last executing test programs: 25.416583765s ago: executing program 2 (id=976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x1100, 0x0, &(0x7f0000000100), 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.390619957s ago: executing program 2 (id=977): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) socket(0x1, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x2, 0x2) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0205647, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x400c) shmat(r3, &(0x7f0000fee000/0x4000)=nil, 0x6000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) shmctl$IPC_RMID(0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@ifindex}, 0x20) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 24.501855839s ago: executing program 2 (id=988): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 24.400982537s ago: executing program 2 (id=990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 18.713693729s ago: executing program 3 (id=1004): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}}, 0x90) 18.672323183s ago: executing program 3 (id=1005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x2, 0x4) 18.601014619s ago: executing program 3 (id=1006): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040), 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001f80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 18.57876956s ago: executing program 3 (id=1009): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c00ad180473920acf86b29615467897026a7d6c238f430bf00453c3844d06bcfe71c83c4b837a159d475402d6343453"], 0x1, 0x17c, &(0x7f0000000240)="$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") 18.516965245s ago: executing program 2 (id=1010): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) socket(0x1, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x2, 0x2) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0205647, 0x0) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000ff7000/0x3000)=nil, 0x400c) shmat(r2, &(0x7f0000fee000/0x4000)=nil, 0x6000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) shmctl$IPC_RMID(0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 18.505404756s ago: executing program 1 (id=1011): r0 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febe73e0000000000000000000000000310"], 0x0, 0x1b}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 18.421433403s ago: executing program 3 (id=1012): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @window, @timestamp, @mss, @sack_perm], 0x8) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 18.353700429s ago: executing program 1 (id=1013): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @remote, 0x4}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}}}}, 0x108) 18.233014308s ago: executing program 1 (id=1014): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}}, 0x90) 18.190712432s ago: executing program 1 (id=1015): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) acct(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd2(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) read$eventfd(r2, &(0x7f0000000000), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000a08001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a310000000028000480240001800b0001007470726f787900001400028008000240000000050800014000000002140000001100010000000000000000000000ea2cff3a796e4015e920983203cfb24b7071e34f3a924e3c33a40e1e791ba8506a253c2f87a9e56b04718c02ef7cfe4879f0388d78a73c5247010db99d4d87840b1209552bf88d8b29bf01de48eb2d05ef30c2c15a35"], 0x7c}}, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) syz_usbip_server_init(0x5) r7 = accept4(r0, 0x0, 0x0, 0x180800) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$l2tp(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007080000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000000000000000000000000000000000000010a845fde28f24e55d114e6833c7f55334aaa1a41045d757833d2872ce43ff831f28c403c5b0a865511fa7b49b9aaff10d3e3c5ffbca5589af0d51f0701e7ce647de7de11c70b40db3a5529f82b30ca6e95f6ad73f3d285bef0511cccb78817a340cdf6a909b689557ba28a2b06aceb666aeb5e01c2ea0597f66391515d6610caa01230000"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.666326084s ago: executing program 2 (id=1016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 17.450971592s ago: executing program 3 (id=1017): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd020003"], 0xfdef) 17.324897292s ago: executing program 1 (id=1018): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040), 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001f80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 17.324463882s ago: executing program 1 (id=1019): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) memfd_create(&(0x7f0000000080)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\p\x82\xbdb\xd1jX\x14\xce\x8e\xa4e\x1e\x87\'RN\xea!\x80\xda\r\x14!\xc2\x9b\xc0\nxk e\x1dQ\xcb;z\xba\x8b\xf4\xa8Y8S\x0fe\xb4', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 3.707334199s ago: executing program 4 (id=1034): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x4, 0x6, 0x0, @loopback, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x5, "6694b4"}, @mptcp=@mp_join]}}}}}}}}, 0x28) 3.504956275s ago: executing program 4 (id=1036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 3.040662602s ago: executing program 4 (id=1040): syz_usb_connect(0x0, 0xe4, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af419000905"], 0x0) 2.494742637s ago: executing program 4 (id=1041): r0 = socket$inet(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febe73e0000000000000000000000000310"], 0x0, 0x1b}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 2.33300306s ago: executing program 4 (id=1042): ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @remote, 0x4}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}}}}, 0x108) 2.21297559s ago: executing program 4 (id=1043): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x4, 0x6, 0x0, @loopback, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x5, "6694b4"}, @mptcp=@mp_join]}}}}}}}}, 0x28) 1.307911103s ago: executing program 0 (id=1044): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x138, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{}, {}, {}, {}, {}, {}, {}]}}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x90, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x7c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x138}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)="2a6964b6e862bbb7ace52f4024afa4a037aa7a2c42a917c9800a8355448b1022eb5829e387283555dbf20602b0befa", 0x2f}], 0x1, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, 0x0, 0x0, 0x8}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.245153979s ago: executing program 0 (id=1045): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x9635, &(0x7f0000012cc0)="$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") ioctl$FITRIM(r0, 0x4010586e, &(0x7f0000000100)={0x2000, 0x2}) 720.254591ms ago: executing program 0 (id=1046): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={r4}, 0x8) 612.94563ms ago: executing program 0 (id=1047): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) 584.133392ms ago: executing program 0 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000300)=@string={0x2}}]}) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4}}, {0x13, &(0x7f0000000580)=@string={0x13, 0x3, "79594b8573ba1de807f914061bb486a9ee"}}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=1049): r0 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): ecomes ready [ 37.942626][ T4228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.945714][ T4243] Bluetooth: hci0: command tx timeout [ 37.952426][ T4228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.954953][ T4228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.958627][ T4228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.964574][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.988835][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.991440][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.996924][ T4228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.999315][ T4228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.001637][ T4228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.003894][ T4228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.020624][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.023377][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.025889][ T4229] Bluetooth: hci1: command tx timeout [ 38.035402][ T4243] Bluetooth: hci3: command tx timeout [ 38.036849][ T4243] Bluetooth: hci2: command tx timeout [ 38.038296][ T4243] Bluetooth: hci4: command tx timeout [ 38.079141][ T4226] device veth0_vlan entered promiscuous mode [ 38.084429][ T4226] device veth1_vlan entered promiscuous mode [ 38.090218][ T354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.092266][ T354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.103472][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.106834][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.107724][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.109816][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.111020][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.113494][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.126218][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.128793][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.131115][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.145858][ T4226] device veth0_macvtap entered promiscuous mode [ 38.150946][ T4226] device veth1_macvtap entered promiscuous mode [ 38.163267][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.166788][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.169328][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.171902][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.174314][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.182199][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.188457][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.228298][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.231751][ T354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.233857][ T354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.236952][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.239986][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.243690][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.252562][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.252895][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.254725][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.258610][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.261937][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.264530][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.274644][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.279438][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.283194][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.287964][ T4232] device veth0_vlan entered promiscuous mode [ 38.293650][ T4232] device veth1_vlan entered promiscuous mode [ 38.318978][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.321543][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.324140][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.328499][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.331009][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.334219][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.337720][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.341018][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.343360][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.351093][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.353832][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.357706][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.360478][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.362995][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.369593][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.373505][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.383848][ T4232] device veth0_macvtap entered promiscuous mode [ 38.405005][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.411527][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.414271][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.419455][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.423857][ T4226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.430679][ T4226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.432885][ T4226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.435180][ T4226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.447903][ T4232] device veth1_macvtap entered promiscuous mode [ 38.464711][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.467398][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.471292][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.484803][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.511528][ T4312] loop3: detected capacity change from 0 to 1024 [ 38.513700][ T4312] EXT4-fs: Ignoring removed bh option [ 38.555941][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.558522][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.560964][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.563709][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.588938][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.591658][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.594266][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.597338][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.601070][ T4232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.603619][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.608286][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.610858][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.612214][ T4312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.644079][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.647554][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.650215][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.652844][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.655749][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.658527][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.660953][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.666028][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.674110][ T4232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.688859][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.691606][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.711383][ T4232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.713831][ T4232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.730678][ T4232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.732921][ T4232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.738901][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.741395][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.789860][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.791994][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.801514][ T4227] EXT4-fs (loop3): unmounting filesystem. [ 38.856123][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.897505][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.899616][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.928809][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.033245][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.044035][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.063261][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.092596][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.094768][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.107498][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.894815][ T4327] loop0: detected capacity change from 0 to 32768 [ 39.949669][ T4327] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 39.970533][ T4327] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 40.030103][ T4229] Bluetooth: hci0: command tx timeout [ 40.037590][ T4327] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 40.046452][ T4281] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 40.048392][ T4281] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 40.105849][ T4243] Bluetooth: hci4: command tx timeout [ 40.107431][ T4243] Bluetooth: hci2: command tx timeout [ 40.108803][ T4243] Bluetooth: hci3: command tx timeout [ 40.110154][ T4243] Bluetooth: hci1: command tx timeout [ 40.124612][ T4281] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 76ms [ 40.127459][ T4281] gfs2: fsid=syz:syz.0: jid=0: Done [ 40.129182][ T4327] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 40.268981][ T4347] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.11'. [ 40.271771][ T4347] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.11'. [ 41.585178][ T4350] loop2: detected capacity change from 0 to 40427 [ 41.636932][ T4350] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.652489][ T4364] loop4: detected capacity change from 0 to 512 [ 41.662716][ T4350] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.706002][ T4364] EXT4-fs: Ignoring removed i_version option [ 41.707502][ T4364] EXT4-fs: Ignoring removed nobh option [ 41.743575][ T4364] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.752779][ T4364] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.767608][ T4364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.781050][ T4364] EXT4-fs (loop4): 1 truncate cleaned up [ 41.789247][ T4364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.850286][ T4232] EXT4-fs (loop4): unmounting filesystem. [ 41.996847][ T4372] Bluetooth: MGMT ver 1.22 [ 42.948571][ T4229] Bluetooth: hci0: command tx timeout [ 42.949993][ T4229] Bluetooth: hci1: command tx timeout [ 42.951398][ T4229] Bluetooth: hci3: command tx timeout [ 42.952731][ T4229] Bluetooth: hci2: command tx timeout [ 42.954036][ T4229] Bluetooth: hci4: command tx timeout [ 43.016077][ T4228] syz-executor: attempt to access beyond end of device [ 43.016077][ T4228] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.086975][ T4380] Bluetooth: MGMT ver 1.22 [ 43.607150][ T4395] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.23'. [ 43.626626][ T4395] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.23'. [ 43.693616][ T4401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.696094][ T4401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.732084][ T4395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 45.145390][ T4238] Bluetooth: hci3: command tx timeout [ 45.704109][ T4412] loop1: detected capacity change from 0 to 40427 [ 45.769716][ T4412] F2FS-fs (loop1): Found nat_bits in checkpoint [ 45.813632][ T4412] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 46.607128][ T4225] syz-executor: attempt to access beyond end of device [ 46.607128][ T4225] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.047414][ T4436] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.40'. [ 47.049757][ T4436] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.40'. [ 47.081992][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 48.820467][ T4456] loop2: detected capacity change from 0 to 40427 [ 48.955993][ T4476] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.53'. [ 48.958514][ T4476] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.53'. [ 48.984369][ T4456] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.002565][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 49.022269][ T4456] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.089727][ T4481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.092139][ T4481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.130336][ T4229] Bluetooth: hci3: command tx timeout [ 50.184665][ T4228] syz-executor: attempt to access beyond end of device [ 50.184665][ T4228] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.452097][ T4229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 50.455400][ T4229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 50.458001][ T4229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 50.460621][ T4229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 50.463356][ T4229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 50.470005][ T4229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 50.825384][ T4229] Bluetooth: hci0: command tx timeout [ 50.903095][ T4494] chnl_net:caif_netlink_parms(): no params data found [ 50.906540][ T4512] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.65'. [ 50.908958][ T4512] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.65'. [ 50.961911][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 51.000759][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.002981][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.006156][ T4494] device bridge_slave_0 entered promiscuous mode [ 51.010617][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.012750][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.034466][ T4494] device bridge_slave_1 entered promiscuous mode [ 51.093021][ T4494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.098254][ T4494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.115104][ T4494] team0: Port device team_slave_0 added [ 51.118937][ T4494] team0: Port device team_slave_1 added [ 51.137777][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.141677][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.154421][ T4494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.161651][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.165630][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.179394][ T4494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.257123][ T4494] device hsr_slave_0 entered promiscuous mode [ 51.295609][ T4494] device hsr_slave_1 entered promiscuous mode [ 51.335311][ T4494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.338648][ T4494] Cannot create hsr debugfs directory [ 51.589771][ T4494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.697400][ T4494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.722364][ T4520] loop4: detected capacity change from 0 to 40427 [ 51.786088][ T4520] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.809097][ T4520] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.937416][ T4494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.505416][ T4238] Bluetooth: hci5: command tx timeout [ 52.659745][ T4232] syz-executor: attempt to access beyond end of device [ 52.659745][ T4232] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.691923][ T4494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.677096][ T4494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.717626][ T4494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.757216][ T4494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.800085][ T4494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.926379][ T4551] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.75'. [ 53.928716][ T4551] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.75'. [ 53.979819][ T4551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 54.075483][ T4494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.122784][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.126225][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.130957][ T4494] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.143730][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.149448][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.152234][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.154275][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.172001][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.174625][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.595516][ T4229] Bluetooth: hci5: command tx timeout [ 54.977767][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.980560][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.982450][ T4216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.985652][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.988545][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.998690][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.001684][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.004268][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.036255][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.044631][ T4238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 55.055460][ T4238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 55.058018][ T4238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 55.060625][ T4243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 55.062944][ T4243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 55.065748][ T4243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 55.066534][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.086009][ T4494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.088618][ T4494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.119814][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.122469][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.125086][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.152117][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.175863][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.335083][ T4556] loop1: detected capacity change from 0 to 40427 [ 55.419453][ T4556] F2FS-fs (loop1): Found nat_bits in checkpoint [ 55.472478][ T4556] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.246664][ T4494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.463598][ T4225] syz-executor: attempt to access beyond end of device [ 56.463598][ T4225] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.599404][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.601571][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.659370][ T175] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.665475][ T4229] Bluetooth: hci5: command tx timeout [ 56.717155][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.719834][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.779552][ T175] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.783340][ T4597] Zero length message leads to an empty skb [ 56.812976][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.816575][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.834742][ T4494] device veth0_vlan entered promiscuous mode [ 56.847794][ T4595] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.87'. [ 56.849997][ T4595] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.87'. [ 56.891977][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 56.916044][ T175] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.931329][ T4494] device veth1_vlan entered promiscuous mode [ 56.935928][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.938195][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.940424][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.206188][ T4243] Bluetooth: hci6: command tx timeout [ 57.345152][ T175] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.465774][ T4229] Bluetooth: hci2: command tx timeout [ 57.617404][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.714920][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.717740][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.726512][ T4494] device veth0_macvtap entered promiscuous mode [ 57.733039][ T4494] device veth1_macvtap entered promiscuous mode [ 57.761185][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.764112][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.774712][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.778569][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.781404][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.784121][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.794038][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.797205][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.799912][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.802719][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.808341][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.814396][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.821470][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.824264][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.827412][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.830136][ T4562] chnl_net:caif_netlink_parms(): no params data found [ 57.835543][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.838171][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.840775][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.853847][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.857989][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.867974][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.870707][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.873494][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.881674][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.884344][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.898784][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.912483][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.915192][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.932066][ T4494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.934405][ T4494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.940010][ T4494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.942331][ T4494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.113959][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.121161][ T4562] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.128573][ T4562] device bridge_slave_0 entered promiscuous mode [ 58.138016][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.139904][ T4562] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.142455][ T4562] device bridge_slave_1 entered promiscuous mode [ 58.422361][ T4606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.424563][ T4606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.428662][ T4562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.433777][ T4562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.470916][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.487700][ T4632] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.98'. [ 58.490373][ T4632] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.98'. [ 58.548468][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 58.563128][ T4562] team0: Port device team_slave_0 added [ 58.574723][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.577421][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.587073][ T4618] loop3: detected capacity change from 0 to 40427 [ 58.587147][ T4562] team0: Port device team_slave_1 added [ 58.631513][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.646581][ T4618] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.663729][ T4618] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.757669][ T4243] Bluetooth: hci5: command tx timeout [ 59.335085][ T4229] Bluetooth: hci6: command tx timeout [ 59.697300][ T4227] syz-executor: attempt to access beyond end of device [ 59.697300][ T4227] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.840620][ T4562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.842578][ T4562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.862550][ T4562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.945310][ T4243] Bluetooth: hci0: command tx timeout [ 60.037476][ T4562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.039757][ T4562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.062409][ T4562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.197360][ T4562] device hsr_slave_0 entered promiscuous mode [ 60.257087][ T4562] device hsr_slave_1 entered promiscuous mode [ 60.266203][ T4562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.268213][ T4562] Cannot create hsr debugfs directory [ 60.837481][ T4686] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.107'. [ 60.840275][ T4686] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.107'. [ 60.896735][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 61.385598][ T4229] Bluetooth: hci6: command tx timeout [ 61.865328][ T4229] Bluetooth: hci3: command tx timeout [ 62.092528][ T175] device hsr_slave_0 left promiscuous mode [ 62.147462][ T175] device hsr_slave_1 left promiscuous mode [ 62.183977][ T4714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.186570][ T4714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.275632][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.277984][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.281836][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.291364][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.304015][ T175] device bridge_slave_1 left promiscuous mode [ 62.313108][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.370094][ T4683] loop3: detected capacity change from 0 to 40427 [ 62.418988][ T4683] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.430326][ T175] device bridge_slave_0 left promiscuous mode [ 62.432305][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.476977][ T4683] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 62.827663][ T175] device veth1_macvtap left promiscuous mode [ 62.829670][ T175] device veth0_macvtap left promiscuous mode [ 62.913886][ T175] device veth1_vlan left promiscuous mode [ 62.916186][ T175] device veth0_vlan left promiscuous mode [ 63.085851][ T4227] syz-executor: attempt to access beyond end of device [ 63.085851][ T4227] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.236858][ T4729] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.118'. [ 63.239317][ T4729] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.118'. [ 63.316754][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 63.465552][ T4229] Bluetooth: hci6: command tx timeout [ 64.025382][ T4229] Bluetooth: hci5: command tx timeout [ 64.518561][ T2048] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.522027][ T2048] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.338527][ T175] team0 (unregistering): Port device team_slave_1 removed [ 65.527110][ T175] team0 (unregistering): Port device team_slave_0 removed [ 65.686670][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.896643][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.257294][ T175] bond0 (unregistering): Released all slaves [ 68.791890][ T4562] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.838988][ T4562] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.943523][ T4767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.945966][ T4767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.955435][ T4562] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.028791][ T4562] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.392470][ T4562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.423241][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.426042][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.440024][ T4562] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.453235][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.456390][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.458941][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.460856][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.493380][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.496226][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.498888][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.501326][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.503362][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.525984][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.528974][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.531735][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.534815][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.554606][ T4562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.564348][ T4562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.575953][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.578407][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.581030][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.588341][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.594343][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.602958][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.611317][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.628655][ T24] cfg80211: failed to load regulatory.db [ 69.670147][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.728870][ T4753] loop2: detected capacity change from 0 to 40427 [ 69.813618][ T4753] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.900802][ T4753] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.695336][ T4243] Bluetooth: hci5: command tx timeout [ 71.146829][ T4228] syz-executor: attempt to access beyond end of device [ 71.146829][ T4228] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.318407][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.320546][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.349754][ T4562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.721565][ T4814] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.135'. [ 71.724082][ T4814] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.135'. [ 71.769065][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 71.985738][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.988494][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.061774][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.064392][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.067792][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.070186][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.077394][ T4562] device veth0_vlan entered promiscuous mode [ 72.083236][ T4562] device veth1_vlan entered promiscuous mode [ 72.145463][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.147935][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.150256][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.152767][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.176994][ T4834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.179405][ T4834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.189192][ T4562] device veth0_macvtap entered promiscuous mode [ 72.203718][ T4562] device veth1_macvtap entered promiscuous mode [ 72.328733][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.353984][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.616749][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.707811][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.790066][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.874406][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.948847][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.025512][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.226054][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.228832][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.271893][ T4562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.284004][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.286910][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.289475][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.318287][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.333041][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.365290][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.367734][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.370428][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.373078][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.403574][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.425586][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.428377][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.430894][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.433478][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.491499][ T4562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.493436][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.496561][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.507505][ T4562] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.509822][ T4562] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.511993][ T4562] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.514224][ T4562] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.775673][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.778002][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.781546][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.858065][ T4794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.860244][ T4794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.865441][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.896187][ T4858] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.146'. [ 73.898826][ T4858] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.146'. [ 73.943349][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 73.945856][ T4243] Bluetooth: hci2: command tx timeout [ 74.735844][ T4280] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.117269][ T4280] usb 1-1: config 0 interface 0 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 75.121058][ T4280] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.170563][ T4840] loop2: detected capacity change from 0 to 40427 [ 75.275431][ T4280] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 75.277937][ T4280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.279931][ T4280] usb 1-1: Product: syz [ 75.281025][ T4280] usb 1-1: Manufacturer: syz [ 75.282276][ T4280] usb 1-1: SerialNumber: syz [ 75.391854][ T4840] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.433481][ T4280] usb 1-1: config 0 descriptor?? [ 75.460882][ T4840] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.477911][ T4280] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 75.480008][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 75.620486][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 75.624515][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 75.626839][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 75.628868][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 75.630820][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 75.632696][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 75.650513][ T4280] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 75.653983][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 75.663395][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 75.668424][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 75.947085][ T4229] Bluetooth: hci3: command tx timeout [ 76.050992][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 76.053126][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 76.064696][ T4280] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 76.074482][ T4280] usb 1-1: USB disconnect, device number 2 [ 76.097996][ T4280] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 76.098515][ T4228] syz-executor: attempt to access beyond end of device [ 76.098515][ T4228] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.116072][ T4280] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 76.120408][ T4280] keyspan 1-1:0.0: device disconnected [ 76.317950][ T4919] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.159'. [ 76.320421][ T4919] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.159'. [ 76.374561][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 78.088484][ T4955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.090992][ T4955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.406283][ T4952] loop2: detected capacity change from 0 to 40427 [ 78.485030][ T4952] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.494711][ T4961] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.171'. [ 78.497396][ T4961] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.171'. [ 78.532491][ T4952] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.561662][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 78.775865][ T4243] Bluetooth: hci2: command tx timeout [ 79.057192][ T4228] syz-executor: attempt to access beyond end of device [ 79.057192][ T4228] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.102837][ T4992] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.184'. [ 80.105194][ T4992] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.184'. [ 80.122637][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.125353][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.178902][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 80.985453][ T4229] Bluetooth: hci6: command tx timeout [ 81.823118][ T5007] loop4: detected capacity change from 0 to 40427 [ 81.894880][ T5007] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.945488][ T5007] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 82.346642][ T4229] Bluetooth: hci2: command tx timeout [ 82.443856][ T4562] syz-executor: attempt to access beyond end of device [ 82.443856][ T4562] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.536536][ T5040] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.198'. [ 82.538920][ T5040] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.198'. [ 82.607245][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 83.045887][ T5048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.048118][ T5048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.146457][ T5070] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.210'. [ 84.148990][ T5070] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.210'. [ 84.208921][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 84.447123][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.450240][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.906403][ T4243] Bluetooth: hci6: command tx timeout [ 85.413374][ T5065] loop1: detected capacity change from 0 to 40427 [ 85.470053][ T5065] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.516391][ T5065] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.007311][ T4225] syz-executor: attempt to access beyond end of device [ 86.007311][ T4225] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.185339][ T4229] Bluetooth: hci0: command tx timeout [ 86.270584][ T5117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.273005][ T5117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.630303][ T5121] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.228'. [ 86.632964][ T5121] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.228'. [ 87.546616][ T4243] Bluetooth: hci6: command tx timeout [ 88.156971][ T5147] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.240'. [ 88.159727][ T5147] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.240'. [ 88.552625][ T5154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.554906][ T5154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.865455][ T4243] Bluetooth: hci5: command tx timeout [ 90.027523][ T5184] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.251'. [ 90.033320][ T5184] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.251'. [ 91.692206][ T5214] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.266'. [ 91.694706][ T5214] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.266'. [ 91.965423][ T4243] Bluetooth: hci5: command tx timeout [ 93.393694][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.396320][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.545351][ T4243] Bluetooth: hci3: command tx timeout [ 93.625925][ T5250] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.277'. [ 93.648841][ T5250] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.277'. [ 95.436837][ T5283] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.292'. [ 95.439515][ T5283] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.292'. [ 95.465799][ T4243] Bluetooth: hci0: command tx timeout [ 97.148555][ T4229] Bluetooth: hci3: command tx timeout [ 97.470103][ T5322] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.306'. [ 97.472772][ T5322] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.306'. [ 97.511233][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.514455][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.051831][ T5314] loop3: detected capacity change from 0 to 40427 [ 98.117364][ T5314] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.158199][ T5314] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.750925][ T4227] syz-executor: attempt to access beyond end of device [ 98.750925][ T4227] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.233640][ T4243] Bluetooth: hci3: command tx timeout [ 101.624666][ T5367] loop1: detected capacity change from 0 to 40427 [ 101.664166][ T5367] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.692333][ T5367] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.311410][ T4225] syz-executor: attempt to access beyond end of device [ 102.311410][ T4225] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.625523][ T5415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.627853][ T5415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.571455][ T5418] sched: RT throttling activated [ 106.030954][ T5478] loop1: detected capacity change from 0 to 128 [ 106.034236][ T5478] EXT4-fs: quotafile must be on filesystem root [ 106.080573][ T4911] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.346363][ T5483] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.365'. [ 106.348993][ T5483] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.365'. [ 106.386815][ T5483] netlink: 'syz.0.365': attribute type 72 has an invalid length. [ 106.388867][ T5483] netlink: 'syz.0.365': attribute type 8 has an invalid length. [ 107.664584][ T5507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.667052][ T5507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.786912][ T5509] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.376'. [ 107.791580][ T5509] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.376'. [ 107.856919][ T5509] netlink: 'syz.4.376': attribute type 72 has an invalid length. [ 107.876993][ T5509] netlink: 'syz.4.376': attribute type 8 has an invalid length. [ 109.119365][ T5503] loop1: detected capacity change from 0 to 40427 [ 109.153915][ T5503] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.207996][ T5503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.381816][ T5546] loop4: detected capacity change from 0 to 512 [ 109.384065][ T5546] EXT4-fs: Ignoring removed i_version option [ 109.393915][ T5546] EXT4-fs: Ignoring removed nobh option [ 109.397245][ T5546] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.430803][ T5546] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.621538][ T5546] EXT4-fs (loop4): 1 truncate cleaned up [ 109.630329][ T5546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.777579][ T4562] EXT4-fs (loop4): unmounting filesystem. [ 110.054578][ T5567] loop4: detected capacity change from 0 to 128 [ 110.091102][ T5567] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.274377][ T4562] EXT4-fs (loop4): unmounting filesystem. [ 111.020722][ T5580] loop1: detected capacity change from 0 to 512 [ 111.022959][ T5580] EXT4-fs: Ignoring removed i_version option [ 111.024499][ T5580] EXT4-fs: Ignoring removed nobh option [ 111.071215][ T5580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.074077][ T5580] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.121064][ T5580] EXT4-fs (loop1): 1 truncate cleaned up [ 111.122481][ T5580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.202500][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 111.294924][ T5599] loop1: detected capacity change from 0 to 128 [ 111.323300][ T5599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.430790][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 111.513657][ T5604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.516160][ T5604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.863188][ T5584] loop2: detected capacity change from 0 to 40427 [ 111.916726][ T5584] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.971196][ T5584] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.442590][ T5626] loop3: detected capacity change from 0 to 512 [ 112.450029][ T5626] EXT4-fs: Ignoring removed i_version option [ 112.465792][ T5626] EXT4-fs: Ignoring removed nobh option [ 112.476174][ T5626] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.490157][ T5626] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.509200][ T5626] EXT4-fs (loop3): 1 truncate cleaned up [ 112.512025][ T5626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.636092][ T4227] EXT4-fs (loop3): unmounting filesystem. [ 112.804626][ T5631] loop3: detected capacity change from 0 to 128 [ 112.835069][ T5633] loop2: detected capacity change from 0 to 256 [ 112.838230][ T5633] exfat: Deprecated parameter 'utf8' [ 112.847465][ T5631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.881917][ T5633] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 112.962951][ T4227] EXT4-fs (loop3): unmounting filesystem. [ 113.115019][ T5652] loop2: detected capacity change from 0 to 512 [ 113.122949][ T5652] EXT4-fs: Ignoring removed i_version option [ 113.124631][ T5652] EXT4-fs: Ignoring removed nobh option [ 113.134606][ T5652] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.138564][ T5652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.156202][ T5652] EXT4-fs (loop2): 1 truncate cleaned up [ 113.157871][ T5652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.293764][ T4228] EXT4-fs (loop2): unmounting filesystem. [ 113.621424][ T5670] loop1: detected capacity change from 0 to 128 [ 113.649107][ T5670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.750992][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 114.566735][ T5688] loop1: detected capacity change from 0 to 512 [ 114.570911][ T5688] EXT4-fs: Ignoring removed i_version option [ 114.572435][ T5688] EXT4-fs: Ignoring removed nobh option [ 114.588747][ T5688] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.601034][ T5688] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.782882][ T5688] EXT4-fs (loop1): 1 truncate cleaned up [ 114.784368][ T5688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.509925][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 115.530994][ T5704] loop2: detected capacity change from 0 to 128 [ 115.562066][ T5704] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.602287][ T4228] EXT4-fs (loop2): unmounting filesystem. [ 116.042281][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 116.063053][ T5729] loop4: detected capacity change from 0 to 512 [ 116.072426][ T5729] EXT4-fs: Ignoring removed i_version option [ 116.073995][ T5729] EXT4-fs: Ignoring removed nobh option [ 116.095335][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.103356][ T5729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.112354][ T5711] loop1: detected capacity change from 0 to 40427 [ 116.112375][ T5729] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.134163][ T5729] EXT4-fs (loop4): 1 truncate cleaned up [ 116.142246][ T5729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 116.171504][ T5736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.174852][ T5736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.194754][ T5711] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.212171][ T4562] EXT4-fs (loop4): unmounting filesystem. [ 116.247978][ T5711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.333575][ T5744] loop4: detected capacity change from 0 to 128 [ 116.371332][ T5744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 116.408615][ T4562] EXT4-fs (loop4): unmounting filesystem. [ 116.584042][ T24] usb 1-1: config 0 interface 0 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 116.672805][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.825639][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 116.829407][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.833979][ T24] usb 1-1: Product: syz [ 116.838090][ T24] usb 1-1: Manufacturer: syz [ 116.844884][ T24] usb 1-1: SerialNumber: syz [ 116.858097][ T24] usb 1-1: config 0 descriptor?? [ 116.874592][ T4225] syz-executor: attempt to access beyond end of device [ 116.874592][ T4225] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.896432][ T24] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 116.898443][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 116.900545][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 116.902936][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 116.904873][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 116.921665][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 116.928921][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 116.944364][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 116.953403][ T24] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 116.961664][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 116.967168][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 116.971505][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 116.975842][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 116.981819][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 116.987792][ T24] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 117.231862][ T5769] loop1: detected capacity change from 0 to 512 [ 117.234294][ T5769] EXT4-fs: Ignoring removed i_version option [ 117.239647][ T5769] EXT4-fs: Ignoring removed nobh option [ 117.241797][ T5769] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.244987][ T5769] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.274416][ T5769] EXT4-fs (loop1): 1 truncate cleaned up [ 117.280906][ T5769] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.364901][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 117.386547][ T5773] loop4: detected capacity change from 0 to 128 [ 117.419542][ T5773] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.493707][ T4562] EXT4-fs (loop4): unmounting filesystem. [ 117.857982][ T5780] loop1: detected capacity change from 0 to 40427 [ 117.923051][ T5780] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.943279][ T5780] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.444678][ T5805] loop4: detected capacity change from 0 to 512 [ 118.458529][ T5805] EXT4-fs: Ignoring removed i_version option [ 118.460369][ T5805] EXT4-fs: Ignoring removed nobh option [ 118.479078][ T5805] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.503388][ T5805] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.533623][ T4225] syz-executor: attempt to access beyond end of device [ 118.533623][ T4225] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.545099][ T5805] EXT4-fs (loop4): 1 truncate cleaned up [ 118.553305][ T5805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.629724][ T4021] usb 1-1: USB disconnect, device number 3 [ 118.646037][ T4021] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 118.675770][ T4562] EXT4-fs (loop4): unmounting filesystem. [ 118.677165][ T4021] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 118.690519][ T4021] keyspan 1-1:0.0: device disconnected [ 118.733571][ T5813] loop4: detected capacity change from 0 to 128 [ 118.782406][ T5813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.909167][ T4562] EXT4-fs (loop4): unmounting filesystem. [ 119.093011][ T5832] netlink: 'syz.3.500': attribute type 1 has an invalid length. [ 119.102623][ T5833] loop4: detected capacity change from 0 to 512 [ 119.104751][ T5833] EXT4-fs: Ignoring removed i_version option [ 119.118615][ T5833] EXT4-fs: Ignoring removed nobh option [ 119.125360][ T5833] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.134063][ T5833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.140015][ T5837] netlink: 'syz.1.504': attribute type 7 has an invalid length. [ 119.148572][ T5837] netlink: 'syz.1.504': attribute type 39 has an invalid length. [ 119.157940][ T5833] EXT4-fs (loop4): 1 truncate cleaned up [ 119.159639][ T5833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 119.203910][ T4562] EXT4-fs (loop4): unmounting filesystem. [ 119.263297][ T5842] loop1: detected capacity change from 0 to 128 [ 119.306325][ T5842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.436419][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 119.440839][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.443187][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.587173][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.589546][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.712897][ T5867] loop1: detected capacity change from 0 to 512 [ 119.714967][ T5867] EXT4-fs: Ignoring removed i_version option [ 119.725089][ T5867] EXT4-fs: Ignoring removed nobh option [ 119.728393][ T5867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.731464][ T5867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.748453][ T5867] EXT4-fs (loop1): 1 truncate cleaned up [ 119.750000][ T5867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.802798][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 120.174732][ T5876] loop2: detected capacity change from 0 to 128 [ 120.199078][ T5876] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.572825][ T4228] EXT4-fs (loop2): unmounting filesystem. [ 120.735703][ T5889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.738706][ T5889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.844924][ T5896] loop2: detected capacity change from 0 to 512 [ 120.859470][ T5896] EXT4-fs: Ignoring removed i_version option [ 120.861269][ T5896] EXT4-fs: Ignoring removed nobh option [ 120.863196][ T5896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.877033][ T5896] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.891203][ T5896] EXT4-fs (loop2): 1 truncate cleaned up [ 120.893057][ T5896] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.974078][ T4228] EXT4-fs (loop2): unmounting filesystem. [ 121.500194][ T5903] loop2: detected capacity change from 0 to 40427 [ 121.523597][ T5903] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.554921][ T5903] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.769403][ T5933] loop1: detected capacity change from 0 to 512 [ 121.771919][ T5933] EXT4-fs: Ignoring removed i_version option [ 121.773783][ T5933] EXT4-fs: Ignoring removed nobh option [ 121.780052][ T5933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.783176][ T5933] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.830210][ T5933] EXT4-fs (loop1): 1 truncate cleaned up [ 121.835209][ T5933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.983309][ T4228] syz-executor: attempt to access beyond end of device [ 121.983309][ T4228] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.045954][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 122.564040][ T5965] loop1: detected capacity change from 0 to 512 [ 122.575796][ T5965] EXT4-fs: Ignoring removed i_version option [ 122.577546][ T5965] EXT4-fs: Ignoring removed nobh option [ 122.585118][ T5965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.589376][ T4229] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 122.589469][ T4229] Bluetooth: hci2: Injecting HCI hardware error event [ 122.594747][ T4243] Bluetooth: hci2: hardware error 0x00 [ 122.635598][ T5965] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.667706][ T5965] EXT4-fs (loop1): 1 truncate cleaned up [ 122.669253][ T5965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.779442][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 122.782954][ T5959] loop3: detected capacity change from 0 to 40427 [ 122.846228][ T5959] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.911958][ T5959] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.341550][ T4227] syz-executor: attempt to access beyond end of device [ 123.341550][ T4227] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.531339][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.534464][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.569436][ T5967] loop2: detected capacity change from 0 to 32768 [ 123.593304][ T5967] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.556 (5967) [ 123.651788][ T5967] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.669260][ T5967] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 123.674616][ T5967] BTRFS info (device loop2): using free space tree [ 123.855023][ T5967] BTRFS info (device loop2): enabling ssd optimizations [ 123.944084][ T4228] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.105422][ T4229] Bluetooth: hci6: command tx timeout [ 124.745579][ T4243] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 124.814605][ T6028] loop2: detected capacity change from 0 to 40427 [ 124.855209][ T6028] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.889820][ T6028] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.905357][ T4243] Bluetooth: hci3: command tx timeout [ 125.336712][ T4228] syz-executor: attempt to access beyond end of device [ 125.336712][ T4228] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.676995][ T6077] 9pnet: Could not find request transport: xen [ 125.946831][ T2048] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.948523][ T2048] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.012409][ T6098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.601'. [ 126.185371][ T4243] Bluetooth: hci0: command tx timeout [ 126.528597][ T6091] loop2: detected capacity change from 0 to 40427 [ 126.553212][ T6124] block device autoloading is deprecated and will be removed. [ 126.592563][ T6091] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.668775][ T6091] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.911161][ T4243] Bluetooth: hci6: command tx timeout [ 127.142266][ T4228] syz-executor: attempt to access beyond end of device [ 127.142266][ T4228] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.425382][ T4280] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.434585][ T6160] loop3: detected capacity change from 0 to 1024 [ 127.705646][ T4243] Bluetooth: hci5: command tx timeout [ 127.785702][ T4280] usb 1-1: config 0 interface 0 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 127.788644][ T4280] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.949698][ T4280] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 127.952309][ T4280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.954667][ T4280] usb 1-1: Product: syz [ 127.961463][ T4280] usb 1-1: Manufacturer: syz [ 127.965038][ T4280] usb 1-1: SerialNumber: syz [ 127.978449][ T4280] usb 1-1: config 0 descriptor?? [ 128.016287][ T4280] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 128.018352][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 128.020274][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 128.025927][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 128.028124][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 128.030158][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 128.032219][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 128.034103][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 128.051630][ T4280] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 128.055874][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 128.057946][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 128.059904][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 128.091112][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 128.093083][ T4280] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 128.095830][ T4280] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 128.261071][ T6173] loop3: detected capacity change from 0 to 40427 [ 128.296325][ T6173] F2FS-fs (loop3): Found nat_bits in checkpoint [ 128.330754][ T6173] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 128.375443][ T4238] Bluetooth: hci0: command tx timeout [ 128.546820][ T6187] loop1: detected capacity change from 0 to 32768 [ 128.563852][ T6187] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.638 (6187) [ 128.595757][ T6187] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.602014][ T6187] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 128.613713][ T6187] BTRFS info (device loop1): using free space tree [ 128.766646][ T4227] syz-executor: attempt to access beyond end of device [ 128.766646][ T4227] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.977113][ T6187] BTRFS info (device loop1): enabling ssd optimizations [ 129.014889][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 129.036507][ T4225] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.925684][ T22] usb 1-1: USB disconnect, device number 4 [ 129.939802][ T22] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 129.959916][ T22] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 129.962746][ T22] keyspan 1-1:0.0: device disconnected [ 130.425634][ T4243] Bluetooth: hci0: command tx timeout [ 130.841030][ T6249] loop1: detected capacity change from 0 to 40427 [ 130.904035][ T6249] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.933677][ T6249] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.386943][ T4225] syz-executor: attempt to access beyond end of device [ 131.386943][ T4225] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.032891][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.035386][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.303565][ T6257] loop3: detected capacity change from 0 to 32768 [ 132.331753][ T6257] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.654 (6257) [ 132.382854][ T6257] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.403929][ T6257] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 132.418516][ T6257] BTRFS info (device loop3): using free space tree [ 132.901037][ T6257] BTRFS info (device loop3): enabling ssd optimizations [ 132.989962][ T4227] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.482654][ T6327] loop2: detected capacity change from 0 to 32768 [ 135.536785][ T6327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.671 (6327) [ 135.562871][ T6327] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.580711][ T6327] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 135.595045][ T6327] BTRFS info (device loop2): using free space tree [ 136.073450][ T6327] BTRFS info (device loop2): enabling ssd optimizations [ 136.133676][ T4228] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.293291][ T6362] can: request_module (can-proto-0) failed. [ 136.734900][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.737461][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.805200][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 137.360634][ T6384] loop3: detected capacity change from 0 to 40427 [ 137.429048][ T6384] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.499695][ T6384] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.013369][ T4227] syz-executor: attempt to access beyond end of device [ 138.013369][ T4227] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.030434][ T6428] usb usb8: usbfs: process 6428 (syz.4.697) did not claim interface 0 before use [ 138.110266][ T6430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.270717][ T6430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.387028][ T6430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.508974][ T6430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.706891][ T6430] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.730339][ T6430] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.755195][ T6430] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.767778][ T6430] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.224054][ T6471] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 139.397448][ T6456] loop4: detected capacity change from 0 to 40427 [ 139.446613][ T6456] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.483963][ T6456] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.891517][ T6508] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 140.030330][ T4562] syz-executor: attempt to access beyond end of device [ 140.030330][ T4562] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.100513][ T6516] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.730'. [ 140.103100][ T6516] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.730'. [ 140.462840][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.469107][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.503133][ T6539] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 140.765484][ T4021] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.771954][ T6549] netlink: 'syz.3.746': attribute type 10 has an invalid length. [ 140.817111][ T6549] team0: Port device netdevsim0 added [ 140.878338][ T6541] loop4: detected capacity change from 0 to 40427 [ 140.910787][ T6541] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.961953][ T6541] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.125629][ T4021] usb 1-1: config 0 interface 0 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 141.128478][ T4021] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.295944][ T4021] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 141.299989][ T4021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.302676][ T4021] usb 1-1: Product: syz [ 141.309403][ T4021] usb 1-1: Manufacturer: syz [ 141.317392][ T4021] usb 1-1: SerialNumber: syz [ 141.337123][ T4021] usb 1-1: config 0 descriptor?? [ 141.413678][ T4021] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 141.416838][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 141.418863][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 141.422210][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 141.424238][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 141.426801][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 141.428668][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 141.430671][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 141.433355][ T4021] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 141.438091][ T4562] syz-executor: attempt to access beyond end of device [ 141.438091][ T4562] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.457088][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 141.459204][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 141.461031][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 141.463008][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 141.464972][ T4021] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 141.479312][ T4021] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 141.623876][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.630077][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.036006][ T4238] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 142.039113][ T4238] Bluetooth: hci6: Injecting HCI hardware error event [ 142.042367][ T4238] Bluetooth: hci6: hardware error 0x00 [ 142.395793][ T6606] loop1: detected capacity change from 0 to 512 [ 142.398353][ T6606] ======================================================= [ 142.398353][ T6606] WARNING: The mand mount option has been deprecated and [ 142.398353][ T6606] and is ignored by this kernel. Remove the mand [ 142.398353][ T6606] option from the mount to silence this warning. [ 142.398353][ T6606] ======================================================= [ 142.421945][ T6606] EXT4-fs (loop1): orphan cleanup on readonly fs [ 142.423940][ T6606] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.768: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 142.430911][ T6606] EXT4-fs error (device loop1): ext4_quota_enable:6971: comm syz.1.768: Bad quota inode: 4, type: 1 [ 142.434339][ T6606] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 142.439963][ T6606] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 142.442269][ T6606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.480598][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 142.768812][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.772411][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.804989][ T6604] loop2: detected capacity change from 0 to 40427 [ 142.854638][ T6604] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.889815][ T6604] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.260532][ T4228] syz-executor: attempt to access beyond end of device [ 143.260532][ T4228] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.346186][ T4021] usb 1-1: USB disconnect, device number 5 [ 143.355615][ T4021] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 143.367582][ T4021] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 143.370309][ T4021] keyspan 1-1:0.0: device disconnected [ 143.453606][ T6637] loop3: detected capacity change from 0 to 32768 [ 143.465988][ T6637] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.779 (6637) [ 143.477311][ T6637] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.480747][ T6637] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 143.483116][ T6637] BTRFS info (device loop3): using free space tree [ 143.697104][ T6637] BTRFS info (device loop3): enabling ssd optimizations [ 143.720261][ T4227] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.837950][ T6681] netlink: 47 bytes leftover after parsing attributes in process `syz.2.791'. [ 143.875029][ T6681] syz.2.791 uses obsolete (PF_INET,SOCK_PACKET) [ 143.940706][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.943237][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.266192][ T4238] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 144.403694][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.406321][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.777327][ T6700] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.798'. [ 144.779913][ T6700] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.798'. [ 144.929055][ T6702] loop1: detected capacity change from 0 to 32768 [ 144.933731][ T6702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.799 (6702) [ 144.945538][ T6702] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.948199][ T6702] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 144.950384][ T6702] BTRFS info (device loop1): using free space tree [ 144.952587][ T6708] IPv6: addrconf: prefix option has invalid lifetime [ 145.110512][ T6702] BTRFS info (device loop1): enabling ssd optimizations [ 145.160419][ T4225] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.507451][ T6747] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.812'. [ 145.510171][ T6747] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.812'. [ 145.590217][ T6741] loop4: detected capacity change from 0 to 40427 [ 145.597251][ T6741] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.634146][ T6741] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.136889][ T4562] syz-executor: attempt to access beyond end of device [ 146.136889][ T4562] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.228671][ T6770] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.823'. [ 146.231263][ T6770] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.823'. [ 146.615386][ T4293] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 146.740718][ T6791] loop1: detected capacity change from 0 to 40427 [ 146.766281][ T6791] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.785198][ T6791] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 146.985912][ T4293] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 146.988466][ T4293] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.991511][ T4293] usb 1-1: config 0 has no interface number 0 [ 147.010210][ T4293] usb 1-1: config 0 interface 106 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 147.015557][ T4293] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 147.018324][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.042051][ T4293] usb 1-1: config 0 descriptor?? [ 147.114123][ T4293] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 147.303929][ T4293] usb 1-1: USB disconnect, device number 6 [ 147.305809][ T9] usb 1-1: Failed to submit usb control message: -71 [ 147.308038][ T9] usb 1-1: unable to send the bmi data to the device: -71 [ 147.310963][ T9] usb 1-1: unable to get target info from device [ 147.316514][ T9] usb 1-1: could not get target info (-71) [ 147.327729][ T9] usb 1-1: could not probe fw (-71) [ 147.404080][ T4225] syz-executor: attempt to access beyond end of device [ 147.404080][ T4225] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.716911][ T6818] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.838'. [ 147.719344][ T6818] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.838'. [ 148.077183][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.079631][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.178455][ T6843] loop4: detected capacity change from 0 to 4096 [ 148.241868][ T6848] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.260035][ T6846] loop2: detected capacity change from 0 to 4096 [ 148.288992][ T6849] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.467239][ T6858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.470008][ T6858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.478461][ T6855] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.853'. [ 148.514574][ T6859] loop1: detected capacity change from 0 to 4096 [ 148.956620][ T6884] __nla_validate_parse: 1 callbacks suppressed [ 148.956635][ T6884] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.866'. [ 148.961408][ T6884] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.866'. [ 149.037769][ T6888] loop1: detected capacity change from 0 to 1024 [ 149.043239][ T6888] EXT4-fs: Ignoring removed bh option [ 149.063842][ T6888] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 149.070334][ T6888] EXT4-fs (loop1): group descriptors corrupted! [ 149.126267][ T5739] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.649762][ T6924] device pim6reg1 entered promiscuous mode [ 150.264584][ T6958] vivid-000: disconnect [ 150.288790][ T6958] vivid-000: reconnect [ 151.138074][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 151.175517][ T6998] vivid-000: disconnect [ 151.184248][ T6998] vivid-000: reconnect [ 151.797544][ T7017] loop4: detected capacity change from 0 to 32768 [ 151.807042][ T7011] loop1: detected capacity change from 0 to 32768 [ 151.809310][ T7011] XFS: ikeep mount option is deprecated. [ 151.811265][ T7011] XFS: ikeep mount option is deprecated. [ 151.812152][ T7017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.920 (7017) [ 151.833675][ T7017] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.836672][ T7017] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 151.839082][ T7017] BTRFS info (device loop4): using free space tree [ 151.852702][ T7011] XFS (loop1): Mounting V5 Filesystem [ 151.919974][ T7011] XFS (loop1): Ending clean mount [ 151.934513][ T7011] XFS (loop1): Quotacheck needed: Please wait. [ 151.942735][ T7017] BTRFS info (device loop4): enabling ssd optimizations [ 151.975603][ T4562] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.987095][ T7011] XFS (loop1): Quotacheck: Done. [ 152.080396][ T4225] XFS (loop1): Unmounting Filesystem [ 152.105558][ T4021] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.465520][ T4021] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 152.467892][ T4021] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.470560][ T4021] usb 1-1: config 0 has no interface number 0 [ 152.472175][ T4021] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 152.474626][ T4021] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 152.486488][ T4021] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 152.505858][ T4021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.516162][ T4021] usb 1-1: config 0 descriptor?? [ 152.540841][ T4243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.544759][ T4243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.548542][ T4243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.551578][ T4243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.553979][ T4243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.556559][ T4243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.560393][ T4021] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 153.448215][ T4280] usb 1-1: USB disconnect, device number 7 [ 153.455387][ T4794] usb 1-1: Failed to submit usb control message: -71 [ 153.457418][ T4794] usb 1-1: unable to send the bmi data to the device: -71 [ 153.459272][ T4794] usb 1-1: unable to get target info from device [ 153.460898][ T4794] usb 1-1: could not get target info (-71) [ 153.462514][ T4794] usb 1-1: could not probe fw (-71) [ 153.489699][ T175] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.703163][ T175] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.810779][ T175] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.966978][ T175] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.984364][ T7077] chnl_net:caif_netlink_parms(): no params data found [ 153.984377][ T7096] loop2: detected capacity change from 0 to 32768 [ 153.992084][ T7096] XFS: ikeep mount option is deprecated. [ 153.993652][ T7096] XFS: ikeep mount option is deprecated. [ 154.008624][ T7096] XFS (loop2): Mounting V5 Filesystem [ 154.605161][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.606703][ T4238] Bluetooth: hci4: command tx timeout [ 154.651593][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.841650][ T7077] device bridge_slave_0 entered promiscuous mode [ 154.859925][ T7096] XFS (loop2): Ending clean mount [ 154.863945][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.866466][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.869156][ T7077] device bridge_slave_1 entered promiscuous mode [ 154.906904][ T7096] XFS (loop2): Quotacheck needed: Please wait. [ 154.919724][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.925930][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.954396][ T7096] XFS (loop2): Quotacheck: Done. [ 155.041172][ T4228] XFS (loop2): Unmounting Filesystem [ 155.090292][ T7077] team0: Port device team_slave_0 added [ 155.120758][ T7077] team0: Port device team_slave_1 added [ 155.139895][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.141757][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.148606][ T7077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.167817][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.169823][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.193288][ T7077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.317418][ T7077] device hsr_slave_0 entered promiscuous mode [ 155.323910][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.334676][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.337966][ T7077] device hsr_slave_1 entered promiscuous mode [ 155.348940][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.353076][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.358839][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.362835][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.385750][ T7077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.388833][ T7077] Cannot create hsr debugfs directory [ 155.471595][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.474280][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.682350][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.687835][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.906064][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.908402][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.570762][ T7077] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.597445][ T7077] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.617338][ T7077] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.672532][ T4243] Bluetooth: hci4: command tx timeout [ 156.864199][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.873473][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.131688][ T7077] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.141697][ T7262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.153095][ T7262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.587290][ T7285] device ip6gretap1 entered promiscuous mode [ 157.794204][ T175] device hsr_slave_0 left promiscuous mode [ 157.861543][ T175] device hsr_slave_1 left promiscuous mode [ 157.872501][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.877342][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.942476][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.944610][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.963530][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.965816][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.976282][ T175] device bridge_slave_1 left promiscuous mode [ 157.977980][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.012578][ T175] device bridge_slave_0 left promiscuous mode [ 158.014546][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.165642][ T175] device veth1_macvtap left promiscuous mode [ 158.167395][ T175] device veth0_macvtap left promiscuous mode [ 158.169092][ T175] device veth1_vlan left promiscuous mode [ 158.170711][ T175] device veth0_vlan left promiscuous mode [ 158.745457][ T4240] Bluetooth: hci4: command tx timeout [ 158.745540][ T4229] Bluetooth: hci0: command 0x0406 tx timeout [ 158.746946][ T4240] Bluetooth: hci3: command 0x0406 tx timeout [ 158.748622][ T4229] Bluetooth: hci1: command 0x0406 tx timeout [ 160.128649][ T175] team0 (unregistering): Port device team_slave_1 removed [ 160.297697][ T175] team0 (unregistering): Port device team_slave_0 removed [ 160.476127][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.686285][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.825428][ T4238] Bluetooth: hci4: command tx timeout [ 163.159451][ T175] bond0 (unregistering): Released all slaves [ 163.396771][ T7329] device bridge_slave_1 left promiscuous mode [ 163.399807][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.501946][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.520960][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.523678][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.534292][ T7077] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.564947][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.567754][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.570626][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.572546][ T7059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.573660][ T7354] loop3: detected capacity change from 0 to 16 [ 163.574869][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.610745][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.613463][ T7354] erofs: (device loop3): mounted with root inode @ nid 36. [ 163.613683][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.626630][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.628626][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.630970][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.679469][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.682325][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.688825][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.692047][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.695155][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.704116][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.706986][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.714123][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.716889][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.723170][ T7077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.734046][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.845439][ T4280] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.907259][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.909508][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.919234][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.054919][ T7373] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 164.056960][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 164.059728][ T7373] vhci_hcd vhci_hcd.0: Device attached [ 164.070448][ T7379] vhci_hcd: connection closed [ 164.078599][ T4605] vhci_hcd: stop threads [ 164.088487][ T4605] vhci_hcd: release socket [ 164.089963][ T4605] vhci_hcd: disconnect device [ 164.144081][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.154777][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.174571][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.177726][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.180545][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.183308][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.189413][ T7077] device veth0_vlan entered promiscuous mode [ 164.200928][ T7077] device veth1_vlan entered promiscuous mode [ 164.235736][ T4280] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 164.235894][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.238342][ T4280] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.240658][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.242793][ T4280] usb 1-1: config 0 has no interface number 0 [ 164.248515][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.250984][ T4280] usb 1-1: config 0 interface 106 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 164.251304][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.257176][ T4280] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 164.259970][ T7077] device veth0_macvtap entered promiscuous mode [ 164.263941][ T4280] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 164.264620][ T7077] device veth1_macvtap entered promiscuous mode [ 164.290315][ T4280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.290891][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.298304][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.300924][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.303704][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.308716][ T4280] usb 1-1: config 0 descriptor?? [ 164.308811][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.313063][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.320161][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.323504][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.327155][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.333416][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.337726][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.340257][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.342829][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.345571][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.348822][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.354049][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.361957][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.364632][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.368925][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.371712][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.373701][ T4280] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 164.389637][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.392299][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.395208][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.398157][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.400960][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.409247][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.458597][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.477134][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.486264][ T7077] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.489375][ T7077] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.492758][ T7077] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.494907][ T7077] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.517670][ T7387] device syzkaller0 entered promiscuous mode [ 164.564516][ T4622] usb 1-1: USB disconnect, device number 8 [ 164.565384][ T9] usb 1-1: Failed to submit usb control message: -71 [ 164.567859][ T9] usb 1-1: unable to send the bmi data to the device: -71 [ 164.569651][ T9] usb 1-1: unable to get target info from device [ 164.571246][ T9] usb 1-1: could not get target info (-71) [ 164.572765][ T9] usb 1-1: could not probe fw (-71) [ 165.475411][ T6367] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.866306][ T6367] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.868670][ T6367] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.871376][ T6367] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.873746][ T6367] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.006632][ T6367] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.009146][ T6367] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.011349][ T6367] usb 1-1: Product: syz [ 166.012504][ T6367] usb 1-1: Manufacturer: syz [ 166.056104][ T6367] cdc_wdm 1-1:1.0: skipping garbage [ 166.057644][ T6367] cdc_wdm 1-1:1.0: skipping garbage [ 166.066000][ T6367] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 166.067531][ T6367] cdc_wdm 1-1:1.0: Unknown control protocol [ 166.315368][ T5129] usb 1-1: USB disconnect, device number 9 [ 166.315456][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 166.318920][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 166.320447][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 174.105482][ T4238] Bluetooth: hci5: command 0x0406 tx timeout [ 175.054329][ T4238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.063621][ T4238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.066906][ T4238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.072159][ T4238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.074568][ T4238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 175.082639][ T4238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.108034][ T4229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.112331][ T4229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.114946][ T4229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.120643][ T4229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.123677][ T4229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 175.130559][ T4229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.136562][ T4238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 175.141241][ T4238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 175.144615][ T4238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 175.147974][ T4238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 175.150369][ T4238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 175.153164][ T4238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 176.127777][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.129934][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.148655][ T4648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.150997][ T4648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.321928][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.324410][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.025485][ T6367] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 177.147966][ T4229] Bluetooth: hci7: command tx timeout [ 177.149835][ T4238] Bluetooth: hci6: command tx timeout [ 177.225436][ T4229] Bluetooth: hci8: command tx timeout [ 177.275688][ T7414] chnl_net:caif_netlink_parms(): no params data found [ 177.385832][ T6367] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 177.388260][ T6367] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.390808][ T6367] usb 1-1: config 0 has no interface number 0 [ 177.393536][ T6367] usb 1-1: config 0 interface 106 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 177.396397][ T6367] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 177.399800][ T6367] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 177.402188][ T6367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.413575][ T6367] usb 1-1: config 0 descriptor?? [ 177.450426][ T6367] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 177.586762][ T7420] chnl_net:caif_netlink_parms(): no params data found [ 177.605711][ T7417] chnl_net:caif_netlink_parms(): no params data found [ 177.670607][ T4280] usb 1-1: USB disconnect, device number 10 [ 177.681382][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.683911][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.685512][ T4398] usb 1-1: Failed to submit usb control message: -71 [ 177.687938][ T4398] usb 1-1: unable to send the bmi data to the device: -71 [ 177.689772][ T4398] usb 1-1: unable to get target info from device [ 177.691382][ T4398] usb 1-1: could not get target info (-71) [ 177.696873][ T4398] usb 1-1: could not probe fw (-71) [ 177.713627][ T175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.773482][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.775659][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.778427][ T7414] device bridge_slave_0 entered promiscuous mode [ 177.847836][ T175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.861822][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.863823][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.867052][ T7414] device bridge_slave_1 entered promiscuous mode [ 177.869834][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.871790][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.874608][ T7420] device bridge_slave_0 entered promiscuous mode [ 177.878986][ T7417] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.880872][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.884790][ T7417] device bridge_slave_0 entered promiscuous mode [ 177.890051][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.892471][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.895300][ T7417] device bridge_slave_1 entered promiscuous mode [ 177.903616][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.907009][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.909608][ T7420] device bridge_slave_1 entered promiscuous mode [ 177.967169][ T175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.985053][ T7414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.989713][ T7414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.998862][ T7417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.003456][ T7417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.060797][ T175] team0: Port device netdevsim0 removed [ 178.064134][ T175] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.071929][ T7420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.087648][ T7420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.095190][ T7414] team0: Port device team_slave_0 added [ 178.109699][ T7414] team0: Port device team_slave_1 added [ 178.122269][ T7417] team0: Port device team_slave_0 added [ 178.138657][ T7417] team0: Port device team_slave_1 added [ 178.140810][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.142725][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.150613][ T7414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.162510][ T7420] team0: Port device team_slave_0 added [ 178.169918][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.171962][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.179422][ T7414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.186242][ T7420] team0: Port device team_slave_1 added [ 178.226787][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.228911][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.249248][ T7417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.256669][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.258433][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.264961][ T7420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.274299][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.276964][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.284083][ T7417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.302863][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.304590][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.317244][ T7420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.398035][ T7414] device hsr_slave_0 entered promiscuous mode [ 178.435862][ T7414] device hsr_slave_1 entered promiscuous mode [ 178.476484][ T7414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.478621][ T7414] Cannot create hsr debugfs directory [ 178.678019][ T175] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.717127][ T7420] device hsr_slave_0 entered promiscuous mode [ 178.755713][ T7420] device hsr_slave_1 entered promiscuous mode [ 178.785539][ T7420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.787758][ T7420] Cannot create hsr debugfs directory [ 178.817565][ T7417] device hsr_slave_0 entered promiscuous mode [ 178.855780][ T7417] device hsr_slave_1 entered promiscuous mode [ 178.885509][ T7417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.887797][ T7417] Cannot create hsr debugfs directory [ 178.894447][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1037'. [ 178.968783][ T175] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.092419][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.094906][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.119422][ T175] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.225939][ T4229] Bluetooth: hci7: command tx timeout [ 179.235536][ T4229] Bluetooth: hci6: command tx timeout [ 179.247724][ T175] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.264201][ T7417] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.306137][ T4238] Bluetooth: hci8: command tx timeout [ 179.313869][ T7417] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.359615][ T7417] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.365596][ T7059] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 179.422680][ T7417] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.605346][ T7059] usb 1-1: Using ep0 maxpacket: 32 [ 179.755544][ T7059] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 179.757644][ T7059] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 179.759879][ T7059] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.762466][ T7059] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 179.764796][ T7059] usb 1-1: config 1 has no interface number 0 [ 179.767099][ T7059] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 179.769423][ T7059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.843135][ T7059] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 180.055837][ T7059] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 180.058146][ T7059] snd_usb_pod 1-1:1.1: invalid control EP [ 180.059607][ T7059] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 180.062083][ T7059] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 180.064194][ T7059] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 180.278463][ T110] usb 1-1: USB disconnect, device number 11 [ 181.309613][ T4238] Bluetooth: hci6: command tx timeout [ 181.309649][ T4229] Bluetooth: hci7: command tx timeout [ 181.395377][ T4229] Bluetooth: hci8: command tx timeout [ 183.385373][ T4229] Bluetooth: hci7: command tx timeout [ 183.385478][ T4231] Bluetooth: hci6: command tx timeout [ 183.465454][ T4238] Bluetooth: hci8: command tx timeout [ 187.386542][ T2048] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.388198][ T2048] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.187628][ T4229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.206434][ T4229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.209969][ T4229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.213229][ T4229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.215977][ T4229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 190.218685][ T4229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.251444][ T4238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.255461][ T4238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.258616][ T4238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.261835][ T4238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.264187][ T4238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 192.266271][ T4231] Bluetooth: hci0: command tx timeout [ 192.269287][ T4231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.345941][ T4231] Bluetooth: hci2: command tx timeout [ 194.347810][ T4231] Bluetooth: hci0: command tx timeout [ 196.345552][ T28] INFO: task syz-executor:4226 blocked for more than 143 seconds. [ 196.347664][ T28] Not tainted 6.1.96-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 196.357817][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 196.360073][ T28] task:syz-executor state:D stack:0 pid:4226 ppid:1 flags:0x00000009 [ 196.362518][ T28] Call trace: [ 196.363446][ T28] __switch_to+0x320/0x754 [ 196.364571][ T28] __schedule+0xee4/0x1c98 [ 196.377661][ T28] schedule+0xc4/0x170 [ 196.378853][ T28] schedule_timeout+0x1d8/0x344 [ 196.380096][ T28] gfs2_gl_hash_clear+0x178/0x2e0 [ 196.381391][ T28] gfs2_put_super+0x640/0x6d4 [ 196.382627][ T28] generic_shutdown_super+0x130/0x328 [ 196.384011][ T28] kill_block_super+0x70/0xdc [ 196.385197][ T28] gfs2_kill_sb+0xc0/0xd4 [ 196.410483][ T28] deactivate_locked_super+0xac/0x124 [ 196.416007][ T28] deactivate_super+0xf0/0x110 [ 196.417272][ T28] cleanup_mnt+0x394/0x41c [ 196.418417][ T28] __cleanup_mnt+0x20/0x30 [ 196.419593][ T28] task_work_run+0x240/0x2f0 [ 196.420855][ T28] do_notify_resume+0x2148/0x3474 [ 196.422157][ T28] el0_svc+0x9c/0x168 [ 196.423167][ T28] el0t_64_sync_handler+0x84/0xf0 [ 196.424351][ T28] el0t_64_sync+0x18c/0x190 [ 196.425623][ T4229] Bluetooth: hci0: command tx timeout [ 196.426607][ T28] [ 196.426607][ T28] Showing all locks held in the system: [ 196.427159][ T4229] Bluetooth: hci2: command tx timeout [ 196.429198][ T28] 1 lock held by rcu_tasks_kthre/12: [ 196.431961][ T28] #0: ffff800015a24e70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 196.434663][ T28] 1 lock held by rcu_tasks_trace/13: [ 196.436772][ T28] #0: ffff800015a25670 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 196.440351][ T28] 1 lock held by khungtaskd/28: [ 196.441646][ T28] #0: ffff800015a24ca0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 196.444006][ T28] 3 locks held by kworker/0:2/110: [ 196.445814][ T28] #0: ffff0000d5b1b538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 196.448741][ T28] #1: ffff80001d997c20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 196.452081][ T28] #2: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 196.454238][ T28] 3 locks held by kworker/u4:3/175: [ 196.456103][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 196.458749][ T28] #1: ffff80001dda7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 196.461270][ T28] #2: ffff800017e26310 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x994 [ 196.463630][ T28] 1 lock held by dhcpcd/3896: [ 196.464874][ T28] #0: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 196.467706][ T28] 2 locks held by getty/3990: [ 196.468934][ T28] #0: ffff0000d8580098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 196.471520][ T28] #1: ffff80001bd202f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 196.474156][ T28] 1 lock held by syz-executor/4226: [ 196.476017][ T28] #0: ffff0000c3d420e0 (&type->s_umount_key#46){++++}-{3:3}, at: deactivate_super+0xe8/0x110 [ 196.478715][ T28] 3 locks held by kworker/u4:7/4398: [ 196.480083][ T28] #0: ffff0000d9e36938 ((wq_completion)phy14){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 196.482743][ T28] #1: ffff80001ecd7c20 ((work_completion)(&sdata->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 196.486268][ T28] #2: ffff0000e7f98d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_rx_queued_mgmt+0x100/0x27a0 [ 196.489002][ T28] 2 locks held by kworker/0:13/7059: [ 196.490441][ T28] #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 196.493197][ T28] #1: ffff80001ec47c20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 196.496589][ T28] 5 locks held by syz-executor/7414: [ 196.497976][ T28] #0: ffff0000d87ba460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x914 [ 196.500278][ T28] #1: ffff0000dd681488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 196.502655][ T28] #2: ffff0000d0064748 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 196.504871][ T28] #3: ffff800017226768 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 196.507668][ T28] #4: ffff0000eb9020e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xbc/0x724 [ 196.510381][ T28] 4 locks held by syz-executor/7417: [ 196.511739][ T28] 4 locks held by syz-executor/7420: [ 196.513022][ T28] #0: ffff0000d87ba460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x914 [ 196.515769][ T28] #1: ffff0000ec13e088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 196.518357][ T28] #2: ffff0000d0064748 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 196.520939][ T28] #3: ffff800017226768 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 196.523499][ T28] 1 lock held by syz.4.1043/7525: [ 196.524771][ T28] #0: ffff0000c0563810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 196.528461][ T28] 2 locks held by dhcpcd/7590: [ 196.529680][ T28] #0: ffff0000ec9d6130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x4c/0xb58 [ 196.532211][ T28] #1: ffff800015a2a278 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3e0/0x77c [ 196.535002][ T28] 5 locks held by syz.0.1049/7618: [ 196.536918][ T28] #0: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 196.539059][ T28] #1: ffff0000eafc07c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: __cfg80211_wext_siwfreq+0xe0/0x654 [ 196.542317][ T28] #2: ffff0000e7f98d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_ibss_wext_siwfreq+0x1b8/0x32c [ 196.545072][ T28] #3: ffff0000eafc17a0 (&local->sta_mtx){+.+.}-{3:3}, at: __sta_info_flush+0x164/0x468 [ 196.554534][ T28] #4: ffff800015a2a278 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x30c/0x77c [ 196.558049][ T28] 1 lock held by syz-executor/7624: [ 196.559501][ T28] #0: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 196.561943][ T28] 1 lock held by syz-executor/7630: [ 196.563307][ T28] #0: ffff800017e32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 196.574475][ T28] [ 196.575096][ T28] ============================================= [ 196.575096][ T28] [ 196.577601][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 196.579363][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0 [ 196.581363][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 196.583954][ T28] Call trace: [ 196.584776][ T28] dump_backtrace+0x1c8/0x1f4 [ 196.585915][ T28] show_stack+0x2c/0x3c [ 196.586952][ T28] dump_stack_lvl+0x108/0x170 [ 196.588195][ T28] dump_stack+0x1c/0x5c [ 196.589296][ T28] panic+0x300/0x804 [ 196.590325][ T28] hung_task_panic+0x0/0x2c [ 196.591513][ T28] kthread+0x250/0x2d8 [ 196.592573][ T28] ret_from_fork+0x10/0x20 [ 196.593750][ T28] SMP: stopping secondary CPUs [ 196.595038][ T28] Kernel Offset: disabled [ 196.596092][ T28] CPU features: 0x00000,02070084,26017203 [ 196.597543][ T28] Memory Limit: none [ 197.249803][ T28] Rebooting in 86400 seconds..