd0 [ 237.132263][ T28] kthread+0x28d/0x320 [ 237.136343][ T28] ? hungtask_pm_notify+0x50/0x50 [ 237.141377][ T28] ? kthread_blkcg+0xd0/0xd0 [ 237.145998][ T28] ret_from_fork+0x1f/0x30 [ 237.150423][ T28] [ 237.153774][ T28] Kernel Offset: disabled [ 237.158107][ T28] Rebooting in 86400 seconds..