last executing test programs: 7.415744295s ago: executing program 1 (id=1192): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x814, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6163746976655f6c6f67733d362c6163746976655f6c6f67733d342c6a71666d743d76667376312c6163746976655f6c6f67733d3200000000615f666c7573682c6261636b67726f756e645f67633d6f6e2c6673796e635f6d6f64653d7374726963742c657874656e745fe3616368652c66c202748e327a69cd00"], 0x1, 0x5549, &(0x7f000000ad80)="$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") mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdir(&(0x7f0000002340)='./file0/file0\x00', 0x0) 5.843400483s ago: executing program 0 (id=1196): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200029010203010902120001000000000904"], 0x0) 5.462130764s ago: executing program 1 (id=1200): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0x6, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 5.291310688s ago: executing program 4 (id=1202): add_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="4a3d7c8f6ea1330ccd2d46cf49efb2b937288da5eab01232c520e4244550f1d807", 0x21, 0xffffffffffffffff) 5.160014899s ago: executing program 4 (id=1203): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.048684618s ago: executing program 4 (id=1204): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073011200000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0x7fe2, 0x2}, 0x48) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101500, 0x12c) open_tree(r0, &(0x7f0000000640)='\x00', 0x81000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff01800000"], 0x15) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000040)=""/91, &(0x7f00000000c0)=0x5b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x200) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000040)={0x80001, 0x0, [0x0, 0x6, 0x7f, 0x3f9fe909, 0xb1f, 0x6, 0x26000000, 0x30]}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 4.970990714s ago: executing program 1 (id=1205): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x82000, 0x0, 0xfe, 0x0, &(0x7f0000000000)) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r1}, &(0x7f0000000040)=""/79, 0x4f, &(0x7f0000000140)={&(0x7f0000000180)={'sha224-avx\x00'}}) 4.925377728s ago: executing program 4 (id=1206): write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/sockstat\x00') r1 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) r2 = dup3(r0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x782, &(0x7f0000000f40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000002dc0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$UHID_INPUT(r3, &(0x7f0000000c00)={0x8, {"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", 0x1000}}, 0x1006) read(r2, &(0x7f00000009c0)=""/232, 0xe8) 4.886643571s ago: executing program 1 (id=1207): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.789403379s ago: executing program 1 (id=1208): sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r2, 0x0, 0x2, 0x200007e9, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89fb, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x19e, &(0x7f0000000900)="$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") unshare(0x8000000) r4 = semget$private(0x0, 0x4000, 0x764) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000400)=""/86) r5 = socket$inet6(0xa, 0x3, 0x9) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f00000002c0)=""/225) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x0, @local}}}, 0x88) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000a0000000950000000200"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)) syz_usbip_server_init(0x0) keyctl$clear(0x7, 0x0) execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8fff5ffffffbfa200000000000007020000f8ffffffb7eeffff07000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10) 4.6505217s ago: executing program 4 (id=1209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x4, 0x0, &(0x7f0000000640)=[@enter_looper], 0x1, 0x0, &(0x7f0000000680)='W'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001740)="d7"}) 4.628870682s ago: executing program 2 (id=1210): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x814, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6163746976655f6c6f67733d362c6163746976655f6c6f67733d342c6a71666d743d76667376312c6163746976655f6c6f67733d3200000000615f666c7573682c6261636b67726f756e645f67633d6f6e2c6673796e635f6d6f64653d7374726963742c657874656e745fe3616368652c66c202748e327a69cd00"], 0x1, 0x5549, &(0x7f000000ad80)="$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") mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdir(&(0x7f0000002340)='./file0/file0\x00', 0x0) 3.756440453s ago: executing program 0 (id=1211): socket$kcm(0xa, 0x3, 0x73) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00'}, 0x45) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4800003e, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x61, 0x40001002, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$phonet_pipe(0x23, 0x5, 0x2) 3.55781676s ago: executing program 3 (id=1213): add_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="4a3d7c8f6ea1330ccd2d46cf49efb2b937288da5eab01232c520e4244550f1d807", 0x21, 0xffffffffffffffff) 3.5565336s ago: executing program 4 (id=1214): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0}, 0x0) 3.539293511s ago: executing program 0 (id=1215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0xc0105500, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x9}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.412322142s ago: executing program 3 (id=1216): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt(r1, 0x200000000114, 0x2718, 0x0, &(0x7f0000000080)) 1.46290694s ago: executing program 3 (id=1217): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x82000, 0x0, 0xfe, 0x0, &(0x7f0000000000)) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r1}, &(0x7f0000000040)=""/79, 0x4f, &(0x7f0000000140)={&(0x7f0000000180)={'sha224-avx\x00'}}) 1.460466351s ago: executing program 0 (id=1218): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodiscard}, {@nodiscard}, {}, {@nodiscard}]}, 0x1, 0xdb3, &(0x7f0000001c40)="$eJzs3c9vXMUdAPB5a2+cXzR2Gho3TZOUkEB/xIY0TStxMRI9lCKkHjnSNNC0TvgRegDlkHLoCamWEH9AIyRyqXqoeuBSRZzoBVXqvUKcekklpBxQFDCyPbNef7Ort+vYXq/385FmZ9+beW9mdt++fb8nASOrsfx67tx0ldJ7H777zH9O/+ofS2OOt3KcWH4dz0NzKaVma7qUJsP85iZW4i8/v3ahPf4qx1U6m6pUtcan52+3pt2XUrqeTqRbaTI99cKdex8sPPvcwtSpm4ff+eTu5rR+VbXZBQAAwDbwxS/ff+1fj/382tTdvx2bSxOt8WX7fC4P78/b/XN5Q7lsL5f9gKotrjpsT+8K+cZzaIR8Yx3ytZfTDPnGu5S/K8y32SXfRE35Y23jOrUbhtnqfnzVmFkz3GjMzKzsky/5dGxXNXPl0vxLVwdUUWDD3TmeD/EJgjByYfHAoNdAACviecP7XN/YM3WtuY33Vv7tpxudp4cNsNXLv/KHq/z3/2iNw8bZqUtTaVf5He3Pw/E8wniYrt/ff5lfPB/R7LGe3c4jDMv5hW71HNvieqxXt/rH5WKn+m6Oy+dwLKS3/37idzos3zHQ2ReO/wvCyIbFQa+AgG0rXje3mJX0eF1fTJ+oSd9dk76nJn1vTfq+mnQYZX9/489poVrdz4/79P0eDyvH2R7K8Tf6rE88Htlv+fG63349aPnxemLYzn595uO/3vnDrX/H6/+/Ctf/n8z/pZN5BVGOF8bj6q1r/8ONwY0u+Q6G+jzUIf/y+0Nr81WHVueT2tYz99Vjeu10B7rlO7o232TItzdvi+wO9Y3bJ3vDdGX7o6xXy+c1HtrbDO3YFepRvpmpHO8O7Znq1q5wIHtXyNfM4ZuhXYdCux4O030rtKuaXtuuePy81OdwGB/Pk5R84Wu7738pfhfxvoxHcvx2jm/k+KMcf9ah3FFUlsdu1/+X5XM6NauXLs1ffCIPl+X047HmxNL4J7e43sCD6/X+n+m09v6f/a3xzUb7euHA6viqfb0wGcaf7TL+x3m4/J/9dmzP8viZC6/M/2ajGw8j7uqbb/3+xfn5i69744033rTeDHrNBGy22Tcuvzp79c23zly6/OLLF1++eOX8z35y9olzPz1/fnZ5s362feMe2FFW//QHXRMAAAAAAAAAAACgZ9WezqNzXPd823I/ebk/Pd4fz3Ao31tZGspzDMr9n92e61Lu35zagjqy8bbidqJBtxHo7P+e/ysIIxsWF/t9iv+NvZu0KgJG3KD7/yvPPSzxlX/+YvdSKNluP712fRmfXwgPYrv3P6f8ndX/X6v/q57Xf6HHrMn1lXv53qM324pNR3otP7a/PAf2UH/lX8nll9acTr2Vv/iXUH58UGmPXgnl7+2x/Pvaf3R95b+ayy8f2+Mney1/pcZVY2094nHj8hzAeNy4eC20vzzbr+/2r7Ojttdz+TDKhqWfyX4NS/+f3ZT5lvVgXj23ztOV52/H/g76rX957nf5H3g4zL+q+X/T/+dwq+v/syx/s/r/hB3nU+f/BGFkw+Li4kC7PhnVfle2i0F//oPehhx0+YP+/OvE/j/j/lLs/zOmx/4/Y3rs/zOmx/61Ynrs/zN+nrH/z5h+OMw39g86XZP+7Zr0IzXp36lJP1qTHvffYvqJmvRjNenHu6XnHeSDNdM/UpN+sib90Zr0UzXpj9WkP16TvtN9L8ej2n4YZbHfSL9/GB3l/E+33/+hmnRgeMV+nePv+3RNOjC8ynUeft8wgqrOT+yIx9vLcdy3c3wjxx/l+LNNqyBb4fs5/kGOf5jjH+X4TI5ncjybY11DDrc//e/IsYVq9Tq/AyG91+tJ4/0A8TkxT/ZYn3h+rt/rWQ/3WM5mlb/O20EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhkZj+fXcuekqpfc+fPeZ/5753cGlMcdbOU4sv47nobmUUjOlVOXh8TC/6xMr8ZefX7vQKa7S2eXXMpyev92adt/S9OlEupUm01Mv3Ln3wcKzzy1Mnbp5+J1P7m5O61dVm10AAAAADNDXAQAA//8YnO0w") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') readlinkat(r1, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 1.270926216s ago: executing program 2 (id=1219): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.269491456s ago: executing program 3 (id=1220): write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/sockstat\x00') r1 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) r2 = dup3(r0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x782, &(0x7f0000000f40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000002dc0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$UHID_INPUT(r3, &(0x7f0000000c00)={0x8, {"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", 0x1000}}, 0x1006) read(r2, &(0x7f00000009c0)=""/232, 0xe8) 881.003068ms ago: executing program 0 (id=1221): socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 861.59089ms ago: executing program 1 (id=1222): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200029010203010902120001000000000904"], 0x0) 704.457652ms ago: executing program 2 (id=1223): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = dup2(r0, r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000800)={0x0, {0x0, 0x0, 0x0, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 634.367948ms ago: executing program 2 (id=1224): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r2}) 471.750921ms ago: executing program 0 (id=1225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x4, 0x0, &(0x7f0000000640)=[@enter_looper], 0x1, 0x0, &(0x7f0000000680)='W'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001740)="d7"}) 320.275913ms ago: executing program 2 (id=1226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x2]}, 0x45c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r4, &(0x7f00000001c0), 0x8) fcntl$addseals(r4, 0x409, 0x8) fallocate(r4, 0x3, 0x1f00, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 313.099555ms ago: executing program 3 (id=1227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffecd) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000440)=0xfffffffe, 0x4) 207.853213ms ago: executing program 3 (id=1228): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt(r1, 0x200000000114, 0x2718, 0x0, &(0x7f0000000080)) 0s ago: executing program 2 (id=1229): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x814, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6163746976655f6c6f67733d362c6163746976655f6c6f67733d342c6a71666d743d76667376312c6163746976655f6c6f67733d3200000000615f666c7573682c6261636b67726f756e645f67633d6f6e2c6673796e635f6d6f64653d7374726963742c657874656e745fe3616368652c66c202748e327a69cd00"], 0x1, 0x5549, &(0x7f000000ad80)="$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") mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdir(&(0x7f0000002340)='./file0/file0\x00', 0x0) kernel console output (not intermixed with test programs): 187.200088][ T4988] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 187.217194][ T4988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.228308][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.244507][ T4988] usb 3-1: config 0 descriptor?? [ 187.344820][ T4715] acrux 0003:1A34:0802.0005: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 187.371217][ T4715] acrux 0003:1A34:0802.0005: no inputs found [ 187.377291][ T4715] acrux 0003:1A34:0802.0005: Failed to enable force feedback support, error: -19 [ 187.389456][ T4989] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.594017][ T4715] usb 2-1: USB disconnect, device number 6 [ 187.715008][ T5724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.729934][ T5724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.789801][ T4989] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.798889][ T4989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.829728][ T4989] usb 1-1: config 0 descriptor?? [ 187.890642][ T4989] cp210x 1-1:0.0: cp210x converter detected [ 188.372854][ T5724] loop2: detected capacity change from 0 to 40427 [ 188.394326][ T52] block nbd4: Possible stuck request ffff88801f8d8000: control (read@0,4096B). Runtime 30 seconds [ 188.400779][ T5724] F2FS-fs (loop2): invalid crc value [ 188.543548][ T5724] F2FS-fs (loop2): Found nat_bits in checkpoint [ 188.665840][ T5724] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 188.669818][ T4989] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 189.273137][ T5756] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 189.351614][ T5765] tmpfs: Unknown parameter 'usrquota' [ 189.410000][ T4989] cp210x 1-1:0.0: querying part number failed [ 189.453685][ T4989] usb 1-1: cp210x converter now attached to ttyUSB0 [ 189.483889][ T4989] usb 1-1: USB disconnect, device number 6 [ 189.534657][ T4989] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 189.566415][ T4989] cp210x 1-1:0.0: device disconnected [ 189.699687][ T4988] usbhid 3-1:0.0: can't add hid device: -71 [ 189.705720][ T4988] usbhid: probe of 3-1:0.0 failed with error -71 [ 189.761201][ T4988] usb 3-1: USB disconnect, device number 12 [ 189.877187][ T5776] smc: net device wg0 applied user defined pnetid SYZ0 [ 189.895405][ T5776] smc: net device wg0 erased user defined pnetid SYZ0 [ 190.126590][ T5790] loop4: detected capacity change from 0 to 256 [ 190.150393][ T5790] exfat: Unknown parameter 'ÿ' [ 190.299910][ T5790] overlayfs: option "workdir=./file2:/" is useless in a non-upper mount, ignore [ 190.314896][ T5790] overlayfs: missing 'lowerdir' [ 192.453313][ T5807] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 192.558972][ T5809] loop4: detected capacity change from 0 to 4096 [ 192.567221][ T5809] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 192.674788][ T5809] ntfs3: loop4: failed to convert "c46c" to iso8859-5 [ 192.759535][ T4988] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 192.817138][ T5814] tmpfs: Unknown parameter 'usrquota' [ 193.809577][ T4988] usb 3-1: Using ep0 maxpacket: 16 [ 193.828865][ T5825] loop4: detected capacity change from 0 to 64 [ 193.884319][ T5827] loop1: detected capacity change from 0 to 256 [ 193.939668][ T4988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 193.951442][ T5827] exfat: Unknown parameter 'ÿ' [ 193.959890][ T4988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 194.006258][ T5827] overlayfs: option "workdir=./file2:/" is useless in a non-upper mount, ignore [ 194.025618][ T4988] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 194.039449][ T4988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.049711][ T5827] overlayfs: missing 'lowerdir' [ 194.063463][ T4988] usb 3-1: config 0 descriptor?? [ 194.169976][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.176413][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.266748][ T3563] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.277115][ T3563] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.287827][ T3563] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.295877][ T3563] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.410348][ T4989] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 194.587620][ T5807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.652318][ T3563] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 194.663101][ T3563] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.709932][ T4989] usb 2-1: Using ep0 maxpacket: 16 [ 194.837877][ T5807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.900174][ T4989] usb 2-1: config 0 has no interfaces? [ 194.924689][ T5842] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 194.950202][ T5842] netlink: 2 bytes leftover after parsing attributes in process `syz.4.631'. [ 194.999741][ T5842] device team0 entered promiscuous mode [ 195.005362][ T5842] device team_slave_0 entered promiscuous mode [ 195.028787][ T27] audit: type=1326 audit(1720487820.887:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.4.631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdac7d75bd9 code=0x0 [ 195.049737][ T5842] device team_slave_1 entered promiscuous mode [ 195.058424][ T5842] bridge0: port 3(team0) entered blocking state [ 195.076252][ T5842] bridge0: port 3(team0) entered disabled state [ 195.086380][ T4989] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 195.118534][ T5842] bridge0: port 3(team0) entered blocking state [ 195.124960][ T5842] bridge0: port 3(team0) entered forwarding state [ 195.140135][ T4989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.149037][ T4989] usb 2-1: Product: syz [ 195.153938][ T4989] usb 2-1: Manufacturer: syz [ 195.179418][ T4989] usb 2-1: SerialNumber: syz [ 195.194632][ T4989] r8152-cfgselector 2-1: config 0 descriptor?? [ 195.232939][ T5848] loop4: detected capacity change from 0 to 2048 [ 195.323812][ T5848] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 195.480436][ T4989] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 195.512172][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 195.580788][ T5455] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 195.682485][ T4710] usb 2-1: USB disconnect, device number 7 [ 195.692355][ T5807] loop2: detected capacity change from 0 to 40427 [ 195.708947][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.731556][ T5455] EXT4-fs (loop4): unmounting filesystem. [ 195.738035][ T5807] F2FS-fs (loop2): invalid crc value [ 195.747686][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.798305][ T5834] device bridge_slave_0 entered promiscuous mode [ 195.816994][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.830897][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.839236][ T5834] device bridge_slave_1 entered promiscuous mode [ 195.922454][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.943131][ T5807] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.947738][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.013719][ T5834] team0: Port device team_slave_0 added [ 196.031804][ T5834] team0: Port device team_slave_1 added [ 196.081044][ T5868] tmpfs: Unknown parameter 'usrquota' [ 196.094573][ T5807] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 196.110300][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.119056][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.145009][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.166301][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.185031][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.193051][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.218957][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.228167][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.374282][ T5834] device hsr_slave_0 entered promiscuous mode [ 196.398156][ T5875] loop0: detected capacity change from 0 to 64 [ 196.417840][ T5874] loop1: detected capacity change from 0 to 1024 [ 196.429529][ T4988] usbhid 3-1:0.0: can't add hid device: -71 [ 196.439521][ T4988] usbhid: probe of 3-1:0.0 failed with error -71 [ 196.465073][ T5834] device hsr_slave_1 entered promiscuous mode [ 196.479859][ T4988] usb 3-1: USB disconnect, device number 13 [ 196.500192][ T5874] EXT4-fs: Ignoring removed orlov option [ 196.505960][ T5874] EXT4-fs: Ignoring removed nobh option [ 196.512017][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.528397][ T5834] Cannot create hsr debugfs directory [ 196.582552][ T5874] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (28) [ 196.790178][ T48] Bluetooth: hci6: command tx timeout [ 196.893575][ T27] audit: type=1326 audit(1720487822.757:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc15f75bd9 code=0x0 [ 197.088576][ T5895] loop0: detected capacity change from 0 to 1024 [ 197.116234][ T5895] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 197.194794][ T5895] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 197.220901][ T5895] EXT4-fs error (device loop0): ext4_get_journal_inode:5733: inode #5: comm syz.0.646: unexpected bad inode w/o EXT4_IGET_BAD [ 197.235923][ T5895] EXT4-fs (loop0): no journal found [ 197.241959][ T5895] EXT4-fs (loop0): can't get journal size [ 197.259872][ T5895] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 197.289995][ T5834] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.574805][ T5354] EXT4-fs (loop0): unmounting filesystem. [ 197.633623][ T5902] loop0: detected capacity change from 0 to 128 [ 197.724980][ T5834] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.012942][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 198.144686][ T5912] loop4: detected capacity change from 0 to 256 [ 198.246285][ T4988] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 198.376611][ T5834] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.637311][ T5911] IPVS: Error joining to the multicast group [ 198.682517][ T5915] loop2: detected capacity change from 0 to 64 [ 198.869677][ T48] Bluetooth: hci6: command tx timeout [ 198.883802][ T5834] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.898800][ T4988] usb 2-1: Using ep0 maxpacket: 16 [ 199.049868][ T4988] usb 2-1: config 0 has no interfaces? [ 199.752413][ T4988] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 199.809803][ T4988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.834166][ T4988] usb 2-1: Product: syz [ 199.847735][ T4988] usb 2-1: Manufacturer: syz [ 199.868320][ T4988] usb 2-1: SerialNumber: syz [ 199.887647][ T4988] r8152-cfgselector 2-1: config 0 descriptor?? [ 199.922815][ T5940] loop2: detected capacity change from 0 to 256 [ 199.946230][ T5937] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 200.078738][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 200.152406][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 200.156336][ T5940] input: syz0 as /devices/virtual/input/input14 [ 200.191014][ T5948] loop0: detected capacity change from 0 to 128 [ 200.250818][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 200.260009][ T4988] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 200.268608][ T3648] usb 2-1: config 0 descriptor?? [ 200.303379][ T3761] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.422176][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.468939][ T4566] usb 2-1: USB disconnect, device number 8 [ 200.479506][ T3648] usb 2-1: can't set config #0, error -71 [ 200.746095][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.785565][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.796052][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.816635][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.855773][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.890377][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.898876][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.906040][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.949636][ T48] Bluetooth: hci6: command tx timeout [ 200.960266][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.978778][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.998928][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.030370][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.037515][ T4566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.049484][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.058633][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.071937][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.083398][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.092416][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.101541][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.118305][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.144200][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.173235][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.200417][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.226562][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.245854][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.265891][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.293976][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.858946][ T5979] loop1: detected capacity change from 0 to 64 [ 202.163233][ T5981] loop4: detected capacity change from 0 to 256 [ 202.220148][ T5981] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.555416][ T27] audit: type=1326 audit(1720487828.417:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.4.677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdac7d75bd9 code=0x0 [ 202.778094][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.792744][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.868567][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.984915][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 203.123345][ T6003] loop1: detected capacity change from 0 to 256 [ 203.569823][ T48] Bluetooth: hci6: command tx timeout [ 203.612919][ T6002] IPVS: Error joining to the multicast group [ 203.775265][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.791164][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.851561][ T6012] loop4: detected capacity change from 0 to 1024 [ 203.876808][ T6012] EXT4-fs: Ignoring removed orlov option [ 203.933485][ T6012] EXT4-fs: Ignoring removed nobh option [ 203.964986][ T6012] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (28) [ 203.993880][ T5834] device veth0_vlan entered promiscuous mode [ 204.004367][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.014323][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.027875][ T5834] device veth1_vlan entered promiscuous mode [ 204.035384][ T6017] loop0: detected capacity change from 0 to 256 [ 204.036691][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.062051][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.174015][ T6017] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.767040][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.787692][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.833895][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.843560][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.855864][ T5834] device veth0_macvtap entered promiscuous mode [ 204.910546][ T5834] device veth1_macvtap entered promiscuous mode [ 204.954409][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.009351][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.040554][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.044710][ T6026] loop0: detected capacity change from 0 to 64 [ 205.099482][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.139501][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.179374][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.217217][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.241397][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.262932][ T27] audit: type=1326 audit(1720487831.127:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f739b775bd9 code=0x0 [ 205.263825][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.338273][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.362628][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.381508][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.403421][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.434041][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.450632][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.471992][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.504097][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.527413][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.552372][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.590162][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.618402][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.640263][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.652147][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.662793][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.681337][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.698541][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.709620][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.719970][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.734934][ T6049] loop0: detected capacity change from 0 to 256 [ 205.741914][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.754168][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.767631][ T6049] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.792905][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.805692][ T6047] loop4: detected capacity change from 0 to 4096 [ 205.813013][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.835717][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.843103][ T6047] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 205.860016][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.884467][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.904009][ T6047] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 205.913817][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.929896][ T6047] ntfs3: loop4: Failed to load $MFT. [ 206.121983][ T3766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.159470][ T3766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.203240][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.232798][ T3766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.261198][ T3766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.294859][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.304775][ T6055] loop0: detected capacity change from 0 to 256 [ 206.378726][ T6060] loop1: detected capacity change from 0 to 64 [ 206.710023][ T6072] loop3: detected capacity change from 0 to 64 [ 206.785704][ T6075] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 206.968804][ T6072] Trying to free block not in datazone [ 207.065993][ T6072] Trying to free block not in datazone [ 207.160808][ T6072] Trying to free block not in datazone [ 207.206953][ T6072] Trying to free block not in datazone [ 207.500382][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 207.514124][ T6093] IPVS: Error joining to the multicast group [ 207.589997][ T6093] loop1: detected capacity change from 0 to 256 [ 208.271410][ T6095] loop3: detected capacity change from 0 to 512 [ 208.350386][ T6099] loop2: detected capacity change from 0 to 256 [ 208.380435][ T6095] EXT4-fs error (device loop3): __ext4_fill_super:5399: inode #2: comm syz.3.716: casefold flag without casefold feature [ 208.427106][ T6095] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 208.458985][ T6104] loop1: detected capacity change from 0 to 64 [ 208.505165][ T6095] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 208.544282][ T6095] System zones: 0-2, 18-18, 34-35 [ 208.588918][ T6095] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.715611][ T6111] xt_bpf: check failed: parse error [ 209.477156][ T6115] IPv6: sit1: Disabled Multicast RS [ 209.480502][ T6113] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 209.511375][ T6118] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 209.529550][ T6118] netlink: 2 bytes leftover after parsing attributes in process `syz.1.724'. [ 209.559938][ T5834] EXT4-fs (loop3): unmounting filesystem. [ 209.573126][ T6118] device team0 entered promiscuous mode [ 209.587606][ T6118] device team_slave_0 entered promiscuous mode [ 209.594468][ T6118] device team_slave_1 entered promiscuous mode [ 209.603029][ T6118] bridge0: port 3(team0) entered blocking state [ 209.617255][ T6118] bridge0: port 3(team0) entered disabled state [ 209.632209][ T27] audit: type=1326 audit(1720487835.497:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc15f75bd9 code=0x0 [ 209.658297][ T6118] bridge0: port 3(team0) entered blocking state [ 209.664878][ T6118] bridge0: port 3(team0) entered forwarding state [ 209.751293][ T6118] loop1: detected capacity change from 0 to 2048 [ 209.811224][ T6118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 209.979803][ T5485] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 210.092692][ T5485] EXT4-fs (loop1): unmounting filesystem. [ 210.153958][ T6137] loop0: detected capacity change from 0 to 64 [ 210.290194][ T6142] loop1: detected capacity change from 0 to 256 [ 210.434903][ T6145] loop0: detected capacity change from 0 to 512 [ 210.540919][ T6145] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.737: casefold flag without casefold feature [ 210.635829][ T6152] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 210.662661][ T6145] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 210.690634][ T6156] loop2: detected capacity change from 0 to 64 [ 210.739035][ T6145] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 210.745309][ T6156] Trying to free block not in datazone [ 210.755886][ T6145] System zones: 0-2, 18-18, 34-35 [ 210.768202][ T6156] Trying to free block not in datazone [ 210.770501][ T6145] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.821180][ T6156] Trying to free block not in datazone [ 210.885852][ T6156] Trying to free block not in datazone [ 210.930967][ T5354] EXT4-fs (loop0): unmounting filesystem. [ 211.437098][ T6181] device ip_vti0 entered promiscuous mode [ 211.465692][ T6183] loop0: detected capacity change from 0 to 256 [ 211.481415][ T6181] device vlan2 entered promiscuous mode [ 211.535857][ T6181] device ip_vti0 left promiscuous mode [ 211.541385][ T6186] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 211.594938][ T3564] Bluetooth: hci4: command 0x0406 tx timeout [ 211.669819][ T3564] Bluetooth: hci6: command tx timeout [ 211.777047][ T6193] loop0: detected capacity change from 0 to 512 [ 211.806334][ T6193] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.754: casefold flag without casefold feature [ 211.842117][ T6193] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 211.868424][ T6193] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 211.897239][ T6193] System zones: 0-2, 18-18, 34-35 [ 211.923529][ T6193] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 212.125371][ T5354] EXT4-fs (loop0): unmounting filesystem. [ 212.331969][ T6199] loop2: detected capacity change from 0 to 4096 [ 212.471766][ T6199] NILFS (loop2): invalid segment: Checksum error in segment payload [ 212.490721][ T6199] NILFS (loop2): trying rollback from an earlier position [ 212.620633][ T6215] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 212.657442][ T6189] loop3: detected capacity change from 0 to 32768 [ 212.664852][ T6199] NILFS (loop2): recovery complete [ 212.674973][ T6189] XFS: ikeep mount option is deprecated. [ 212.693169][ T6216] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.785000][ T6189] XFS (loop3): Mounting V5 Filesystem [ 212.938614][ T6189] XFS (loop3): Ending clean mount [ 212.965497][ T6189] XFS (loop3): Quotacheck needed: Please wait. [ 213.002741][ T6235] loop0: detected capacity change from 0 to 256 [ 213.041015][ T6189] XFS (loop3): Quotacheck: Done. [ 213.041133][ T6235] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.167471][ T5834] XFS (loop3): Unmounting Filesystem [ 213.524277][ T6242] loop1: detected capacity change from 0 to 512 [ 213.999007][ T52] block nbd3: Possible stuck request ffff88801f870000: control (read@0,4096B). Runtime 30 seconds [ 214.370850][ T6242] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.770: casefold flag without casefold feature [ 214.451861][ T6242] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 214.488586][ T6242] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 214.519632][ T6242] System zones: 0-2, 18-18, 34-35 [ 214.534222][ T6242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.704043][ T6262] loop0: detected capacity change from 0 to 1024 [ 214.711919][ T4566] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 214.719786][ T6262] EXT4-fs: Ignoring removed orlov option [ 214.725519][ T6262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.742697][ T5485] EXT4-fs (loop1): unmounting filesystem. [ 214.766750][ T6262] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 214.852112][ T6270] netlink: 'syz.1.777': attribute type 10 has an invalid length. [ 214.860201][ T6270] netlink: 2 bytes leftover after parsing attributes in process `syz.1.777'. [ 214.875294][ T27] audit: type=1326 audit(1720487840.737:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc15f75bd9 code=0x0 [ 214.969817][ T4566] usb 5-1: Using ep0 maxpacket: 16 [ 215.046383][ T6271] loop1: detected capacity change from 0 to 2048 [ 215.110087][ T4566] usb 5-1: config 0 has no interfaces? [ 215.152992][ T6271] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 215.380696][ T4566] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 215.406113][ T4566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.568836][ T4566] usb 5-1: Product: syz [ 215.589479][ T4566] usb 5-1: Manufacturer: syz [ 215.609410][ T4566] usb 5-1: SerialNumber: syz [ 215.647754][ T4566] r8152-cfgselector 5-1: config 0 descriptor?? [ 215.778331][ T5354] EXT4-fs (loop0): unmounting filesystem. [ 215.791416][ T5485] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 215.892893][ T5485] EXT4-fs (loop1): unmounting filesystem. [ 215.950075][ T4566] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 216.745276][ T3878] usb 5-1: USB disconnect, device number 6 [ 217.046706][ T6300] loop3: detected capacity change from 0 to 64 [ 217.078152][ T6300] Trying to free block not in datazone [ 217.090470][ T6293] loop2: detected capacity change from 0 to 4096 [ 217.106356][ T6300] Trying to free block not in datazone [ 217.127823][ T6300] Trying to free block not in datazone [ 217.184861][ T6303] netlink: 'syz.0.788': attribute type 13 has an invalid length. [ 217.197675][ T6293] NILFS (loop2): invalid segment: Checksum error in segment payload [ 217.206434][ T6293] NILFS (loop2): trying rollback from an earlier position [ 217.210514][ T6300] Trying to free block not in datazone [ 217.247697][ T6303] netlink: 152 bytes leftover after parsing attributes in process `syz.0.788'. [ 217.280910][ T6303] erspan0: refused to change device tx_queue_len [ 217.309095][ T6303] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 217.349076][ T6293] NILFS (loop2): recovery complete [ 217.369864][ T6306] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.540799][ T6308] loop4: detected capacity change from 0 to 1024 [ 217.581817][ T6308] EXT4-fs: Ignoring removed orlov option [ 217.587517][ T6308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.773276][ T6308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 217.840467][ T6321] loop1: detected capacity change from 0 to 4096 [ 217.854950][ T6321] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 217.887749][ T6321] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 217.909189][ T6321] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 217.976328][ T6321] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 218.173808][ T6321] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 218.429526][ T6321] ntfs: volume version 3.1. [ 218.635789][ T52] block nbd4: Possible stuck request ffff88801f8d8000: control (read@0,4096B). Runtime 60 seconds [ 218.661343][ T5455] EXT4-fs (loop4): unmounting filesystem. [ 219.113036][ T6344] loop0: detected capacity change from 0 to 16 [ 219.154448][ T6344] erofs: (device loop0): mounted with root inode @ nid 36. [ 219.766272][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 219.912450][ T6363] loop4: detected capacity change from 0 to 256 [ 220.441380][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.492287][ T6362] IPVS: Error joining to the multicast group [ 220.719091][ T6352] loop3: detected capacity change from 0 to 32768 [ 220.743877][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.944290][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.014124][ T6377] loop4: detected capacity change from 0 to 16 [ 221.093196][ T6377] erofs: (device loop4): mounted with root inode @ nid 36. [ 221.115227][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.166410][ T3563] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.180035][ T3563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.190026][ T3563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.199603][ T3563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.208122][ T3563] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.217303][ T3563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.469841][ T3563] Bluetooth: hci2: command 0x0406 tx timeout [ 222.538693][ T6390] loop4: detected capacity change from 0 to 32768 [ 222.576449][ T6390] read_mapping_page failed! [ 222.593315][ T6390] jfs_create: dtInsert returned -EIO [ 222.608547][ T6390] ERROR: (device loop4): jfs_create: [ 222.608547][ T6390] [ 222.626956][ T6390] ERROR: (device loop4): remounting filesystem as read-only [ 222.744701][ T6380] chnl_net:caif_netlink_parms(): no params data found [ 223.005082][ T6416] loop3: detected capacity change from 0 to 16 [ 223.012864][ T6416] erofs: (device loop3): mounted with root inode @ nid 36. [ 223.094318][ T6414] netlink: 'syz.4.828': attribute type 10 has an invalid length. [ 223.134191][ T6414] netlink: 2 bytes leftover after parsing attributes in process `syz.4.828'. [ 223.143371][ T27] audit: type=1326 audit(1720487849.007:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.4.828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdac7d75bd9 code=0x0 [ 223.189820][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.219954][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.228446][ T6380] device bridge_slave_0 entered promiscuous mode [ 223.269518][ T3563] Bluetooth: hci5: command tx timeout [ 223.281230][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.290089][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.299280][ T6380] device bridge_slave_1 entered promiscuous mode [ 223.309017][ T6414] loop4: detected capacity change from 0 to 2048 [ 223.440143][ T6414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 223.526146][ T6380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.568293][ T6404] loop2: detected capacity change from 0 to 32768 [ 223.578867][ T5455] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 223.652471][ T6380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.708078][ T5455] EXT4-fs (loop4): unmounting filesystem. [ 223.967101][ T6380] team0: Port device team_slave_0 added [ 224.018269][ T6380] team0: Port device team_slave_1 added [ 224.131881][ T6438] loop4: detected capacity change from 0 to 2048 [ 224.176039][ T6438] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.231197][ T6444] loop2: detected capacity change from 0 to 1024 [ 224.231950][ T6444] EXT4-fs: Ignoring removed orlov option [ 224.231978][ T6444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.256538][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.256576][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.256604][ T6380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.258475][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.258489][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.258514][ T6380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.322699][ T6444] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 224.348783][ T41] device hsr_slave_0 left promiscuous mode [ 224.349654][ T41] device hsr_slave_1 left promiscuous mode [ 224.351510][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.351552][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.352238][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.352268][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.353012][ T41] bridge0: port 3(team0) entered disabled state [ 224.354903][ T41] device bridge_slave_1 left promiscuous mode [ 224.355053][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.361479][ T41] device bridge_slave_0 left promiscuous mode [ 224.361618][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.538559][ T41] device veth1_macvtap left promiscuous mode [ 224.538647][ T41] device veth0_macvtap left promiscuous mode [ 224.538786][ T41] device veth1_vlan left promiscuous mode [ 224.538888][ T41] device veth0_vlan left promiscuous mode [ 225.199860][ T6434] loop0: detected capacity change from 0 to 32768 [ 225.244699][ T6434] read_mapping_page failed! [ 225.244759][ T6434] jfs_create: dtInsert returned -EIO [ 225.244795][ T6434] ERROR: (device loop0): jfs_create: [ 225.244795][ T6434] [ 225.251471][ T6434] ERROR: (device loop0): remounting filesystem as read-only [ 225.317064][ T4067] EXT4-fs (loop2): unmounting filesystem. [ 225.433034][ T3563] Bluetooth: hci5: command tx timeout [ 225.952754][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 226.103822][ T6465] loop3: detected capacity change from 0 to 256 [ 227.281928][ T6479] loop2: detected capacity change from 0 to 4096 [ 227.295061][ T6479] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 227.325833][ T6479] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 227.347349][ T6479] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 227.367026][ T6479] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 227.397855][ T6479] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 227.442152][ T6479] ntfs: volume version 3.1. [ 227.509610][ T3564] Bluetooth: hci5: command tx timeout [ 227.925332][ T41] device team_slave_1 left promiscuous mode [ 228.065296][ T41] team0 (unregistering): Port device team_slave_1 removed [ 228.309544][ T41] device team_slave_0 left promiscuous mode [ 228.329096][ T41] team0 (unregistering): Port device team_slave_0 removed [ 228.497935][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.560907][ T6492] overlayfs: statfs failed on './file0' [ 228.629255][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.750134][ T6502] loop4: detected capacity change from 0 to 256 [ 228.780454][ T6502] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010470, chksum : 0x23280b3e, utbl_chksum : 0xe619d30d) [ 229.589461][ T3564] Bluetooth: hci5: command tx timeout [ 229.621817][ T41] bond0 (unregistering): Released all slaves [ 229.800618][ T6464] IPVS: Error joining to the multicast group [ 229.937920][ T6500] device bridge_slave_1 left promiscuous mode [ 229.946951][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.015399][ T6380] device hsr_slave_0 entered promiscuous mode [ 230.042711][ T6380] device hsr_slave_1 entered promiscuous mode [ 230.089957][ T6380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.118023][ T6380] Cannot create hsr debugfs directory [ 230.866447][ T6506] loop0: detected capacity change from 0 to 4096 [ 230.924383][ T6506] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 230.971899][ T6506] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 230.998896][ T6506] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 231.023155][ T6506] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 231.047724][ T6506] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 231.106891][ T6506] ntfs: volume version 3.1. [ 231.733736][ T3563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.778124][ T3563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.788666][ T3563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.819627][ T3563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.827289][ T3563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 231.841078][ T3563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.998121][ T6380] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.061811][ T6380] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.089704][ T6380] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.139777][ T6380] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.402171][ T6514] chnl_net:caif_netlink_parms(): no params data found [ 232.753275][ T6380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.774526][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.809474][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.827311][ T3563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.839977][ T3563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.840905][ T6514] device bridge_slave_0 entered promiscuous mode [ 232.864543][ T3563] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.872643][ T3563] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.880941][ T3563] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.890930][ T3563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.918097][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.951489][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.980548][ T6514] device bridge_slave_1 entered promiscuous mode [ 233.050885][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.069981][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.081969][ T6380] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.089889][ T6531] device bridge_slave_1 left promiscuous mode [ 233.096140][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.172169][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.181718][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.200179][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.207360][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.239756][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.260201][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.289794][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.296932][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.332549][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.364143][ T6514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.420750][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.428967][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.462497][ T6514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.548777][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.581260][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.634056][ T6514] team0: Port device team_slave_0 added [ 233.659901][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.682063][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.700531][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.729954][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.769618][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.778259][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.801023][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.824960][ T6514] team0: Port device team_slave_1 added [ 233.867735][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.907781][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.915323][ T3564] Bluetooth: hci1: command tx timeout [ 233.929690][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.029371][ T6514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.072435][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.089427][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.173297][ T6514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.324352][ T6514] device hsr_slave_0 entered promiscuous mode [ 234.337787][ T6514] device hsr_slave_1 entered promiscuous mode [ 234.364863][ T6514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.387106][ T6514] Cannot create hsr debugfs directory [ 234.683946][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.701500][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.718906][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.793550][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 234.829403][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.838425][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.925173][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.936221][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.949655][ T3564] Bluetooth: hci2: command tx timeout [ 234.974749][ T6380] device veth0_vlan entered promiscuous mode [ 235.032794][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.040874][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.419208][ T6514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.773336][ T6380] device veth1_vlan entered promiscuous mode [ 235.911669][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.920816][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.929228][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.938649][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.951186][ T6380] device veth0_macvtap entered promiscuous mode [ 235.989601][ T3563] Bluetooth: hci1: command tx timeout [ 236.036432][ T6514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.121052][ T6380] device veth1_macvtap entered promiscuous mode [ 236.242969][ T6514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.280693][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.287954][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.314050][ T6527] device bridge_slave_0 entered promiscuous mode [ 236.336298][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.359281][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.370109][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.381010][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.391763][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.403476][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.413563][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.424502][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.434493][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.445298][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.455485][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.466202][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.478319][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.520979][ T6514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.535132][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.542983][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.551914][ T6527] device bridge_slave_1 entered promiscuous mode [ 236.810310][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.850926][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.871997][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.890600][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.920890][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.933104][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.957729][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.979474][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.999492][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.018472][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.030276][ T3563] Bluetooth: hci2: command tx timeout [ 237.049506][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.079567][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.099457][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.122162][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.149542][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.179552][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.211573][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.256297][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.281960][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.314935][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.331052][ T6573] loop3: detected capacity change from 0 to 1024 [ 237.381307][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.423551][ T6380] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.434149][ T6380] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.443449][ T6380] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.452959][ T6380] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.470975][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.538039][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.664721][ T6527] team0: Port device team_slave_0 added [ 237.806873][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.875326][ T6527] team0: Port device team_slave_1 added [ 238.059190][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.069660][ T3563] Bluetooth: hci1: command tx timeout [ 238.079770][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.157655][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.233734][ T6514] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.276001][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.289569][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.379439][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.435750][ T6514] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.479765][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.488028][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.496641][ T6514] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.554344][ T6514] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.692830][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.852208][ T6527] device hsr_slave_0 entered promiscuous mode [ 238.864039][ T11] hfsplus: b-tree write err: -5, ino 4 [ 238.930028][ T6527] device hsr_slave_1 entered promiscuous mode [ 238.959448][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.980671][ T6527] Cannot create hsr debugfs directory [ 238.989232][ T3636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.012774][ T3636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.083437][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.109567][ T3563] Bluetooth: hci2: command tx timeout [ 239.259457][ T4988] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 239.411028][ T3564] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.429873][ T3564] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.438502][ T3564] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.448989][ T3564] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.459101][ T3564] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 239.479529][ T3564] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.700255][ T4988] usb 4-1: Using ep0 maxpacket: 8 [ 239.977142][ T4988] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.997784][ T4988] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.005977][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.031677][ T4988] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 240.068460][ T4988] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 240.091352][ T4988] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.104963][ T4988] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.114761][ T4988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.156689][ T3564] Bluetooth: hci1: command tx timeout [ 240.209460][ T6514] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.216827][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.231446][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.333229][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.348722][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.366466][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.373652][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.419973][ T4988] usb 4-1: GET_CAPABILITIES returned 0 [ 240.425535][ T4988] usbtmc 4-1:16.0: can't read capabilities [ 240.541617][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.571319][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.580348][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.588873][ T4989] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.596074][ T4989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.606606][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.688401][ T4988] usb 4-1: USB disconnect, device number 7 [ 240.715307][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.725373][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.736937][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.759412][ T4716] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 240.799489][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.814512][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.824407][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.834058][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.843542][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.936268][ T6514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.948502][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.009488][ T4716] usb 2-1: Using ep0 maxpacket: 8 [ 241.110205][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.121041][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.129773][ T4716] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 241.138692][ T4716] usb 2-1: config 179 has no interface number 0 [ 241.160648][ T4716] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 241.199652][ T3564] Bluetooth: hci2: command tx timeout [ 241.209412][ T4716] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 241.229896][ T4716] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 241.276070][ T4716] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 241.316758][ T4716] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 241.346192][ T4716] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 241.365829][ T4716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.403058][ T6588] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 241.419162][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.891'. [ 241.510183][ T3564] Bluetooth: hci7: command tx timeout [ 241.710550][ T6588] usb usb8: usbfs: process 6588 (syz.1.890) did not claim interface 0 before use [ 241.731833][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.766227][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.972530][ T6577] chnl_net:caif_netlink_parms(): no params data found [ 242.008610][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.345087][ T4713] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input15 [ 242.362991][ T6527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.381099][ T6611] loop3: detected capacity change from 0 to 16 [ 242.398457][ T6611] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected [ 242.415728][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.441232][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.489264][ T6527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.558510][ T41] device hsr_slave_0 left promiscuous mode [ 242.597178][ T41] device hsr_slave_1 left promiscuous mode [ 242.626214][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.642504][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.667849][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.679081][ T6608] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 242.688287][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.699000][ T41] device bridge_slave_0 left promiscuous mode [ 242.717104][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.762063][ T41] device hsr_slave_0 left promiscuous mode [ 242.781260][ T41] device hsr_slave_1 left promiscuous mode [ 242.794877][ T3605] usb 2-1: USB disconnect, device number 9 [ 242.800881][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 242.800944][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 242.840670][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.848763][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.865481][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.874333][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.886857][ T41] device bridge_slave_1 left promiscuous mode [ 242.896256][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.911715][ T41] device bridge_slave_0 left promiscuous mode [ 242.918986][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.008961][ T41] device veth1_macvtap left promiscuous mode [ 243.015272][ T41] device veth0_macvtap left promiscuous mode [ 243.022312][ T41] device veth1_vlan left promiscuous mode [ 243.028216][ T41] device veth0_vlan left promiscuous mode [ 243.038625][ T41] device veth1_macvtap left promiscuous mode [ 243.054191][ T41] device veth0_macvtap left promiscuous mode [ 243.071217][ T41] device veth1_vlan left promiscuous mode [ 243.077172][ T41] device veth0_vlan left promiscuous mode [ 243.599478][ T3564] Bluetooth: hci7: command tx timeout [ 244.041769][ T6621] loop1: detected capacity change from 0 to 1024 [ 244.070341][ T52] block nbd3: Possible stuck request ffff88801f870000: control (read@0,4096B). Runtime 60 seconds [ 245.383433][ T41] team0 (unregistering): Port device team_slave_1 removed [ 245.497515][ T41] team0 (unregistering): Port device team_slave_0 removed [ 245.612219][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.679688][ T3564] Bluetooth: hci7: command tx timeout [ 245.727586][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.191082][ T6636] loop3: detected capacity change from 0 to 1024 [ 247.184714][ T41] bond0 (unregistering): Released all slaves [ 247.749888][ T3564] Bluetooth: hci7: command tx timeout [ 247.911889][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 248.018729][ T6652] loop3: detected capacity change from 0 to 256 [ 249.071407][ T41] team0 (unregistering): Port device team_slave_1 removed [ 249.143127][ T41] team0 (unregistering): Port device team_slave_0 removed [ 249.197950][ T52] block nbd4: Possible stuck request ffff88801f8d8000: control (read@0,4096B). Runtime 90 seconds [ 250.180670][ T6527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.204190][ T6514] device veth0_vlan entered promiscuous mode [ 250.232927][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.242783][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.263749][ T6651] IPVS: Error joining to the multicast group [ 250.282820][ T6527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.368357][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.391842][ T3636] hfsplus: b-tree write err: -5, ino 4 [ 250.400194][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.408491][ T6577] device bridge_slave_0 entered promiscuous mode [ 250.440862][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.458235][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.509950][ T6577] device bridge_slave_1 entered promiscuous mode [ 250.607749][ T6514] device veth1_vlan entered promiscuous mode [ 250.653230][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.661882][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.718602][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.257218][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.168243][ T6577] team0: Port device team_slave_0 added [ 252.221097][ T6577] team0: Port device team_slave_1 added [ 252.325436][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.349589][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.398299][ T6672] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 252.437638][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.487965][ T6514] device veth0_macvtap entered promiscuous mode [ 252.523156][ T6514] device veth1_macvtap entered promiscuous mode [ 252.584719][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.626174][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.657384][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.668531][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.770369][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 252.871740][ T6680] loop1: detected capacity change from 0 to 256 [ 252.998266][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.174662][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.429390][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.456878][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.471349][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.482341][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.501827][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.588048][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.602303][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.619247][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.631565][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.646031][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.667190][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.721576][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.045056][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.189577][ T6679] IPVS: Error joining to the multicast group [ 254.197944][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.275059][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.285289][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.295826][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.307739][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.319400][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.329929][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.340491][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.350566][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.361080][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.404125][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.440833][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.449182][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.480671][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.515882][ T6514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.539933][ T6514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.571620][ T6514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.583563][ T6514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.662167][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.658093][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.664521][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.800478][ T6577] device hsr_slave_0 entered promiscuous mode [ 255.840218][ T6577] device hsr_slave_1 entered promiscuous mode [ 255.855743][ T6577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.899617][ T6577] Cannot create hsr debugfs directory [ 255.906017][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.920160][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.943973][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.036539][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.050235][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.079753][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.086975][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.181646][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.200876][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.233710][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.250103][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.257305][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.315623][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.359201][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.398415][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.434744][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.454526][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.472339][ T3564] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 256.481637][ T3564] Bluetooth: hci6: Injecting HCI hardware error event [ 256.500531][ T3563] Bluetooth: hci6: hardware error 0x00 [ 256.555796][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.570439][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.597456][ T6527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.608756][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.634654][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.651141][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.670416][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.689888][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.711497][ T3685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.732528][ T3685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.746946][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.817270][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.855723][ T3685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.892130][ T3685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.083706][ T6577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.152437][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.226419][ T6715] loop3: detected capacity change from 0 to 512 [ 257.290516][ T6715] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 257.377848][ T6577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.503634][ T6723] loop1: detected capacity change from 0 to 2048 [ 257.573315][ T6723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.592049][ T6577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.682484][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.682701][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.700059][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.803225][ T6732] loop2: detected capacity change from 0 to 16 [ 257.835955][ T6732] erofs: (device loop2): mounted with root inode @ nid 36. [ 257.865905][ T6577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.918082][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.918759][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.020400][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.021189][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.022088][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.022698][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.026430][ T6527] device veth0_vlan entered promiscuous mode [ 258.056065][ T6735] loop3: detected capacity change from 0 to 128 [ 258.060609][ T6527] device veth1_vlan entered promiscuous mode [ 258.275449][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.276236][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 258.276936][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.277620][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.281561][ T6527] device veth0_macvtap entered promiscuous mode [ 258.285621][ T6527] device veth1_macvtap entered promiscuous mode [ 258.335061][ T6577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.344041][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.344067][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.344081][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.344096][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.344108][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.344121][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.344132][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.344145][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.344156][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.344169][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.344179][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.344192][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.345827][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.346283][ T6577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.362111][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.362837][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.363405][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.363972][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.368095][ T6577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.394692][ T6577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.436438][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.436462][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.436474][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.436487][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.436498][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.436511][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.436522][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.436534][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.436546][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.436559][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.436570][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.436582][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.437897][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.444472][ T6527] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.559705][ T3563] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 259.019497][ T6527] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.019539][ T6527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.019571][ T6527] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.021586][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.022365][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.462556][ T3768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.462632][ T3768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.471643][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.594460][ T3685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.594554][ T3685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.610197][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.719739][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.751648][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.752662][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.764024][ T6577] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.810456][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.811190][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.811705][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.811779][ T4566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.812361][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.817995][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.818688][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.819221][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.819345][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.833247][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.861178][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.872789][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.214574][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.291819][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.293010][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.294170][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.294956][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.295834][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.340982][ T6577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.341891][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.365718][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.366500][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.732821][ T6767] loop0: detected capacity change from 0 to 128 [ 261.230105][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.230274][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.288690][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.684841][ T6784] loop3: detected capacity change from 0 to 64 [ 262.183955][ T6790] netlink: 'syz.0.949': attribute type 4 has an invalid length. [ 262.240872][ T6790] netlink: 17 bytes leftover after parsing attributes in process `syz.0.949'. [ 262.417977][ T6794] input: syz1 as /devices/virtual/input/input16 [ 262.808866][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.825137][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.881208][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.910502][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.951342][ T6577] device veth0_vlan entered promiscuous mode [ 262.963535][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.980202][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.994245][ T6577] device veth1_vlan entered promiscuous mode [ 263.189681][ T3598] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 263.250847][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.272805][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.118595][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.127996][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.146148][ T6577] device veth0_macvtap entered promiscuous mode [ 264.160524][ T6577] device veth1_macvtap entered promiscuous mode [ 264.204185][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.214919][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.239076][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.279429][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.310291][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.343485][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.354054][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 264.378638][ T3598] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 264.389038][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.419683][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.439464][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.469704][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.489787][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.521112][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.541873][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.573942][ T3598] usb 3-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice= 9.71 [ 264.601037][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.630506][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.641244][ T3598] usb 3-1: Product: syz [ 264.645440][ T3598] usb 3-1: Manufacturer: syz [ 264.658162][ T6831] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 264.680461][ T3598] usb 3-1: SerialNumber: syz [ 264.687660][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.711287][ T3598] usb 3-1: config 0 descriptor?? [ 264.728766][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.769428][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.781260][ T3598] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 264.788948][ T3598] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 264.817526][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.837385][ T3598] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 264.856267][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.866574][ T3598] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 264.887866][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.898710][ T3598] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 264.915678][ T3598] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 264.929367][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.948584][ T3598] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 264.957049][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.978942][ T3598] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 265.013999][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.034561][ T3598] usb 3-1: USB disconnect, device number 14 [ 265.053394][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.067453][ T3598] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 265.089127][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.107712][ T3598] keyspan 3-1:0.0: device disconnected [ 265.122840][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.153834][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.172970][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.195339][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.217975][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.225662][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.235974][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.256094][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.265885][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.276076][ T6840] netlink: 'syz.3.964': attribute type 4 has an invalid length. [ 265.309747][ T6844] input: syz1 as /devices/virtual/input/input17 [ 265.340925][ T6840] netlink: 17 bytes leftover after parsing attributes in process `syz.3.964'. [ 265.372634][ T6577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.400010][ T6577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.876307][ T6577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.054542][ T6577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.479924][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.488349][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.547962][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.563020][ T3766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.595509][ T3766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.644778][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.970614][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.888'. [ 267.981915][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 268.065998][ T6893] loop0: detected capacity change from 0 to 16 [ 268.096894][ T6893] erofs: (device loop0): mounted with root inode @ nid 36. [ 268.359523][ T4713] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 268.709470][ T3563] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 268.718385][ T3563] Bluetooth: hci2: Injecting HCI hardware error event [ 268.719782][ T4713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 268.728434][ T3564] Bluetooth: hci2: hardware error 0x00 [ 268.796447][ T4713] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 269.143483][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'. [ 269.171290][ T4713] usb 2-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice= 9.71 [ 269.182974][ T4713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.191895][ T4713] usb 2-1: Product: syz [ 269.196103][ T4713] usb 2-1: Manufacturer: syz [ 269.201834][ T4713] usb 2-1: SerialNumber: syz [ 269.210409][ T4713] usb 2-1: config 0 descriptor?? [ 269.251101][ T4713] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 269.261166][ T4713] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 269.281944][ T4713] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 269.336566][ T4713] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 269.369771][ T4713] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 269.474472][ T4713] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 269.567922][ T4713] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 269.735932][ T4713] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 269.954783][ T4713] usb 2-1: USB disconnect, device number 10 [ 269.968254][ T4713] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 269.978643][ T4713] keyspan 2-1:0.0: device disconnected [ 270.172435][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 270.569419][ T4710] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 270.789884][ T3564] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 270.930081][ T4710] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 271.006188][ T4710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.223467][ T4710] usb 1-1: config 0 descriptor?? [ 271.819673][ T4710] usb 1-1: Cannot read MAC address [ 271.825901][ T4710] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 271.846350][ T6957] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 271.872817][ T4710] usb 1-1: USB disconnect, device number 7 [ 271.936990][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1008'. [ 271.995565][ T6938] loop2: detected capacity change from 0 to 40427 [ 272.034255][ T6938] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 272.054321][ T6938] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 272.075108][ T6938] F2FS-fs (loop2): invalid crc value [ 272.090400][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 272.120379][ T6938] F2FS-fs (loop2): Found nat_bits in checkpoint [ 272.262753][ T6938] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 272.279472][ T6938] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 272.313418][ T27] audit: type=1800 audit(1720487898.177:231): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.998" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 272.370244][ T3630] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 272.439764][ T6514] syz-executor: attempt to access beyond end of device [ 272.439764][ T6514] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 272.759841][ T3630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 272.789491][ T3630] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 272.960094][ T3630] usb 4-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice= 9.71 [ 272.987371][ T3630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.013034][ T3630] usb 4-1: Product: syz [ 273.024264][ T3630] usb 4-1: Manufacturer: syz [ 273.041048][ T3630] usb 4-1: SerialNumber: syz [ 273.068975][ T3630] usb 4-1: config 0 descriptor?? [ 273.140878][ T3630] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 273.155701][ T3630] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 273.192870][ T3630] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 273.229170][ T3630] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 273.259741][ T3630] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 273.288229][ T3630] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 273.316412][ T3630] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 273.524811][ T3630] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 273.929591][ T3598] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 274.379191][ T3630] usb 4-1: USB disconnect, device number 8 [ 274.390334][ T52] block nbd3: Possible stuck request ffff88801f870000: control (read@0,4096B). Runtime 90 seconds [ 274.406067][ T3630] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 274.416931][ T3630] keyspan 4-1:0.0: device disconnected [ 274.509891][ T3598] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 275.469730][ T3598] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 275.478881][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.544413][ T3598] usb 2-1: Product: syz [ 275.548699][ T3598] usb 2-1: Manufacturer: syz [ 275.566856][ T3598] usb 2-1: SerialNumber: syz [ 275.753396][ T7018] loop3: detected capacity change from 0 to 8192 [ 275.810817][ T7018] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 275.847060][ T3598] usb 2-1: USB disconnect, device number 11 [ 275.861305][ T7018] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 275.872710][ T7018] REISERFS (device loop3): using ordered data mode [ 275.884711][ T7018] reiserfs: using flush barriers [ 276.111672][ T7018] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 276.150754][ T7018] REISERFS (device loop3): checking transaction log (loop3) [ 276.354711][ T7018] REISERFS (device loop3): Using r5 hash to sort names [ 276.447332][ T7018] REISERFS (device loop3): using 3.5.x disk format [ 276.643083][ T7018] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 277.299404][ T3598] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 277.473397][ T7019] loop2: detected capacity change from 0 to 32768 [ 277.669657][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 277.693197][ T3598] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 277.860123][ T7048] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1040'. [ 277.899525][ T3598] usb 5-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice= 9.71 [ 277.937623][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.970203][ T3598] usb 5-1: Product: syz [ 277.990954][ T3598] usb 5-1: Manufacturer: syz [ 278.007354][ T3598] usb 5-1: SerialNumber: syz [ 278.032731][ T3598] usb 5-1: config 0 descriptor?? [ 278.072819][ T7051] loop1: detected capacity change from 0 to 16 [ 278.100813][ T3598] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 278.131949][ T7051] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected [ 278.146049][ T3598] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 278.260234][ T3598] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 278.326300][ T3598] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 278.350343][ T3598] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 278.378148][ T3598] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 278.415890][ T3598] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 278.459525][ T3598] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 278.515462][ T3598] usb 5-1: USB disconnect, device number 7 [ 278.543889][ T3598] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 278.599852][ T3598] keyspan 5-1:0.0: device disconnected [ 278.726626][ T7050] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 279.270599][ T52] block nbd4: Possible stuck request ffff88801f8d8000: control (read@0,4096B). Runtime 120 seconds [ 282.156341][ T7086] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 282.564768][ T7087] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1054'. [ 283.940671][ T7108] loop3: detected capacity change from 0 to 2048 [ 283.964948][ T7108] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 284.025982][ T7108] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 284.047261][ T7108] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 284.077668][ T7108] UDF-fs: Scanning with blocksize 512 failed [ 284.107566][ T7108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.238314][ T7094] loop2: detected capacity change from 0 to 32768 [ 284.559943][ T7132] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1070'. [ 286.629574][ T3564] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 286.639716][ T3564] Bluetooth: hci7: Injecting HCI hardware error event [ 286.648882][ T3563] Bluetooth: hci7: hardware error 0x00 [ 286.735966][ T7146] loop0: detected capacity change from 0 to 16 [ 286.747615][ T7146] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected [ 287.046846][ T7138] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 287.739593][ T3598] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 288.381700][ T7173] loop1: detected capacity change from 0 to 256 [ 288.421679][ T7173] exfat: Deprecated parameter 'utf8' [ 288.462694][ T7173] exfat: Deprecated parameter 'utf8' [ 288.514690][ T7173] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 288.589424][ T3598] usb 5-1: Using ep0 maxpacket: 32 [ 288.709691][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.758267][ T7176] loop1: detected capacity change from 0 to 764 [ 288.775649][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.800889][ T3563] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 288.873148][ T3598] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.947657][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.981880][ T3598] usb 5-1: config 0 descriptor?? [ 289.040175][ T3598] hub 5-1:0.0: USB hub found [ 289.269571][ T3598] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 289.508290][ T7184] : renamed from ipvlan1 [ 289.569582][ T3598] usbhid 5-1:0.0: can't add hid device: -71 [ 289.575670][ T3598] usbhid: probe of 5-1:0.0 failed with error -71 [ 289.640559][ T3598] usb 5-1: USB disconnect, device number 8 [ 289.810194][ T7198] loop2: detected capacity change from 0 to 256 [ 289.827839][ T7198] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 289.873169][ T7200] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1099'. [ 289.894685][ T7198] loop2: detected capacity change from 0 to 8 [ 289.971523][ T7198] SQUASHFS error: zstd decompression error: 10 [ 289.992467][ T7195] loop0: detected capacity change from 0 to 8192 [ 289.999614][ T7198] SQUASHFS error: zstd decompression failed, data probably corrupt [ 290.009067][ T7198] SQUASHFS error: Failed to read block 0x4ea: -5 [ 290.031429][ T7195] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 290.063112][ T7198] SQUASHFS error: Unable to read metadata cache entry [4e8] [ 290.085122][ T7195] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 290.099467][ T7198] SQUASHFS error: Unable to read inode 0x11f [ 290.120395][ T7195] REISERFS (device loop0): using ordered data mode [ 290.174524][ T7195] reiserfs: using flush barriers [ 290.357053][ T7195] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 290.399941][ T7195] REISERFS (device loop0): checking transaction log (loop0) [ 291.000481][ T7195] REISERFS (device loop0): Using r5 hash to sort names [ 291.039483][ T7195] REISERFS (device loop0): using 3.5.x disk format [ 291.046771][ T7195] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 292.345384][ T7225] loop2: detected capacity change from 0 to 764 [ 292.571279][ T7227] loop1: detected capacity change from 0 to 1024 [ 292.717833][ T7223] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.333240][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1113'. [ 293.606207][ T7235] loop3: detected capacity change from 0 to 32768 [ 293.822059][ T7237] loop0: detected capacity change from 0 to 40427 [ 293.861047][ T7237] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 293.868839][ T7237] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 293.914435][ T7247] loop2: detected capacity change from 0 to 256 [ 293.930067][ T7237] F2FS-fs (loop0): invalid crc value [ 293.936245][ T7247] FAT-fs (loop2): Unrecognized mount option "iocharse" or missing value [ 294.024488][ T27] audit: type=1400 audit(1720487919.887:232): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=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 [ 294.078570][ T7237] F2FS-fs (loop0): Found nat_bits in checkpoint [ 294.230837][ T3564] Bluetooth: hci3: command 0x0406 tx timeout [ 294.320926][ T7258] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 294.521045][ T7263] loop3: detected capacity change from 0 to 136 [ 294.768078][ T7237] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 294.841090][ T7237] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 294.928126][ T57] hfsplus: b-tree write err: -5, ino 4 [ 295.001058][ T27] audit: type=1800 audit(1720487920.867:233): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1112" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 295.576129][ T6527] syz-executor: attempt to access beyond end of device [ 295.576129][ T6527] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 295.636878][ T7281] loop3: detected capacity change from 0 to 256 [ 295.670679][ T7281] FAT-fs (loop3): Unrecognized mount option "iocharse" or missing value [ 296.091833][ T7293] loop3: detected capacity change from 0 to 1024 [ 296.145924][ T7293] hfsplus: walked past end of dir [ 296.222130][ T7299] loop1: detected capacity change from 0 to 8 [ 296.334673][ T7303] loop3: detected capacity change from 0 to 2048 [ 296.365686][ T7303] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 296.413213][ T7303] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 296.442919][ T7303] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 296.467617][ T7303] UDF-fs: Scanning with blocksize 512 failed [ 296.489053][ T7303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.563066][ T7299] SQUASHFS error: Failed to read block 0x8f: -5 [ 296.820639][ T7299] SQUASHFS error: Failed to read block 0xc00090: -5 [ 296.842339][ T7299] SQUASHFS error: Failed to read block 0x8f: -5 [ 296.899714][ T7299] SQUASHFS error: Failed to read block 0x8f: -5 [ 296.969797][ T7299] SQUASHFS error: Failed to read block 0x8f: -5 [ 296.976723][ T7299] SQUASHFS error: Failed to read block 0x8f: -5 [ 296.992603][ T7299] SQUASHFS error: Failed to read block 0x8f: -5 [ 297.055179][ T27] audit: type=1800 audit(1720487922.907:234): pid=7299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1141" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 297.375924][ T7317] loop1: detected capacity change from 0 to 256 [ 297.414807][ T7317] FAT-fs (loop1): Unrecognized mount option "iocharse" or missing value [ 297.584097][ T7320] loop3: detected capacity change from 0 to 2048 [ 297.685148][ T7320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 297.703981][ T7320] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038 (0x7fffffff) [ 297.797115][ T7314] loop0: detected capacity change from 0 to 32768 [ 297.804704][ T7314] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1146 (7314) [ 297.818994][ T7320] fs-verity: sha256 using implementation "sha256-avx2" [ 297.827301][ T7314] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 297.839688][ T7314] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 297.851128][ T7314] BTRFS info (device loop0): using free space tree [ 297.896133][ T7325] fs-verity: sha512 using implementation "sha512-avx2" [ 297.963615][ T7333] loop2: detected capacity change from 0 to 1024 [ 298.060721][ T5834] EXT4-fs (loop3): unmounting filesystem. [ 298.097478][ T7333] hfsplus: walked past end of dir [ 298.183948][ T7314] BTRFS info (device loop0): enabling ssd optimizations [ 298.381358][ T6527] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 298.401891][ T3563] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 298.410934][ T3563] Bluetooth: hci1: Injecting HCI hardware error event [ 298.422117][ T3563] Bluetooth: hci1: hardware error 0x00 [ 298.563672][ T7358] loop3: detected capacity change from 0 to 2048 [ 298.585267][ T7358] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 298.627724][ T7358] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 298.661780][ T7358] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 298.684925][ T7358] UDF-fs: Scanning with blocksize 512 failed [ 298.772524][ T7358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.870047][ T7373] loop2: detected capacity change from 0 to 2048 [ 298.961131][ T7373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 298.988988][ T7373] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 299.273992][ T6514] EXT4-fs (loop2): unmounting filesystem. [ 300.486841][ T7398] loop3: detected capacity change from 0 to 16 [ 300.549449][ T3563] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 300.630512][ T7398] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected [ 300.819371][ T3630] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 300.953784][ T7398] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 301.048407][ T7386] loop1: detected capacity change from 0 to 32768 [ 301.072641][ T7386] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1169 (7386) [ 301.090080][ T3630] usb 1-1: Using ep0 maxpacket: 32 [ 301.140106][ T7386] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 301.160047][ T7386] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 301.180640][ T7386] BTRFS info (device loop1): using free space tree [ 301.279540][ T3630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.321391][ T3630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.342333][ T7386] BTRFS info (device loop1): enabling ssd optimizations [ 301.349815][ T3630] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 301.361551][ T3630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.385984][ T3630] usb 1-1: config 0 descriptor?? [ 301.433097][ T3630] hub 1-1:0.0: USB hub found [ 301.506141][ T6380] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 301.664647][ T3630] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 301.969559][ T3630] usbhid 1-1:0.0: can't add hid device: -71 [ 301.981893][ T3630] usbhid: probe of 1-1:0.0 failed with error -71 [ 302.050108][ T3630] usb 1-1: USB disconnect, device number 8 [ 302.393570][ T27] audit: type=1326 audit(1720487928.257:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb496575bd9 code=0x7ffc0000 [ 302.462867][ T27] audit: type=1326 audit(1720487928.277:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb496575bd9 code=0x7ffc0000 [ 302.539561][ T27] audit: type=1326 audit(1720487928.287:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fb496575bd9 code=0x7ffc0000 [ 302.572280][ T7447] loop1: detected capacity change from 0 to 256 [ 302.596584][ T7447] FAT-fs (loop1): Unrecognized mount option "iocharse" or missing value [ 302.620153][ T27] audit: type=1326 audit(1720487928.287:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb496575bd9 code=0x7ffc0000 [ 302.639585][ T154] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 302.674848][ T27] audit: type=1326 audit(1720487928.287:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb496575bd9 code=0x7ffc0000 [ 302.961856][ T7465] loop3: detected capacity change from 0 to 8 [ 302.987032][ T7462] loop2: detected capacity change from 0 to 16 [ 303.033217][ T7465] SQUASHFS error: Failed to read block 0x8f: -5 [ 303.039954][ T154] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 303.052247][ T7462] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected [ 303.063528][ T154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.074691][ T154] usb 5-1: config 0 descriptor?? [ 303.101558][ T7465] SQUASHFS error: Failed to read block 0xc00090: -5 [ 303.108301][ T7465] SQUASHFS error: Failed to read block 0x8f: -5 [ 303.132322][ T7465] SQUASHFS error: Failed to read block 0x8f: -5 [ 303.139040][ T7465] SQUASHFS error: Failed to read block 0x8f: -5 [ 303.158101][ T7465] SQUASHFS error: Failed to read block 0x8f: -5 [ 303.176561][ T7465] SQUASHFS error: Failed to read block 0x8f: -5 [ 303.185279][ T27] audit: type=1800 audit(1720487929.047:240): pid=7465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1191" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 303.300639][ T7462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 303.749638][ T154] usb 5-1: Cannot read MAC address [ 303.757989][ T154] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 303.801481][ T154] usb 5-1: USB disconnect, device number 9 [ 304.385889][ T7468] loop1: detected capacity change from 0 to 40427 [ 304.413095][ T7470] loop0: detected capacity change from 0 to 32768 [ 304.429064][ T7468] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 304.441891][ T7468] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 304.517616][ T7468] F2FS-fs (loop1): Found nat_bits in checkpoint [ 304.700124][ T7468] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 304.719637][ T7468] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 304.847846][ T27] audit: type=1326 audit(1720487930.707:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.1199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32a9975bd9 code=0x0 [ 304.877491][ T6380] syz-executor: attempt to access beyond end of device [ 304.877491][ T6380] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 304.880140][ T52] block nbd3: Possible stuck request ffff88801f870000: control (read@0,4096B). Runtime 120 seconds [ 305.109787][ T3630] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 305.372017][ T3630] usb 1-1: Using ep0 maxpacket: 16 [ 305.659962][ T3630] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 305.675599][ T3630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.689405][ T3630] usb 1-1: Product: syz [ 305.693596][ T3630] usb 1-1: Manufacturer: syz [ 305.725570][ T3630] usb 1-1: SerialNumber: syz [ 305.741154][ T3630] usb 1-1: config 0 descriptor?? [ 305.800510][ T3630] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 305.812458][ T3630] usb 1-1: Detected FT4233HP [ 305.844252][ T7511] loop1: detected capacity change from 0 to 16 [ 305.882608][ T7511] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected [ 305.889677][ T7515] binder: 7514:7515 ioctl c00c620f 0 returned -14 [ 306.019819][ T3630] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 306.049567][ T3630] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 306.061917][ T3630] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 306.088189][ T3630] usb 1-1: USB disconnect, device number 9 [ 306.100845][ T7511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 306.122366][ T3630] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 306.149584][ T3630] ftdi_sio 1-1:0.0: device disconnected [ 306.774343][ T7513] loop2: detected capacity change from 0 to 40427 [ 306.828233][ T7513] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 306.855506][ T7513] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 306.926053][ T7513] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.959511][ T3630] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 309.076037][ T7538] loop0: detected capacity change from 0 to 4096 [ 309.118432][ T7538] NILFS (loop0): invalid segment: Checksum error in segment payload [ 309.148042][ T7538] NILFS (loop0): trying rollback from an earlier position [ 309.228556][ T7538] NILFS (loop0): recovery complete [ 309.234089][ T3630] usb 5-1: Using ep0 maxpacket: 32 [ 309.257565][ T7543] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.296091][ T7542] loop3: detected capacity change from 0 to 2048 [ 309.349761][ T52] block nbd4: Possible stuck request ffff88801f8d8000: control (read@0,4096B). Runtime 150 seconds [ 309.407650][ T7542] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 309.439724][ T3630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.450726][ T3630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.474055][ T3630] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 309.514250][ T7541] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 309.517659][ T3630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.573035][ T3630] usb 5-1: config 0 descriptor?? [ 309.610578][ T3630] hub 5-1:0.0: USB hub found [ 309.641900][ T7542] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 309.658093][ T7555] input: syz1 as /devices/virtual/input/input18 [ 309.700775][ T27] audit: type=1326 audit(1720487935.567:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6775bd9 code=0x7ffc0000 [ 309.730181][ T7542] EXT4-fs (loop3): This should not happen!! Data will be lost [ 309.730181][ T7542] [ 309.749100][ T7542] EXT4-fs (loop3): Total free blocks count 0 [ 309.755144][ T27] audit: type=1326 audit(1720487935.567:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6775bd9 code=0x7ffc0000 [ 309.755199][ T27] audit: type=1326 audit(1720487935.567:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f8ea6775bd9 code=0x7ffc0000 [ 309.755231][ T27] audit: type=1326 audit(1720487935.567:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6775bd9 code=0x7ffc0000 [ 309.755263][ T27] audit: type=1326 audit(1720487935.567:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6775bd9 code=0x7ffc0000 [ 309.869526][ T3630] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 309.883848][ T7542] EXT4-fs (loop3): Free/Dirty block details [ 309.890100][ T7542] EXT4-fs (loop3): free_blocks=66060288 [ 309.895863][ T7542] EXT4-fs (loop3): dirty_blocks=16 [ 309.918309][ T7561] binder: 7560:7561 ioctl c00c620f 0 returned -14 [ 309.929379][ T4567] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 309.942654][ T7542] EXT4-fs (loop3): Block reservation details [ 309.948890][ T7542] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 310.040445][ T46] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 310.180895][ T3630] usbhid 5-1:0.0: can't add hid device: -71 [ 310.186978][ T3630] usbhid: probe of 5-1:0.0 failed with error -71 [ 310.193676][ T4567] usb 2-1: Using ep0 maxpacket: 16 [ 310.248654][ T3630] usb 5-1: USB disconnect, device number 10 [ 310.550562][ T4567] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 310.606882][ T4567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.640928][ T28] INFO: task syz.4.470:5269 blocked for more than 143 seconds. [ 310.679165][ T28] Not tainted 6.1.97-syzkaller #0 [ 310.740595][ T4567] usb 2-1: Product: syz [ 310.804990][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.864399][ T4567] usb 2-1: Manufacturer: syz [ 310.938735][ T4567] usb 2-1: SerialNumber: syz [ 310.975384][ T28] task:syz.4.470 state:D stack:26520 pid:5269 ppid:4272 flags:0x00004004 [ 311.046284][ T4567] usb 2-1: config 0 descriptor?? [ 311.076723][ T28] Call Trace: [ 311.102764][ T28] [ 311.119410][ T28] __schedule+0x142d/0x4550 [ 311.137532][ T28] ? __mutex_lock+0x6b4/0xd80 [ 311.144242][ T4567] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 311.166509][ T4567] usb 2-1: Detected FT4233HP [ 311.176983][ T28] ? __sched_text_start+0x8/0x8 [ 311.207975][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 311.232809][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 311.244854][ T28] schedule+0xbf/0x180 [ 311.254640][ T28] schedule_preempt_disabled+0xf/0x20 [ 311.267527][ T28] __mutex_lock+0x6b9/0xd80 [ 311.286049][ T28] ? __mutex_lock+0x53c/0xd80 [ 311.299434][ T28] ? blkdev_put+0x100/0x750 [ 311.310771][ T28] ? mutex_lock_nested+0x10/0x10 [ 311.328819][ T28] ? __fsnotify_parent+0x50b/0x730 [ 311.334463][ T28] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 311.341895][ T28] blkdev_put+0x100/0x750 [ 311.352889][ T28] ? task_work_run+0x1fc/0x300 [ 311.357886][ T28] blkdev_close+0x56/0x80 [ 311.363592][ T4567] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 311.370883][ T28] ? blkdev_open+0x2e0/0x2e0 [ 311.375657][ T28] __fput+0x3b7/0x890 [ 311.380328][ T28] task_work_run+0x246/0x300 [ 311.385096][ T28] ? task_work_cancel+0x2b0/0x2b0 [ 311.390628][ T4567] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 311.397783][ T28] ? blkdev_ioctl+0x3a9/0x760 [ 311.403989][ T4567] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 311.412429][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 311.419984][ T4567] usb 2-1: USB disconnect, device number 12 [ 311.426157][ T28] exit_to_user_mode_loop+0xde/0x100 [ 311.441550][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 311.460211][ T4567] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 311.476345][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 311.488801][ T28] do_syscall_64+0x47/0xb0 [ 311.496272][ T4567] ftdi_sio 2-1:0.0: device disconnected [ 311.505474][ T28] ? clear_bhb_loop+0x45/0xa0 [ 311.515588][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.522042][ T28] RIP: 0033:0x7faaf5575bd9 [ 311.526690][ T28] RSP: 002b:00007faaf634c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.535762][ T28] RAX: 0000000000000000 RBX: 00007faaf5703f60 RCX: 00007faaf5575bd9 [ 311.544267][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 311.559790][ T28] RBP: 00007faaf55e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 311.583607][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.601128][ T28] R13: 000000000000000b R14: 00007faaf5703f60 R15: 00007ffcf665c798 [ 311.618357][ T28] [ 311.627443][ T28] INFO: task syz.4.470:5270 blocked for more than 144 seconds. [ 311.645255][ T28] Not tainted 6.1.97-syzkaller #0 [ 311.660286][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.684323][ T28] task:syz.4.470 state:D stack:27560 pid:5270 ppid:4272 flags:0x00004004 [ 311.694210][ T28] Call Trace: [ 311.697605][ T28] [ 311.701027][ T28] __schedule+0x142d/0x4550 [ 311.705776][ T28] ? __mutex_lock+0x6b4/0xd80 [ 311.711034][ T28] ? __sched_text_start+0x8/0x8 [ 311.716130][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 311.722636][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 311.728085][ T28] schedule+0xbf/0x180 [ 311.741707][ T28] schedule_preempt_disabled+0xf/0x20 [ 311.753952][ T28] __mutex_lock+0x6b9/0xd80 [ 311.764283][ T28] ? __mutex_lock+0x53c/0xd80 [ 311.775393][ T28] ? blkdev_get_by_dev+0x148/0xa10 [ 311.794934][ T28] ? mutex_lock_nested+0x10/0x10 [ 311.805868][ T28] ? _atomic_dec_and_lock+0x96/0x130 [ 311.818127][ T28] ? iput+0x401/0x980 [ 311.826836][ T28] ? ilookup+0x1c8/0x200 [ 311.835702][ T28] ? disk_block_events+0xa1/0x110 [ 311.843994][ T28] ? blkdev_get_by_dev+0xe7/0xa10 [ 311.849133][ T28] blkdev_get_by_dev+0x148/0xa10 [ 311.855459][ T28] blkdev_open+0x12e/0x2e0 [ 311.860372][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 311.865090][ T28] do_dentry_open+0x7f9/0x10f0 [ 311.870440][ T28] path_openat+0x2644/0x2e60 [ 311.875705][ T28] ? mark_lock+0x9a/0x340 [ 311.881492][ T28] ? do_filp_open+0x480/0x480 [ 311.892001][ T28] do_filp_open+0x230/0x480 [ 311.917223][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 311.930840][ T7573] loop2: detected capacity change from 0 to 40427 [ 311.944083][ T28] ? _raw_spin_unlock+0x24/0x40 [ 311.950730][ T7573] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 311.958041][ T7573] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 311.963159][ T28] ? alloc_fd+0x59c/0x640 [ 311.986977][ T28] do_sys_openat2+0x13b/0x500 [ 311.997687][ T28] ? do_sys_open+0x220/0x220 [ 312.007891][ T28] __x64_sys_openat+0x243/0x290 [ 312.018174][ T28] ? __ia32_sys_open+0x270/0x270 [ 312.029631][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 312.035861][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 312.050645][ T7573] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.052306][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 312.073463][ T28] do_syscall_64+0x3b/0xb0 [ 312.086524][ T28] ? clear_bhb_loop+0x45/0xa0 [ 312.096147][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.108099][ T28] RIP: 0033:0x7faaf5574610 [ 312.117413][ T28] RSP: 002b:00007faaf632ab80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 312.132317][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faaf5574610 [ 312.148504][ T28] RDX: 0000000000000000 RSI: 00007faaf632ac20 RDI: 00000000ffffff9c [ 312.179455][ T28] RBP: 00007faaf632ac20 R08: 0000000000000000 R09: 002364626e2f7665 [ 312.182207][ T7573] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 312.191322][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 312.209441][ T7573] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 312.213821][ T28] R13: 000000000000006e R14: 00007faaf5704038 R15: 00007ffcf665c798 [ 312.249677][ T28] [ 312.255219][ T28] [ 312.255219][ T28] Showing all locks held in the system: [ 312.272214][ T28] 1 lock held by rcu_tasks_kthre/12: [ 312.279056][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 312.305296][ T28] 1 lock held by rcu_tasks_trace/13: [ 312.319813][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 312.341621][ T28] 1 lock held by khungtaskd/28: [ 312.346583][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 312.363903][ T28] 2 locks held by getty/3308: [ 312.368778][ T28] #0: ffff88823bcce098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 312.385627][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 312.402917][ T28] 1 lock held by udevd/3629: [ 312.407619][ T28] #0: ffff88801f7ba4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 312.426970][ T28] 1 lock held by udevd/3692: [ 312.435954][ T28] #0: ffff88801f74d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 312.453316][ T28] 4 locks held by kworker/u4:10/3793: [ 312.458891][ T28] #0: ffff8881436e8138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 312.479547][ T28] #1: ffffc90004ae7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 312.502553][ T28] #2: ffff88805e1cc0e0 (&type->s_umount_key#70){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 312.519681][ T28] #3: ffff88805e1ca0e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_write_inode+0x65/0x110 [ 312.540861][ T28] 2 locks held by kworker/1:8/3875: [ 312.547312][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 312.568144][ T28] #1: ffffc90005107d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 312.589524][ T28] 1 lock held by syz.4.470/5269: [ 312.594611][ T28] #0: ffff88801f7ba4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 312.604811][ T28] 1 lock held by syz.4.470/5270: [ 312.610246][ T28] #0: ffff88801f7ba4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 312.620798][ T28] 3 locks held by syz-executor/5455: [ 312.626227][ T28] 1 lock held by syz.3.577/5674: [ 312.631973][ T28] #0: ffff88801f74d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 312.641810][ T28] 1 lock held by syz.3.577/5677: [ 312.646856][ T28] #0: ffff88801f74d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 312.659738][ T28] 2 locks held by kworker/u4:15/5805: [ 312.665232][ T28] 1 lock held by syz-executor/6514: [ 312.671009][ T28] #0: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 312.682407][ T28] [ 312.684837][ T28] ============================================= [ 312.684837][ T28] [ 312.685304][ T6514] syz-executor: attempt to access beyond end of device [ 312.685304][ T6514] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 312.699870][ T28] NMI backtrace for cpu 0 [ 312.712936][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 312.720780][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 312.730861][ T28] Call Trace: [ 312.734158][ T28] [ 312.737122][ T28] dump_stack_lvl+0x1e3/0x2cb [ 312.741841][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 312.747340][ T28] ? panic+0x764/0x764 [ 312.751429][ T28] ? vprintk_emit+0x622/0x740 [ 312.756143][ T28] ? printk_sprint+0x490/0x490 [ 312.760937][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 312.766091][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 312.771067][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 312.777238][ T28] ? _printk+0xd1/0x111 [ 312.781398][ T28] ? panic+0x764/0x764 [ 312.785480][ T28] ? __wake_up_klogd+0xcc/0x100 [ 312.790424][ T28] ? panic+0x764/0x764 [ 312.794506][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 312.800614][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 312.806703][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 312.812715][ T28] watchdog+0xf88/0xfd0 [ 312.816896][ T28] ? watchdog+0x1f8/0xfd0 [ 312.821256][ T28] kthread+0x28d/0x320 [ 312.825339][ T28] ? hungtask_pm_notify+0x50/0x50 [ 312.830371][ T28] ? kthread_blkcg+0xd0/0xd0 [ 312.834969][ T28] ret_from_fork+0x1f/0x30 [ 312.839403][ T28] [ 312.843404][ T28] Sending NMI from CPU 0 to CPUs 1: [ 312.848892][ C1] NMI backtrace for cpu 1 [ 312.848904][ C1] CPU: 1 PID: 3794 Comm: kworker/u4:11 Not tainted 6.1.97-syzkaller #0 [ 312.848922][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 312.848932][ C1] Workqueue: phy29 ieee80211_iface_work [ 312.848963][ C1] RIP: 0010:___slab_alloc+0x45b/0x1270 [ 312.848987][ C1] Code: 48 8b 4c 24 08 48 83 79 10 00 0f 85 3c 01 00 00 48 8b 41 18 48 85 c0 0f 84 83 04 00 00 48 89 41 10 48 89 44 24 68 48 8b 40 08 <48> 89 41 18 49 8b 5d 00 48 83 c3 20 e8 54 e8 a9 08 89 c5 83 f8 08 [ 312.849001][ C1] RSP: 0018:ffffc90004a37580 EFLAGS: 00000086 [ 312.849015][ C1] RAX: 0000000000000000 RBX: ffff8880b993e6e0 RCX: ffff8880b993e6c0 [ 312.849027][ C1] RDX: dffffc0000000000 RSI: ffffffff8aec13c0 RDI: ffffffff8b3d4760 [ 312.849040][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff2093845 [ 312.849052][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880273e1dc0 [ 312.849064][ C1] R13: ffff888012441dc0 R14: ffffffff7fff0000 R15: ffffffff81e15904 [ 312.849076][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 312.849091][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.849104][ C1] CR2: 00007ffd21b7fbf8 CR3: 000000000ce8e000 CR4: 00000000003506e0 [ 312.849119][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 312.849129][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 312.849139][ C1] Call Trace: [ 312.849144][ C1] [ 312.849150][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 312.849178][ C1] ? read_lock_is_recursive+0x10/0x10 [ 312.849206][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 312.849233][ C1] ? nmi_handle+0x25/0x440 [ 312.849270][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 312.849298][ C1] ? nmi_handle+0x12e/0x440 [ 312.849323][ C1] ? nmi_handle+0x25/0x440 [ 312.849349][ C1] ? ___slab_alloc+0x45b/0x1270 [ 312.849369][ C1] ? default_do_nmi+0x62/0x150 [ 312.849387][ C1] ? exc_nmi+0xa8/0x100 [ 312.849402][ C1] ? end_repeat_nmi+0x16/0x31 [ 312.849427][ C1] ? ___slab_alloc+0x3f4/0x1270 [ 312.849453][ C1] ? ___slab_alloc+0x45b/0x1270 [ 312.849473][ C1] ? ___slab_alloc+0x45b/0x1270 [ 312.849495][ C1] ? ___slab_alloc+0x45b/0x1270 [ 312.849516][ C1] [ 312.849520][ C1] [ 312.849529][ C1] ? ieee802_11_parse_elems_full+0xc4/0x1380 [ 312.849550][ C1] __kmem_cache_alloc_node+0x19f/0x260 [ 312.849571][ C1] ? ieee802_11_parse_elems_full+0xc4/0x1380 [ 312.849590][ C1] ? ieee802_11_parse_elems_full+0xc4/0x1380 [ 312.849607][ C1] __kmalloc+0xa1/0x230 [ 312.849628][ C1] ieee802_11_parse_elems_full+0xc4/0x1380 [ 312.849647][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 312.849671][ C1] ? rcu_is_watching+0x11/0xb0 [ 312.849687][ C1] ? trace_contention_end+0x61/0x170 [ 312.849709][ C1] ? __mutex_lock+0x2f7/0xd80 [ 312.849727][ C1] ? reacquire_held_locks+0x660/0x660 [ 312.849755][ C1] ? ieee80211_queue_delayed_work+0x160/0x160 [ 312.849773][ C1] ? mutex_lock_nested+0x10/0x10 [ 312.849791][ C1] ? mark_lock+0x9a/0x340 [ 312.849820][ C1] ieee80211_ibss_rx_queued_mgmt+0x430/0x2dd0 [ 312.849843][ C1] ? __lock_acquire+0x125b/0x1f80 [ 312.849875][ C1] ? ieee80211_ibss_rx_no_sta+0x740/0x740 [ 312.849919][ C1] ? mark_lock+0x9a/0x340 [ 312.849949][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 312.849976][ C1] ? print_irqtrace_events+0x210/0x210 [ 312.850001][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 312.850020][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 312.850040][ C1] ? skb_dequeue+0x10f/0x140 [ 312.850060][ C1] ieee80211_iface_work+0x7aa/0xce0 [ 312.850085][ C1] ? process_one_work+0x7a9/0x11d0 [ 312.850104][ C1] process_one_work+0x8a9/0x11d0 [ 312.850132][ C1] ? worker_detach_from_pool+0x260/0x260 [ 312.850154][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 312.850174][ C1] ? kthread_data+0x4e/0xc0 [ 312.850201][ C1] ? wq_worker_running+0x97/0x190 [ 312.850229][ C1] worker_thread+0xa47/0x1200 [ 312.850249][ C1] ? _raw_spin_unlock+0x40/0x40 [ 312.850269][ C1] ? __sched_text_start+0x8/0x8 [ 312.850297][ C1] ? _raw_spin_unlock+0x40/0x40 [ 312.850323][ C1] kthread+0x28d/0x320 [ 312.850337][ C1] ? worker_clr_flags+0x190/0x190 [ 312.850355][ C1] ? kthread_blkcg+0xd0/0xd0 [ 312.850371][ C1] ret_from_fork+0x1f/0x30 [ 312.850402][ C1] [ 312.895370][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 312.895388][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 312.895412][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 312.895425][ T28] Call Trace: [ 312.895432][ T28] [ 312.895441][ T28] dump_stack_lvl+0x1e3/0x2cb [ 312.895487][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 312.895521][ T28] ? panic+0x764/0x764 [ 312.895544][ T28] ? llist_add_batch+0x160/0x1d0 [ 312.895579][ T28] ? vscnprintf+0x59/0x80 [ 312.895607][ T28] panic+0x318/0x764 [ 312.895633][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 312.895669][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 312.895698][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 312.895732][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 312.895768][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 312.895807][ T28] watchdog+0xfc7/0xfd0 [ 312.895842][ T28] ? watchdog+0x1f8/0xfd0 [ 312.895874][ T28] kthread+0x28d/0x320 [ 312.895893][ T28] ? hungtask_pm_notify+0x50/0x50 [ 312.895919][ T28] ? kthread_blkcg+0xd0/0xd0 [ 312.895940][ T28] ret_from_fork+0x1f/0x30 [ 312.895983][ T28] [ 312.903717][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.904177][ T28] Kernel Offset: disabled [ 313.400116][ T28] Rebooting in 86400 seconds..