last executing test programs: 22.138076529s ago: executing program 0 (id=1543): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x7e1, &(0x7f0000001100)="$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") fchmod(0xffffffffffffffff, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000000c0)={{0x4}, {}, 0x0, 0x4}) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0xff68, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002440)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000580)=[@timestamp, @timestamp, @mss, @timestamp, @mss={0x2, 0x3}, @mss], 0x6) r1 = userfaultfd(0x80801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000d}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7d}) ppoll(&(0x7f0000000140)=[{r2}, {r1, 0x25}], 0x2, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000152000/0x2000)=nil, 0x2000}, 0x1}) munmap(&(0x7f0000151000/0x4000)=nil, 0x4000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf8}, 0x14) 21.052497331s ago: executing program 0 (id=1545): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0xfea7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 21.049550221s ago: executing program 2 (id=1556): syz_mount_image$erofs(&(0x7f0000000140), &(0x7f00000000c0)='./file2\x00', 0x4, &(0x7f0000000200)=ANY=[], 0x1, 0x21f, &(0x7f0000000880)="$eJzsmL9v00AUx793SdwaIcYOLCBRiSBoYjsCdelQJCQmhNTyawKLmqrEbVBqUBsJVRULC2wMSCwM/AMMHToxsLEwIsEASEgMdGRiOHS+i3P+0dCAM/E+w+Xr997dvfcSvyEgCOK/5euXn5+fnJ9dPAPgMKYxoe3fKwBjSnMj/tPz+6efzV148frjq7drRx7uZs+TW4RIGya1FAX3VwG8ma8gSm5K7ca0/lwET/QVcJzSZ18DQ0Pbb4HjqtYBGG5ofdfQHRnfaNxZCYPG7U64JIUjF1cunlxa2fz2thmW+jUIIZjhX9/stf0wDLqGqGpfgeuvRHJZeyrXv5rMb55jzshPdvH640fb8rnfG8fonwsOVxfRAsOCts9iot8b1RKj/qPVwfmVXP2F1cpQ6fhTkZNl9CgthBBbgNiaKY5hSFvsTPL1A3x5v4Qi77IzFiAVU8PAJTtZdu1Folrab7FIXKodsIqnNoDxVhoL4B+2T+3tvsu7vpWRGMP4ax9d2Oi1+bCOHdfv+mgnAx921PwQLxlOGvNJqNczphmt3muub/ZmVlb95WA5WPO81jmHwTnrNeNBpNbc3BvMZzueT4fkg63Or+0Ta3ELG3496robfhR1XYtZsBG9f6DcnjFxF3Y6P27qbREuAjihHuTYtPbNBmCWiuFxrFT1ypBwgiAIgiAIgiAIgiAIgiCIETgGlvzLOgTvchz9OwAA//8skG3/") r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c87d2a000009050502000000000009058b6ef1"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x20}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_MARK_MASK={0x8}]}, 0x7c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) syslog(0x1, &(0x7f0000000240)=""/42, 0xffffffffffffff22) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', &(0x7f0000000440), 0x4000) 19.732645803s ago: executing program 0 (id=1546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000040)=@profile={'permprofile ', ':proc/thrr/current\x00\x03\x89vO\x9f\xc9oR8\xaaNU{\x1eC\x06\b\x00\x00\x14\xb5.\xbd\x97\xfa\xe4\xfcT@\xc7\x12\xc6\xcb\x19\xee:]\xc2\x80'}, 0x46) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2}) 18.795205682s ago: executing program 0 (id=1548): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000040)) 17.606874294s ago: executing program 0 (id=1549): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e5, &(0x7f0000000400)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chdir(&(0x7f0000000380)='./file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRES32], 0x1, 0x1ec, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x6, 0x5, 0x0, 0x20000}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") rename(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) 16.516294316s ago: executing program 2 (id=1552): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x1002007d}}) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000680)='/dev/cpu/#/msr\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 16.373717449s ago: executing program 0 (id=1553): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x81}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14d8}}, 0x0) chmod(0x0, 0x4a) sendto$inet6(r0, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc532, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 16.082200353s ago: executing program 4 (id=1555): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) io_setup(0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd63a34e786cbc325, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0xb, 0x1fd, 0x1}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x1, @local, 0xa561}, {0xa, 0x4e22, 0x4, @mcast2, 0x80000000}, 0x0, {[0x43e, 0x88fb, 0x9, 0x8, 0x6, 0x7, 0x5, 0x5038]}}, 0x5c) 14.535210635s ago: executing program 4 (id=1557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0), 0x191) execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x4e25, 0xfffffff9, @remote}, 0x1c, 0x0}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002480)={{}, 0x0, 0x0, @unused, @subvolid=0x3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0389424, &(0x7f00000000c0)={"00d0500000000000e51511194d2e45df"}) 13.437487728s ago: executing program 4 (id=1560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, &(0x7f0000000180)={0x0, 0x5, 0x7}) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d7b67f57e", 0x24, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 13.394105252s ago: executing program 1 (id=1561): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000003880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000000300)=""/154, 0x9a) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 11.738239203s ago: executing program 1 (id=1574): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1e, &(0x7f00000001c0)={[{@i_version}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x2) r3 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r4, 0x7ffffb, 0x0) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0xfd14) syz_emit_ethernet(0x6a, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x100000000) write$P9_RLERROR(r3, &(0x7f0000000100)={0xf, 0x7, 0x1, {0x6, ',!\xb1-+('}}, 0xf) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 11.559528068s ago: executing program 2 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8995, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 8.339595481s ago: executing program 2 (id=1567): read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) 8.064102355s ago: executing program 1 (id=1568): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, r4, 0x303, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 7.202288668s ago: executing program 3 (id=1569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x3, 0x0, &(0x7f0000000080)) 7.120005645s ago: executing program 4 (id=1570): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,gid=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c73ffffffff0000000069643d69676e6f72652c73686f727461642c766f6c756d65303030303030362c00"/57], 0x4, 0xc24, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ftruncate(r1, 0x2008002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newqdisc={0xf0, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0xac, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x0, 0x1}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_DELAY_DIST={0x27, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc"}]}}}]}, 0xf0}}, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 6.519242046s ago: executing program 1 (id=1571): r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) pwritev(r0, 0x0, 0xfffffffffffffd86, 0x0, 0x5) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5}, 0x18}}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x101000) r3 = dup(r2) syz_io_uring_setup(0x6b58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$media(&(0x7f0000002940), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) close_range(r1, 0xffffffffffffffff, 0x0) 4.968649448s ago: executing program 3 (id=1573): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x400, 0x4e22, 0x8}}}}}, 0x0) 4.064029265s ago: executing program 4 (id=1575): r0 = socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48062, 0x0) fcntl$setlease(r2, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r3, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x81fd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00'}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580), 0x1670e68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000f00000061153c00000000001800000000000000000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x90) unlink(&(0x7f0000000100)='./file1\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r6, r6) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3.944434295s ago: executing program 3 (id=1576): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r2, r1) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x20}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x0, 0xffffffff, 0x5, 'syz0\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800, 0x0, 0x688, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff]}) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000002c00), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011"], 0x3c}}, 0x0) 3.845893703s ago: executing program 1 (id=1577): r0 = socket$inet6(0xa, 0x80803, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r1}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x33}, 0x2, @in6=@mcast2, 0x0, 0x4, 0x0, 0x20}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x4, 0x0, &(0x7f0000000200)="63eced8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[], 0x10b) unshare(0x20000400) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x40081271, 0xffffffffffffffff) socket(0x2b, 0xa, 0x1) 2.852213868s ago: executing program 3 (id=1578): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x3}]}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="c796", 0x2, 0x40000, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2a5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x41}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x6c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) set_mempolicy(0x2, &(0x7f0000000180), 0x9) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendfile(r2, r1, 0x0, 0x4) set_mempolicy(0x1, &(0x7f0000000080)=0x4b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2.716079579s ago: executing program 4 (id=1579): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000400)={[], [{@euid_lt}, {@subj_role={'subj_role', 0x3d, '+-$%('}}]}, 0x1, 0x500, &(0x7f0000000500)="$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") r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x101, 0x4000086e, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x890b, &(0x7f0000000000)=@buf) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) 1.848644393s ago: executing program 3 (id=1580): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000b40)={0x308, 0x10, 0x0, 0x70bd28, 0x25dfdbfb, "", [@generic="da9ca712c96b228757d484c75f0efcdb11fcd639008028e172a4e839d8428ab8846fd5aab33bb2d15928e0d17c3405019c0b7542a7908e410d4da4508eb34abae0c0d3185c2659e9cee64ed75f58743a45d1af810e81c2e28fd96408ef252f2fbf3c32185a31c40aa780be35b51ceafe63d70aa3a70b8d86b4f6fab25ec7a450d4aded553b1d538da06af911000d675ebf9a979f", @typed={0xe2, 0x79, 0x0, 0x0, @binary="03b0ca96d59356b72e271cc826f5118ca8bc4ce7031f7a6c4f65fd1fcc442b768e19733f6d3578795c9e7c96f56adfe09a75ca68033c2ff377e96404d1849711b95195f998faefcc04b6cb7750dd6ce7bbe6d680dc01c3f159381d1eb5a6829fa998563968b45d668670b55522e81f911e67bf15bc5e189a652db814a108d5d98492fc36cc15bdfab5e181bf33cc9e3a3f10f1f44590e92fe84d6d48438623740be1f1be0f23bc1b7218a40cb92bf5d7a6a398821a36e0964d792ed22280e10b25203369ecf26f99b42c9fc8995ecec1dec029c0b730c4719a261ab09ea8"}, @nested={0xc6, 0x32, 0x0, 0x1, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x80}, @generic="48dd44a688fcfb06ad489e6d246c38bcdf0406c206d65ad34bee2a0fa67045bf3c55528701e8af02bddd7807f666439607a200051765fc255d5fb0330a9a902cd7470a9e91a593bd3aead89ba3b5a294bd9a4cd99d183bc0ce30d5166da1c098c5765d7989bd198b2c5b1de6a82265d7a7e71f8dc6e190162d13cc7be4dbc371b6e8a05059e75b82c478a9f27b02783f3464bd8bc4136f95f5ee", @typed={0xc, 0xc1, 0x0, 0x0, @str='debugfs\x00'}, @typed={0x8, 0xfe, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x10c, 0x0, 0x0, @fd}]}, @generic="a045c11cd874e1121194c72c731a7fcec72e8591c210ce33d3ea1d84dba9ef73a3ca6cf85f53274bde8adf12508e93549cf8f9121c61f4cae102540a23df2c916ea89746f9fa928e6e64f8b78fd7cf9bb71843f4f73b236af39d905670b14071f950c76fe79d05d01149ef7a3faf35536781986e65e2af306ff3eef64d9d3c63b34d4081c2447da93885da91593db3ec4ddb65c15a5efbfb590973cb9062714ebba30b2cb3095496174ff9aeddaec3ff9989f986fa"]}, 0x308}], 0x2, 0x0, 0x0, 0x800c854}, 0x4800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @local}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {0x0}, {&(0x7f0000003480)=""/172, 0xac}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/108, 0x6c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/172, 0xac}], 0x3, &(0x7f0000001e80)=""/4096, 0x1000}}], 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {&(0x7f0000000540)=""/251, 0xfb}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1.743844482s ago: executing program 2 (id=1581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, &(0x7f0000000180)={0x0, 0x5, 0x7}) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d7b67f57e", 0x24, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.04544ms ago: executing program 3 (id=1582): sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newqdisc={0x120, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x42, 0x0, 0xfa, 0x2, 0x2, 0x0, 0x256, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x2, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x5, 0x2}}, {0x8, 0x2, [0xffff, 0x6]}}, {{0x1c, 0x1, {0x6, 0x4, 0x0, 0x658, 0x2, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0x0, 0x3, 0x0, 0xffff]}}, {{0x1c, 0x1, {0x18, 0x80, 0xf9c, 0x0, 0x0, 0x5, 0x0, 0x7}}, {0x12, 0x2, [0x9, 0x7966, 0x3, 0x23, 0x0, 0xff, 0x67e]}}, {{0x1c, 0x1, {0x4, 0x89, 0x8001, 0x0, 0x2, 0x0, 0x7f, 0x3}}, {0xa, 0x2, [0x9, 0x3dbe, 0x6]}}]}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x120}}, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/179, 0xb3}], 0x3) syz_emit_vhci(&(0x7f00000027c0)=ANY=[@ANYBLOB="040f04f8007dd7"], 0x7) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000b2cbd7000fddbdf2514000000f4ff11009500000008000500cc00000008000f000b00000005000b00000080000c00008046000100", @ANYRES32=r2, @ANYBLOB="08000d0000000100"], 0x48}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x2400c040) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8007c007800010003010800070007000d00060007030400770802000f020b008a000f000201040000008200020704000700080005093f000700a900050005012fa45d1f0005010106100300f8ff0000000001000000080000000610a5bf0600"], 0x81) 828.41µs ago: executing program 1 (id=1583): setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000d40)={0x0, 0x80000000, [0x7fff, 0x9, 0x7]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 0s ago: executing program 2 (id=1584): syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001440)='contention_end\x00', r0}, 0x10) rt_sigaction(0xd, &(0x7f0000002180)={&(0x7f0000000480)="f3460dd37ff2f2438395ff1f965a00c4c1185c840561ee0000c4e17a5bbc60aff00000c4816a512425160000006f6ab066660f38090dc65f0000a89e670f2a6cda00c412c1fd1129", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) kernel console output (not intermixed with test programs): T6365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 690.822460][ T3682] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 690.851121][ T6365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 690.916131][ T5191] HID 045e:07da: Invalid code 65791 type 1 [ 690.981861][ T5191] HID 045e:07da: Invalid code 768 type 1 [ 691.024380][ T5191] HID 045e:07da: Invalid code 769 type 1 [ 691.070544][ T5191] HID 045e:07da: Invalid code 770 type 1 [ 691.154051][ T5191] HID 045e:07da: Invalid code 771 type 1 [ 691.163516][ T3682] usb 4-1: Using ep0 maxpacket: 16 [ 691.207615][ T5191] HID 045e:07da: Invalid code 772 type 1 [ 691.232140][ T5191] HID 045e:07da: Invalid code 773 type 1 [ 691.238371][ T5191] HID 045e:07da: Invalid code 774 type 1 [ 691.244830][ T5191] HID 045e:07da: Invalid code 775 type 1 [ 691.250479][ T5191] HID 045e:07da: Invalid code 776 type 1 [ 691.282421][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.792451][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.827395][ T5191] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0012/input/input15 [ 691.862774][ T3682] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 691.889966][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.913494][ T3682] usb 4-1: config 0 descriptor?? [ 691.957274][ T5191] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 692.017049][ T5191] usb 1-1: USB disconnect, device number 18 [ 693.022183][T10556] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 693.035472][ T3682] apple 0003:05AC:0247.0013: unknown main item tag 0xd [ 693.043088][ T3682] apple 0003:05AC:0247.0013: unexpected long global item [ 693.050594][ T3682] apple 0003:05AC:0247.0013: parse failed [ 693.057444][ T3682] apple: probe of 0003:05AC:0247.0013 failed with error -22 [ 694.520705][T10556] usb 2-1: Using ep0 maxpacket: 16 [ 694.547582][T10614] device veth0_vlan entered promiscuous mode [ 694.568490][ T3682] usb 4-1: USB disconnect, device number 20 [ 694.587449][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 694.601846][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 694.657505][ C1] eth0: bad gso: type: 1, size: 1408 [ 694.702420][T10556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.717909][T10556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.747049][T10614] device veth1_vlan entered promiscuous mode [ 694.826105][T10556] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 694.835617][T10556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.850726][T10556] usb 2-1: config 0 descriptor?? [ 694.858177][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 694.923203][T10852] Cannot find set identified by id 0 to match [ 695.583032][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 695.604730][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 695.685588][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 695.708474][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 695.755635][T10858] loop3: detected capacity change from 0 to 1024 [ 695.969694][T10614] device veth0_macvtap entered promiscuous mode [ 695.973159][T10556] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 695.983779][T10556] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 695.990580][T10556] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 695.997599][T10556] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 696.004438][T10556] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 696.014077][T10556] savu 0003:1E7D:2D5A.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 696.022526][T10614] device veth1_macvtap entered promiscuous mode [ 696.092680][T10862] syz.2.1263[10862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 696.093101][T10862] syz.2.1263[10862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 696.565247][ T3682] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 696.630448][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.690645][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.717094][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.785027][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.801084][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.811855][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.823993][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.834759][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.844891][ T3682] usb 4-1: Using ep0 maxpacket: 8 [ 696.850231][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.861056][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.875156][T10614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.885116][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 696.896320][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 696.904633][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 696.920251][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 696.955743][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.976612][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.986930][ T3682] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 696.990943][ T4141] usb 2-1: USB disconnect, device number 23 [ 697.002200][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.003699][ T3682] usb 4-1: config 0 descriptor?? [ 697.022582][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.038510][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.048547][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.059114][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.069009][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.079521][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.089612][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.116139][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.143024][T10614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.179914][ T11] device hsr_slave_0 left promiscuous mode [ 697.195359][ T3682] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 697.202578][ T4276] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 697.210343][ T11] device hsr_slave_1 left promiscuous mode [ 697.231591][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.248174][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.270455][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.284294][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.291965][ T11] device bridge_slave_1 left promiscuous mode [ 697.323084][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.334045][ T11] device bridge_slave_0 left promiscuous mode [ 697.383027][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.672289][ T4276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.691391][ T11] device veth1_macvtap left promiscuous mode [ 697.698857][ T11] device veth0_macvtap left promiscuous mode [ 697.710437][ T11] device veth1_vlan left promiscuous mode [ 698.064123][ T11] device veth0_vlan left promiscuous mode [ 698.099224][ T4276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.541448][ T4276] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 698.670867][ T4276] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 698.697905][ T4276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.720522][ T4276] usb 3-1: config 0 descriptor?? [ 699.186534][ T4276] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 699.201929][ T4276] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 699.271806][ T4276] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 699.765513][T10894] loop0: detected capacity change from 0 to 32768 [ 699.772982][T10894] XFS: ikeep mount option is deprecated. [ 699.778754][T10894] XFS: noikeep mount option is deprecated. [ 699.844359][T10894] XFS (loop0): Mounting V5 Filesystem [ 699.943910][T10894] XFS (loop0): Ending clean mount [ 699.979986][T10894] XFS (loop0): Quotacheck needed: Please wait. [ 700.053161][T10894] XFS (loop0): Quotacheck: Done. [ 701.589714][ T11] team0 (unregistering): Port device team_slave_1 removed [ 701.609112][ T9287] XFS (loop0): Unmounting Filesystem [ 701.645522][ T11] team0 (unregistering): Port device team_slave_0 removed [ 701.734848][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.762271][ T4141] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 701.801515][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.048565][ T4141] usb 3-1: device firmware changed [ 702.054485][ T4145] usb 3-1: USB disconnect, device number 18 [ 702.212229][ T4145] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 702.505477][T10911] loop0: detected capacity change from 0 to 40427 [ 702.514014][ T11] bond0 (unregistering): Released all slaves [ 702.556488][T10911] F2FS-fs (loop0): Found nat_bits in checkpoint [ 702.582280][ T4145] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 702.597600][ T4145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.603919][T10911] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 702.622999][ T4145] usb 3-1: config 0 descriptor?? [ 702.662509][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 702.676341][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 702.691928][T10614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.710912][T10614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.719875][T10614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.728672][T10614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.874991][ T3682] usb 4-1: USB disconnect, device number 21 [ 703.620341][ T9287] syz-executor: attempt to access beyond end of device [ 703.620341][ T9287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 703.692312][ T4145] usb 3-1: Cannot read MAC address [ 703.697570][ T4145] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 703.733928][ T4145] usb 3-1: USB disconnect, device number 19 [ 704.198838][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.276591][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.489691][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 704.522436][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.647924][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.666316][T10925] loop2: detected capacity change from 0 to 128 [ 704.797744][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 704.847707][ T27] audit: type=1800 audit(1724890148.921:85): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1276" name="bus" dev="loop2" ino=1048868 res=0 errno=0 [ 706.555720][T10939] loop2: detected capacity change from 0 to 2048 [ 706.644092][T10939] loop2: p1 < > p2 p3 < p5 > p4 [ 706.649078][T10939] loop2: partition table partially beyond EOD, truncated [ 706.692532][T10939] loop2: p1 start 4278190080 is beyond EOD, truncated [ 706.702055][T10939] loop2: p2 start 16908800 is beyond EOD, truncated [ 706.725593][T10939] loop2: p4 start 11326 is beyond EOD, truncated [ 707.144023][T10939] loop2: p5 start 16908800 is beyond EOD, truncated [ 707.263226][T10954] IPVS: length: 4096 != 8 [ 707.329737][T10938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.416803][T10956] loop4: detected capacity change from 0 to 512 [ 707.471639][T10956] EXT4-fs (loop4): 1 orphan inode deleted [ 707.488162][ T4604] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 707.582187][T10956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 707.592653][ T4604] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:11: Failed to release dquot type 1 [ 707.604415][T10956] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 707.654236][T10961] loop0: detected capacity change from 0 to 512 [ 707.713938][T10961] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 707.752848][T10961] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 708.368675][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 708.520675][T10614] EXT4-fs (loop4): unmounting filesystem. [ 709.642398][ T5820] wlan1: Trigger new scan to find an IBSS to join [ 709.772293][ T4141] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 710.133384][ T4141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.152210][ T4141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.182160][ T4141] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 710.663758][ T4141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.683209][ T4141] usb 5-1: config 0 descriptor?? [ 710.692546][ T27] audit: type=1326 audit(1724890154.791:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 710.802656][ T27] audit: type=1326 audit(1724890154.841:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 710.835044][T10980] loop2: detected capacity change from 0 to 512 [ 710.875491][T10980] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 710.912169][ T27] audit: type=1326 audit(1724890154.841:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 710.912285][T10980] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 711.180085][T10980] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 711.192640][T10980] EXT4-fs (loop2): group descriptors corrupted! [ 711.892187][ T27] audit: type=1326 audit(1724890154.841:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 711.988248][T10990] loop1: detected capacity change from 0 to 512 [ 712.012844][ T27] audit: type=1326 audit(1724890154.841:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 712.283053][T10990] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 712.302277][ T27] audit: type=1326 audit(1724890154.851:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 712.345505][T10990] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038 (0x7fffffff) [ 712.349011][ T4141] hid-led 0003:1D34:000A.0016: unknown main item tag 0x0 [ 714.685332][ T41] wlan1: Trigger new scan to find an IBSS to join [ 715.378197][ T4141] hid-led: probe of 0003:1D34:000A.0016 failed with error -71 [ 715.421793][T11000] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 715.681367][ T4141] usb 5-1: USB disconnect, device number 13 [ 715.727531][ T27] audit: type=1326 audit(1724890154.851:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 715.894651][ T8717] EXT4-fs (loop1): unmounting filesystem. [ 715.931878][ T27] audit: type=1326 audit(1724890154.851:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 716.102435][ T27] audit: type=1326 audit(1724890154.851:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 716.478094][ T27] audit: type=1326 audit(1724890154.851:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 716.802206][ T27] audit: type=1326 audit(1724890154.851:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 716.804742][T11010] loop1: detected capacity change from 0 to 512 [ 716.831347][ T3854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.863380][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 716.893698][T11010] ext4: Unknown parameter 'noacl' [ 716.993844][ T27] audit: type=1326 audit(1724890154.851:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 717.041339][T11003] loop4: detected capacity change from 0 to 4096 [ 717.216245][T11003] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 717.338760][ T27] audit: type=1326 audit(1724890154.851:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 719.152454][ T27] audit: type=1326 audit(1724890154.851:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 719.315105][ T27] audit: type=1326 audit(1724890154.851:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 719.505208][T11031] loop1: detected capacity change from 0 to 1024 [ 719.582503][ T3687] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 720.447929][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.493316][ T27] audit: type=1326 audit(1724890154.851:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.2.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 720.528695][ T3687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 720.590365][T11033] overlayfs: failed to resolve './file1': -2 [ 720.619053][ T3687] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 720.716195][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.859190][ T3687] usb 1-1: config 0 descriptor?? [ 720.859254][T11036] loop3: detected capacity change from 0 to 256 [ 721.109303][T11036] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 721.139785][T11028] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.756129][T11028] loop0: detected capacity change from 0 to 8 [ 722.274885][T11046] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 722.805811][T11036] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 722.850781][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 722.850794][ T27] audit: type=1326 audit(1724890166.951:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11032 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e19379ef9 code=0x7ffc0000 [ 722.853113][T11036] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 722.862451][ T27] audit: type=1326 audit(1724890166.951:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11032 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e19379ef9 code=0x7ffc0000 [ 723.146814][ T3687] usbhid 1-1:0.0: can't add hid device: -71 [ 723.157687][ T3687] usbhid: probe of 1-1:0.0 failed with error -71 [ 723.203789][ T3687] usb 1-1: USB disconnect, device number 19 [ 723.300837][ T27] audit: type=1326 audit(1724890166.951:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11032 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e19379ef9 code=0x7ffc0000 [ 723.678484][ T27] audit: type=1326 audit(1724890166.951:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11032 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e19379ef9 code=0x7ffc0000 [ 723.843304][ T27] audit: type=1326 audit(1724890166.951:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11032 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e19379ef9 code=0x7ffc0000 [ 723.910344][ T27] audit: type=1326 audit(1724890166.951:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11032 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f1e19379ef9 code=0x7ffc0000 [ 724.262306][ T4276] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 725.155022][ T27] audit: type=1326 audit(1724890166.951:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11032 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e19379ef9 code=0x7ffc0000 [ 725.187747][ T4276] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 725.397340][ T4276] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 725.407098][ T4276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.434760][ T27] audit: type=1326 audit(1724890166.951:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11032 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e19379ef9 code=0x7ffc0000 [ 725.469781][ T4276] usb 4-1: config 0 descriptor?? [ 725.554223][ T4276] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 725.621857][T11064] loop1: detected capacity change from 0 to 2048 [ 725.657693][T11064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.290453][ T27] audit: type=1400 audit(1724890170.391:134): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11063 comm="syz.1.1301" [ 727.476508][ T4276] usb 4-1: USB disconnect, device number 22 [ 727.763233][T11088] loop3: detected capacity change from 0 to 1024 [ 727.789198][T11088] EXT4-fs: Ignoring removed orlov option [ 728.052457][ T4141] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 728.082854][T11088] EXT4-fs (loop3): Test dummy encryption mode enabled [ 728.482497][ T4141] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 728.491406][ T4141] usb 1-1: config 1 has no interface number 0 [ 728.527678][T11088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 728.554779][ T4141] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.766660][ T4141] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 728.795826][ T4141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 728.898514][T11104] hfsplus: unable to find HFS+ superblock [ 729.653129][ T4141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 729.653455][T11088] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 729.670702][ T4141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.670753][ T4141] usb 1-1: Product: syz [ 729.690571][ T4141] usb 1-1: Manufacturer: syz [ 729.704211][ T4141] usb 1-1: SerialNumber: syz [ 729.912187][ T4797] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 730.655208][ T7032] EXT4-fs (loop3): unmounting filesystem. [ 730.822383][ T4797] usb 2-1: config index 0 descriptor too short (expected 64575, got 68) [ 731.440497][ T4797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.450947][ T4797] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 731.462338][ T4797] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 731.516233][T11115] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1311'. [ 731.534631][ T4141] cdc_ncm 1-1:1.1: bind() failure [ 731.825040][ T4797] usb 2-1: config index 1 descriptor too short (expected 64575, got 68) [ 731.834040][ T4797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.844686][ T4797] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 731.856015][ T4797] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 731.886883][ T3682] usb 1-1: USB disconnect, device number 20 [ 732.093709][T11140] netlink: 'syz.3.1320': attribute type 5 has an invalid length. [ 732.109936][T11106] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 732.962375][ T4797] usb 2-1: string descriptor 0 read error: -71 [ 732.968656][ T4797] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 733.008415][ T4797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.182598][ T4797] usb 2-1: can't set config #1, error -71 [ 733.210403][ T4797] usb 2-1: USB disconnect, device number 24 [ 733.930579][T11162] loop3: detected capacity change from 0 to 256 [ 733.984343][T11162] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 734.534878][T11156] loop2: detected capacity change from 0 to 2048 [ 735.493723][T11156] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 735.599897][T11156] UDF-fs: unknown compression code (1) [ 735.717327][T11174] loop1: detected capacity change from 0 to 16 [ 735.777583][T11174] erofs: (device loop1): mounted with root inode @ nid 36. [ 735.933432][T11179] loop0: detected capacity change from 0 to 1024 [ 735.967968][T11179] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 131174)! [ 736.056593][T11179] EXT4-fs (loop0): group descriptors corrupted! [ 736.140163][T11184] loop2: detected capacity change from 0 to 512 [ 736.270795][T10178] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 737.199524][T11192] loop3: detected capacity change from 0 to 1024 [ 737.466042][T11199] loop4: detected capacity change from 0 to 256 [ 737.605725][T11192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 737.634118][T11194] loop2: detected capacity change from 0 to 128 [ 738.008964][T11204] overlayfs: failed to resolve './file2': -2 [ 738.062193][ T4276] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 738.287185][ T27] audit: type=1800 audit(1724890182.391:135): pid=11194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1335" name="bus" dev="loop2" ino=1048877 res=0 errno=0 [ 738.352185][T11001] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 739.252884][ T4276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.270558][ T4276] usb 2-1: config 0 has no interfaces? [ 739.278985][ T4276] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 739.310379][ T4276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.324132][ T4276] usb 2-1: config 0 descriptor?? [ 739.344828][T11001] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 739.355159][T11001] usb 4-1: config 0 has no interface number 1 [ 739.366523][T11001] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 739.381416][T11001] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 739.393427][T11001] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 739.404339][T11001] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 739.424238][T11001] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 739.435842][T11001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.453762][T11001] usb 4-1: config 0 descriptor?? [ 739.500047][T11001] usb 4-1: MIDIStreaming interface descriptor not found [ 739.772726][T11203] loop1: detected capacity change from 0 to 256 [ 739.804114][T11219] loop0: detected capacity change from 0 to 128 [ 739.874651][T11220] ubi0: attaching mtd0 [ 739.902710][T11220] ubi0: scanning is finished [ 739.907369][T11220] ubi0: empty MTD device detected [ 740.701155][T11001] snd-usb-audio: probe of 4-1:0.156 failed with error -12 [ 740.709166][T11203] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 741.073697][T11219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 741.170680][T11001] gspca_main: spca561-2.14.0 probing abcd:cdee [ 741.184604][T11219] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 741.215706][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.229616][T11220] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 741.310431][T11203] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 741.625444][T11203] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 741.667659][T11203] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 742.012844][T11001] spca561: probe of 4-1:0.0 failed with error -22 [ 742.844472][ T7032] EXT4-fs (loop3): unmounting filesystem. [ 742.952926][T11001] usb 4-1: USB disconnect, device number 23 [ 743.021195][ T4145] usb 2-1: USB disconnect, device number 25 [ 743.022291][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 743.074526][ T8717] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 743.511788][T11251] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1344'. [ 747.362797][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.400146][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.755315][T11259] loop1: detected capacity change from 0 to 1024 [ 748.164400][T11266] ecryptfs_parse_options: eCryptfs: unrecognized option [l] [ 748.285416][T11266] ecryptfs_parse_options: eCryptfs: unrecognized option [io%bfq.io_serviced_recursiƋ}ʼ(zmbE1Ƭqd1 K/dev/nullb0] [ 748.320952][T11266] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 748.737143][ T3750] hfsplus: b-tree write err: -5, ino 4 [ 748.772766][T11266] Error parsing options; rc = [-22] [ 749.325622][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 749.804895][ T27] audit: type=1326 audit(1724890193.601:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f7b79ef9 code=0x7ffc0000 [ 750.176271][T11294] loop0: detected capacity change from 0 to 32768 [ 750.549686][T11294] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1354 (11294) [ 750.600505][T11294] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 750.610749][T11294] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 750.619608][T11294] BTRFS info (device loop0): using free space tree [ 750.696701][T11283] device batadv0 entered promiscuous mode [ 750.780800][ T27] audit: type=1326 audit(1724890193.601:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f7b79ef9 code=0x7ffc0000 [ 750.862535][T11283] device macvtap1 entered promiscuous mode [ 750.878397][T11283] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 750.933949][ T27] audit: type=1326 audit(1724890193.671:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7f7b79ef9 code=0x7ffc0000 [ 751.129809][ T27] audit: type=1326 audit(1724890193.781:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f7b79ef9 code=0x7ffc0000 [ 751.157215][ T27] audit: type=1326 audit(1724890193.781:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f7b79ef9 code=0x7ffc0000 [ 752.293983][T11328] loop3: detected capacity change from 0 to 256 [ 752.370667][T11294] BTRFS info (device loop0): enabling ssd optimizations [ 752.410144][ T3682] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 752.455246][T11331] overlayfs: './file1' not a directory [ 752.565218][ T4141] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 752.777504][ T9287] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 752.808165][T11328] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 752.862234][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 752.917843][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.983266][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 752.995368][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 753.005551][ T3682] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 753.018597][ T3682] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 753.027714][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.108960][ T3682] usb 3-1: config 0 descriptor?? [ 753.132241][ T4141] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 753.187981][ T4141] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 753.224562][ T4141] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 753.233994][ T4141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.282880][T11329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 753.549757][ T7032] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 753.560621][ T4141] usb 2-1: USB disconnect, device number 26 [ 753.572208][ T7032] exFAT-fs (loop3): Filesystem has been set read-only [ 753.597265][ T3682] ntrig 0003:1B96:000A.0017: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 753.615437][T11339] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 753.643831][ T7032] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 753.674805][T11339] binder: Unknown parameter 'workdir1vE3wc;0 ܆XV`/gc |Hh[@/MAp9A^\' [ 753.812487][ T3682] ntrig 0003:1B96:000A.0017: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 753.877609][T11342] loop4: detected capacity change from 0 to 1024 [ 754.028938][ T3682] usb 3-1: USB disconnect, device number 20 [ 754.064470][T11329] loop1: detected capacity change from 0 to 2048 [ 754.152980][T11329] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 754.780562][ T4603] hfsplus: b-tree write err: -5, ino 4 [ 754.842255][ T4145] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 754.867721][T11348] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 755.132611][ T4145] usb 1-1: Using ep0 maxpacket: 32 [ 755.237987][ T4603] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.322763][ T4145] usb 1-1: unable to get BOS descriptor or descriptor too short [ 755.413735][ T4145] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 755.434281][ T4145] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 755.453301][ T4145] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 755.466113][ T4145] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 755.478573][ T4145] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 755.600070][ T4603] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.765816][ T4145] usb 1-1: string descriptor 0 read error: -22 [ 755.788392][ T4145] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 755.842277][ T4145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.964305][ T4603] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.982795][ T4145] usb 1-1: config 0 descriptor?? [ 756.660057][ T4145] xillyusb 1-1:0.0: Failed to send quiesce request. Aborting. [ 756.712901][ T4145] xillyusb: probe of 1-1:0.0 failed with error -5 [ 756.898875][ T4603] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.057220][ T27] audit: type=1326 audit(1724890201.111:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d1979ef9 code=0x7ffc0000 [ 757.667195][ T27] audit: type=1326 audit(1724890201.111:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8d1979ef9 code=0x7ffc0000 [ 757.903817][ T27] audit: type=1326 audit(1724890201.111:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d1979ef9 code=0x7ffc0000 [ 757.944147][ T27] audit: type=1326 audit(1724890201.111:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8d1979ef9 code=0x7ffc0000 [ 758.827101][ T27] audit: type=1326 audit(1724890201.151:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d1979ef9 code=0x7ffc0000 [ 758.860003][ T27] audit: type=1326 audit(1724890201.161:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8d1979ef9 code=0x7ffc0000 [ 758.889602][ T4141] usb 1-1: USB disconnect, device number 21 [ 759.074309][ T27] audit: type=1326 audit(1724890201.161:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d1979ef9 code=0x7ffc0000 [ 759.152156][ T27] audit: type=1326 audit(1724890201.161:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d1979ef9 code=0x7ffc0000 [ 759.179433][T11394] input: syz0 as /devices/virtual/input/input16 [ 759.239026][ T4603] tipc: Left network mode [ 760.033785][T11392] netlink: 'syz.0.1373': attribute type 13 has an invalid length. [ 761.097285][T11406] loop1: detected capacity change from 0 to 512 [ 761.113951][T11406] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 761.165756][T11406] EXT4-fs (loop1): 1 truncate cleaned up [ 761.171430][T11406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 761.175139][ T3638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 761.192426][ T3638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 761.202373][ T3638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 761.210233][ T3638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 761.217844][ T3638] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 761.225246][ T3638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 762.866196][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1375'. [ 763.219085][T11422] loop4: detected capacity change from 0 to 16 [ 763.324186][ T48] Bluetooth: hci1: command tx timeout [ 763.815731][T11422] erofs: (device loop4): mounted with root inode @ nid 36. [ 763.955118][T11421] syz.4.1378: attempt to access beyond end of device [ 763.955118][T11421] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 763.970374][T11421] syz.4.1378: attempt to access beyond end of device [ 763.970374][T11421] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 764.351253][ T8717] EXT4-fs (loop1): unmounting filesystem. [ 765.402250][ T3638] Bluetooth: hci1: command tx timeout [ 765.578650][T11443] loop4: detected capacity change from 0 to 256 [ 765.814362][T11407] chnl_net:caif_netlink_parms(): no params data found [ 766.683971][ T27] audit: type=1804 audit(1724890210.791:149): pid=11443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1381" name="/newroot/20/file1/file0" dev="loop4" ino=1048883 res=1 errno=0 [ 767.186199][T11460] loop2: detected capacity change from 0 to 128 [ 767.412638][T11460] VFS: could not find a valid V7 on loop2. [ 767.482508][ T3638] Bluetooth: hci1: command tx timeout [ 767.928961][T11460] loop2: detected capacity change from 0 to 4096 [ 768.017793][T11407] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.058492][T11407] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.228545][T11473] loop0: detected capacity change from 0 to 2048 [ 768.259638][T11473] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 768.412400][ T27] audit: type=1800 audit(1724890212.411:150): pid=11473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1385" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 768.896207][ C1] eth0: bad gso: type: 1, size: 1408 [ 768.953063][T11474] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 769.007866][T11407] device bridge_slave_0 entered promiscuous mode [ 769.345541][T11407] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.381545][T11407] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.423199][T11407] device bridge_slave_1 entered promiscuous mode [ 769.562146][ T3638] Bluetooth: hci1: command tx timeout [ 769.715585][T11486] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 771.395333][T11494] loop1: detected capacity change from 0 to 16 [ 771.417875][T11494] erofs: (device loop1): mounted with root inode @ nid 36. [ 771.441647][T11493] syz.1.1389: attempt to access beyond end of device [ 771.441647][T11493] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 771.455669][T11493] syz.1.1389: attempt to access beyond end of device [ 771.455669][T11493] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 772.177515][T11407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.223588][T11407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.598239][T11507] overlayfs: missing 'workdir' [ 773.271329][ T4603] device hsr_slave_0 left promiscuous mode [ 774.174460][T11519] xt_NFQUEUE: number of total queues is 0 [ 774.223276][ T4603] device hsr_slave_1 left promiscuous mode [ 774.260220][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.297396][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.492894][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.542195][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.579528][ T4603] device bridge_slave_1 left promiscuous mode [ 774.848133][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.896538][ T4603] device bridge_slave_0 left promiscuous mode [ 774.914926][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.985112][ T4603] device veth1_macvtap left promiscuous mode [ 775.012332][ T4603] device veth0_macvtap left promiscuous mode [ 775.018459][ T4603] device veth1_vlan left promiscuous mode [ 775.042841][ T4603] device veth0_vlan left promiscuous mode [ 775.120505][T11499] loop2: detected capacity change from 0 to 40427 [ 776.595609][T11531] loop4: detected capacity change from 0 to 256 [ 777.798532][T11540] loop4: detected capacity change from 0 to 16 [ 777.815670][T11540] erofs: (device loop4): mounted with root inode @ nid 36. [ 777.837291][T11540] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 777.852352][T11540] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 777.870687][T11540] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 777.901279][T11540] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 777.911239][T11540] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 777.929422][T11540] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 778.502041][ T4603] team0 (unregistering): Port device team_slave_1 removed [ 779.296118][ T4603] team0 (unregistering): Port device team_slave_0 removed [ 779.540544][ T4603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.611240][ T4603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.800489][T11550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1400'. [ 780.594300][ T4603] bond0 (unregistering): Released all slaves [ 780.668495][T11407] team0: Port device team_slave_0 added [ 780.702860][T11532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1397'. [ 780.964525][T11407] team0: Port device team_slave_1 added [ 781.365668][T11565] loop4: detected capacity change from 0 to 2048 [ 782.134485][T11563] loop0: detected capacity change from 0 to 1024 [ 782.212663][T11563] EXT4-fs: Ignoring removed orlov option [ 782.218342][T11563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 782.259581][T11565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 782.403766][T11407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.410739][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.121751][T11565] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 783.204496][T11565] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #18: comm syz.4.1403: mark_inode_dirty error [ 783.225974][T11407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.247206][T11565] EXT4-fs error (device loop4): ext4_map_blocks:744: inode #18: block 114: comm syz.4.1403: lblock 2 mapped to illegal pblock 114 (length 1) [ 783.283343][T11407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.290430][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.345367][T11407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.355732][T11563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 783.423471][T10614] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 783.585552][T10614] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 783.595959][T11553] loop1: detected capacity change from 0 to 40427 [ 783.610369][T11407] device hsr_slave_0 entered promiscuous mode [ 783.617505][T10614] EXT4-fs error (device loop4): ext4_dirty_inode:6083: inode #18: comm syz-executor: mark_inode_dirty error [ 783.630939][T11407] device hsr_slave_1 entered promiscuous mode [ 783.656352][T11553] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 783.672547][T11553] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 783.687480][T10614] EXT4-fs (loop4): unmounting filesystem. [ 783.784719][T11553] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 784.017893][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 784.049132][T11592] loop2: detected capacity change from 0 to 1024 [ 784.082957][T11592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 784.439235][T11598] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 784.447758][T11598] netlink: 'syz.2.1406': attribute type 2 has an invalid length. [ 787.175864][T11624] loop0: detected capacity change from 0 to 128 [ 787.289707][T11624] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 787.322928][T11624] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038 (0x7fffffff) [ 787.678769][T11635] syz.0.1414 (pid 11635) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 788.157162][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 788.227676][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 788.239610][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 788.254140][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 788.261942][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 788.269557][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 788.277669][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 788.420872][T11638] loop0: detected capacity change from 0 to 2048 [ 788.533623][T11638] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.1415: casefold flag without casefold feature [ 788.562888][T11638] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 788.574152][T11638] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 788.581815][T11638] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 789.119858][T11647] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1415: Directory hole found for htree leaf block 0 [ 789.381139][T11618] loop1: detected capacity change from 0 to 32768 [ 789.389008][T11618] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1410 (11618) [ 789.486010][T11618] BTRFS error (device loop1): open_ctree failed [ 789.486298][T11278] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by udevd (11278) [ 789.517167][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 789.628289][T11407] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 789.704241][T11407] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 789.733700][T11407] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 789.953109][T11657] ip6gretap0 speed is unknown, defaulting to 1000 [ 789.981498][T11657] ip6gretap0 speed is unknown, defaulting to 1000 [ 789.993063][T11657] ip6gretap0 speed is unknown, defaulting to 1000 [ 790.519825][ T48] Bluetooth: hci4: command tx timeout [ 790.533829][T11655] loop1: detected capacity change from 0 to 512 [ 790.536983][T11657] infiniband syz2: set active [ 790.551198][T11657] infiniband syz2: added ip6gretap0 [ 790.560990][T11657] rdma_rxe: unable to create cq [ 790.567888][T11657] infiniband syz2: Couldn't create ib_mad CQ [ 790.576014][T11657] infiniband syz2: Couldn't open port 1 [ 790.594547][T11655] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 790.607629][ T4282] ip6gretap0 speed is unknown, defaulting to 1000 [ 790.616442][T11657] RDS/IB: syz2: added [ 790.621076][T11657] smc: adding ib device syz2 with port count 1 [ 790.624507][T11407] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 790.627472][T11657] smc: ib device syz2 port 1 has pnetid [ 790.722047][T11657] ip6gretap0 speed is unknown, defaulting to 1000 [ 790.740571][T11655] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 790.818208][T11655] EXT4-fs (loop1): Remounting filesystem read-only [ 790.827118][T11655] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1418: invalid indirect mapped block 1 (level 1) [ 790.843765][T11655] EXT4-fs (loop1): 1 truncate cleaned up [ 790.849459][T11657] ip6gretap0 speed is unknown, defaulting to 1000 [ 790.852197][T11655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 790.915790][ T4145] ip6gretap0 speed is unknown, defaulting to 1000 [ 790.968061][T11633] chnl_net:caif_netlink_parms(): no params data found [ 790.997732][T11657] ip6gretap0 speed is unknown, defaulting to 1000 [ 791.058793][T11657] ip6gretap0 speed is unknown, defaulting to 1000 [ 791.143108][T11657] ip6gretap0 speed is unknown, defaulting to 1000 [ 791.369760][T11407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.407321][T11657] ip6gretap0 speed is unknown, defaulting to 1000 [ 791.875809][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 791.884749][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 791.998713][ T8717] EXT4-fs (loop1): unmounting filesystem. [ 792.604034][ T48] Bluetooth: hci4: command tx timeout [ 792.887059][T11407] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.025675][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 793.060735][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 793.731820][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.738986][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.883501][T11679] loop2: detected capacity change from 0 to 256 [ 793.901930][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 793.912405][T11681] syz.0.1423[11681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 793.912497][T11681] syz.0.1423[11681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 793.931820][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 793.970912][T11679] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 793.989932][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.997106][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.025328][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 794.051112][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 794.060497][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 794.074382][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 794.297373][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 794.307293][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 794.310373][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 794.312789][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 794.315773][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.316063][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.322437][T11633] device bridge_slave_0 entered promiscuous mode [ 794.489421][T11691] fuse: Unknown parameter 'group_i00000000000000000000' [ 796.313532][ T48] Bluetooth: hci4: command tx timeout [ 796.790741][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 797.047406][T11695] loop0: detected capacity change from 0 to 64 [ 797.512463][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 798.213294][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 798.362566][ T48] Bluetooth: hci4: command tx timeout [ 798.365658][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 798.395904][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.619505][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.878601][T11633] device bridge_slave_1 entered promiscuous mode [ 798.913586][T11407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 799.860799][T11633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.382242][ T7] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 800.394235][T11633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.661333][T11633] team0: Port device team_slave_0 added [ 800.699114][T11633] team0: Port device team_slave_1 added [ 800.742470][ T7] usb 2-1: config 0 has no interfaces? [ 800.749257][ T7] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 800.782234][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.811497][ T7] usb 2-1: config 0 descriptor?? [ 800.873051][ T4145] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 800.883040][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 800.900687][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 800.931419][T11633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.938876][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.998215][T11633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.035434][T11407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.067018][T11633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.082496][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.116805][T11741] binder: Unknown parameter '0000000000000000000018446744073709551615' [ 801.155498][T11633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.217076][ T26] usb 2-1: USB disconnect, device number 27 [ 801.244179][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 801.253548][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 801.282452][ T4145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.308477][ T4145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.348830][ T4145] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 801.351192][T11633] device hsr_slave_0 entered promiscuous mode [ 801.372598][ T4145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.424015][ T4145] usb 1-1: config 0 descriptor?? [ 801.429403][T11633] device hsr_slave_1 entered promiscuous mode [ 801.446238][T11633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.472182][T11633] Cannot create hsr debugfs directory [ 801.477824][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 801.497351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 801.531922][T11407] device veth0_vlan entered promiscuous mode [ 801.555885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 801.572990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 801.605558][T11407] device veth1_vlan entered promiscuous mode [ 801.942865][ T4145] hid (null): bogus close delimiter [ 801.979563][ T4603] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.786705][T11407] device veth0_macvtap entered promiscuous mode [ 802.877630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 802.898526][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 803.077278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 803.100010][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 803.255174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 803.866481][ T4603] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.917441][T11407] device veth1_macvtap entered promiscuous mode [ 803.986155][T11775] loop1: detected capacity change from 0 to 512 [ 804.036166][T11775] EXT4-fs: Ignoring removed oldalloc option [ 804.073314][ T4603] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.077703][T11775] EXT4-fs: quotafile must be on filesystem root [ 804.090888][ T4145] usb 1-1: string descriptor 0 read error: -71 [ 804.128426][ T4145] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 804.129150][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.140743][T11778] loop2: detected capacity change from 0 to 512 [ 804.168072][ T4145] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 804.189868][ T4145] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 804.192805][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.222216][ T4145] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 804.301992][ T4145] uclogic: probe of 0003:256C:006D.0018 failed with error -71 [ 804.341265][ T4145] usb 1-1: USB disconnect, device number 22 [ 804.474551][T11778] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 804.677142][T11780] input: syz0 as /devices/virtual/input/input17 [ 804.685725][T11778] UDF-fs: Scanning with blocksize 512 failed [ 804.695899][T11778] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 804.700375][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.710351][T11778] UDF-fs: Scanning with blocksize 1024 failed [ 804.720877][T11778] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 804.728913][T11778] UDF-fs: Scanning with blocksize 2048 failed [ 804.733927][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.749359][T11778] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 804.755880][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.763893][T11778] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 804.771146][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.810924][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.844333][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.861144][T11407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.877889][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.888508][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.907501][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.919335][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.936584][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.948419][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.964914][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.012270][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.024282][T11407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.441404][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 805.462878][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 805.490326][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 805.529609][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 805.544044][T11787] loop2: detected capacity change from 0 to 256 [ 805.656117][T11787] exFAT-fs (loop2): error, invalid access to FAT bad cluster (entry 0x00000005) [ 805.677278][ T4603] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.690958][T11787] exFAT-fs (loop2): failed to load alloc-bitmap [ 805.708123][T11787] exFAT-fs (loop2): failed to recognize exfat type [ 805.882190][T11789] loop0: detected capacity change from 0 to 40427 [ 805.895824][T11407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.904851][T11407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.913968][T11407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.942298][T11407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.983584][T11789] F2FS-fs (loop0): invalid crc value [ 806.034234][T11789] F2FS-fs (loop0): Found nat_bits in checkpoint [ 806.199589][T11789] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 807.035639][T11801] netlink: 'syz.0.1439': attribute type 13 has an invalid length. [ 807.151206][ T9287] syz-executor: attempt to access beyond end of device [ 807.151206][ T9287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 807.301239][ T3750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.362861][ T3750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.442114][T11810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1440'. [ 807.513692][T11810] loop2: detected capacity change from 0 to 1024 [ 807.787337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 808.167162][ T3750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.212236][ T3750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.316484][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 808.359375][T11817] loop2: detected capacity change from 0 to 512 [ 808.445647][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.452001][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.491488][T11817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 808.589793][T11817] ext4 filesystem being mounted at /83/bus supports timestamps until 2038 (0x7fffffff) [ 810.094568][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 810.106739][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 810.116979][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 810.124852][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 810.132312][ T3651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 810.141381][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 810.295508][T11842] loop0: detected capacity change from 0 to 2048 [ 810.372015][T11842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 810.527130][T11839] ip6gretap0 speed is unknown, defaulting to 1000 [ 811.505663][T11857] loop3: detected capacity change from 0 to 256 [ 811.543915][T11857] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 811.681320][T11858] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1448'. [ 812.811564][ T3638] Bluetooth: hci2: command tx timeout [ 813.207695][T11866] dccp_xmit_packet: Payload too large (65475) for featneg. [ 813.806263][T11859] dccp_close: ABORT with 65475 bytes unread [ 813.814545][T11859] dccp_close: ABORT with 11 bytes unread [ 814.227302][T11633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 814.848990][ T3638] Bluetooth: hci2: command tx timeout [ 816.922345][ T3638] Bluetooth: hci2: command tx timeout [ 816.973504][ T9778] EXT4-fs (loop2): unmounting filesystem. [ 817.053828][T11633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 817.196058][T11633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 817.217419][T11878] loop3: detected capacity change from 0 to 512 [ 817.246151][T11878] EXT4-fs: Ignoring removed oldalloc option [ 817.311113][T11633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 817.326286][T11878] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.1453: Parent and EA inode have the same ino 15 [ 817.395692][T11878] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.1453: Parent and EA inode have the same ino 15 [ 817.417127][T11878] EXT4-fs (loop3): 1 orphan inode deleted [ 817.425170][T11878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 818.771630][T11891] loop0: detected capacity change from 0 to 64 [ 818.784609][T11407] EXT4-fs (loop3): unmounting filesystem. [ 818.947489][T11898] loop3: detected capacity change from 0 to 512 [ 819.002652][ T3638] Bluetooth: hci2: command tx timeout [ 819.040130][T11898] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 819.063088][T11898] ext4 filesystem being mounted at /5/bus supports timestamps until 2038 (0x7fffffff) [ 819.717745][T11633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.867543][T11905] loop2: detected capacity change from 0 to 1024 [ 819.981217][T11905] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1458: Invalid block bitmap block 0 in block_group 0 [ 820.022453][T11905] Quota error (device loop2): write_blk: dquota write failed [ 820.030075][T11905] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 820.040788][T11905] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.1458: Failed to acquire dquot type 0 [ 820.053628][T11839] chnl_net:caif_netlink_parms(): no params data found [ 820.067058][T11905] EXT4-fs error (device loop2): ext4_free_blocks:6212: comm syz.2.1458: Freeing blocks not in datazone - block = 0, count = 4096 [ 820.162540][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.169767][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.177945][T11839] device bridge_slave_0 entered promiscuous mode [ 820.186289][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.195463][T11839] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.203510][T11839] device bridge_slave_1 entered promiscuous mode [ 820.220315][T11905] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1458: Invalid inode bitmap blk 0 in block_group 0 [ 820.222622][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 820.233869][T11407] EXT4-fs (loop3): unmounting filesystem. [ 820.241708][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 820.245896][ T11] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 820.261393][T11905] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 820.268956][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:1: Failed to release dquot type 0 [ 820.271482][T11905] EXT4-fs (loop2): 1 orphan inode deleted [ 820.299023][T11905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 820.351151][T11633] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.377748][T11915] loop0: detected capacity change from 0 to 128 [ 820.399175][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 820.413360][T11839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.424941][T11839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.559463][T11839] team0: Port device team_slave_0 added [ 820.590886][T11839] team0: Port device team_slave_1 added [ 820.614643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 820.614776][T11919] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1461'. [ 820.633282][T11915] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 820.660779][T11915] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038 (0x7fffffff) [ 820.971586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 821.006378][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.013559][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.079917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 821.143007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 821.212239][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.219345][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.227098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 821.252192][ T46] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 821.261175][ T46] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:3: Failed to release dquot type 0 [ 821.262745][ T9778] EXT4-fs (loop2): unmounting filesystem. [ 821.343683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 821.354948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 821.374289][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 821.375759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 821.423814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 821.452085][T11924] loop3: detected capacity change from 0 to 2048 [ 821.516905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 821.526112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 821.538734][ T4603] device hsr_slave_0 left promiscuous mode [ 821.545389][ T4603] device hsr_slave_1 left promiscuous mode [ 821.551937][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.559792][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.636656][T11931] input: syz1 as /devices/virtual/input/input18 [ 822.667839][T11924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 822.668588][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.716585][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.820265][ T4603] device bridge_slave_1 left promiscuous mode [ 822.836919][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.075774][T11941] loop0: detected capacity change from 0 to 512 [ 823.092991][T11941] EXT4-fs: Ignoring removed oldalloc option [ 823.109560][ T4603] device bridge_slave_0 left promiscuous mode [ 823.129941][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.170409][T11941] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.1465: Parent and EA inode have the same ino 15 [ 823.183984][ T4603] device veth1_macvtap left promiscuous mode [ 823.190094][ T4603] device veth0_macvtap left promiscuous mode [ 823.198181][ T4603] device veth1_vlan left promiscuous mode [ 823.204106][ T4603] device veth0_vlan left promiscuous mode [ 823.219215][T11941] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.1465: Parent and EA inode have the same ino 15 [ 823.240151][T11941] EXT4-fs (loop0): 1 orphan inode deleted [ 823.246621][T11941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 824.201906][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 824.696724][ T4603] team0 (unregistering): Port device team_slave_1 removed [ 824.741267][ T4603] team0 (unregistering): Port device team_slave_0 removed [ 824.785818][ T4603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.832792][ T4603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.337700][ T4603] bond0 (unregistering): Released all slaves [ 825.436635][T11839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.443723][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.471125][T11839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.485516][T11839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.492701][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.518819][T11839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.535289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 825.689738][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 825.715605][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 825.735693][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 825.748790][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 825.768836][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 825.783675][T11839] device hsr_slave_0 entered promiscuous mode [ 825.817445][T11839] device hsr_slave_1 entered promiscuous mode [ 825.831470][T11839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.855681][T11839] Cannot create hsr debugfs directory [ 825.965827][T11964] loop3: detected capacity change from 0 to 16 [ 825.974256][T11964] erofs: Unknown parameter '' [ 825.981096][ T3687] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 826.262257][ T3687] usb 1-1: Using ep0 maxpacket: 8 [ 826.392798][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.512874][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.670871][ T3687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 826.688866][ T3687] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 826.698679][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.849870][ T3687] usb 1-1: config 0 descriptor?? [ 826.897953][T11973] loop3: detected capacity change from 0 to 1024 [ 827.008739][T11973] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1471: Invalid block bitmap block 0 in block_group 0 [ 827.068799][T11839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.099432][T11973] Quota error (device loop3): write_blk: dquota write failed [ 827.131394][T11973] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 827.157589][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 827.165406][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 827.174759][T11973] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1471: Failed to acquire dquot type 0 [ 827.190748][T11633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.352595][T11973] EXT4-fs error (device loop3): ext4_free_blocks:6212: comm syz.3.1471: Freeing blocks not in datazone - block = 0, count = 4096 [ 827.373767][ T3687] ortek 0003:1223:3F07.0019: item fetching failed at offset 5/7 [ 827.381851][ T3687] ortek: probe of 0003:1223:3F07.0019 failed with error -22 [ 827.505236][T11973] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1471: Invalid inode bitmap blk 0 in block_group 0 [ 827.896298][T11839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.032259][ T3854] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 828.041582][ T3854] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:8: Failed to release dquot type 0 [ 828.057995][T11973] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 828.077235][T11973] EXT4-fs (loop3): 1 orphan inode deleted [ 828.087348][T11973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 828.311077][T11839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.544250][ T3682] usb 1-1: USB disconnect, device number 23 [ 828.861746][T12000] loop2: detected capacity change from 0 to 256 [ 828.960527][T11407] EXT4-fs (loop3): unmounting filesystem. [ 828.972324][ T4604] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 828.981303][ T4604] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:11: Failed to release dquot type 0 [ 829.094003][T11839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.302728][T12008] loop0: detected capacity change from 0 to 256 [ 830.174742][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 830.187208][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 830.316953][T11633] device veth0_vlan entered promiscuous mode [ 830.337999][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 830.351713][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 830.377831][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 830.400118][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 830.466780][T11633] device veth1_vlan entered promiscuous mode [ 830.544297][T11839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 830.604552][T11839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 830.643887][T11839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 830.679296][T11839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 830.756067][T11633] device veth0_macvtap entered promiscuous mode [ 830.785179][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 830.805682][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 830.942304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 830.972975][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 831.749669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 831.874921][T11633] device veth1_macvtap entered promiscuous mode [ 831.915159][T12038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1478'. [ 832.004063][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.027372][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.045771][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.069522][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.102108][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.122780][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.150158][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.181363][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.220366][T11633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.302413][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 832.322234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 832.358654][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.394585][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.428868][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.469352][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.503704][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.542106][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.579787][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.616171][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.643753][T11633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.686347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 832.705294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 832.741204][T11633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.751379][T11633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.760500][T11633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.769973][T11633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.833627][T11839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.905386][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 832.944307][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 832.966222][T11839] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.012440][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 833.030968][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 833.042012][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.049138][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.098852][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.110267][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 833.126658][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 833.137780][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.165114][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 833.176447][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.183573][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.257837][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 833.270723][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 833.296031][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 833.448681][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 833.457596][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 833.477026][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 833.485896][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 834.811069][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 834.882434][ C1] eth0: bad gso: type: 1, size: 1408 [ 834.899578][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 834.954074][T11839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 834.985431][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 835.014307][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 835.036187][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 835.066551][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 835.104352][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.123018][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.231067][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 836.210231][T12064] loop0: detected capacity change from 0 to 1024 [ 836.328516][ T3694] tipc: Left network mode [ 836.358065][T12064] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1483: Invalid block bitmap block 0 in block_group 0 [ 836.380593][T12064] Quota error (device loop0): write_blk: dquota write failed [ 836.389702][T12064] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 836.443365][T12064] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.1483: Failed to acquire dquot type 0 [ 837.231093][T12064] EXT4-fs error (device loop0): ext4_free_blocks:6212: comm syz.0.1483: Freeing blocks not in datazone - block = 0, count = 4096 [ 837.295017][T12075] loop4: detected capacity change from 0 to 128 [ 837.305609][T12064] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1483: Invalid inode bitmap blk 0 in block_group 0 [ 837.331591][T12075] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 837.342837][ T4603] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 837.368150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 837.382896][ T4603] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:10: Failed to release dquot type 0 [ 837.383901][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 837.406237][T12064] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 837.426403][T12075] loop4: detected capacity change from 0 to 8 [ 837.481467][T11839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.491324][T12064] EXT4-fs (loop0): 1 orphan inode deleted [ 837.513273][T12064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 839.905929][T12080] overlayfs: overlapping lowerdir path [ 841.213289][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 841.233009][ T4605] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 841.241956][ T4605] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:12: Failed to release dquot type 0 [ 841.380114][T12087] loop3: detected capacity change from 0 to 128 [ 841.380712][T12088] loop4: detected capacity change from 0 to 1024 [ 841.407650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 841.442357][T12088] EXT4-fs: Ignoring removed orlov option [ 841.444175][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 841.451763][T12088] EXT4-fs (loop4): Test dummy encryption mode enabled [ 841.560678][T12088] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 841.928472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 841.944137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 842.169691][T11839] device veth0_vlan entered promiscuous mode [ 842.177176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 842.875885][T12088] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 842.984070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 843.123707][T11839] device veth1_vlan entered promiscuous mode [ 843.132544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 843.276755][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 843.301420][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 843.328491][T11839] device veth0_macvtap entered promiscuous mode [ 843.370106][T11839] device veth1_macvtap entered promiscuous mode [ 843.485467][T11633] EXT4-fs (loop4): unmounting filesystem. [ 843.521310][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.577697][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.664617][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.693891][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.704664][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.715958][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.726136][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.736874][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.747777][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.759821][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.771655][T11839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.796501][T12113] fuse: Unknown parameter ' ګ)5k+?s TDq%7ˁ$}jfn+` [ 843.796501][T12113] K!i.:fZHYI~GY36^ycs*^bG-zYAi9 [ 843.796501][T12113] +/mFf?I^hNBBmG{L`-*Qj;e1Paj%7TY1b I'8ާCsכ(9C%sfIh+qz-Ŀ#tOf?^2uQ~aYij H:Tjy҆Nq5]q~ϭۓ]p0x0000000000000008' [ 843.865844][T12116] loop2: detected capacity change from 0 to 512 [ 843.873620][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.884401][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.890041][T12116] EXT4-fs: Ignoring removed oldalloc option [ 843.900768][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.911825][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.235862][T12116] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1488: Parent and EA inode have the same ino 15 [ 844.290568][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.331108][T12113] mmap: syz.4.1490 (12113) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 844.390952][T12116] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1488: Parent and EA inode have the same ino 15 [ 844.407841][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.460625][T12113] binder_alloc: binder_alloc_mmap_handler: 12112 20ffc000-20ffd000 already mapped failed -16 [ 844.487290][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.492580][ T4287] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 844.503649][T12116] EXT4-fs (loop2): 1 orphan inode deleted [ 844.519245][T12116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 844.519330][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.551567][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.562491][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.573879][T11839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.722239][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 844.796882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 844.816257][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 844.835580][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 846.077726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 846.096020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 846.122114][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 846.312127][ T3682] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 846.322457][ T4287] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 846.339429][ T4287] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 846.349004][ T4287] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 846.365122][ T4287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.417359][ T9778] EXT4-fs (loop2): unmounting filesystem. [ 846.674134][T11839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.684547][T11839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.709161][T11839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.378004][T11839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.405293][ T3687] usb 4-1: USB disconnect, device number 24 [ 848.558192][ T3682] usb 1-1: device descriptor read/all, error -71 [ 849.189495][ T4604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.278644][ T4604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.469479][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 849.495397][ T5820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.513503][ T5820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.556167][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 849.650923][ T3694] device hsr_slave_0 left promiscuous mode [ 849.683985][ T3694] device hsr_slave_1 left promiscuous mode [ 849.690720][ T3694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.706608][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.846553][ T3694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.861553][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.769602][T12146] loop1: detected capacity change from 0 to 256 [ 850.786870][ T3694] device veth1_macvtap left promiscuous mode [ 850.817289][ T3694] device veth0_macvtap left promiscuous mode [ 850.838276][T12146] FAT-fs (loop1): Unrecognized mount option "#! [ 850.838276][T12146] " or missing value [ 850.882840][ T3694] device veth1_vlan left promiscuous mode [ 850.888677][ T3694] device veth0_vlan left promiscuous mode [ 850.987970][T12163] loop0: detected capacity change from 0 to 64 [ 851.535225][T12150] loop2: detected capacity change from 0 to 32768 [ 851.664510][T12150] XFS (loop2): Mounting V5 Filesystem [ 851.899207][T12150] XFS (loop2): Ending clean mount [ 852.698807][T12181] loop1: detected capacity change from 0 to 1024 [ 852.761151][T12181] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1498: Invalid block bitmap block 0 in block_group 0 [ 852.783338][ T27] audit: type=1326 audit(1724890296.881:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 852.828451][T12181] Quota error (device loop1): write_blk: dquota write failed [ 852.843730][ T27] audit: type=1326 audit(1724890296.921:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 852.862193][T12181] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 852.873824][ T27] audit: type=1326 audit(1724890296.921:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 852.889242][T12181] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.1498: Failed to acquire dquot type 0 [ 852.905375][ T27] audit: type=1326 audit(1724890296.921:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 852.925869][T12181] EXT4-fs error (device loop1): ext4_free_blocks:6212: comm syz.1.1498: Freeing blocks not in datazone - block = 0, count = 4096 [ 852.943407][ T27] audit: type=1326 audit(1724890296.921:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff406979ef9 code=0x7ffc0000 [ 852.947896][T12181] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1498: Invalid inode bitmap blk 0 in block_group 0 [ 852.982853][ T4053] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 852.992695][T12181] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 853.004641][T12181] EXT4-fs (loop1): 1 orphan inode deleted [ 853.009277][ T4053] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:9: Failed to release dquot type 0 [ 853.010542][T12181] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 853.807269][T11839] EXT4-fs (loop1): unmounting filesystem. [ 853.825675][ T4605] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 853.838850][ T4605] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:12: Failed to release dquot type 0 [ 853.866224][ T3694] team0 (unregistering): Port device team_slave_1 removed [ 853.953275][ T3694] team0 (unregistering): Port device team_slave_0 removed [ 854.034035][ T3694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.445837][T12189] overlayfs: overlapping lowerdir path [ 854.495298][ T3694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.110477][ T3694] bond0 (unregistering): Released all slaves [ 855.784412][ C1] eth0: bad gso: type: 1, size: 1408 [ 856.292161][ T4278] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 856.355009][ T9778] XFS (loop2): Unmounting Filesystem [ 856.366365][T12208] loop3: detected capacity change from 0 to 764 [ 856.377365][T12208] rock: directory entry would overflow storage [ 856.490858][T12208] rock: sig=0x4654, size=5, remaining=4 [ 856.592225][ T4278] usb 2-1: Using ep0 maxpacket: 16 [ 856.712829][ T4278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.723882][ T4278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.734773][ T4278] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 856.747989][ T4278] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 856.764386][ T4278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.774767][ T4278] usb 2-1: config 0 descriptor?? [ 857.320122][T12217] loop0: detected capacity change from 0 to 512 [ 857.407149][T12199] loop1: detected capacity change from 0 to 512 [ 858.652506][T12217] EXT4-fs (loop0): 1 orphan inode deleted [ 858.659597][T12199] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1503: invalid indirect mapped block 256 (level 2) [ 858.673303][T12128] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 859.182162][T12217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 859.487836][T12199] EXT4-fs (loop1): Remounting filesystem read-only [ 859.495182][T12199] EXT4-fs (loop1): 2 truncates cleaned up [ 859.501025][T12199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 859.563309][T12217] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038 (0x7fffffff) [ 859.585129][T12128] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:0: Failed to release dquot type 1 [ 859.656750][T11839] EXT4-fs (loop1): unmounting filesystem. [ 859.684057][T12235] loop3: detected capacity change from 0 to 16 [ 859.692196][ T4278] usbhid 2-1:0.0: can't add hid device: -71 [ 859.698204][ T4278] usbhid: probe of 2-1:0.0 failed with error -71 [ 859.709036][T12235] erofs: (device loop3): mounted with root inode @ nid 36. [ 859.727430][ T4278] usb 2-1: USB disconnect, device number 28 [ 859.863601][T12235] syz.3.1516: attempt to access beyond end of device [ 859.863601][T12235] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 859.870066][T12236] loop4: detected capacity change from 0 to 256 [ 859.886667][T12236] FAT-fs (loop4): Unrecognized mount option "#! [ 859.886667][T12236] " or missing value [ 860.632645][T12235] syz.3.1516: attempt to access beyond end of device [ 860.632645][T12235] loop3: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 860.685302][T11260] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 860.697747][ C1] eth0: bad gso: type: 1, size: 1408 [ 860.724026][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 860.735836][T12235] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 860.932270][T12235] syz.3.1516: attempt to access beyond end of device [ 860.932270][T12235] loop3: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 862.417712][T12260] loop0: detected capacity change from 0 to 1024 [ 862.511717][T12260] EXT4-fs: Ignoring removed orlov option [ 862.536803][T12260] EXT4-fs (loop0): Test dummy encryption mode enabled [ 862.591160][T12260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 862.600309][ T7] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 863.715126][T12273] loop4: detected capacity change from 0 to 512 [ 863.752229][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 863.761424][ T7] usb 4-1: can't read configurations, error -71 [ 863.819583][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 863.874561][T12273] EXT4-fs error (device loop4): ext4_do_update_inode:5221: inode #3: comm syz.4.1522: corrupted inode contents [ 864.002663][T12273] EXT4-fs error (device loop4): ext4_dirty_inode:6083: inode #3: comm syz.4.1522: mark_inode_dirty error [ 864.254053][T12273] EXT4-fs error (device loop4): ext4_do_update_inode:5221: inode #3: comm syz.4.1522: corrupted inode contents [ 864.402788][T12273] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.1522: mark_inode_dirty error [ 864.416068][T12273] Quota error (device loop4): write_blk: dquota write failed [ 864.416131][T12273] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 864.416155][T12273] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.1522: Failed to acquire dquot type 0 [ 864.417170][T12273] EXT4-fs error (device loop4): ext4_do_update_inode:5221: inode #16: comm syz.4.1522: corrupted inode contents [ 864.417530][T12273] EXT4-fs error (device loop4): ext4_dirty_inode:6083: inode #16: comm syz.4.1522: mark_inode_dirty error [ 864.417877][T12273] EXT4-fs error (device loop4): ext4_do_update_inode:5221: inode #16: comm syz.4.1522: corrupted inode contents [ 864.418203][T12273] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.1522: mark_inode_dirty error [ 864.418554][T12273] EXT4-fs error (device loop4): ext4_do_update_inode:5221: inode #16: comm syz.4.1522: corrupted inode contents [ 864.418870][T12273] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 864.419233][T12273] EXT4-fs error (device loop4): ext4_do_update_inode:5221: inode #16: comm syz.4.1522: corrupted inode contents [ 864.419552][T12273] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.1522: mark_inode_dirty error [ 864.419884][T12273] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 864.421760][T12273] EXT4-fs (loop4): 1 truncate cleaned up [ 864.421782][T12273] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 864.421840][T12273] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 864.471215][T12290] loop0: detected capacity change from 0 to 256 [ 864.471653][T12290] exfat: Deprecated parameter 'utf8' [ 864.471689][T12290] exfat: Deprecated parameter 'namecase' [ 864.471745][T12290] exfat: Deprecated parameter 'utf8' [ 864.490513][T12290] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x114b6bd0) [ 864.490537][T12290] exFAT-fs (loop0): invalid boot region [ 864.490547][T12290] exFAT-fs (loop0): failed to recognize exfat type [ 864.652102][T11278] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 864.685559][T12290] syz.0.1526[12290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 864.867878][T12290] syz.0.1526[12290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 865.397049][T11633] EXT4-fs (loop4): unmounting filesystem. [ 866.060094][ T48] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 866.070379][ T48] Bluetooth: hci2: Injecting HCI hardware error event [ 866.081773][ T3638] Bluetooth: hci2: hardware error 0x00 [ 866.711140][T12307] loop0: detected capacity change from 0 to 512 [ 866.722988][T12307] ext4: Unknown parameter 'func' [ 867.284270][T12307] loop0: detected capacity change from 0 to 2048 [ 867.352456][T12307] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 867.409208][T12315] loop2: detected capacity change from 0 to 8192 [ 867.496703][T12304] loop4: detected capacity change from 0 to 1024 [ 867.510242][T12315] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 867.523721][T12315] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 867.533267][T12318] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 867.533526][T12307] syz.0.1540: attempt to access beyond end of device [ 867.533526][T12307] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 867.545610][T12315] REISERFS (device loop2): using ordered data mode [ 867.567072][T12315] reiserfs: using flush barriers [ 867.577819][T12315] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 867.598644][T12315] REISERFS (device loop2): checking transaction log (loop2) [ 867.685119][T12315] REISERFS (device loop2): Using r5 hash to sort names [ 867.743641][T12315] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 868.193651][T12315] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 868.455114][ T3638] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 868.519137][T12324] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 868.533729][T12324] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 868.548129][T12324] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 868.995896][T12307] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 16777227 [ 869.032325][T12307] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 869.082202][T12307] Remounting filesystem read-only [ 869.203142][T12307] NILFS (loop0): error -5 truncating bmap (ino=16) [ 869.803595][ T9287] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 869.818928][ T9287] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 869.888276][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.951818][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.035413][T12334] ip6gretap0 speed is unknown, defaulting to 1000 [ 870.082940][ T9287] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 870.092151][ T9287] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 870.101017][ T9287] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 870.292217][T12341] loop4: detected capacity change from 0 to 16 [ 870.301022][T12341] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700) [ 872.167348][ T9287] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 872.449726][ T9287] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 872.483170][ T9287] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 872.599063][ T9287] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 872.608028][ T9287] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 872.615400][ T9287] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 872.730040][T12345] loop0: detected capacity change from 0 to 7 [ 872.894172][T12345] Dev loop0: unable to read RDB block 7 [ 872.899884][T12345] loop0: AHDI p1 p2 p3 p4 [ 872.904531][T12345] loop0: partition table partially beyond EOD, truncated [ 872.914709][T12345] loop0: p1 start 3165497348 is beyond EOD, truncated [ 872.921563][T12345] loop0: p2 start 2557434615 is beyond EOD, truncated [ 872.928481][T12345] loop0: p3 start 2077204739 is beyond EOD, truncated [ 876.306234][T12361] loop0: detected capacity change from 0 to 764 [ 876.368565][T12361] rock: directory entry would overflow storage [ 876.415350][T12361] rock: sig=0x4654, size=5, remaining=4 [ 877.210736][T12377] loop2: detected capacity change from 0 to 16 [ 877.273097][T12377] erofs: (device loop2): mounted with root inode @ nid 36. [ 877.593709][T12382] loop0: detected capacity change from 0 to 128 [ 878.316099][ T27] audit: type=1804 audit(1724890322.421:156): pid=12381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1545" name="/newroot/114/file0/cgroup.controllers" dev="loop0" ino=1048899 res=1 errno=0 [ 878.352141][ T4282] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 878.612364][ T4282] usb 3-1: Using ep0 maxpacket: 8 [ 878.702987][ T27] audit: type=1400 audit(1724890322.801:157): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":proc/thrr/current" pid=12385 comm="syz.0.1546" [ 878.762340][ T4282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 878.774220][ T4282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 878.787567][ T4282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 878.855480][ T4282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 878.924606][ T4282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 241 [ 878.990054][ T4282] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 879.060831][ T4282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.351634][ T4282] usb 3-1: config 0 descriptor?? [ 879.382355][T12377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 879.392358][T12377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 880.674317][ T9992] usb 3-1: USB disconnect, device number 21 [ 880.694861][ T3638] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 880.751199][T12401] loop0: detected capacity change from 0 to 64 [ 881.993709][ T9287] Trying to free block not in datazone [ 881.999328][ T9287] Trying to free block not in datazone [ 882.032116][ T9287] Trying to free block not in datazone [ 882.052947][ T9287] Trying to free block not in datazone [ 882.058562][ T9287] Trying to free block not in datazone [ 882.093944][ T9287] minix_free_block (loop0:6): bit already cleared [ 882.138710][ T9287] Trying to free block not in datazone [ 882.206567][ T9287] Trying to free block not in datazone [ 882.725618][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 882.752285][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 882.770807][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 882.791239][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 882.903201][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 882.910613][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 882.918861][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 882.927645][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 882.942235][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.374944][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.487581][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.575694][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.583939][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.591724][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.628510][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.662383][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.736791][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.772754][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.793542][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.814076][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.832537][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.839927][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.866680][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.883463][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.900274][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.917090][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.932889][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 883.948566][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 884.011566][T12435] loop4: detected capacity change from 0 to 32768 [ 884.019612][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 884.034657][T12435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1557 (12435) [ 884.051317][T12435] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 884.062144][T12435] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 884.070800][T12435] BTRFS info (device loop4): using free space tree [ 884.098812][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 884.112133][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 884.121645][T11334] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 884.135036][T11334] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 884.404830][T12435] BTRFS info (device loop4): enabling ssd optimizations [ 884.412356][ T7] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 884.782201][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 884.867009][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 884.965487][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.046485][ T7] usb 1-1: config 0 descriptor?? [ 885.125135][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 885.289335][T11633] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 886.616734][T12481] loop3: detected capacity change from 0 to 64 [ 887.821287][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 888.381459][T12492] loop1: detected capacity change from 0 to 128 [ 888.818444][ T27] audit: type=1800 audit(1724890332.921:158): pid=12497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1574" name="bus" dev="loop1" ino=1048900 res=0 errno=0 [ 890.006358][ T27] audit: type=1800 audit(1724890333.981:159): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1574" name="bus" dev="loop1" ino=1048900 res=0 errno=0 [ 893.081180][T12521] loop4: detected capacity change from 0 to 2048 [ 893.124102][T12521] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 893.241948][T12521] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 893.339562][T12521] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 893.347363][ T27] audit: type=1326 audit(1724890337.441:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.3.1573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74a779ef9 code=0x0 [ 893.409225][T12521] UDF-fs: Scanning with blocksize 512 failed [ 893.454567][T12521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 894.693048][ T4278] usb 1-1: USB disconnect, device number 26 [ 895.658343][ T3638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 895.674830][ T3638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 895.680271][T12561] loop4: detected capacity change from 0 to 512 [ 895.689219][ T3651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 895.697801][ T3651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 895.705459][ T3651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 895.712755][ T3651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 895.762719][T12561] ext4: Unknown parameter 'euid<00000000000000000000' [ 895.804801][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.823151][T11278] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 896.040530][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.103734][T12557] ip6gretap0 speed is unknown, defaulting to 1000 [ 896.208806][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.398742][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.901712][T12576] binder: 12566:12576 ioctl c018620c 20000740 returned -22 [ 898.172261][ T48] Bluetooth: hci3: command tx timeout [ 898.544451][ T48] Bluetooth: hci1: unexpected event for opcode 0xd77d [ 898.551502][ T48] Bluetooth: hci1: link tx timeout [ 898.565903][ T48] Bluetooth: hci1: killing stalled connection 00:00:00:00:00:00 [ 898.574375][ T48] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 [ 898.583713][ T48] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 48, name: kworker/u5:0 [ 898.592760][ T48] preempt_count: 0, expected: 0 [ 898.597619][ T48] RCU nest depth: 1, expected: 0 [ 898.611127][ T48] 3 locks held by kworker/u5:0/48: [ 898.616351][ T48] #0: ffff888059cad138 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 898.626805][ T48] #1: ffffc90000b97d20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 898.638751][ T48] #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460 [ 898.648360][ T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.106-syzkaller #0 [ 898.656434][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 898.666496][ T48] Workqueue: hci1 hci_tx_work [ 898.671191][ T48] Call Trace: [ 898.674480][ T48] [ 898.677411][ T48] dump_stack_lvl+0x1e3/0x2cb [ 898.682100][ T48] ? nf_tcp_handle_invalid+0x642/0x642 [ 898.687568][ T48] ? panic+0x764/0x764 [ 898.691639][ T48] ? preempt_schedule_common+0xa6/0xd0 [ 898.697126][ T48] __might_resched+0x5cb/0x780 [ 898.701896][ T48] ? _printk+0xd1/0x111 [ 898.706059][ T48] ? __wake_up_klogd+0x1c/0x100 [ 898.710912][ T48] ? __might_sleep+0xb0/0xb0 [ 898.715505][ T48] ? _printk+0xd1/0x111 [ 898.719662][ T48] ? vprintk_emit+0x622/0x740 [ 898.724353][ T48] ? printk_sprint+0x490/0x490 [ 898.729124][ T48] ? mark_lock+0x9a/0x340 [ 898.733465][ T48] __mutex_lock+0xbd/0xd80 [ 898.737897][ T48] ? _printk+0xd1/0x111 [ 898.742050][ T48] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 898.747257][ T48] ? mutex_lock_nested+0x10/0x10 [ 898.752216][ T48] ? hci_conn_get_phy+0x370/0x370 [ 898.757245][ T48] hci_cmd_sync_submit+0x3b/0x2e0 [ 898.762280][ T48] hci_disconnect+0xe6/0x2c0 [ 898.766879][ T48] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 898.772859][ T48] ? __lock_acquire+0x1f80/0x1f80 [ 898.777896][ T48] __check_timeout+0x333/0x460 [ 898.782662][ T48] ? __check_timeout+0x181/0x460 [ 898.787614][ T48] hci_tx_work+0x138b/0x1ec0 [ 898.792232][ T48] ? hci_cmd_work+0x660/0x660 [ 898.796916][ T48] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 898.802829][ T48] ? do_raw_spin_unlock+0x137/0x8a0 [ 898.808042][ T48] ? process_one_work+0x7a9/0x11d0 [ 898.813160][ T48] process_one_work+0x8a9/0x11d0 [ 898.818118][ T48] ? worker_detach_from_pool+0x260/0x260 [ 898.823757][ T48] ? _raw_spin_lock_irqsave+0x120/0x120 [ 898.829306][ T48] ? kthread_data+0x4e/0xc0 [ 898.833822][ T48] ? wq_worker_running+0x97/0x190 [ 898.838857][ T48] worker_thread+0xa47/0x1200 [ 898.843544][ T48] ? release_firmware_map_entry+0x186/0x186 [ 898.849468][ T48] kthread+0x28d/0x320 [ 898.853549][ T48] ? worker_clr_flags+0x190/0x190 [ 898.858612][ T48] ? kthread_blkcg+0xd0/0xd0 [ 898.863209][ T48] ret_from_fork+0x1f/0x30 [ 898.867640][ T48] [ 898.880890][ T48] [ 898.883231][ T48] ============================= [ 898.888067][ T48] [ BUG: Invalid wait context ] [ 898.892909][ T48] 6.1.106-syzkaller #0 Tainted: G W [ 898.899486][ T48] ----------------------------- [ 898.904314][ T48] kworker/u5:0/48 is trying to lock: [ 898.909576][ T48] ffff8880679609b0 (&hdev->unregister_lock){+.+.}-{3:3}, at: hci_cmd_sync_submit+0x3b/0x2e0 [ 898.919654][ T48] other info that might help us debug this: [ 898.925534][ T48] context-{4:4} [ 898.928972][ T48] 3 locks held by kworker/u5:0/48: [ 898.934061][ T48] #0: ffff888059cad138 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 898.944400][ T48] #1: ffffc90000b97d20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 898.955781][ T48] #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460 [ 898.965248][ T48] stack backtrace: [ 898.968943][ T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Tainted: G W 6.1.106-syzkaller #0 [ 898.978464][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 898.988500][ T48] Workqueue: hci1 hci_tx_work [ 898.993164][ T48] Call Trace: [ 898.996425][ T48] [ 898.999338][ T48] dump_stack_lvl+0x1e3/0x2cb [ 899.004003][ T48] ? nf_tcp_handle_invalid+0x642/0x642 [ 899.009447][ T48] ? panic+0x764/0x764 [ 899.013503][ T48] __lock_acquire+0x14b1/0x1f80 [ 899.018343][ T48] lock_acquire+0x1f8/0x5a0 [ 899.022830][ T48] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 899.028012][ T48] ? read_lock_is_recursive+0x10/0x10 [ 899.033368][ T48] ? __wake_up_klogd+0x1c/0x100 [ 899.038200][ T48] ? __might_sleep+0xb0/0xb0 [ 899.042769][ T48] ? _printk+0xd1/0x111 [ 899.046906][ T48] ? vprintk_emit+0x622/0x740 [ 899.051566][ T48] ? printk_sprint+0x490/0x490 [ 899.056316][ T48] ? mark_lock+0x9a/0x340 [ 899.060631][ T48] __mutex_lock+0x132/0xd80 [ 899.065124][ T48] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 899.070307][ T48] ? _printk+0xd1/0x111 [ 899.074444][ T48] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 899.079623][ T48] ? mutex_lock_nested+0x10/0x10 [ 899.084551][ T48] ? hci_conn_get_phy+0x370/0x370 [ 899.089557][ T48] hci_cmd_sync_submit+0x3b/0x2e0 [ 899.094564][ T48] hci_disconnect+0xe6/0x2c0 [ 899.099134][ T48] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 899.105096][ T48] ? __lock_acquire+0x1f80/0x1f80 [ 899.110107][ T48] __check_timeout+0x333/0x460 [ 899.114854][ T48] ? __check_timeout+0x181/0x460 [ 899.119770][ T48] hci_tx_work+0x138b/0x1ec0 [ 899.124352][ T48] ? hci_cmd_work+0x660/0x660 [ 899.129014][ T48] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 899.134889][ T48] ? do_raw_spin_unlock+0x137/0x8a0 [ 899.140071][ T48] ? process_one_work+0x7a9/0x11d0 [ 899.145163][ T48] process_one_work+0x8a9/0x11d0 [ 899.150087][ T48] ? worker_detach_from_pool+0x260/0x260 [ 899.155702][ T48] ? _raw_spin_lock_irqsave+0x120/0x120 [ 899.161231][ T48] ? kthread_data+0x4e/0xc0 [ 899.165722][ T48] ? wq_worker_running+0x97/0x190 [ 899.170735][ T48] worker_thread+0xa47/0x1200 [ 899.175397][ T48] ? release_firmware_map_entry+0x186/0x186 [ 899.181281][ T48] kthread+0x28d/0x320 [ 899.185332][ T48] ? worker_clr_flags+0x190/0x190 [ 899.190336][ T48] ? kthread_blkcg+0xd0/0xd0 [ 899.194908][ T48] ret_from_fork+0x1f/0x30 [ 899.199312][ T48] [ 899.204329][ T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 899.231948][T12557] chnl_net:caif_netlink_parms(): no params data found [ 899.271370][ T46] infiniband syz2: set down [ 899.275974][ T26] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 899.295226][ T3694] smc: removing ib device syz2 [ 899.305894][ T4278] ip6gretap0 speed is unknown, defaulting to 1000 [ 899.313927][T12482] infiniband syz2: ib_query_port failed (-19) [ 899.384818][T12557] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.391938][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.424726][T12557] device bridge_slave_0 entered promiscuous mode [ 899.445615][T12557] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.463459][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.482852][T12557] device bridge_slave_1 entered promiscuous mode [ 899.532057][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 899.547284][T12557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.571306][T12557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.618848][T12557] team0: Port device team_slave_0 added [ 899.634968][T12557] team0: Port device team_slave_1 added [ 899.652278][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 899.665221][ T26] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 899.674692][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.690215][ T26] usb 2-1: config 0 descriptor?? [ 899.693146][T12557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.713220][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.739988][T12557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.743952][ T26] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 899.795394][T12557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.805458][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.832457][T12557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.905522][T12557] device hsr_slave_0 entered promiscuous mode [ 899.922573][T12557] device hsr_slave_1 entered promiscuous mode [ 899.930175][T12557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 899.939746][T12557] Cannot create hsr debugfs directory [ 900.202214][ T48] Bluetooth: hci3: command tx timeout [ 900.340901][T12557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 900.355824][T12557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 900.371799][T12557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 900.380978][T12557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 900.453388][T12557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.467501][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 900.476396][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 900.488253][T12557] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.501923][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 900.513531][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 900.521937][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.529045][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.594632][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 900.603537][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 900.613819][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 900.622725][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.629812][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.639834][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 900.676133][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 900.687199][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 900.698908][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 900.708347][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 900.717816][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 900.776669][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 900.784876][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 900.795445][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 900.807432][T12557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 900.818441][T12557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 900.831413][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 900.841401][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 900.857419][ T46] device hsr_slave_0 left promiscuous mode [ 900.885043][ T46] device hsr_slave_1 left promiscuous mode [ 900.891341][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.899425][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.911987][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.920951][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.928903][ T46] device bridge_slave_1 left promiscuous mode [ 900.935323][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.943332][ T46] device bridge_slave_0 left promiscuous mode [ 900.950202][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.960525][ T46] device veth1_macvtap left promiscuous mode [ 900.968467][ T46] device veth0_macvtap left promiscuous mode [ 900.975058][ T46] device veth1_vlan left promiscuous mode [ 901.147435][ T46] team0 (unregistering): Port device team_slave_1 removed [ 901.176578][ T46] team0 (unregistering): Port device team_slave_0 removed [ 901.201396][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.228225][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.242358][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 901.289706][ T3682] usb 2-1: USB disconnect, device number 29 [ 901.352634][ T46] bond0 (unregistering): Released all slaves [ 901.462703][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 901.470561][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 901.488270][T12557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.506673][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 901.518051][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 901.547289][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 901.561803][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 901.574402][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 901.582973][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 901.591201][T12557] device veth0_vlan entered promiscuous mode [ 901.603543][T12557] device veth1_vlan entered promiscuous mode [ 901.626869][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 901.636252][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 901.644192][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 901.653041][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 901.662950][T12557] device veth0_macvtap entered promiscuous mode [ 901.674780][T12557] device veth1_macvtap entered promiscuous mode [ 901.686951][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.699910][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.711222][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.723363][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.733385][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.745768][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.755971][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.768419][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.779460][T12557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.788256][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 901.796635][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 901.807755][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 901.816361][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 901.827276][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.838193][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.850075][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.861665][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.872615][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.883500][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.893515][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.906072][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.916909][T12557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.933681][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 901.944827][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 901.966245][T12557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.982072][T12557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.002095][T12557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.010796][T12557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.046315][T12557] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht' [ 902.070378][ T4053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.086349][T12557] ieee80211 phy82: Selected rate control algorithm 'minstrel_ht' [ 902.094559][ T4053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.106019][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 902.126261][ T4605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.134716][ T4605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.144640][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 902.282125][ T3651] Bluetooth: hci3: command tx timeout [ 902.602113][ T3651] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 902.610417][ T3651] Bluetooth: hci1: Injecting HCI hardware error event [ 902.617348][ T48] Bluetooth: hci1: hardware error 0x00 [ 904.362180][ T3651] Bluetooth: hci3: command tx timeout [ 904.682086][ T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110