last executing test programs: 24.807413274s ago: executing program 3 (id=232): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) unshare(0x62040200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000100)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$eJzs3EtvVGUfAPD/mbaUvtC3fXm9cVFG0dhopLRcFy6AaMLGxERjcFnbQpAChtYESCPFGEhcaPgEXnYmfgJXujFqXGjcStwaE2K6AV2YY87MmTrt6fTGtGPp75fM8JzbPM//nPMwz2VOA9iwytlbErE1In6OiJ7q4uwdytV/7k5PDv8xPTmcRJq+8ntS2e/O9ORwbdfacVvyhb5SROm9JHYWs+0cv3zl7NDY2OjFfEX/RClPnRs6PXp69PzgkSMH9ncdPjR4sClxZmW6s+OdC7u2n3j95kvDJ2++8e3nWXnTfHt9HFW9lfdNS86hrbCmHOXZ57LOU0sv+rrQXZdO2rP3UusKw5Jld212uToq9b8n2ipLVT3x4rstLRywqtI0TTsLa2e+y6bSeklSPSBNr6XAfSCJVpcAaI3aF/2d6aynOjlc7Aff324fi0oPKIv7bv6qbmmv9GDLvdW+Uccq5f9ARJyc+vOj7BXzjkMAADTXl8cibhyvtjtqr+qWUjxUt99/87mh3oj4X0Rsi4j/5+2XByMq+z4cEY/UHdO9hFmA8pzlYvvnx648Ud9cbZqs/fd8Prc1u/03U/LetnypuxJ/R3LqzNjovvyc9EVHZ7Y8UPzomWG1r1746cNG+Zfr2n/ZK8u/1hbMy/Fb+5wBupGhiaF7jbvm9rXKib1ajD+J9qSWitgeETtW8PnZOTvzzGe7Gm2fFX8WZyH+Dxp/ePsKCjRH+knE09XrPxVz4o98/i+pzE+ee6t//PKV587Uz08OHD40eLB/c4yN7uuv3RVF3/1w/eU8WehGLHD9a1VjVSfSsuv/n3nv/5mZy94sNTNfO778PK7futGwT7PS+39T8molXZufvTQ0MXFxIGJTMlVcP/jPsZeGumbtn8Xft2f++r8t4q+P8+N2RkR2Ez8aEY9FxO687I9HxBMRsWeB+L85/uSbjbqQi8e/urL4R5Z1/Rsljn4fMf+mtrNff1HI+P1yIf6OaHT9D1RSffmakaGJzYvFtVBJ6xP3fAIBAABgHdgdEVsjKe3NB5q2Rqm0d2/ElpkRlPGJZ09dePv8SPUZgd7oKNVGunrqxkMH8rHhbDk7arBuOdu+vzJunKZp2pUtZ/33se7Whg4b3pYG9T/za/GRFuB+s6x5tEZPtAHr0tz6f2vJRzb/BxnA2mrC72iAdUr9h41ryfV/tZ6CA1pmvvp/NeJuC4oCrLH56v9rhTVH16QswNrS/4eNa+X1348BYL3z/Q8b0pIekl9BYtuJBfZJ2lcn08aJUiz8VwB6I2pram2ahT/wl1JEc0rY1tRIu2Zd09K8+2yOZuQVpUX3aV/GH2JY20Tp31GMaqIzIha5e2dutqu1xJXVLlilEnza2v+dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7t3fAQAA///tUdPr") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 23.318687796s ago: executing program 3 (id=239): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_buf(r1, 0x29, 0x4d, 0x0, &(0x7f00000000c0)) 22.981964424s ago: executing program 3 (id=241): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000095) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xc0, 0x0, &(0x7f0000000480)="9f44948721919580684010a405dda2717060ce495279829e885d4ce90c523581d5176139cbff678c665c39a4a355cf7be014c74aab5afc1173fca09b436f7a26cdd634e101abbef0db144b8f2d5abd18ada30460ba731fab3bf7bf7fb419a6769cc6cf4906308db105d0b503ffb7e64f5fc98b0f48b8ad2a4ed10782a8cbce676147e697f36e08fd1a24b93de910fa2faa41a69cfb8d9a760657287681921e332f941874c9b33a489c570917e3b3e82d600d5c1ba4a70373695d4b54e33cfae1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r6, 0x401, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/299, @ANYRES8=r6, @ANYRESOCT=r4], 0x0) 20.737222478s ago: executing program 2 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4c, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 20.621574898s ago: executing program 2 (id=253): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706", 0x200) sendfile(r0, r1, 0x0, 0xe065) syz_open_dev$MSR(0x0, 0x5, 0x0) sendfile(r0, r1, 0x0, 0xffff) read(0xffffffffffffffff, &(0x7f0000019440)=""/102391, 0x18ff7) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) 19.194000095s ago: executing program 3 (id=259): socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}}, 0x18) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000005c0)=""/232, &(0x7f0000000180)=0xe8) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x24, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r5, 0x8943, &(0x7f0000000040)="d7e2d4a43a") r6 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r6, 0x1, 0xfffffffc, 0xfffffffd}, 0x14}}, 0x0) 19.165635177s ago: executing program 2 (id=260): syz_mount_image$ext4(&(0x7f00000007c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x546, &(0x7f0000000200)="$eJzs3d1rZGcZAPDnTGaym91oovaiCv3AFnaLdmbTtW3woq0g3hWUer+G7GwIO8ksmUndhKJZvBZBRIt3vfJG8A8QpHfeilDQG69ERSm61Ysi6pHzkY2Tnmkm7kxGM78fvDnv+Xyedz7OnJnz5pwAZtaTEfFKRMxFxDMRsVROr5UlDoqSLffe/TfWs5JEmr725ySSclq2WFKWzOVytYvFoFJvb//2WqfT3inHW/2tO63e3v6zm1trG+2N9vb16ysvrL64+vzqtYq16yO07N7AWNaul774h+9/50dfeulnn/36b2/86eo3snwXy/mH7Ri34jFpZI/FA1n2O5MINgVzZXsa004EAICRZMf4H4+IT+fH/0sxN9KxdSGZaGYAAADAuKQvL8Y/kogUAAAAOLdqeR/YpNYs+wIsRq3WbBZ9eB+JS7VOt9f/zK3u7vbNoq/scjRqtzY77WvzRZ/a5Wgk2fhKXj8af+7BeDLQB/h7Swv5/OZ6t3Nzej97AAAAwEy5fOz7/9+Wiu//H+JemqbpmSUIAAAAjMfytBMAAAAAJu6D3//fmkoeAAAAwOQ4/w8AAADn2pdffTUr6eH9r2++vrd7u/v6z6Pdu93c2l1vrnd37jQ3ut2NTnohYuuk7XW63Tufi+3du61+u9dv9fb2b2x1d7f7NzYHboENAAAAnKGPPfH2r5OIOPj8Ql4y89mfuSErFH0FameXITApp3oj/35yeQBnb9jH/AfVJ5oHcPa8q2F2NYpBcvKSf3fNfzinTtoBDO2884vx5wIAAEzGlU9Wn/+vH/02AJxTOvLA7Br9/D9w3jj/D7Or4QgAZtrCCMscO/9/1F1g5PP/adl/aN6FQAAAYEoW85LUmuW5wMWovZ8WYjkaya3NTvtaRHw0In611LiQja/kayaj/NMAAAAAAAAAAAAAAAAAAAAAAAAAAJBflTuJFAAAADjXImp/TMobel1Zenrx+O8D88n7S/kwvzvAaz+4u9bv76xk0/9STo/ov1lOf+40vzy48zgAAABMSv49/dvlcGXa2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw3rx3/431w3KWcd/9QkQsV8Wvx8V8eDEaEXHpr0nUD1d6IiKJiLkxxD+4FxGPVsVPsrRiucxiIH5E1CJiIc9i4vEfS9O0Mv7lh44Os+3tbP/zStX7rxZP5sPq93+9LA9r+P6v9mD/N1cRP9vzfGTEGJ965yet6jkXivn16v3PYfxkSPynqjZZ8aB87av7+8NyS9+KuFL5+ZMMxGr1t+60env7z25urW20N9rb16+vvLD64urzq9datzY77fJvZYzvPvbTfw2L/+69iEtD4i8Ptn/tePufziqNYVs+8s937t7/RFFtHNtEHv/qU9XP/6OD8Qce2rn4ZrlUsaErh/WDov6fHv/xLx//sPbfHNL+k57/qyc3PffMV771u7KajrgKADBBvb3922udTnvn9JWF0631Zpqm/3WsU1ayI+Yhs37zw6LhY4iVHR+NIedHhqX6v1x5+TQLpxeqXmzjeAr+Pyv1h3/Z1Ia/wsdUmepuCQAAmICjg/5pZwIAAAAAAAAAAAAAAAAAAACz6ywueHY85kExmJ9CcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhvp3AAAA//+Ontro") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000780)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) rmdir(&(0x7f0000001100)='./file1\x00') 19.062523716s ago: executing program 0 (id=261): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003900)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bbf, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in=@local}}]}, 0x50}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r3}, &(0x7f0000000540), 0x0}, 0x20) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xfff, @private1, 0x6}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000500)={r4, 0x48, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0xad2c, @loopback, 0x1}, @in6={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000540)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, 0x0, 0x40040) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000401000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280080001006772650018000280060003000000000006000e00000000000400"], 0x44}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) 18.661629618s ago: executing program 0 (id=265): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x1002) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x81, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f00000057c0)={0x2020}, 0x2020) 18.531737449s ago: executing program 1 (id=267): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2335], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xf, &(0x7f0000000280)=@ringbuf, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe40, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072beb3014cd3ec8a755c1e1380081ffad000000e8d50000000100000014000005002433106558d320d98a61a90021c9bf", 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x22) 18.52064041s ago: executing program 0 (id=268): r0 = syz_open_dev$video(&(0x7f0000005580), 0x7, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x9, @output}) 18.393401491s ago: executing program 0 (id=269): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0) 18.360401973s ago: executing program 1 (id=270): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000095) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xc0, 0x0, &(0x7f0000000480)="9f44948721919580684010a405dda2717060ce495279829e885d4ce90c523581d5176139cbff678c665c39a4a355cf7be014c74aab5afc1173fca09b436f7a26cdd634e101abbef0db144b8f2d5abd18ada30460ba731fab3bf7bf7fb419a6769cc6cf4906308db105d0b503ffb7e64f5fc98b0f48b8ad2a4ed10782a8cbce676147e697f36e08fd1a24b93de910fa2faa41a69cfb8d9a760657287681921e332f941874c9b33a489c570917e3b3e82d600d5c1ba4a70373695d4b54e33cfae1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r6, 0x401, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/299, @ANYRES8=r6, @ANYRESOCT=r4], 0x0) 17.247582764s ago: executing program 2 (id=271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00003e4000/0x4000)=nil, 0x4000, 0x0, 0x1000000000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) landlock_create_ruleset(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000140)=0x2, 0x18) 16.715556378s ago: executing program 4 (id=273): r0 = socket$inet6(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENT(r2, 0x0, 0x100) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r4, @ANYBLOB="00000a00100000801c001a80080002802d03fa0408000200f47b0c0d"], 0x44}, 0x1, 0x10000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 16.713566718s ago: executing program 0 (id=274): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}], 0x1, 0xb4, 0x0) 16.712197168s ago: executing program 3 (id=275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="660a00000000000061117a000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d480000000000000dd0000000000006301210000000000950000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=r1, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc3b, &(0x7f0000001100)="$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") mkdir(&(0x7f0000000440)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') rmdir(&(0x7f0000000040)='./control\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) rmdir(&(0x7f000001f7c0)='./control\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000c40)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004008000008000300", @ANYRES32=r5, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="050000e00000000000000000000008000300", @ANYRES32=r5, @ANYBLOB="3c000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000000040600000000000006020000760600000000000008000c006400000008000d00000000000a0034000202020202020000080035000000000008007e00000000000600960000000000"], 0x8c}}, 0x0) execve(&(0x7f0000000400)='./control/file0\x00', &(0x7f0000000ac0)=[&(0x7f0000000480)='^+\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='#! '], &(0x7f0000000bc0)=[&(0x7f0000000b00)='/dev/nullb0\x00', &(0x7f0000000b40)='vfat\x00', &(0x7f0000000b80)='.]\x00']) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000c80)=[{0x3, 0xa, 0x3, 0x8}, {0x7, 0xb5, 0xe}, {0x6, 0x1, 0x6, 0x7}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xffffffffffffff96) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000240)=@nullb, r6, 0x0) getrandom(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1004084, &(0x7f0000000540)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c726f6469722c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e39352c756e695f786c6174653d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c6e66732c756e695f786c6174653d312c756e695f786c6174653d312c6e66732c757466383d312c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c6e66732c726f6469722c726f6469722c6e6e6f6e75000000000000000000c61fbe7fae49c7", @ANYRES16=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC], 0x1, 0x2a6, &(0x7f0000000800)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 15.307965163s ago: executing program 0 (id=276): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2200002, &(0x7f0000000080), 0x1, 0x53c, &(0x7f00000025c0)="$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") creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0x4655, 0x0) getdents(r0, 0x0, 0x58) 13.77200455s ago: executing program 1 (id=277): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x10b67e, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ftruncate(r0, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r2 = socket(0x11, 0x2, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbe78969e3fdcf335263bdbcef549ba197fce47ddfc2553abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) getsockopt$nfc_llcp(r2, 0x107, 0x17, 0x0, 0x20600000) 13.513614031s ago: executing program 4 (id=278): setreuid(0x0, 0xee00) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="480000001400190c09044beafd0d58560284476080ffe00600060308590002a2bc5603ca00000f7f8900000020004c000101ff0000004309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 13.513317031s ago: executing program 4 (id=279): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x1, 0x55a3, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00+01']) 7.464438057s ago: executing program 2 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6e, 0x0, 0x0, 0x0}, 0x90) 7.463720547s ago: executing program 3 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09000000000000000000020000000900020073797a3100000000080004400000000f0900010073797a3000000000080003"], 0x64}}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r5 = epoll_create1(0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}]}, 0x38}}, 0x0) listen(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xa0179e12}) epoll_wait(r5, &(0x7f0000001080)=[{}], 0x1, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r8, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000300)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x8}, 0x90) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @dev}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000040068c301f3008000002b93c6fda75e8d"], 0x20}}, 0x0) 7.451406538s ago: executing program 2 (id=282): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000004c0)={[{@noquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@mblk_io_submit}, {@errors_continue}, {@errors_continue}, {@data_err_ignore}, {@delalloc}, {@jqfmt_vfsold}, {@norecovery}, {@errors_continue}, {@nouid32}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) fallocate(r0, 0x3, 0x80000, 0x8000c62) 4.9894392s ago: executing program 1 (id=284): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) pwritev(r0, &(0x7f0000002240)=[{&(0x7f00000001c0)="94", 0x8}], 0x1, 0x0, 0x0) 4.98878453s ago: executing program 4 (id=285): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001d40)=""/4090, 0xffa}], 0x1}, 0xfffffffe}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 1.530925014s ago: executing program 1 (id=286): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xa, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 1.502302526s ago: executing program 1 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, "24f593dd3001f9e44bc11e57b90cfd2b9097d8f23b5908bec2176075de954a8b1fe538e0e81ee12c3179201a06b92b360e2409d87fcbfc6dd4a85d4424b6e17f", 0x30}, 0x48, r1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket(0x2c, 0x3, 0x0) epoll_create1(0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x85132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000132000/0x4000)=nil, 0x4000) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mremap(&(0x7f0000a5d000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f000086d000/0x1000)=nil) munmap(&(0x7f00007ff000/0x800000)=nil, 0x800000) prlimit64(r0, 0x0, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 29.532127ms ago: executing program 4 (id=288): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) 0s ago: executing program 4 (id=289): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r3], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_pidfd_open(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): renamed from eth0 [ 81.876895][ T4022] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.899016][ T4022] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.943382][ T4022] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.025649][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.033814][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.053505][ T4012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.206644][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.222345][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.272340][ T4091] [U] ^C [ 82.297676][ T4022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.478710][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.495901][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.504904][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.513867][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.209456][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.225656][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 83.296724][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.323346][ T4012] device veth0_vlan entered promiscuous mode [ 83.331529][ T4022] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.407499][ T4012] device veth1_vlan entered promiscuous mode [ 83.415124][ T4103] loop3: detected capacity change from 0 to 512 [ 83.421986][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.430865][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.442605][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.451162][ T3983] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.458266][ T3983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.536018][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.544552][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.553875][ T4105] loop1: detected capacity change from 0 to 8192 [ 83.562828][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.569321][ T4103] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.578661][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.582411][ T4103] ext4 filesystem being mounted at /4/bus supports timestamps until 2038 (0x7fffffff) [ 83.599037][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.606601][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.623342][ T4105] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 83.645195][ T4105] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 83.657269][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.706019][ T4105] loop1: p2 p3 p4 [ 83.709779][ T4105] loop1: partition table partially beyond EOD, truncated [ 83.746458][ T4105] loop1: p2 start 452985600 is beyond EOD, truncated [ 83.756887][ T4105] loop1: p3 size 33554432 extends beyond EOD, truncated [ 83.777722][ T4105] loop1: p4 start 8388607 is beyond EOD, truncated [ 83.783261][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 83.824988][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.846451][ T4012] device veth0_macvtap entered promiscuous mode [ 83.889980][ T4012] device veth1_macvtap entered promiscuous mode [ 84.534097][ T3757] Bluetooth: hci4: command 0x0409 tx timeout [ 84.543815][ T4012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.564653][ T4012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.610975][ T4012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.632165][ T4012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.650229][ T4012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.663684][ T4012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.674989][ T4012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.685939][ T4012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.696248][ T4012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.706747][ T4012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.719804][ T4012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.732961][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.741586][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.751224][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.759520][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.773132][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.785388][ T3782] udevd[3782]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 84.795383][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.804241][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.868508][ T4012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.885242][ T4012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.887788][ T3782] udevd[3782]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 84.919323][ T4012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.938548][ T4012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.958725][ T4012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.979419][ T4012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.009079][ T4012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.041262][ T4012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.051940][ T4012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.063370][ T4012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.076116][ T4012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.085241][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.093573][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.101459][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.110203][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.118670][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.892253][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.902617][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.911571][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.929546][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.938287][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.955144][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.029888][ T4119] loop1: detected capacity change from 0 to 2048 [ 86.099288][ T1247] device hsr_slave_0 left promiscuous mode [ 86.106015][ T1247] device hsr_slave_1 left promiscuous mode [ 86.112833][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.120342][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.128397][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.136100][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.144557][ T1247] device bridge_slave_1 left promiscuous mode [ 86.151365][ T1247] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.214658][ T4122] loop3: detected capacity change from 0 to 16 [ 86.296848][ T4122] erofs: (device loop3): mounted with root inode @ nid 36. [ 86.395356][ T1247] device bridge_slave_0 left promiscuous mode [ 86.586427][ T4119] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 86.612674][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 86.627344][ T1247] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.832051][ T4119] UDF-fs: Scanning with blocksize 512 failed [ 86.868640][ T1247] device hsr_slave_0 left promiscuous mode [ 86.889621][ T4119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.909906][ T1247] device hsr_slave_1 left promiscuous mode [ 86.922930][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.930355][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.958034][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.971806][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.982959][ T1247] device bridge_slave_1 left promiscuous mode [ 86.989137][ T1247] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.007539][ T1247] device bridge_slave_0 left promiscuous mode [ 87.014125][ T1247] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.033410][ T1247] device veth1_macvtap left promiscuous mode [ 87.039615][ T1247] device veth0_macvtap left promiscuous mode [ 87.048040][ T1247] device veth1_vlan left promiscuous mode [ 87.053971][ T1247] device veth0_vlan left promiscuous mode [ 87.064030][ T1247] device veth1_macvtap left promiscuous mode [ 87.070072][ T1247] device veth0_macvtap left promiscuous mode [ 87.076775][ T1247] device veth1_vlan left promiscuous mode [ 87.082982][ T1247] device veth0_vlan left promiscuous mode [ 87.218810][ T3568] UDF-fs: error (device loop1): udf_read_inode: (ino 818) failed !bh [ 87.244418][ T3568] UDF-fs: error (device loop1): udf_read_inode: (ino 818) failed !bh [ 87.449186][ T1247] team0 (unregistering): Port device team_slave_1 removed [ 87.464980][ T1247] team0 (unregistering): Port device team_slave_0 removed [ 87.478207][ T1247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.493585][ T1247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.559326][ T1247] bond0 (unregistering): Released all slaves [ 87.686845][ T1247] team0 (unregistering): Port device team_slave_1 removed [ 87.704634][ T1247] team0 (unregistering): Port device team_slave_0 removed [ 87.719808][ T1247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.737176][ T1247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.800248][ T1247] bond0 (unregistering): Released all slaves [ 87.850718][ T4012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.859908][ T4012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.868688][ T4012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.878412][ T4012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.022161][ T3742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.030523][ T3742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.062151][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.074561][ T4097] chnl_net:caif_netlink_parms(): no params data found [ 88.108146][ T3839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.126371][ T3839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.171095][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.220670][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.229036][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.277606][ T4137] loop3: detected capacity change from 0 to 512 [ 88.285565][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.333550][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.351323][ T4097] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.373716][ T4137] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 88.398393][ T4097] device bridge_slave_0 entered promiscuous mode [ 88.436081][ T4137] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 88.522383][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.541487][ T4097] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.549282][ T4137] x_tables: ip_tables: osf match: only valid for protocol 6 [ 88.549902][ T4097] device bridge_slave_1 entered promiscuous mode [ 88.575514][ T4143] : renamed from veth0_vlan [ 88.630011][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.651442][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.681195][ T4097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.693448][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 88.706123][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.714555][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.725312][ T4022] device veth0_vlan entered promiscuous mode [ 88.734038][ T4097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.766147][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.778458][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.792165][ T4022] device veth1_vlan entered promiscuous mode [ 88.830239][ T4097] team0: Port device team_slave_0 added [ 88.853949][ T4097] team0: Port device team_slave_1 added [ 88.865495][ T4022] device veth0_macvtap entered promiscuous mode [ 88.878956][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.887375][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.901245][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.910727][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.922531][ T4022] device veth1_macvtap entered promiscuous mode [ 88.959346][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.968766][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.979178][ T4097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.986412][ T4097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.016481][ T4097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.036787][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.047597][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.057954][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.069438][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.079380][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.092213][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.102433][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.112927][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.124260][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.132563][ T4097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.139518][ T4097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.173231][ T4097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.207147][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.215905][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.226850][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.238704][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.249395][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.260171][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.270472][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.280982][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.291527][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.302340][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.313373][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.331047][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.339660][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.364918][ T4097] device hsr_slave_0 entered promiscuous mode [ 89.372369][ T4097] device hsr_slave_1 entered promiscuous mode [ 89.380758][ T4022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.389670][ T4022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.398656][ T4022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.408599][ T4022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.520638][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.536037][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.569034][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.605153][ T3771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.621706][ T3771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.641017][ T4097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.656511][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.693946][ T4097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.824805][ T4097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.143822][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 90.246500][ T4097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.379720][ T3618] Bluetooth: hci4: command 0x0419 tx timeout [ 91.503331][ T4097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.534061][ T4097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.746133][ T4097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.764415][ T4097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.573455][ T4175] loop3: detected capacity change from 0 to 512 [ 92.646435][ T4175] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 92.672078][ T4175] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 92.701803][ T4175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 92.733302][ T4175] System zones: 1-12 [ 92.747124][ T4175] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.111: corrupted in-inode xattr [ 92.773347][ T4175] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.111: couldn't read orphan inode 15 (err -117) [ 92.807440][ T4161] chnl_net:caif_netlink_parms(): no params data found [ 92.811755][ T3758] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.849913][ T4175] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 92.896214][ T4097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.018374][ T4182] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 [ 93.040806][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.052873][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.073435][ T4097] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.121992][ T3758] usb 3-1: Using ep0 maxpacket: 16 [ 93.150470][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.171056][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.180663][ T3757] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.187802][ T3757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.226211][ T4187] loop3: detected capacity change from 0 to 512 [ 93.270433][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.278340][ T3758] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 93.285729][ T3758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.297424][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.307953][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.316137][ T3758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.327073][ T1292] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.334180][ T1292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.341932][ T3758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 93.359062][ T3758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 93.372386][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.381446][ T3758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.393548][ T4161] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.400415][ T3758] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 93.412485][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.414614][ T4187] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.420575][ T4161] device bridge_slave_0 entered promiscuous mode [ 93.437107][ T3758] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 93.458695][ T4187] ext4 filesystem being mounted at /10/bus supports timestamps until 2038 (0x7fffffff) [ 93.469254][ T4161] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.469350][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.492372][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 93.531958][ T3758] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.551357][ T3758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.561469][ T3758] usb 3-1: SerialNumber: syz [ 93.642580][ T4161] device bridge_slave_1 entered promiscuous mode [ 93.663275][ T3758] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 93.967104][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.999088][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.037519][ T4197] usb usb8: usbfs: process 4197 (syz.0.116) did not claim interface 0 before use [ 94.054993][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.098289][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.347423][ T4161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.374145][ T4161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.386743][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.426114][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.460087][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.470131][ T4201] loop3: detected capacity change from 0 to 2048 [ 94.478425][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.494293][ T4097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.499626][ T3980] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.506036][ T4097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.529074][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.543774][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.604557][ T4161] team0: Port device team_slave_0 added [ 94.620061][ T4161] team0: Port device team_slave_1 added [ 94.708229][ T4161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.720531][ T4161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.757306][ T4161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.785409][ T4161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.792091][ T3980] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 94.792803][ T4161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.837206][ T4161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.882133][ T3980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.897231][ T3980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.898231][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.910174][ T3980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.952066][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.966981][ T4097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.976253][ T3758] usb 3-1: USB disconnect, device number 3 [ 95.012010][ T3980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.020918][ T3980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.102202][ T3980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.129357][ T4161] device hsr_slave_0 entered promiscuous mode [ 95.142894][ T4161] device hsr_slave_1 entered promiscuous mode [ 95.159839][ T4161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.171511][ T4161] Cannot create hsr debugfs directory [ 95.201993][ T3980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.222619][ T3980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.243007][ T3980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.275774][ T1247] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.321924][ T3980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.330268][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.331058][ T3979] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.340399][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.346673][ T3980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.366025][ T3980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.388178][ T1247] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.403204][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.414207][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.425360][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.433586][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.441390][ T4097] device veth0_vlan entered promiscuous mode [ 95.454681][ T3980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.463825][ T3980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.474929][ T3980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.479076][ T1247] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.504019][ T4097] device veth1_vlan entered promiscuous mode [ 95.521924][ T3758] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.534898][ T1247] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.552898][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.552908][ T3980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.561541][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.570292][ T3980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.588091][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.588705][ T3980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.597357][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.613842][ T3979] usb 4-1: Using ep0 maxpacket: 8 [ 95.614149][ T4097] device veth0_macvtap entered promiscuous mode [ 95.626625][ T3757] Bluetooth: hci1: command 0x041b tx timeout [ 95.638577][ T4097] device veth1_macvtap entered promiscuous mode [ 95.659066][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.671535][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.682335][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.683212][ T3980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.693074][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.711694][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.711746][ T3980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.732113][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.741848][ T3979] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 95.744054][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.763921][ T3980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.769308][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.783621][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.794698][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.806995][ T4097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.816046][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.826187][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.834683][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.843570][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.852163][ T3980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.863187][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.878561][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.878901][ T3980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.888667][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.888686][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.888701][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.888715][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.888728][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.888742][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.888755][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.888769][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.890230][ T4097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.919182][ T3980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.922072][ T3758] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 95.946953][ T4097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.981659][ T3758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.992010][ T3979] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.001373][ T4097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.011713][ T3979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.014806][ T4097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.030055][ T3979] usb 4-1: Product: syz [ 96.032490][ T4097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.052949][ T3979] usb 4-1: Manufacturer: syz [ 96.058446][ T3758] ums-cypress 3-1:1.0: USB Mass Storage device detected [ 96.060659][ T3979] usb 4-1: SerialNumber: syz [ 96.110890][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.122453][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.142786][ T3980] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 96.155447][ T3979] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 96.183580][ T3980] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 96.195930][ T3980] usb 1-1: Product: syz [ 96.200110][ T3980] usb 1-1: Manufacturer: syz [ 96.205562][ T3980] usb 1-1: SerialNumber: syz [ 96.245592][ T3980] usb 1-1: config 0 descriptor?? [ 96.301177][ T7] usb 3-1: USB disconnect, device number 4 [ 96.310375][ T3980] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 96.358347][ T21] usb 4-1: USB disconnect, device number 3 [ 96.385822][ T3840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.398438][ T3840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.471611][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.499242][ T3839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.507745][ T3839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.524860][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.556779][ T3758] usb 1-1: USB disconnect, device number 2 [ 96.570933][ T3758] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 96.725627][ T4233] loop4: detected capacity change from 0 to 2048 [ 96.861862][ T4233] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 96.888064][ T4233] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 96.932792][ T4233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.065690][ T26] audit: type=1326 audit(1722863646.934:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4249 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59171689f9 code=0x7ffc0000 [ 97.065726][ T4161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.087682][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.169561][ T4255] loop4: detected capacity change from 0 to 128 [ 97.173676][ T26] audit: type=1326 audit(1722863646.984:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4249 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f59171689f9 code=0x7ffc0000 [ 97.201441][ T4250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 97.223911][ T4161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.272563][ T4161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.299926][ T26] audit: type=1326 audit(1722863646.984:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4249 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59171689f9 code=0x7ffc0000 [ 97.337642][ T4255] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.350882][ T4161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.358234][ T4255] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 97.358902][ T26] audit: type=1326 audit(1722863646.984:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4249 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59171689f9 code=0x7ffc0000 [ 97.394546][ T26] audit: type=1326 audit(1722863646.984:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4249 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f59171689f9 code=0x7ffc0000 [ 97.417543][ T26] audit: type=1326 audit(1722863646.984:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4249 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59171689f9 code=0x7ffc0000 [ 97.439900][ T4269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.132'. [ 97.456147][ T26] audit: type=1326 audit(1722863647.014:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4249 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59171689f9 code=0x7ffc0000 [ 97.481923][ T26] audit: type=1326 audit(1722863647.014:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4249 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f59171689f9 code=0x7ffc0000 [ 97.503992][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.522253][ T4255] EXT4-fs warning (device loop4): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 97.533127][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.572905][ T26] audit: type=1326 audit(1722863647.014:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4249 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59171689f9 code=0x7ffc0000 [ 97.650683][ T26] audit: type=1326 audit(1722863647.014:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4249 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59171689f9 code=0x7ffc0000 [ 97.653088][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 97.791833][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 97.820935][ T4279] syz.3.135 (4279): attempted to duplicate a private mapping with mremap. This is not supported. [ 97.854662][ T4279] loop3: detected capacity change from 0 to 128 [ 97.881302][ T4161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.901245][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.909892][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.922844][ T4161] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.960332][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.983079][ T4279] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 97.985529][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.022560][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.029698][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.072233][ T13] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 98.084253][ T13] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 98.104750][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.134806][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.149286][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.152480][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.152518][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.164485][ T13] usb 3-1: Product: syz [ 98.164504][ T13] usb 3-1: Manufacturer: syz [ 98.164520][ T13] usb 3-1: SerialNumber: syz [ 98.214127][ T13] r8152-cfgselector 3-1: config 0 descriptor?? [ 98.223964][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.224955][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.225806][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.226923][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.265587][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.319143][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.343646][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.353634][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.363017][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.423602][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.456184][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.476155][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.570729][ T4292] bond0: ARP validating cannot be used with MII monitoring [ 98.628042][ T1247] device hsr_slave_0 left promiscuous mode [ 98.640430][ T1247] device hsr_slave_1 left promiscuous mode [ 98.665024][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.681914][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.692047][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.701476][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.711972][ T13] r8152-cfgselector 3-1: Unknown version 0x0000 [ 98.728648][ T13] r8152-cfgselector 3-1: bad CDC descriptors [ 98.741227][ T1247] device bridge_slave_1 left promiscuous mode [ 98.762671][ T1247] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.793376][ T1247] device bridge_slave_0 left promiscuous mode [ 98.799908][ T1247] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.821790][ T13] r8152-cfgselector 3-1: Unknown version 0x0000 [ 98.839938][ T13] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 98.860465][ T1247] device hsr_slave_0 left promiscuous mode [ 98.881800][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.911031][ T1247] device hsr_slave_1 left promiscuous mode [ 98.918860][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.927750][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.936403][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.944705][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.953161][ T1247] device bridge_slave_1 left promiscuous mode [ 98.959778][ T1247] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.980880][ T1247] device bridge_slave_0 left promiscuous mode [ 98.988359][ T1247] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.046719][ T4303] overlayfs: statfs failed on './file0' [ 99.065950][ T1247] device veth1_macvtap left promiscuous mode [ 99.080165][ T1247] device veth0_macvtap left promiscuous mode [ 99.103077][ T1247] device veth1_macvtap left promiscuous mode [ 99.115627][ T1247] device veth0_macvtap left promiscuous mode [ 99.125511][ T1247] device veth1_vlan left promiscuous mode [ 99.131297][ T1247] device veth0_vlan left promiscuous mode [ 99.281961][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.314408][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.350368][ T21] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 99.398894][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.447777][ T21] usb 1-1: config 0 descriptor?? [ 100.565663][ T3757] Bluetooth: hci1: command 0x0419 tx timeout [ 100.838310][ T1247] team0 (unregistering): Port device team_slave_1 removed [ 100.868547][ T1247] team0 (unregistering): Port device team_slave_0 removed [ 100.896927][ T1247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.937510][ T1247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.078701][ T1247] bond0 (unregistering): Released all slaves [ 101.105454][ T4323] loop4: detected capacity change from 0 to 4096 [ 101.177022][ T4323] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 101.219859][ T4323] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 101.254337][ T4323] ntfs3: loop4: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 101.322537][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 101.328529][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 101.342488][ T1247] team0 (unregistering): Port device team_slave_1 removed [ 101.358047][ T1247] team0 (unregistering): Port device team_slave_0 removed [ 101.370689][ T21] usb 1-1: USB disconnect, device number 3 [ 101.377946][ T1247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.406624][ T1247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.524057][ T1247] bond0 (unregistering): Released all slaves [ 101.607544][ T4327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 102.318652][ T3757] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 102.327436][ T3757] Bluetooth: hci0: Injecting HCI hardware error event [ 102.335739][ T3584] Bluetooth: hci0: hardware error 0x00 [ 102.464859][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.499114][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.520180][ T4335] loop4: detected capacity change from 0 to 8 [ 102.549559][ T4161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.694931][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.730649][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.740833][ T4343] loop3: detected capacity change from 0 to 1764 [ 102.741986][ T4335] loop4: detected capacity change from 0 to 1024 [ 102.820462][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.844827][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.876469][ T4161] device veth0_vlan entered promiscuous mode [ 102.955654][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.974436][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.012140][ T4161] device veth1_vlan entered promiscuous mode [ 103.134475][ T4351] loop3: detected capacity change from 0 to 1024 [ 103.156599][ T4353] loop2: detected capacity change from 0 to 2048 [ 103.205441][ T4348] loop0: detected capacity change from 0 to 8192 [ 103.228699][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.238978][ T4353] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 103.248728][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.272236][ T4353] UDF-fs: Scanning with blocksize 512 failed [ 103.279202][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.298608][ T4353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.313221][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.328197][ T4161] device veth0_macvtap entered promiscuous mode [ 103.398634][ T4348] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 103.432898][ T4348] REISERFS (device loop0): using ordered data mode [ 103.433827][ T4161] device veth1_macvtap entered promiscuous mode [ 103.444469][ T4348] reiserfs: using flush barriers [ 103.464186][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.471972][ T4348] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.490106][ T4348] REISERFS (device loop0): checking transaction log (loop0) [ 103.505980][ T4348] REISERFS (device loop0): Using r5 hash to sort names [ 103.518542][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.591618][ T4161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.629821][ T4161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.651036][ T4161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.664997][ T4353] attempt to access beyond end of device [ 103.664997][ T4353] loop2: rw=2049, want=2050, limit=2048 [ 103.676411][ T4161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.687480][ T4353] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 103.696410][ T4161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.707624][ T4353] attempt to access beyond end of device [ 103.707624][ T4353] loop2: rw=2049, want=2050, limit=2048 [ 103.719081][ T4161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.723838][ T4353] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 103.730446][ T4161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.748487][ T4161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.770003][ T3742] hfsplus: b-tree write err: -5, ino 4 [ 103.778955][ T4161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.789472][ T4161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.800477][ T4161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.830640][ T4161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.836339][ T4353] attempt to access beyond end of device [ 103.836339][ T4353] loop2: rw=2049, want=2050, limit=2048 [ 103.869834][ T4161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.908771][ T4353] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 103.926610][ T4161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.934444][ T4353] attempt to access beyond end of device [ 103.934444][ T4353] loop2: rw=2049, want=2052, limit=2048 [ 103.939265][ T4161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.976276][ T4161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.980130][ T4353] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 103.989451][ T4161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.015033][ T4353] attempt to access beyond end of device [ 104.015033][ T4353] loop2: rw=2049, want=2052, limit=2048 [ 104.016615][ T4161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.039782][ T4353] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 104.064281][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.074648][ T4353] attempt to access beyond end of device [ 104.074648][ T4353] loop2: rw=2049, want=2052, limit=2048 [ 104.102526][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.111430][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.113131][ T4353] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 104.138202][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.148659][ T4358] netlink: 'syz.4.161': attribute type 5 has an invalid length. [ 104.158366][ T4353] attempt to access beyond end of device [ 104.158366][ T4353] loop2: rw=2049, want=2054, limit=2048 [ 104.172269][ T4161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.180972][ T4161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.191855][ T4353] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 104.192435][ T4161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.216728][ T4353] attempt to access beyond end of device [ 104.216728][ T4353] loop2: rw=2049, want=2054, limit=2048 [ 104.223423][ T4161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.279176][ T4353] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 104.301928][ T3979] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.348333][ T4353] attempt to access beyond end of device [ 104.348333][ T4353] loop2: rw=2049, want=2054, limit=2048 [ 104.382452][ T4353] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 104.400383][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.401518][ T4353] attempt to access beyond end of device [ 104.401518][ T4353] loop2: rw=2049, want=2056, limit=2048 [ 104.432229][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.449044][ T4353] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 104.482983][ T3787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.499738][ T3787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.511520][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.537980][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.671917][ T3979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.687591][ T4372] loop1: detected capacity change from 0 to 2048 [ 104.704266][ T3979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.747572][ T3979] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 104.781792][ T3979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.812392][ T3979] usb 1-1: config 0 descriptor?? [ 104.890242][ T4379] capability: warning: `syz.2.167' uses deprecated v2 capabilities in a way that may be insecure [ 104.932250][ T4372] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.093910][ T4384] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #12: comm syz.1.118: corrupted inode contents [ 105.146944][ T4384] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #12: comm syz.1.118: corrupted inode contents [ 105.207903][ T4384] EXT4-fs error (device loop1): ext4_try_add_inline_entry:1353: inode #12: comm syz.1.118: mark_inode_dirty error [ 105.312513][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.321483][ T4161] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 7: padding at end of block bitmap is not set [ 105.367041][ T4370] loop4: detected capacity change from 0 to 32768 [ 105.400251][ T4161] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 105.410913][ T4161] EXT4-fs error (device loop1): ext4_read_inline_dir:1596: inode #12: block 5: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=80, inode=0, rec_len=0, size=148 fake=0 [ 105.437287][ T4161] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #12: comm syz-executor: corrupted inode contents [ 105.496649][ T4161] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #12: comm syz-executor: mark_inode_dirty error [ 105.551720][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 105.564187][ T4386] loop3: detected capacity change from 0 to 256 [ 105.567577][ T4161] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #12: comm syz-executor: corrupted inode contents [ 105.593106][ T4161] EXT4-fs error (device loop1): ext4_delete_inline_entry:1760: inode #12: comm syz-executor: mark_inode_dirty error [ 105.647278][ T4370] XFS (loop4): Mounting V5 Filesystem [ 105.790664][ T4370] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 105.809386][ T4397] program syz.3.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.841983][ T13] usb 3-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 105.851105][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.874725][ T4370] XFS (loop4): Starting recovery (logdev: internal) [ 105.889550][ T13] usb 3-1: Product: syz [ 105.911009][ T13] usb 3-1: Manufacturer: syz [ 105.921311][ T13] usb 3-1: SerialNumber: syz [ 105.933878][ T13] usb 3-1: config 0 descriptor?? [ 105.969614][ T4370] XFS (loop4): Ending recovery (logdev: internal) [ 106.064829][ T4400] loop3: detected capacity change from 0 to 2048 [ 106.092337][ T4400] UDF-fs: bad mount option "dmod{= 6) [ 108.254874][ T4424] team0: Port device team_slave_0 added [ 108.264771][ T4424] team0: Port device team_slave_1 added [ 108.267282][ T4453] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 108.317792][ T4424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.336195][ T4424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.347018][ T4453] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.182: Failed to acquire dquot type 0 [ 108.364367][ T4424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.434557][ T4424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.456465][ T4424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.485695][ T4453] EXT4-fs (loop3): 1 truncate cleaned up [ 108.492747][ T4424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.522287][ T4453] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.593494][ T3618] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.673250][ T4424] device hsr_slave_0 entered promiscuous mode [ 108.707977][ T4424] device hsr_slave_1 entered promiscuous mode [ 108.724865][ T4424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.753334][ T4424] Cannot create hsr debugfs directory [ 108.991961][ T3618] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 109.002008][ T3981] Bluetooth: hci1: command 0x0409 tx timeout [ 109.017035][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.054814][ T1247] device hsr_slave_0 left promiscuous mode [ 109.065414][ T1247] device hsr_slave_1 left promiscuous mode [ 109.092600][ T3618] usb 3-1: config 0 descriptor?? [ 109.108961][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.124365][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.143997][ T3618] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 109.151005][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.161128][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.192479][ T1247] device bridge_slave_1 left promiscuous mode [ 109.198690][ T1247] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.224029][ T1247] device bridge_slave_0 left promiscuous mode [ 109.230257][ T1247] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.287451][ T1247] device veth1_macvtap left promiscuous mode [ 109.299510][ T1247] device veth0_macvtap left promiscuous mode [ 109.308154][ T1247] device veth1_vlan left promiscuous mode [ 109.318862][ T1247] device veth0_vlan left promiscuous mode [ 110.079698][ T3618] usb 3-1: USB disconnect, device number 7 [ 110.094790][ T1247] team0 (unregistering): Port device team_slave_1 removed [ 110.117658][ T4493] loop0: detected capacity change from 0 to 64 [ 110.166732][ T1247] team0 (unregistering): Port device team_slave_0 removed [ 110.198565][ T1247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.237953][ T1247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.238788][ T4494] loop4: detected capacity change from 0 to 136 [ 110.387815][ T4496] loop0: detected capacity change from 0 to 512 [ 110.472300][ T1247] bond0 (unregistering): Released all slaves [ 110.479756][ T4496] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.194: casefold flag without casefold feature [ 110.496935][ T4496] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.194: missing EA_INODE flag [ 110.525948][ T4496] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.194: error while reading EA inode 2 err=-117 [ 110.682864][ T4496] EXT4-fs (loop0): 1 orphan inode deleted [ 110.688773][ T4496] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.131916][ T3757] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.386053][ T3981] Bluetooth: hci1: command 0x041b tx timeout [ 111.402182][ T3757] usb 3-1: Using ep0 maxpacket: 16 [ 111.543914][ T3757] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 111.553872][ T3757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.585520][ T3757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.596683][ T3757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 111.611723][ T3757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 111.649923][ T3757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.660075][ T3757] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 111.670624][ T3757] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 111.714563][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 111.763202][ T3757] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.807925][ T3757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.821225][ T3757] usb 3-1: SerialNumber: syz [ 111.907613][ T3757] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 111.991688][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.101892][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.231698][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 112.352023][ T23] usb 4-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 112.379352][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.421138][ T23] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 112.472906][ T4424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.479937][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.531995][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.542364][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.557964][ T4424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.580719][ T23] usb 4-1: config 0 descriptor?? [ 112.617334][ T4424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.632662][ T13] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.646104][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.657132][ T4424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.657798][ T13] usb 1-1: SerialNumber: syz [ 112.872025][ T23] usb 4-1: string descriptor 0 read error: -71 [ 112.896511][ T23] usb 4-1: USB disconnect, device number 4 [ 112.976188][ T13] usb 1-1: 0:2 : does not exist [ 113.024207][ T13] usb 1-1: USB disconnect, device number 5 [ 113.052295][ T4424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.144963][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.155693][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.185311][ T4424] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.233815][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.252914][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.261342][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.268448][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.317328][ T3782] udevd[3782]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.427997][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.495118][ T3979] Bluetooth: hci1: command 0x040f tx timeout [ 113.553679][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.625507][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.643840][ T3981] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.650945][ T3981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.711142][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.751366][ T3981] usb 3-1: USB disconnect, device number 8 [ 113.787723][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.858047][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.868214][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.883026][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.941751][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.985799][ T4568] netlink: 56 bytes leftover after parsing attributes in process `syz.0.206'. [ 113.995900][ T4424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.065836][ T4424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.134852][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.153374][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.204815][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.238829][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.269144][ T4577] loop3: detected capacity change from 0 to 256 [ 114.282896][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.325369][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.353488][ T4577] exfat: Deprecated parameter 'namecase' [ 114.361776][ T4577] exfat: Deprecated parameter 'utf8' [ 114.409639][ T4577] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 114.426440][ T4582] loop0: detected capacity change from 0 to 512 [ 114.519958][ T4582] EXT4-fs (loop0): Ignoring removed nobh option [ 114.571714][ T26] audit: type=1326 audit(1722863664.434:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59171689f9 code=0x0 [ 114.605546][ T4582] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 114.626427][ T4582] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 114.661947][ T4582] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #13: comm syz.0.210: casefold flag without casefold feature [ 114.696134][ T4582] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #13: comm syz.0.210: unexpected EA_INODE flag [ 114.733284][ T26] audit: type=1326 audit(1722863664.554:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f59171689f9 code=0x0 [ 114.752271][ T4582] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.210: couldn't read orphan inode 13 (err -117) [ 114.780688][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.799958][ T4582] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,bsdgroups,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 114.820626][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.838782][ T4424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.912208][ T4582] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 114.928698][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.958378][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.977797][ T4596] netlink: 'syz.3.212': attribute type 4 has an invalid length. [ 114.990468][ T4598] loop4: detected capacity change from 0 to 512 [ 115.099040][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.112432][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.133462][ T4424] device veth0_vlan entered promiscuous mode [ 115.187484][ T4598] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.213: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 115.213238][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.223918][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.258047][ T4424] device veth1_vlan entered promiscuous mode [ 115.333255][ T4598] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.213: couldn't read orphan inode 15 (err -117) [ 115.378117][ T4598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.395950][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.412373][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.420044][ T4598] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 115.430693][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.471295][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.560082][ T4424] device veth0_macvtap entered promiscuous mode [ 115.572139][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 116.245949][ T4424] device veth1_macvtap entered promiscuous mode [ 116.323499][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.335287][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.349600][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.398937][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.437128][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.450496][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.481674][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.499689][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.511253][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.532067][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.549524][ T4424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.559422][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.591723][ T3757] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.603023][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.624103][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.662911][ T4613] fuse: Unknown parameter 'erup_id' [ 116.668522][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.699141][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.770564][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.789550][ T4606] loop3: detected capacity change from 0 to 32768 [ 116.800970][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.823473][ T4616] syz.4.217 uses obsolete (PF_INET,SOCK_PACKET) [ 116.829951][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.841702][ T3757] usb 1-1: Using ep0 maxpacket: 16 [ 116.852316][ T4606] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.215 (4606) [ 116.889407][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.901176][ T4606] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 116.920135][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.922982][ T4606] BTRFS info (device loop3): force zlib compression, level 3 [ 116.950405][ T4606] BTRFS info (device loop3): enabling disk space caching [ 116.960709][ T4424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.968210][ T3757] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 116.977952][ T4606] BTRFS error (device loop3): cannot disable free space tree [ 116.982648][ T3757] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.011765][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.040081][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.048760][ T3757] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.079676][ T4424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.089444][ T3757] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 117.106387][ T4424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.115454][ T3757] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 117.128177][ T4424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.137052][ T4424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.145964][ T3757] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.162738][ T3757] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 117.175520][ T3757] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 117.232054][ T4606] BTRFS error (device loop3): open_ctree failed [ 117.263159][ T3757] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.280440][ T3757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.289778][ T3757] usb 1-1: SerialNumber: syz [ 117.382885][ T3757] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 117.407993][ T3742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.424287][ T3742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.475864][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.522083][ T3742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.539139][ T3742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.572057][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.625966][ T4625] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.824861][ T4627] loop1: detected capacity change from 0 to 1024 [ 117.969562][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.169660][ T4644] loop3: detected capacity change from 0 to 128 [ 118.225416][ T4644] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.895241][ T1292] usb 1-1: USB disconnect, device number 6 [ 118.911051][ T4644] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 119.140235][ T4657] loop0: detected capacity change from 0 to 8 [ 119.706156][ T4657] overlayfs: failed to resolve './file1': -2 [ 119.983021][ T4667] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 120.056804][ T4670] loop3: detected capacity change from 0 to 512 [ 120.156617][ T4670] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 120.221534][ T4670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 120.237231][ T4670] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.248196][ T4680] loop4: detected capacity change from 0 to 1024 [ 120.275063][ T4670] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.232: bg 0: block 361: padding at end of block bitmap is not set [ 120.311320][ T4670] EXT4-fs (loop3): Remounting filesystem read-only [ 120.323434][ T4670] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 120.339174][ T4670] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.232: attempt to clear invalid blocks 33619980 len 1 [ 120.360990][ T4670] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.232: invalid indirect mapped block 1811939328 (level 0) [ 120.381388][ T4670] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.232: invalid indirect mapped block 2185560079 (level 1) [ 120.448011][ T4669] loop1: detected capacity change from 0 to 32768 [ 120.453734][ T4670] EXT4-fs (loop3): 1 truncate cleaned up [ 120.454906][ T4680] hfsplus: xattr searching failed [ 120.484671][ T4670] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 120.507394][ T4669] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.231 (4669) [ 120.581224][ T3849] hfsplus: b-tree write err: -5, ino 3 [ 120.587789][ T4669] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 120.630945][ T4669] BTRFS info (device loop1): enabling auto defrag [ 120.663437][ T4669] BTRFS info (device loop1): doing ref verification [ 120.694483][ T4669] BTRFS info (device loop1): max_inline at 0 [ 120.700576][ T4669] BTRFS info (device loop1): force clearing of disk cache [ 120.723524][ T4669] BTRFS info (device loop1): turning on sync discard [ 120.738949][ T4669] BTRFS info (device loop1): disabling free space tree [ 120.751692][ T4669] BTRFS info (device loop1): has skinny extents [ 121.111189][ T4709] loop2: detected capacity change from 0 to 256 [ 121.244861][ T4669] BTRFS info (device loop1): enabling ssd optimizations [ 121.262727][ T4669] BTRFS info (device loop1): clearing free space tree [ 121.272046][ T3979] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.312446][ T4669] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.341248][ T4669] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.711887][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.991775][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 122.056710][ T4669] BTRFS error (device loop1): unrecognized mount option ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 122.079529][ T4668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.116456][ T23] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 122.125616][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.149942][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.160054][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 122.171864][ T3578] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.177411][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 122.191285][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.229716][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 122.249746][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 122.351944][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.376971][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 122.389502][ T4726] process 'syz.2.245' launched './file0' with NULL argv: empty string added [ 122.417480][ T23] usb 4-1: SerialNumber: syz [ 122.452408][ T3578] usb 1-1: Using ep0 maxpacket: 32 [ 122.472817][ T23] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 122.568422][ T3979] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 122.582938][ T3979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.592027][ T3578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.605649][ T4731] loop2: detected capacity change from 0 to 64 [ 122.612465][ T3578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.623616][ T3979] usb 5-1: Product: syz [ 122.629089][ T3979] usb 5-1: Manufacturer: syz [ 122.634033][ T3979] usb 5-1: SerialNumber: syz [ 122.639628][ T3578] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.663202][ T3979] usb 5-1: config 0 descriptor?? [ 122.669513][ T3578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.747808][ T3578] usb 1-1: config 0 descriptor?? [ 122.824686][ T3578] hub 1-1:0.0: USB hub found [ 123.032043][ T3578] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 123.047486][ T3753] usb 5-1: USB disconnect, device number 4 [ 123.321988][ T3578] usbhid 1-1:0.0: can't add hid device: -71 [ 123.330353][ T3578] usbhid: probe of 1-1:0.0 failed with error -71 [ 123.384393][ T3578] usb 1-1: USB disconnect, device number 7 [ 123.424493][ T4743] loop2: detected capacity change from 0 to 256 [ 123.540431][ T26] audit: type=1804 audit(1722863673.404:96): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.253" name="/newroot/28/file1/file0" dev="loop2" ino=1048613 res=1 errno=0 [ 124.090209][ T4755] device syzkaller1 entered promiscuous mode [ 124.189213][ T4758] tmpfs: Bad value for 'mpol' [ 124.335069][ T3979] usb 4-1: USB disconnect, device number 5 [ 125.056204][ T4767] loop2: detected capacity change from 0 to 512 [ 125.077909][ T4764] tap0: tun_chr_ioctl cmd 1074025673 [ 125.139700][ T4767] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 125.215134][ T4767] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.260: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 125.370571][ T4767] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.260: couldn't read orphan inode 15 (err -117) [ 125.432974][ T4767] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.452855][ T4767] ext2 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 125.481915][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 125.652638][ T4789] loop0: detected capacity change from 0 to 128 [ 125.687586][ T4767] overlayfs: upper fs needs to support d_type. [ 125.731516][ T4792] overlayfs: upper fs needs to support d_type. [ 125.749080][ T4792] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.891259][ T4789] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.906545][ T4789] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 126.117489][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806235b400: rx timeout, send abort [ 126.311868][ T3753] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.582119][ T3753] usb 2-1: Using ep0 maxpacket: 16 [ 126.702634][ T3753] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 126.705573][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888064cdd000: rx timeout, send abort [ 126.718447][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806235b400: abort rx timeout. Force session deactivation [ 126.731230][ T3753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.760192][ C0] hrtimer: interrupt took 7968687 ns [ 126.760664][ T3753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.783129][ T3753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 126.799306][ T3753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 126.816690][ T3753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.826895][ T3753] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 126.843558][ T3753] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 126.901942][ T4797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.931935][ T3753] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.940995][ T3753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.952228][ T3753] usb 2-1: SerialNumber: syz [ 127.005814][ T3753] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 127.222549][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888064cdd000: abort rx timeout. Force session deactivation [ 129.477335][ T4799] loop3: detected capacity change from 0 to 2048 [ 130.151829][ T3753] usb 2-1: USB disconnect, device number 5 [ 130.250403][ T4806] loop0: detected capacity change from 0 to 512 [ 130.285716][ T4810] loop1: detected capacity change from 0 to 512 [ 130.713983][ T4814] loop4: detected capacity change from 0 to 32768 [ 132.523889][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.560476][ T4814] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.279 (4814) [ 133.695567][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.709987][ T4810] EXT4-fs: failed to create workqueue [ 133.716829][ T4806] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 133.735130][ T4810] EXT4-fs (loop1): mount failed [ 136.554371][ T4814] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 136.562586][ T4823] loop2: detected capacity change from 0 to 512 [ 136.564846][ T4814] BTRFS info (device loop4): using free space tree [ 136.577991][ T4814] BTRFS info (device loop4): has skinny extents [ 138.931091][ T4814] BTRFS error (device loop4): open_ctree failed [ 141.365262][ T4840] chnl_net:caif_netlink_parms(): no params data found [ 142.201903][ T3753] Bluetooth: hci5: command 0x0409 tx timeout [ 142.441813][ T4823] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 142.484175][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 142.510711][ T4823] EXT4-fs: failed to create workqueue [ 142.541889][ T4823] EXT4-fs (loop2): mount failed [ 143.631801][ T4848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.281'. [ 143.908034][ T4848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.281'. [ 145.173564][ T3748] Bluetooth: hci5: command 0x041b tx timeout [ 145.248489][ T4840] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.581606][ C1] sched: RT throttling activated [ 147.545306][ T3749] Bluetooth: hci5: command 0x040f tx timeout [ 152.231785][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.240568][ T4840] device bridge_slave_0 entered promiscuous mode [ 152.265217][ T3750] Bluetooth: hci5: command 0x0419 tx timeout [ 154.313358][ T3839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.516601][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.523771][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.531801][ T4840] device bridge_slave_1 entered promiscuous mode [ 157.641928][ T3681] Bluetooth: hci2: command 0x0409 tx timeout [ 157.726680][ T3749] Bluetooth: hci3: command 0x0409 tx timeout [ 158.041715][ T3749] Bluetooth: hci0: command 0x0409 tx timeout [ 159.721944][ T3753] Bluetooth: hci2: command 0x041b tx timeout [ 159.806599][ T3753] Bluetooth: hci3: command 0x041b tx timeout [ 160.121687][ T3753] Bluetooth: hci0: command 0x041b tx timeout [ 160.933621][ T3578] Bluetooth: hci1: command 0x0409 tx timeout [ 160.955166][ T3839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.993237][ T4840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.006293][ T4840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.802999][ T3749] Bluetooth: hci2: command 0x040f tx timeout [ 161.886391][ T3749] Bluetooth: hci3: command 0x040f tx timeout [ 162.201830][ T3749] Bluetooth: hci0: command 0x040f tx timeout [ 162.333770][ T4840] team0: Port device team_slave_0 added [ 162.343639][ T4840] team0: Port device team_slave_1 added [ 162.383975][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.391034][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.416908][ T4840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.001883][ T3749] Bluetooth: hci1: command 0x041b tx timeout [ 163.867196][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.874158][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.882122][ T3753] Bluetooth: hci2: command 0x0419 tx timeout [ 163.900020][ T4840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.980295][ T3749] Bluetooth: hci3: command 0x0419 tx timeout [ 164.059086][ T4875] chnl_net:caif_netlink_parms(): no params data found [ 164.281677][ T1292] Bluetooth: hci0: command 0x0419 tx timeout [ 165.081713][ T3681] Bluetooth: hci1: command 0x040f tx timeout [ 166.566876][ T4875] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.575061][ T4875] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.585711][ T4875] device bridge_slave_0 entered promiscuous mode [ 166.602605][ T4840] device hsr_slave_0 entered promiscuous mode [ 166.609432][ T4840] device hsr_slave_1 entered promiscuous mode [ 166.615927][ T4840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.623501][ T4840] Cannot create hsr debugfs directory [ 166.630220][ T4424] syz-executor (4424) used greatest stack depth: 18584 bytes left [ 166.641742][ T3839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.653595][ T4884] chnl_net:caif_netlink_parms(): no params data found [ 167.161715][ T1292] Bluetooth: hci1: command 0x0419 tx timeout [ 167.686655][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.693957][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.701884][ T4875] device bridge_slave_1 entered promiscuous mode [ 167.752959][ T4875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.838047][ T4875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.870657][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.877902][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.886178][ T4884] device bridge_slave_0 entered promiscuous mode [ 168.922563][ T3839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.101758][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.108837][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.116954][ T4884] device bridge_slave_1 entered promiscuous mode [ 170.188955][ T4879] chnl_net:caif_netlink_parms(): no params data found [ 171.339864][ T4875] team0: Port device team_slave_0 added [ 171.360789][ T4875] team0: Port device team_slave_1 added [ 171.368502][ T4884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.394878][ T4884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.670287][ T4875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.677343][ T4875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.703230][ T4875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.717306][ T4875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.724384][ T4875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.571252][ T4875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.597570][ T4884] team0: Port device team_slave_0 added [ 174.610539][ T4877] chnl_net:caif_netlink_parms(): no params data found [ 174.636862][ T4884] team0: Port device team_slave_1 added [ 174.643338][ T4879] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.650379][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.658470][ T4879] device bridge_slave_0 entered promiscuous mode [ 176.494717][ T4879] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.501910][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.509676][ T4879] device bridge_slave_1 entered promiscuous mode [ 176.535859][ T4884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.542967][ T4884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.570394][ T4884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.583081][ T4884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.590111][ T4884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.617518][ T4884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.949368][ T4884] device hsr_slave_0 entered promiscuous mode [ 177.956266][ T4884] device hsr_slave_1 entered promiscuous mode [ 177.962942][ T4884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.970503][ T4884] Cannot create hsr debugfs directory [ 178.008371][ T4879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.456901][ T4879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.472160][ T4875] device hsr_slave_0 entered promiscuous mode [ 179.478941][ T4875] device hsr_slave_1 entered promiscuous mode [ 179.485433][ T4875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.493763][ T4875] Cannot create hsr debugfs directory [ 179.512945][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.520026][ T4877] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.959810][ T4877] device bridge_slave_0 entered promiscuous mode [ 180.998971][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.006181][ T4877] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.013962][ T4877] device bridge_slave_1 entered promiscuous mode [ 182.295784][ T4879] team0: Port device team_slave_0 added [ 182.303720][ T4879] team0: Port device team_slave_1 added [ 182.351593][ T4877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.363057][ T4877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.326227][ T4879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.333300][ T4879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.359177][ T4879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.371851][ T4879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.378816][ T4879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.934632][ T4879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.014676][ T4877] team0: Port device team_slave_0 added [ 188.024483][ T4879] device hsr_slave_0 entered promiscuous mode [ 191.194246][ T4879] device hsr_slave_1 entered promiscuous mode [ 191.201053][ T4879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.208610][ T4879] Cannot create hsr debugfs directory [ 191.216454][ T4877] team0: Port device team_slave_1 added [ 191.261562][ T4877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.268510][ T4877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.508395][ T4877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.550724][ T4877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.557778][ T4877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.583650][ T4877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.964042][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.970429][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.065762][ T4877] device hsr_slave_0 entered promiscuous mode [ 196.072635][ T4877] device hsr_slave_1 entered promiscuous mode [ 196.079133][ T4877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.086680][ T4877] Cannot create hsr debugfs directory [ 200.060125][ T4938] chnl_net:caif_netlink_parms(): no params data found [ 200.654348][ T4938] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.661506][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.672849][ T4938] device bridge_slave_0 entered promiscuous mode [ 200.682699][ T4938] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.689808][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.698246][ T4938] device bridge_slave_1 entered promiscuous mode [ 201.963789][ T3749] Bluetooth: hci4: command 0x0409 tx timeout [ 202.709099][ T4938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.721396][ T4938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.752047][ T4938] team0: Port device team_slave_0 added [ 202.760974][ T4938] team0: Port device team_slave_1 added [ 204.041867][ T3749] Bluetooth: hci4: command 0x041b tx timeout [ 204.907337][ T4938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.914458][ T4938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.940447][ T4938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.953073][ T4938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.960022][ T4938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.390425][ T4938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.458769][ T3681] Bluetooth: hci4: command 0x040f tx timeout [ 209.482258][ T3681] Bluetooth: hci4: command 0x0419 tx timeout [ 210.750551][ T4938] device hsr_slave_0 entered promiscuous mode [ 210.796323][ T4938] device hsr_slave_1 entered promiscuous mode [ 210.803151][ T4938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.561884][ T3748] Bluetooth: hci6: command 0x0409 tx timeout [ 216.054638][ T4938] Cannot create hsr debugfs directory [ 216.078617][ T4875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.241735][ T3748] Bluetooth: hci7: command 0x0409 tx timeout [ 217.401764][ T3748] Bluetooth: hci8: command 0x0409 tx timeout [ 217.481852][ T3748] Bluetooth: hci9: command 0x0409 tx timeout [ 217.641803][ T3748] Bluetooth: hci6: command 0x041b tx timeout [ 219.321718][ T3748] Bluetooth: hci7: command 0x041b tx timeout [ 219.481759][ T3748] Bluetooth: hci8: command 0x041b tx timeout [ 219.565339][ T1292] Bluetooth: hci9: command 0x041b tx timeout [ 219.721732][ T1292] Bluetooth: hci6: command 0x040f tx timeout [ 221.401710][ T3681] Bluetooth: hci7: command 0x040f tx timeout [ 221.562550][ T3681] Bluetooth: hci8: command 0x040f tx timeout [ 221.641653][ T3681] Bluetooth: hci9: command 0x040f tx timeout [ 221.801676][ T3681] Bluetooth: hci6: command 0x0419 tx timeout [ 223.481690][ T3681] Bluetooth: hci7: command 0x0419 tx timeout [ 223.641754][ T3681] Bluetooth: hci8: command 0x0419 tx timeout [ 223.721751][ T3681] Bluetooth: hci9: command 0x0419 tx timeout [ 226.851510][ T5005] chnl_net:caif_netlink_parms(): no params data found [ 236.306015][ T5000] chnl_net:caif_netlink_parms(): no params data found [ 240.997208][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.004812][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.013026][ T5005] device bridge_slave_0 entered promiscuous mode [ 241.042473][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.049542][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.057733][ T5005] device bridge_slave_1 entered promiscuous mode [ 245.256684][ T4875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.279674][ T5005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.291376][ T5005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.319114][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.326328][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.781906][ T5000] device bridge_slave_0 entered promiscuous mode [ 250.790366][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.798858][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.807200][ T5000] device bridge_slave_1 entered promiscuous mode [ 250.835540][ T5000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.850377][ T5005] team0: Port device team_slave_0 added [ 250.859309][ T5005] team0: Port device team_slave_1 added [ 255.403816][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.410207][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.486141][ T5008] chnl_net:caif_netlink_parms(): no params data found [ 255.509702][ T5000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.553271][ T5005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.560324][ T5005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.589748][ T5005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.903571][ T4875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.915953][ T5005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.922893][ T5005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.948886][ T5005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.967955][ T5007] chnl_net:caif_netlink_parms(): no params data found [ 261.819743][ T5000] team0: Port device team_slave_0 added [ 261.836837][ T5000] team0: Port device team_slave_1 added [ 261.888964][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.895932][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.051604][ T1292] Bluetooth: hci5: command 0x0409 tx timeout [ 264.121871][ T3749] Bluetooth: hci5: command 0x041b tx timeout [ 264.619821][ T5000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.651682][ T5005] device hsr_slave_0 entered promiscuous mode [ 264.658449][ T5005] device hsr_slave_1 entered promiscuous mode [ 264.665410][ T5005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.672952][ T5005] Cannot create hsr debugfs directory [ 264.687954][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.694985][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.211611][ T1292] Bluetooth: hci5: command 0x040f tx timeout [ 266.868144][ T5000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.916461][ T5008] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.923835][ T5008] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.932000][ T5008] device bridge_slave_0 entered promiscuous mode [ 266.943128][ T5008] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.950177][ T5008] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.958151][ T5008] device bridge_slave_1 entered promiscuous mode [ 268.291679][ T3749] Bluetooth: hci5: command 0x0419 tx timeout [ 269.020833][ T5007] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.028895][ T5007] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.037324][ T5007] device bridge_slave_0 entered promiscuous mode [ 269.046017][ T5007] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.053183][ T5007] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.061168][ T5007] device bridge_slave_1 entered promiscuous mode [ 269.094647][ T4875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.772171][ T5007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.806167][ T5008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.817210][ T5007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.204544][ T5000] device hsr_slave_0 entered promiscuous mode [ 272.211677][ T5000] device hsr_slave_1 entered promiscuous mode [ 272.218344][ T5000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.225906][ T5000] Cannot create hsr debugfs directory [ 272.260891][ T5008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.556100][ T5008] team0: Port device team_slave_0 added [ 274.612167][ T5007] team0: Port device team_slave_0 added [ 274.622339][ T5007] team0: Port device team_slave_1 added [ 274.641180][ T5008] team0: Port device team_slave_1 added [ 275.561823][ T3748] Bluetooth: hci10: command 0x0409 tx timeout [ 276.120779][ T5008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.136210][ T5008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.162991][ T5008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.200787][ T5007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.236187][ T5007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.275177][ T5007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.641651][ T1292] Bluetooth: hci10: command 0x041b tx timeout [ 277.803762][ T3748] Bluetooth: hci6: command 0x0409 tx timeout [ 277.836161][ T4884] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.882004][ T1292] Bluetooth: hci11: command 0x0409 tx timeout [ 277.961711][ T1292] Bluetooth: hci12: command 0x0409 tx timeout [ 277.968960][ T1292] Bluetooth: hci3: command 0x0406 tx timeout [ 277.975387][ T1292] Bluetooth: hci2: command 0x0406 tx timeout [ 279.721694][ T1292] Bluetooth: hci10: command 0x040f tx timeout [ 279.881789][ T1292] Bluetooth: hci6: command 0x041b tx timeout [ 279.961679][ T1292] Bluetooth: hci11: command 0x041b tx timeout [ 280.041647][ T1292] Bluetooth: hci12: command 0x041b tx timeout [ 280.322966][ T5032] chnl_net:caif_netlink_parms(): no params data found [ 281.349014][ T5054] chnl_net:caif_netlink_parms(): no params data found [ 281.393613][ T5051] chnl_net:caif_netlink_parms(): no params data found [ 281.801724][ T1292] Bluetooth: hci10: command 0x0419 tx timeout [ 281.961641][ T1292] Bluetooth: hci6: command 0x040f tx timeout [ 282.041689][ T1292] Bluetooth: hci11: command 0x040f tx timeout [ 282.121657][ T1292] Bluetooth: hci12: command 0x040f tx timeout [ 282.519671][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.526909][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.534979][ T5032] device bridge_slave_0 entered promiscuous mode [ 282.546226][ T5032] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.553452][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.561452][ T5032] device bridge_slave_1 entered promiscuous mode [ 282.574221][ T5044] chnl_net:caif_netlink_parms(): no params data found [ 283.081635][ T1292] Bluetooth: hci0: command 0x0406 tx timeout [ 283.321694][ T1292] Bluetooth: hci1: command 0x0406 tx timeout [ 283.639032][ T4884] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.041687][ T1292] Bluetooth: hci6: command 0x0419 tx timeout [ 284.121808][ T1292] Bluetooth: hci11: command 0x0419 tx timeout [ 284.203193][ T1292] Bluetooth: hci12: command 0x0419 tx timeout [ 284.567461][ T5032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.581841][ T5032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.666301][ T5053] chnl_net:caif_netlink_parms(): no params data found [ 286.447086][ T5032] team0: Port device team_slave_0 added [ 286.455460][ T5032] team0: Port device team_slave_1 added [ 286.508502][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.515571][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.523609][ T5051] device bridge_slave_0 entered promiscuous mode [ 286.531695][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.592008][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.624200][ T5051] device bridge_slave_1 entered promiscuous mode [ 288.643410][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.650358][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.676226][ T5032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.688655][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.360639][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.386719][ T5032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.399553][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.406806][ T5054] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.416347][ T5054] device bridge_slave_0 entered promiscuous mode [ 292.425309][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.432488][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.440250][ T5044] device bridge_slave_0 entered promiscuous mode [ 295.937702][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.951687][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.959463][ T5054] device bridge_slave_1 entered promiscuous mode [ 295.967317][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.974378][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.982474][ T5044] device bridge_slave_1 entered promiscuous mode [ 300.017273][ T5044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.029098][ T5044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.075153][ T5051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.782768][ T4884] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.805322][ T5032] device hsr_slave_0 entered promiscuous mode [ 303.813917][ T5032] device hsr_slave_1 entered promiscuous mode [ 303.820601][ T5032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.828171][ T5032] Cannot create hsr debugfs directory [ 309.446270][ T5051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.458162][ T5054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.471216][ T5044] team0: Port device team_slave_0 added [ 309.489064][ T5053] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.496276][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.504103][ T5053] device bridge_slave_0 entered promiscuous mode [ 315.121973][ T5054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.133348][ T5044] team0: Port device team_slave_1 added [ 315.155404][ T5051] team0: Port device team_slave_0 added [ 315.164971][ T5053] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.172112][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.179972][ T5053] device bridge_slave_1 entered promiscuous mode [ 316.844451][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.850827][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.116326][ T5051] team0: Port device team_slave_1 added [ 319.149074][ T4884] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.177632][ T5044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.931810][ T3751] Bluetooth: hci2: command 0x0409 tx timeout [ 324.041943][ T3751] Bluetooth: hci4: command 0x0406 tx timeout [ 325.002213][ T3753] Bluetooth: hci2: command 0x041b tx timeout [ 325.031662][ T5044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.057571][ T5044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.074701][ T5054] team0: Port device team_slave_0 added [ 335.881842][ T1292] Bluetooth: hci7: command 0x0409 tx timeout [ 335.883194][ T3983] Bluetooth: hci2: command 0x040f tx timeout [ 336.375087][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 337.961918][ T3751] Bluetooth: hci2: command 0x0419 tx timeout [ 337.968021][ T3751] Bluetooth: hci7: command 0x041b tx timeout [ 338.121737][ T3751] Bluetooth: hci8: command 0x0409 tx timeout [ 338.202256][ T3751] Bluetooth: hci13: command 0x0409 tx timeout [ 338.283604][ T3751] Bluetooth: hci9: command 0x0409 tx timeout [ 340.041657][ T3751] Bluetooth: hci7: command 0x040f tx timeout [ 342.121693][ T3751] Bluetooth: hci7: command 0x0419 tx timeout [ 346.748885][ T5044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.755897][ T5044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.781791][ T5044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.794502][ T5054] team0: Port device team_slave_1 added [ 346.970445][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 348.762051][ T3753] Bluetooth: hci8: command 0x041b tx timeout [ 348.769082][ T3753] Bluetooth: hci13: command 0x041b tx timeout [ 348.782203][ T3753] Bluetooth: hci9: command 0x041b tx timeout [ 350.841950][ T3753] Bluetooth: hci9: command 0x040f tx timeout [ 350.849032][ T3753] Bluetooth: hci13: command 0x040f tx timeout [ 350.861988][ T3753] Bluetooth: hci8: command 0x040f tx timeout [ 352.042043][ T27] INFO: task syz-executor:4877 blocked for more than 143 seconds. [ 352.049885][ T27] Not tainted 5.15.164-syzkaller #0 [ 352.078836][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 352.087952][ T27] task:syz-executor state:D stack:20408 pid: 4877 ppid: 1 flags:0x00004004 [ 352.116017][ T27] Call Trace: [ 352.119341][ T27] [ 352.184998][ T27] __schedule+0x12c4/0x45b0 [ 352.189688][ T27] ? release_firmware_map_entry+0x190/0x190 [ 352.221709][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 352.227233][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 352.238266][ T27] schedule+0x11b/0x1f0 [ 352.242747][ T27] schedule_preempt_disabled+0xf/0x20 [ 352.248128][ T27] __mutex_lock_common+0xe34/0x25a0 [ 352.257967][ T27] ? del_device_store+0xf1/0x470 [ 352.263197][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 352.268404][ T27] ? skip_atoi+0xd0/0xd0 [ 352.276873][ T27] mutex_lock_nested+0x17/0x20 [ 352.291822][ T27] del_device_store+0xf1/0x470 [ 352.296612][ T27] ? del_port_store+0x270/0x270 [ 352.301466][ T27] ? sysfs_kf_write+0x181/0x2a0 [ 352.313813][ T27] ? sysfs_kf_read+0x300/0x300 [ 352.318599][ T27] kernfs_fop_write_iter+0x3a2/0x4f0 [ 352.326479][ T27] vfs_write+0xacd/0xe50 [ 352.330948][ T27] ? file_end_write+0x250/0x250 [ 352.340412][ T27] ? read_lock_is_recursive+0x10/0x10 [ 352.347184][ T27] ? __fdget_pos+0x2d2/0x380 [ 352.355206][ T27] ksys_write+0x1a2/0x2c0 [ 352.359542][ T27] ? print_irqtrace_events+0x210/0x210 [ 352.371849][ T27] ? __ia32_sys_read+0x80/0x80 [ 352.376633][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 352.395037][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 352.400345][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 352.406745][ T27] do_syscall_64+0x3b/0xb0 [ 352.411167][ T27] ? clear_bhb_loop+0x15/0x70 [ 352.420617][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.426790][ T27] RIP: 0033:0x7fcba36a44df [ 352.431219][ T27] RSP: 002b:00007ffc3b30de40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 352.448079][ T27] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fcba36a44df [ 352.456988][ T27] RDX: 0000000000000001 RSI: 00007ffc3b30de90 RDI: 0000000000000005 [ 352.469270][ T27] RBP: 00007fcba371495f R08: 0000000000000000 R09: 00007ffc3b30dc97 [ 352.477534][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 352.490090][ T27] R13: 00007ffc3b30de90 R14: 00007fcba4362620 R15: 0000000000000003 [ 352.498372][ T27] [ 352.501398][ T27] INFO: task syz-executor:4879 blocked for more than 143 seconds. [ 352.513958][ T27] Not tainted 5.15.164-syzkaller #0 [ 352.519806][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.534896][ T27] task:syz-executor state:D stack:21624 pid: 4879 ppid: 1 flags:0x00004004 [ 352.546583][ T27] Call Trace: [ 352.549914][ T27] [ 352.557383][ T27] __schedule+0x12c4/0x45b0 [ 352.563304][ T27] ? release_firmware_map_entry+0x190/0x190 [ 352.569209][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 352.578111][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 352.584642][ T27] schedule+0x11b/0x1f0 [ 352.588827][ T27] schedule_preempt_disabled+0xf/0x20 [ 352.597654][ T27] __mutex_lock_common+0xe34/0x25a0 [ 352.606033][ T27] ? del_device_store+0xf1/0x470 [ 352.610993][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 352.619627][ T27] ? skip_atoi+0xd0/0xd0 [ 352.625468][ T27] mutex_lock_nested+0x17/0x20 [ 352.630293][ T27] del_device_store+0xf1/0x470 [ 352.638727][ T27] ? del_port_store+0x270/0x270 [ 352.646092][ T27] ? sysfs_kf_write+0x181/0x2a0 [ 352.650963][ T27] ? sysfs_kf_read+0x300/0x300 [ 352.659394][ T27] kernfs_fop_write_iter+0x3a2/0x4f0 [ 352.667262][ T27] vfs_write+0xacd/0xe50 [ 352.675041][ T27] ? file_end_write+0x250/0x250 [ 352.679929][ T27] ? read_lock_is_recursive+0x10/0x10 [ 352.699060][ T27] ? __fdget_pos+0x2d2/0x380 [ 352.704198][ T27] ksys_write+0x1a2/0x2c0 [ 352.708638][ T27] ? print_irqtrace_events+0x210/0x210 [ 352.718871][ T27] ? __ia32_sys_read+0x80/0x80 [ 352.723920][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 352.729909][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 352.739645][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 352.746919][ T27] do_syscall_64+0x3b/0xb0 [ 352.751432][ T27] ? clear_bhb_loop+0x15/0x70 [ 352.761458][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.767931][ T27] RIP: 0033:0x7ff4296984df [ 352.778038][ T27] RSP: 002b:00007ffd6854ca40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 352.786745][ T27] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff4296984df [ 352.799235][ T27] RDX: 0000000000000001 RSI: 00007ffd6854ca90 RDI: 0000000000000005 [ 352.807487][ T27] RBP: 00007ff42970895f R08: 0000000000000000 R09: 00007ffd6854c897 [ 352.819971][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 352.828228][ T27] R13: 00007ffd6854ca90 R14: 00007ff42a356620 R15: 0000000000000003 [ 352.840811][ T27] [ 352.848383][ T27] [ 352.848383][ T27] Showing all locks held in the system: [ 352.860938][ T27] 1 lock held by khungtaskd/27: [ 352.866005][ T27] #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 352.880130][ T27] 2 locks held by kworker/1:2/1292: [ 352.886921][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 352.902020][ T27] #1: ffffc9000516fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 352.917926][ T27] 2 locks held by getty/3330: [ 352.923153][ T3753] Bluetooth: hci8: command 0x0419 tx timeout [ 352.930448][ T3753] Bluetooth: hci13: command 0x0419 tx timeout [ 352.940198][ T27] #0: ffff88814b140098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 352.955936][ T3753] Bluetooth: hci9: command 0x0419 tx timeout [ 352.962202][ T27] #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 352.977226][ T27] 2 locks held by kworker/1:8/3681: [ 352.982679][ T27] #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 352.998891][ T27] #1: ffffc900012efd20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 353.010702][ T27] 3 locks held by kworker/1:11/3748: [ 353.020413][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 353.031162][ T27] #1: ffffc900031b7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 353.046130][ T27] #2: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 353.056358][ T27] 2 locks held by kworker/1:12/3749: [ 353.066091][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 353.077014][ T27] #1: ffffc900031a7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 353.106851][ T27] 2 locks held by kworker/1:14/3751: [ 353.117425][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 353.128107][ T27] #1: ffffc900031e7d20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 353.142816][ T27] 4 locks held by kworker/u4:10/3839: [ 353.148192][ T27] #0: ffff888011dd5138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 353.170821][ T27] #1: ffffc900031c7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 353.185535][ T27] #2: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 353.195175][ T27] #3: ffffffff8c923ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 353.209495][ T27] 3 locks held by kworker/0:13/3981: [ 353.216143][ T27] 4 locks held by syz-executor/4877: [ 353.221434][ T27] #0: ffff88807f212460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 353.235499][ T27] #1: ffff8880248b8c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 353.255341][ T27] #2: ffff8881474f3bd0 (kn->active#232){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 353.271147][ T27] #3: ffffffff8d372948 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf1/0x470 [ 353.286109][ T27] 4 locks held by syz-executor/4879: [ 353.291400][ T27] #0: ffff88807f212460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 353.300568][ T27] #1: ffff88801bea3088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 353.315115][ T27] #2: ffff8881474f3bd0 (kn->active#232){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 353.336733][ T27] #3: ffffffff8d372948 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf1/0x470 [ 353.347992][ T27] 6 locks held by syz-executor/4884: [ 353.358835][ T27] #0: ffff88807f212460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 353.368015][ T27] #1: ffff8880625a6c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 353.382562][ T27] #2: ffff8881474f3bd0 (kn->active#232){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 353.396178][ T27] #3: ffffffff8d372948 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf1/0x470 [ 353.407851][ T27] #4: ffff88807aaa1178 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xc2/0x7f0 [ 353.422938][ T27] #5: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 353.436101][ T27] 4 locks held by syz-executor/4938: [ 353.441382][ T27] #0: ffff88807f212460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 353.456415][ T27] #1: ffff888064e49888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 353.467469][ T27] #2: ffff8881474f3bd0 (kn->active#232){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 353.483932][ T27] #3: ffffffff8d372948 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf1/0x470 [ 353.497833][ T27] 3 locks held by syz-executor/5032: [ 353.504616][ T27] #0: ffff8880746b4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 353.517978][ T27] #1: ffff8880746b4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 353.528868][ T27] #2: ffffffff8db79ea8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 353.543750][ T27] 1 lock held by syz-executor/5051: [ 353.548952][ T27] #0: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 353.561288][ T27] 4 locks held by syz-executor/5053: [ 353.574754][ T27] #0: ffff88804edd4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 353.585891][ T27] #1: ffff88804edd4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 353.598696][ T27] #2: ffffffff8db79ea8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 353.610134][ T27] #3: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 353.625689][ T27] 1 lock held by syz-executor/5086: [ 353.630896][ T27] #0: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 353.640782][ T27] 2 locks held by syz-executor/5089: [ 353.652746][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 353.667368][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x1d0 [ 353.685719][ T27] 2 locks held by syz-executor/5096: [ 353.691015][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 353.707270][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 353.717656][ T27] 1 lock held by syz-executor/5098: [ 353.727202][ T27] #0: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 353.736976][ T27] 2 locks held by syz-executor/5099: [ 353.746667][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 353.756418][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 353.772749][ T27] 1 lock held by dhcpcd/5112: [ 353.777428][ T27] #0: ffff888014d96120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd50 [ 353.790868][ T27] [ 353.795128][ T27] ============================================= [ 353.795128][ T27] [ 353.806938][ T27] NMI backtrace for cpu 1 [ 353.811279][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0 [ 353.819262][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 353.829319][ T27] Call Trace: [ 353.832595][ T27] [ 353.835527][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 353.840231][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 353.845864][ T27] ? panic+0x860/0x860 [ 353.849944][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 353.855104][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 353.860036][ T27] ? __wake_up_klogd+0xd5/0x100 [ 353.864892][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 353.871045][ T27] ? _printk+0xd1/0x120 [ 353.875215][ T27] ? panic+0x860/0x860 [ 353.879282][ T27] ? __wake_up_klogd+0xcc/0x100 [ 353.884137][ T27] ? panic+0x860/0x860 [ 353.888204][ T27] ? __rcu_read_unlock+0x92/0x100 [ 353.893228][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 353.899313][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 353.905306][ T27] watchdog+0xe72/0xeb0 [ 353.909474][ T27] kthread+0x3f6/0x4f0 [ 353.913561][ T27] ? hungtask_pm_notify+0x50/0x50 [ 353.918590][ T27] ? kthread_blkcg+0xd0/0xd0 [ 353.923182][ T27] ret_from_fork+0x1f/0x30 [ 353.927613][ T27] [ 353.931385][ T27] Sending NMI from CPU 1 to CPUs 0: [ 353.936761][ C0] NMI backtrace for cpu 0 [ 353.936771][ C0] CPU: 0 PID: 5044 Comm: syz-executor Not tainted 5.15.164-syzkaller #0 [ 353.936786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 353.936795][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1b/0x60 [ 353.936816][ C0] Code: 89 de 5b e9 c7 fc 48 00 cc cc cc cc cc cc cc 48 8b 04 24 65 48 8b 0d 54 0e 82 7e 65 8b 15 55 0e 82 7e f7 c2 00 01 ff 00 74 11 c2 00 01 00 00 74 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 [ 353.936834][ C0] RSP: 0018:ffffc90000007cb0 EFLAGS: 00000006 [ 353.936848][ C0] RAX: ffffffff88810165 RBX: ffff8880799bc0a0 RCX: ffff888078c38000 [ 353.936860][ C0] RDX: 0000000000010000 RSI: 0000000000000004 RDI: ffff888064771358 [ 353.936870][ C0] RBP: ffff8880647712e8 R08: dffffc0000000000 R09: ffffed100c8ee25e [ 353.936881][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888064771000 [ 353.936892][ C0] R13: ffff888064771360 R14: dffffc0000000000 R15: 00000051a7a776e8 [ 353.936903][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 353.936916][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.936926][ C0] CR2: 00007fba9c92f870 CR3: 000000000c68e000 CR4: 00000000003506f0 [ 353.936939][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.936947][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.936956][ C0] Call Trace: [ 353.936961][ C0] [ 353.936967][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 353.936984][ C0] ? read_lock_is_recursive+0x10/0x10 [ 353.937000][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 353.937017][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 353.937044][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 353.937059][ C0] ? nmi_handle+0xf7/0x370 [ 353.937075][ C0] ? __sanitizer_cov_trace_pc+0x1b/0x60 [ 353.937090][ C0] ? default_do_nmi+0x62/0x150 [ 353.937106][ C0] ? exc_nmi+0xa8/0x100 [ 353.937120][ C0] ? end_repeat_nmi+0x16/0x31 [ 353.937140][ C0] ? rcu_lock_acquire+0x5/0x30 [ 353.937157][ C0] ? __sanitizer_cov_trace_pc+0x1b/0x60 [ 353.937173][ C0] ? __sanitizer_cov_trace_pc+0x1b/0x60 [ 353.937190][ C0] ? __sanitizer_cov_trace_pc+0x1b/0x60 [ 353.937206][ C0] [ 353.937210][ C0] [ 353.937214][ C0] rcu_lock_acquire+0x5/0x30 [ 353.937228][ C0] advance_sched+0x6ce/0x940 [ 353.937248][ C0] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 353.937264][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 353.937288][ C0] ? hrtimer_interrupt+0x980/0x980 [ 353.937303][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 353.937323][ C0] hrtimer_interrupt+0x392/0x980 [ 353.937349][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 353.937370][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 353.937387][ C0] [ 353.937391][ C0] [ 353.937396][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 353.937413][ C0] RIP: 0010:release_pages+0x35d/0x1f40 [ 353.937431][ C0] Code: e4 03 00 00 4d 8d 7e 34 4c 89 ff be 04 00 00 00 e8 48 29 1d 00 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 0f 85 6b 15 00 00 41 8b 1f 31 ff 89 de e8 0f 57 d3 ff 85 db [ 353.937443][ C0] RSP: 0018:ffffc90003cc7600 EFLAGS: 00000a07 [ 353.937455][ C0] RAX: 0000000000000000 RBX: 0080000000000000 RCX: dffffc0000000000 [ 353.937465][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea000131a6f4 [ 353.937474][ C0] RBP: ffffc90003cc7728 R08: dffffc0000000000 R09: fffff940002634df [ 353.937486][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd40002634d8 [ 353.937496][ C0] R13: 0000000000000000 R14: ffffea000131a6c0 R15: ffffea000131a6f4 [ 353.937516][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 353.937553][ C0] ? lru_cache_disable+0x30/0x30 [ 353.937570][ C0] ? free_swap_cache+0x15a/0x2d0 [ 353.937594][ C0] tlb_finish_mmu+0x177/0x320 [ 353.937613][ C0] exit_mmap+0x3cd/0x670 [ 353.937631][ C0] ? vm_brk+0x20/0x20 [ 353.937653][ C0] ? uprobe_clear_state+0x304/0x460 [ 353.937674][ C0] __mmput+0x112/0x3b0 [ 353.937690][ C0] exit_mm+0x688/0x7f0 [ 353.937708][ C0] ? _raw_spin_unlock+0x40/0x40 [ 353.937728][ C0] ? do_exit+0x2480/0x2480 [ 353.937745][ C0] ? taskstats_exit+0x491/0xa10 [ 353.937762][ C0] ? tty_audit_exit+0x150/0x1f0 [ 353.937782][ C0] do_exit+0x626/0x2480 [ 353.937804][ C0] ? put_task_struct+0x80/0x80 [ 353.937821][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 353.937845][ C0] do_group_exit+0x144/0x310 [ 353.937863][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 353.937881][ C0] get_signal+0xc66/0x14e0 [ 353.937905][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 353.937925][ C0] ? netlink_getsockopt+0x5b0/0x5b0 [ 353.937945][ C0] ? __sys_sendto+0x5a2/0x720 [ 353.937964][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 353.937985][ C0] ? get_sigframe_size+0x10/0x10 [ 353.938011][ C0] ? print_irqtrace_events+0x210/0x210 [ 353.938027][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 353.938051][ C0] exit_to_user_mode_loop+0x97/0x130 [ 353.938067][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 353.938084][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 353.938115][ C0] do_syscall_64+0x47/0xb0 [ 353.938128][ C0] ? clear_bhb_loop+0x15/0x70 [ 353.938145][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.938161][ C0] RIP: 0033:0x7f69598ae78c [ 353.938173][ C0] Code: Unable to access opcode bytes at RIP 0x7f69598ae762. [ 353.938180][ C0] RSP: 002b:00007ffd3e7d83f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 353.938194][ C0] RAX: 0000000000000028 RBX: 00007f695a569620 RCX: 00007f69598ae78c [ 353.938204][ C0] RDX: 0000000000000028 RSI: 00007f695a569670 RDI: 0000000000000003 [ 353.938214][ C0] RBP: 0000000000000000 R08: 00007ffd3e7d8444 R09: 000000000000000c [ 353.938223][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 353.938231][ C0] R13: 0000000000000000 R14: 00007f695a569670 R15: 0000000000000000 [ 353.938249][ C0] [ 354.552870][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 354.559754][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0 [ 354.567732][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 354.577784][ T27] Call Trace: [ 354.581062][ T27] [ 354.583996][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 354.588680][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 354.594311][ T27] ? panic+0x860/0x860 [ 354.598396][ T27] panic+0x318/0x860 [ 354.602309][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 354.607946][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 354.614107][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 354.619314][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 354.625395][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 354.631566][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 354.637724][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 354.643880][ T27] watchdog+0xeb0/0xeb0 [ 354.648046][ T27] kthread+0x3f6/0x4f0 [ 354.652113][ T27] ? hungtask_pm_notify+0x50/0x50 [ 354.657135][ T27] ? kthread_blkcg+0xd0/0xd0 [ 354.661750][ T27] ret_from_fork+0x1f/0x30 [ 354.666211][ T27] [ 355.808542][ T27] Shutting down cpus with NMI [ 355.813680][ T27] Kernel Offset: disabled [ 355.818007][ T27] Rebooting in 86400 seconds..