last executing test programs: 11.756394464s ago: executing program 4 (id=914): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xe82}) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000480)="a64547f02d24ef452b126e6b4ee0848331045276a2dada029f6feb61fefcc850639a2d2217a4c525abf430b2ff722f5cebae237de618f52f93495a5cdaa00f30b4da4148d4e0cad2831de99f500b35d48bbf6a414bfbeb4c4612c0a6", 0x5c, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/80, 0x50, 0x0) 10.139544412s ago: executing program 4 (id=917): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ea2000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="9f0f08c40768bbedbbcc0c5d67227190e36035a4d2205065b988debae83e65efdf1c5a7773874c3d724af9ab5e7df9627c43f6b2afce950aff54140b", 0x3c}, {&(0x7f00000001c0)="2d39cdb9f3b3f5b1c866d1dbeabd643bde4c9873d86c21cd63077b5350c2f2e8b771e2165ca1d3f7d0422f77353ec938f25d1c7bfa19a21fce56afec673cbc4eb68a36aa4cf68094b9a276f05fede1d5fa4682994a4b135065069af9009f11bb57cc99356b43ce40334b0f057c89d4109c967c", 0x73}, {&(0x7f0000000240)="78e305c864b9b21c185046bc4a474895fc540f611fb5061c90dcb80c9a304a80c9f41ee2fbad75faae7c6b19a937d7347025e4ffcc7695a2858d8d4562761430640c1a00c5317e20782eab8430ef03fc66c82cf2072e0f1857549709a3b2e5c139402d1ad2ccd7ec7786492adfb67845cef0dbe2c522d96af896d0a58690ce13f0c0a2a49262311f971e891a956c6df815d47ec5c68c43143b232b16f3a28887c4f4c96c9706ebded4104d863da72ce00d10f3255d3959fbca7d283f3ae2e5f0a6c83c66c26627d4138c26c7be00aa67f1f55908cc4a075b3594d4f19ac3f04644", 0xe1}, {&(0x7f0000000340)="8d5b38892956b939692d4b8d1a555f79b8078b0917c42399de4d45d08a5bf73c7d76", 0x22}], 0x4, 0x3, 0x8001) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000070a000500000000000000000a0000050c00034000000000000000030900010073797a3000000000199cc408a251ad41996c5a7d5cdacd09c97ef2cf3605b03aee19c85b9e26b4b3b4f38c9f3f90cd8860bfab47c8ea72113c3371ae297689dd867ba5bef1aa06a8f031926f59460eabea36108095f35ad0376d33c6b48f15c2e925004a67005868c98f726a78aae7fd7afe000a97ca12565235c8a851b7e68cb2f925b7b930e32f3fed5b3e4129284046fbe240a234e4c3b73e09d10f26bdab335d7a1576f4f4a507aa36c55d950be6a416540e4c130e5c8fdc0f6c8f29"], 0x2c}, 0x1, 0x0, 0x0, 0x10040}, 0x404c856) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000800)={{r2}, 0x0, 0x2, @unused=[0x5, 0x41a4, 0x7, 0x8], @devid}) 9.684568685s ago: executing program 1 (id=923): mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000440)=""/154, 0x9a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.446736708s ago: executing program 4 (id=931): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) fadvise64(r2, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 7.257712221s ago: executing program 1 (id=932): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) 6.320623429s ago: executing program 1 (id=934): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r2 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x5, @sdr}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$UHID_INPUT(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.294183871s ago: executing program 4 (id=936): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) 6.084896516s ago: executing program 1 (id=937): socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="28005080110001004abee339084ceef16f162471f400000005000200000000000800030005ac0f"], 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 4.104967821s ago: executing program 0 (id=938): socket(0x1e, 0x4, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x2, 0x20000000, 0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 4.078750143s ago: executing program 3 (id=939): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 3.97271956s ago: executing program 0 (id=940): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 3.97220033s ago: executing program 4 (id=941): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x0, &(0x7f0000000000)={[{@pqnoenforce}, {@noquota}, {@nouuid}, {@usrquota}, {@uquota}, {@prjquota}, {@noikeep}]}, 0x1, 0x985b, &(0x7f000001c900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 3.784443794s ago: executing program 1 (id=943): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) syz_usb_control_io(r0, &(0x7f00000024c0)={0x2c, &(0x7f00000002c0)={0x20, 0x1, 0xb8, {0xb8, 0x22, "d006f84e7bd247ed44ac149deea434326f83874a973c59c960dfb8ea9650a6fae4c44e34376d4035d89ffe7516d7a5baadc16b5306d9b06f9e8800d1704c8705a0201197e91b25f1e2c348c1c1c0c38433384d4e2294d418c1a1a0548149505ca6f064d05e0a37cb55ae42e920d4ec2575cc6baf6799fa604360ef5cbf0c4e701744a4f4f94cd69cfcce134454408917837107dd78d781d687ea905ccced05f63b89140e5cadd32a3259c8e845fa2eaed8ce2d6a1fd2"}}, &(0x7f00000023c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000002400)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x7, 0x7ca2}]}}, &(0x7f0000002440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2b, 0x2, 0x10, 0xf2, "db261bd8", "638cbae6"}}, &(0x7f0000002480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x4, 0x34, 0x5, 0x7, 0xc9}}}, &(0x7f0000004980)={0x84, &(0x7f0000002500)={0x40, 0x15, 0x3e, "053039cbf221961ae9981c47095719970fcfed44ff5e74fb345a9ab988e7caf34c83f7cd4860d6ef9fa1aaea39fc7679c0face24ea54af74dca47d8c6be5"}, &(0x7f0000002580)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000025c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002600)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000002640)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000002680)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000026c0)={0x40, 0x9, 0x1, 0xf0}, &(0x7f0000002700)={0x40, 0xb, 0x2, 'q?'}, &(0x7f0000002740)={0x40, 0xf, 0x2, 0xeb}, &(0x7f0000002780)={0x40, 0x13, 0x6, @remote}, &(0x7f0000004800)={0x40, 0x17, 0x6}, &(0x7f0000004840)={0x40, 0x19, 0x2, 'Ga'}, &(0x7f0000004880)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000048c0)={0x40, 0x1c, 0x1, 0xaa}, &(0x7f0000004900)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000004940)={0x40, 0x21, 0x1, 0x9}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.731057598s ago: executing program 0 (id=944): unshare(0x68060200) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r3 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x48}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 3.70301733s ago: executing program 3 (id=945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000080), 0x10) listen(r2, 0x0) accept4$llc(r2, 0x0, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4e}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040c0}, 0x20000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x0, 0x0, 0x80000000, 0x18, 0x1, 0x3f}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) 3.099223454s ago: executing program 2 (id=950): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x0, 0x8}, 0x90) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 2.886917829s ago: executing program 2 (id=951): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000) write$dsp(r0, &(0x7f0000002080)="a5", 0x1) pselect6(0x40, &(0x7f0000002240), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) 2.858744231s ago: executing program 0 (id=952): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xf5, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6}, {0x3fb, 0x3f, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(0x0, 0x0) 2.764920358s ago: executing program 3 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) fchdir(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000800000808000300", @ANYRES32=r1], 0x1c}}, 0x0) 2.59450738s ago: executing program 0 (id=954): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8600000000000017080000f8ffffffbfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.177699734s ago: executing program 0 (id=955): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r0, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000cd8000/0x4000)=nil, 0x2) socket(0x80000000000000a, 0x2, 0x0) 816.88962ms ago: executing program 3 (id=956): mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000004c0)='./bus\x00', r1, &(0x7f0000000500)='./file0\x00', 0x0) 743.337126ms ago: executing program 2 (id=957): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x2, 0x9d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x7fff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 481.349634ms ago: executing program 2 (id=958): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) dup3(r0, r1, 0x0) fcntl$notify(r1, 0x402, 0x25) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001180)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r5], 0x9c}}, 0x0) 465.988665ms ago: executing program 4 (id=959): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000a540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x30}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, r4, 0xc0c0c0c0}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @empty, @broadcast}, &(0x7f0000000300)=0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@empty, @initdev}, &(0x7f0000000380)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) 313.974747ms ago: executing program 2 (id=961): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x178e, &(0x7f0000000180)={0x0, 0x0, 0x13291}, 0x0, &(0x7f0000000080)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 220.824563ms ago: executing program 2 (id=962): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-(\xb94\xf1\x9c\x83\nbo<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<>\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r4) 0s ago: executing program 1 (id=964): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) sched_setscheduler(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000001180)) ioperm(0x0, 0x400, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x608202, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) kernel console output (not intermixed with test programs): 77938][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.294846][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.350930][ T6095] attempt to access beyond end of device [ 219.350930][ T6095] loop1: rw=0, want=40, limit=16 [ 219.354757][ T1074] Bluetooth: hci1: command 0x041b tx timeout [ 219.395330][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.397375][ T6095] erofs: (device loop1): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 219.543105][ T6019] device hsr_slave_0 entered promiscuous mode [ 219.555353][ T6019] device hsr_slave_1 entered promiscuous mode [ 219.694211][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880624f7400: rx timeout, send abort [ 219.876870][ T6019] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.038791][ T6019] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.156333][ T6019] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.228571][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880624f7400: abort rx timeout. Force session deactivation [ 220.264500][ T6019] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.122289][ T6019] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.151842][ T6106] loop2: detected capacity change from 0 to 64 [ 221.181919][ T6019] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.214008][ T6019] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.231867][ T6019] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.432878][ T1074] Bluetooth: hci1: command 0x040f tx timeout [ 221.533708][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.597709][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.609864][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.638101][ T6019] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.688340][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.698314][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.712877][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.719967][ T3816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.746331][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.772505][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.815851][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.844932][ T3816] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.852096][ T3816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.877888][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.916457][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.948099][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.973753][ T6122] xt_TCPMSS: Only works on TCP SYN packets [ 221.988447][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.030797][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 222.086795][ T6019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.123490][ T6019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.169248][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.182336][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.213992][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.259972][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.298526][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.326644][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.343283][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.372102][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.423099][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061c1f400: rx timeout, send abort [ 222.931391][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061c1f400: abort rx timeout. Force session deactivation [ 223.155546][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.180903][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.239737][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.261657][ T6154] loop4: detected capacity change from 0 to 128 [ 223.297707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.309138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.358041][ T6019] device veth0_vlan entered promiscuous mode [ 223.382583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.394408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.414963][ T6019] device veth1_vlan entered promiscuous mode [ 223.428544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.522605][ T3612] Bluetooth: hci1: command 0x0419 tx timeout [ 224.165521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.173523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.264766][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.3.498'. [ 224.289560][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.3.498'. [ 224.299443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.320271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.348722][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 224.424122][ T6019] device veth0_macvtap entered promiscuous mode [ 224.456899][ T6019] device veth1_macvtap entered promiscuous mode [ 224.506882][ T6169] loop4: detected capacity change from 0 to 8192 [ 224.507912][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.555018][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.579535][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.597857][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.609107][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.620742][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.631829][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.644591][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.666257][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.689532][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.715430][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.725528][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.726203][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.726718][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.727240][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.732746][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.732764][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.732773][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.732783][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.732792][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.732803][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.732812][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.732823][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.732833][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.732844][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.733859][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.736661][ T6019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.736694][ T6019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.736719][ T6019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.736744][ T6019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.741098][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.741665][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.835790][ T3676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.835855][ T3676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.838782][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.883225][ T3676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.883292][ T3676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.886032][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.473617][ T6191] loop2: detected capacity change from 0 to 64 [ 226.656698][ T6201] netlink: 'syz.3.507': attribute type 9 has an invalid length. [ 226.671699][ T6201] netlink: 'syz.3.507': attribute type 7 has an invalid length. [ 226.699761][ T6201] netlink: 'syz.3.507': attribute type 8 has an invalid length. [ 226.825640][ T6209] loop0: detected capacity change from 0 to 128 [ 227.646251][ T1222] device hsr_slave_0 left promiscuous mode [ 227.671787][ T1222] device hsr_slave_1 left promiscuous mode [ 227.699067][ T1222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.738669][ T1222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.779230][ T1222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.796436][ T6208] kvm [6206]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800 [ 227.825824][ T1222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.840391][ T1222] device bridge_slave_1 left promiscuous mode [ 227.858299][ T6208] kvm [6206]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800 [ 227.879997][ T1222] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.922835][ T6208] kvm [6206]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xa600000000 [ 227.934776][ T1222] device bridge_slave_0 left promiscuous mode [ 227.958029][ T6208] kvm [6206]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xb200000000 [ 227.995883][ T1222] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.009875][ T6209] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.020711][ T6209] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 228.071937][ T1222] device veth1_macvtap left promiscuous mode [ 228.111849][ T1222] device veth0_macvtap left promiscuous mode [ 228.153693][ T1222] device veth1_vlan left promiscuous mode [ 228.186811][ T1222] device veth0_vlan left promiscuous mode [ 228.893640][ T6234] loop4: detected capacity change from 0 to 2048 [ 229.687969][ T6234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.068339][ T6253] loop3: detected capacity change from 0 to 256 [ 230.091473][ T6254] loop4: detected capacity change from 0 to 1024 [ 230.114529][ T6253] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 230.134864][ T6254] EXT4-fs (loop4): Ignoring removed orlov option [ 230.148988][ T6254] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 230.214477][ T1222] team0 (unregistering): Port device team_slave_1 removed [ 230.227910][ T6254] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 230.253251][ T1222] team0 (unregistering): Port device team_slave_0 removed [ 230.267579][ T1222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.297922][ T1222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.322045][ T25] audit: type=1804 audit(1725449455.163:9): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.523" name="/newroot/16/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 230.406080][ T6260] loop3: detected capacity change from 0 to 512 [ 230.433437][ T6260] EXT4-fs (loop3): Ignoring removed bh option [ 230.467640][ T1222] bond0 (unregistering): Released all slaves [ 230.493282][ T6260] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 230.546455][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 230.830383][ T6260] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 230.876508][ T6273] loop0: detected capacity change from 0 to 1024 [ 231.355669][ T6273] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.459916][ T6273] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 231.628657][ T6247] chnl_net:caif_netlink_parms(): no params data found [ 231.896923][ T6291] loop0: detected capacity change from 0 to 4096 [ 232.637792][ T5142] Bluetooth: hci5: command 0x0409 tx timeout [ 232.719487][ T25] audit: type=1800 audit(1725449457.523:10): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.529" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 232.798000][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.826225][ T25] audit: type=1804 audit(1725449457.633:11): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.529" name="/newroot/6/file0/bus" dev="loop0" ino=33 res=1 errno=0 [ 232.839456][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.898037][ T6247] device bridge_slave_0 entered promiscuous mode [ 232.948302][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.985739][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.006466][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 233.030651][ T6247] device bridge_slave_1 entered promiscuous mode [ 233.113984][ T6247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.171732][ T6247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.203599][ T6309] loop2: detected capacity change from 0 to 64 [ 233.330937][ T4187] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 233.484069][ T6247] team0: Port device team_slave_0 added [ 233.669840][ T4187] usb 4-1: Using ep0 maxpacket: 16 [ 233.745822][ T6247] team0: Port device team_slave_1 added [ 233.909565][ T6309] hfs: get root inode failed [ 233.968690][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.978463][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.006324][ T4187] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 234.021483][ T6247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.054650][ T4187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.076973][ T4187] usb 4-1: Product: syz [ 234.084721][ T4187] usb 4-1: Manufacturer: syz [ 234.086802][ T6309] loop2: detected capacity change from 0 to 512 [ 234.089330][ T4187] usb 4-1: SerialNumber: syz [ 234.116312][ T6314] loop4: detected capacity change from 0 to 4096 [ 234.133346][ T4187] usb 4-1: config 0 descriptor?? [ 234.161960][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.177647][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.209697][ T6247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.254646][ T6314] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 234.292436][ T6314] ntfs3: loop4: Failed to load $MFT. [ 234.317832][ T6247] device hsr_slave_0 entered promiscuous mode [ 234.321998][ T25] audit: type=1804 audit(1725449459.163:12): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.529" name="/newroot/6/file0/bus" dev="loop0" ino=33 res=1 errno=0 [ 234.342513][ T6309] EXT4-fs (loop2): 1 truncate cleaned up [ 234.432467][ T6247] device hsr_slave_1 entered promiscuous mode [ 234.447582][ T6309] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 234.475546][ T6247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.487665][ T4187] usb 4-1: Not enough endpoints found in device, aborting! [ 234.494876][ T6247] Cannot create hsr debugfs directory [ 234.709660][ T5149] Bluetooth: hci5: command 0x041b tx timeout [ 234.709912][ T5690] usb 4-1: USB disconnect, device number 11 [ 235.067467][ T6247] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.463430][ T6247] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.535978][ T6247] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.647968][ T6346] loop2: detected capacity change from 0 to 512 [ 236.744437][ T6247] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.789731][ T5149] Bluetooth: hci5: command 0x040f tx timeout [ 236.822062][ T6346] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nobarrier,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 236.850125][ T6346] ext4 filesystem being mounted at /45/bus supports timestamps until 2038 (0x7fffffff) [ 236.916968][ T6247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.941931][ T6247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.951189][ T6359] loop0: detected capacity change from 0 to 1024 [ 236.956168][ T6354] XFS (nullb0): Invalid superblock magic number [ 236.982010][ T6247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.004300][ T6247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.030720][ T6359] hfsplus: part requires an argument [ 237.036036][ T6359] hfsplus: unable to parse mount options [ 237.300124][ T6247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.323563][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.359319][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.377541][ T6247] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.403043][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.417540][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.449352][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.456572][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.500401][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.518982][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.543383][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.570908][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.578044][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.583591][ T6370] loop3: detected capacity change from 0 to 2048 [ 237.607609][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.639696][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.654508][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.665570][ T6359] loop0: detected capacity change from 0 to 32768 [ 237.675919][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.715297][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.727913][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.745622][ T6370] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.759165][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.769266][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.793559][ T6247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.804993][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.818543][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.882023][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.890577][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.947577][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.957103][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.965341][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.703556][ T3888] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 238.773965][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.800425][ T3888] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 402 with error 28 [ 238.830190][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.849441][ T3888] EXT4-fs (loop3): This should not happen!! Data will be lost [ 238.849441][ T3888] [ 238.869880][ T1074] Bluetooth: hci5: command 0x0419 tx timeout [ 238.888252][ T6247] device veth0_vlan entered promiscuous mode [ 239.039828][ T3888] EXT4-fs (loop3): Total free blocks count 0 [ 239.898443][ T3888] EXT4-fs (loop3): Free/Dirty block details [ 240.887966][ T3888] EXT4-fs (loop3): free_blocks=2415919104 [ 240.931028][ T6399] printk: syz.2.560 (6399): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 240.946474][ T3888] EXT4-fs (loop3): dirty_blocks=416 [ 240.962757][ T3888] EXT4-fs (loop3): Block reservation details [ 240.968851][ T3888] EXT4-fs (loop3): i_reserved_data_blocks=26 [ 241.203646][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.212133][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.237979][ T6247] device veth1_vlan entered promiscuous mode [ 241.276553][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.291970][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.456623][ T6247] device veth0_macvtap entered promiscuous mode [ 241.615196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.073065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.084091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.160608][ T6247] device veth1_macvtap entered promiscuous mode [ 242.214215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.338929][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.351089][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.361552][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.372366][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.754387][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.775221][ T6426] binder: 6425:6426 ioctl c018620b 20000380 returned -14 [ 242.811359][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.821775][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.832656][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.842980][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.856995][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.885164][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.908632][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.948499][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.970440][ T6434] loop2: detected capacity change from 0 to 1024 [ 243.478003][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.521411][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.536028][ T6443] loop3: detected capacity change from 0 to 512 [ 243.561944][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.576270][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.586209][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.596770][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.606669][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.617151][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.628588][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.639182][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.652563][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.672443][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.711222][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.846860][ T6449] loop2: detected capacity change from 0 to 512 [ 243.870840][ T6247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.881319][ T6247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.892092][ T6247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.475133][ T6247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.514142][ T6449] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 244.562662][ T6449] EXT4-fs (loop2): can't mount with both data=journal and dax [ 244.782436][ T6458] netlink: 7 bytes leftover after parsing attributes in process `syz.0.577'. [ 245.636677][ T3676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.636747][ T3676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.638878][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.888262][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.888309][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.291407][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.373426][ T6466] XFS (nullb0): Invalid superblock magic number [ 246.502272][ T6482] syz.2.580 sent an empty control message without MSG_MORE. [ 247.991835][ T6490] kexec: Could not allocate control_code_buffer [ 248.159614][ T5142] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 248.189503][ T5597] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 248.299473][ T3612] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 248.399615][ T5142] usb 1-1: Using ep0 maxpacket: 16 [ 248.519701][ T5142] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.530079][ T5142] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.539036][ T5142] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 248.548210][ T3612] usb 5-1: Using ep0 maxpacket: 8 [ 248.553442][ T5597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 248.563446][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.575814][ T5142] usb 1-1: config 0 descriptor?? [ 248.679694][ T3612] usb 5-1: config 0 has no interfaces? [ 248.685362][ T3612] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 248.695150][ T3612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.706579][ T3612] usb 5-1: config 0 descriptor?? [ 248.810639][ T5597] usb 3-1: string descriptor 0 read error: -22 [ 248.816918][ T5597] usb 3-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 248.826114][ T5597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.837013][ T5597] usb 3-1: config 0 descriptor?? [ 248.859737][ T6495] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 248.881623][ T5597] r8712u: register rtl8712_netdev_ops to netdev_ops [ 248.888334][ T5597] usb 3-1: r8712u: USB_SPEED_LOW with 1 endpoints [ 249.034835][ T4183] usb 5-1: USB disconnect, device number 4 [ 249.118578][ T5597] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 249.137997][ T5597] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 249.297654][ T5597] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 249.310738][ T5597] usb 3-1: USB disconnect, device number 7 [ 249.314171][ T6500] loop4: detected capacity change from 0 to 512 [ 251.050844][ T3612] usb 1-1: USB disconnect, device number 6 [ 252.114931][ T6535] loop0: detected capacity change from 0 to 1024 [ 252.318282][ T6540] loop4: detected capacity change from 0 to 128 [ 252.367051][ T6535] hfsplus: extend alloc file! (8192,65536,366) [ 252.552549][ T6543] loop2: detected capacity change from 0 to 2048 [ 253.623576][ T6543] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 253.623686][ T6543] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038 (0x7fffffff) [ 253.716113][ T4187] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 253.755212][ T6543] fs-verity: sha512 using implementation "sha512-avx2" [ 253.812832][ C1] eth0: bad gso: type: 1, size: 1408 [ 253.824269][ T25] audit: type=1800 audit(1725449478.662:13): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.597" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 253.875757][ T25] audit: type=1800 audit(1725449478.692:14): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.597" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 254.019968][ T4183] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 254.358404][ T6564] loop0: detected capacity change from 0 to 512 [ 254.517167][ T4183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.544605][ T4183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.559644][ T4187] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=36.1c [ 254.585436][ T4187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.594249][ T4183] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 255.119655][ T25] audit: type=1326 audit(1725449479.932:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.2.601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28a6251ef9 code=0x0 [ 255.141289][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.291089][ T4187] usb 2-1: Product: syz [ 255.297910][ T4187] usb 2-1: Manufacturer: syz [ 255.302862][ T4183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.311329][ T4187] usb 2-1: SerialNumber: syz [ 255.317976][ T4187] usb 2-1: config 0 descriptor?? [ 255.324905][ T4183] usb 4-1: config 0 descriptor?? [ 255.399691][ T4187] usb 2-1: can't set config #0, error -71 [ 255.414619][ T4187] usb 2-1: USB disconnect, device number 8 [ 255.521919][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.528296][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.353688][ T4183] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0 [ 256.363451][ T4183] corsair 0003:1B1C:1B02.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 256.552264][ T6557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.599'. [ 256.604146][ T6557] tipc: Can't bind to reserved service type 1 [ 256.629875][ T4183] corsair 0003:1B1C:1B02.0008: Failed to get K90 initial state (error -71). [ 256.655223][ T6577] loop4: detected capacity change from 0 to 32768 [ 256.662138][ T4183] usb 4-1: USB disconnect, device number 12 [ 256.698828][ T6590] could not allocate digest TFM handle sha256-arm64-neon [ 256.708874][ T6595] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 256.772824][ T6595] device vlan2 entered promiscuous mode [ 256.819311][ T6577] XFS (loop4): Mounting V5 Filesystem [ 256.997522][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 257.062445][ T6577] XFS (loop4): Ending clean mount [ 257.169565][ T5142] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 257.261389][ T5747] XFS (loop4): Unmounting Filesystem [ 257.530242][ T5142] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 257.587850][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.763540][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.780987][ T5142] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 257.795104][ T5142] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 257.805911][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.837821][ T5142] usb 3-1: config 0 descriptor?? [ 258.062259][ T6627] block nbd0: shutting down sockets [ 258.336572][ T5142] thrustmaster 0003:044F:B653.0009: unbalanced delimiter at end of report description [ 258.352743][ T5142] thrustmaster 0003:044F:B653.0009: parse failed [ 258.359172][ T5142] thrustmaster: probe of 0003:044F:B653.0009 failed with error -22 [ 258.369508][ T4187] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.800010][ T4187] usb 2-1: config 0 has an invalid interface number: 76 but max is 3 [ 258.833493][ T4187] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 258.898028][ T4187] usb 2-1: config 0 has an invalid interface number: 12 but max is 3 [ 258.922075][ T5142] usb 3-1: USB disconnect, device number 8 [ 258.967106][ T4187] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.977744][ T4187] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 259.000337][ T4187] usb 2-1: config 0 has no interface number 0 [ 259.006430][ T4187] usb 2-1: config 0 has no interface number 1 [ 259.012579][ T4187] usb 2-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 259.024250][ T4187] usb 2-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 259.036363][ T4187] usb 2-1: config 0 interface 76 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 259.047386][ T4187] usb 2-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 259.058634][ T4187] usb 2-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 259.090573][ T4187] usb 2-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 259.203434][ T4187] usb 2-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 259.214575][ T4187] usb 2-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 259.225843][ T4187] usb 2-1: config 0 interface 12 altsetting 58 has 3 endpoint descriptors, different from the interface descriptor's value: 40 [ 259.240466][ T4187] usb 2-1: config 0 interface 76 has no altsetting 0 [ 259.247154][ T4187] usb 2-1: config 0 interface 12 has no altsetting 0 [ 259.336112][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 259.446507][ T4187] usb 2-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 259.487785][ T4187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.615536][ T4187] usb 2-1: Product: syz [ 259.675978][ T4187] usb 2-1: Manufacturer: syz [ 259.737622][ T4187] usb 2-1: SerialNumber: syz [ 259.857061][ T4187] usb 2-1: config 0 descriptor?? [ 259.912926][ T4187] cp210x 2-1:0.76: cp210x converter detected [ 259.942835][ T6639] loop2: detected capacity change from 0 to 2048 [ 260.084438][ T6639] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.159680][ T4187] cp210x 2-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 260.167720][ T4187] cp210x 2-1:0.76: querying part number failed [ 260.249861][ T4187] usb 2-1: cp210x converter now attached to ttyUSB0 [ 260.380277][ T4187] cp210x 2-1:0.12: cp210x converter detected [ 260.983275][ T6639] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 260.996022][ T4187] cp210x 2-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 261.055809][ T6639] File: /62/file0/bus PID: 6639 Comm: syz.2.622 [ 261.075543][ T4187] cp210x 2-1:0.12: querying part number failed [ 261.090725][ T4187] usb 2-1: cp210x converter now attached to ttyUSB1 [ 261.241496][ T4187] usb 2-1: USB disconnect, device number 9 [ 261.523165][ T4187] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 261.542566][ T4187] cp210x 2-1:0.76: device disconnected [ 261.594399][ T4187] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 261.602832][ T4187] cp210x 2-1:0.12: device disconnected [ 265.389667][ T3612] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 265.820263][ T3612] usb 1-1: config 0 has an invalid interface number: 76 but max is 3 [ 265.869310][ T3612] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 265.878428][ T3612] usb 1-1: config 0 has an invalid interface number: 12 but max is 3 [ 265.886903][ T3612] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.900172][ T6713] loop4: detected capacity change from 0 to 16 [ 265.901352][ T3612] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 265.931359][ T3612] usb 1-1: config 0 has no interface number 0 [ 265.937497][ T3612] usb 1-1: config 0 has no interface number 1 [ 265.951067][ T3612] usb 1-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 265.967911][ T3612] usb 1-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 265.998861][ T6713] erofs: (device loop4): mounted with root inode @ nid 36. [ 266.029734][ T3612] usb 1-1: config 0 interface 76 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 266.046867][ T3612] usb 1-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 266.234993][ T3612] usb 1-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 266.256601][ T3612] usb 1-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 266.267859][ T3612] usb 1-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 266.278915][ T3612] usb 1-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 266.523640][ T6720] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 266.532814][ T6720] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 266.541870][ T6720] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 266.551955][ T6720] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 266.561161][ T6720] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 266.571083][ T6720] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 266.581011][ T6720] attempt to access beyond end of device [ 266.581011][ T6720] loop4: rw=524288, want=6536, limit=16 [ 266.592224][ T6720] attempt to access beyond end of device [ 266.592224][ T6720] loop4: rw=524288, want=34359736344, limit=16 [ 266.604051][ T6720] attempt to access beyond end of device [ 266.604051][ T6720] loop4: rw=524288, want=736, limit=16 [ 266.615318][ T6720] attempt to access beyond end of device [ 266.615318][ T6720] loop4: rw=524288, want=536576872, limit=16 [ 266.627173][ T6720] attempt to access beyond end of device [ 266.627173][ T6720] loop4: rw=524288, want=24, limit=16 [ 266.641397][ T6720] attempt to access beyond end of device [ 266.641397][ T6720] loop4: rw=524288, want=13478624040, limit=16 [ 266.668751][ T3612] usb 1-1: config 0 interface 12 altsetting 58 has 3 endpoint descriptors, different from the interface descriptor's value: 40 [ 266.683046][ T3612] usb 1-1: config 0 interface 76 has no altsetting 0 [ 266.689964][ T3612] usb 1-1: config 0 interface 12 has no altsetting 0 [ 267.080205][ T3612] usb 1-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 267.101463][ T3612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.119011][ T3612] usb 1-1: Product: syz [ 267.163778][ T3612] usb 1-1: Manufacturer: syz [ 267.168536][ T3612] usb 1-1: SerialNumber: syz [ 267.186756][ T3612] usb 1-1: config 0 descriptor?? [ 267.230646][ T3612] cp210x 1-1:0.76: cp210x converter detected [ 267.459646][ T3612] cp210x 1-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 267.467445][ T3612] cp210x 1-1:0.76: querying part number failed [ 267.475485][ T3612] usb 1-1: cp210x converter now attached to ttyUSB0 [ 267.520799][ T3612] cp210x 1-1:0.12: cp210x converter detected [ 267.539578][ T3612] cp210x 1-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 267.547177][ T3612] cp210x 1-1:0.12: querying part number failed [ 267.556555][ T3612] usb 1-1: cp210x converter now attached to ttyUSB1 [ 267.572971][ T3612] usb 1-1: USB disconnect, device number 7 [ 267.601020][ T3612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 267.613251][ T3612] cp210x 1-1:0.76: device disconnected [ 267.622650][ T3612] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 267.631094][ T3612] cp210x 1-1:0.12: device disconnected [ 270.803749][ T6762] loop2: detected capacity change from 0 to 16 [ 270.844732][ T6758] loop4: detected capacity change from 0 to 4096 [ 270.875404][ T6762] erofs: (device loop2): mounted with root inode @ nid 36. [ 271.161264][ T6770] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 271.172356][ T6770] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 271.181678][ T6770] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 271.193063][ T6770] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 271.204515][ T6770] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 271.214521][ T6770] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 271.224752][ T6770] attempt to access beyond end of device [ 271.224752][ T6770] loop2: rw=524288, want=6536, limit=16 [ 271.236323][ T6770] attempt to access beyond end of device [ 271.236323][ T6770] loop2: rw=524288, want=34359736344, limit=16 [ 271.248764][ T6770] attempt to access beyond end of device [ 271.248764][ T6770] loop2: rw=524288, want=736, limit=16 [ 271.260264][ T6770] attempt to access beyond end of device [ 271.260264][ T6770] loop2: rw=524288, want=536576872, limit=16 [ 271.754999][ T25] audit: type=1804 audit(1725449496.592:16): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.652" name="/newroot/49/file0/bus" dev="loop4" ino=33 res=1 errno=0 [ 273.189214][ T6781] loop3: detected capacity change from 0 to 256 [ 273.215523][ T6783] netlink: 104 bytes leftover after parsing attributes in process `syz.1.658'. [ 273.235523][ T6785] loop0: detected capacity change from 0 to 256 [ 273.350440][ T6781] FAT-fs (loop3): Directory bread(block 64) failed [ 273.374559][ T6781] FAT-fs (loop3): Directory bread(block 65) failed [ 273.399067][ T6781] FAT-fs (loop3): Directory bread(block 66) failed [ 273.419767][ T6781] FAT-fs (loop3): Directory bread(block 67) failed [ 273.426636][ T6781] FAT-fs (loop3): Directory bread(block 68) failed [ 273.473937][ T6781] FAT-fs (loop3): Directory bread(block 69) failed [ 273.501292][ T6781] FAT-fs (loop3): Directory bread(block 70) failed [ 273.519574][ T5690] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 273.569976][ T6781] FAT-fs (loop3): Directory bread(block 71) failed [ 273.585125][ T6781] FAT-fs (loop3): Directory bread(block 72) failed [ 273.592669][ T6781] FAT-fs (loop3): Directory bread(block 73) failed [ 273.880324][ T5690] usb 3-1: config 0 has an invalid interface number: 76 but max is 3 [ 273.908810][ T5690] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 273.947499][ T5690] usb 3-1: config 0 has an invalid interface number: 12 but max is 3 [ 273.962201][ T5690] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.972541][ T5690] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 273.982141][ T5690] usb 3-1: config 0 has no interface number 0 [ 274.577250][ T6794] loop0: detected capacity change from 0 to 32768 [ 274.629044][ T5690] usb 3-1: config 0 has no interface number 1 [ 274.635301][ T5690] usb 3-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 274.646483][ T5690] usb 3-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 274.657554][ T5690] usb 3-1: config 0 interface 76 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 274.668201][ T5690] usb 3-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 274.679122][ T5690] usb 3-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 274.692202][ T5690] usb 3-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 274.705768][ T5690] usb 3-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 274.717802][ T5690] usb 3-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 274.729209][ T5690] usb 3-1: config 0 interface 12 altsetting 58 has 3 endpoint descriptors, different from the interface descriptor's value: 40 [ 274.742826][ T5690] usb 3-1: config 0 interface 76 has no altsetting 0 [ 274.749799][ T5690] usb 3-1: config 0 interface 12 has no altsetting 0 [ 274.782681][ T6794] XFS (loop0): Mounting V5 Filesystem [ 274.829293][ T6794] XFS (loop0): Ending clean mount [ 274.864387][ T25] audit: type=1800 audit(1725449499.702:17): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.671" name="bus" dev="loop0" ino=9287 res=0 errno=0 [ 274.919586][ T5690] usb 3-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 274.928626][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.937150][ T5690] usb 3-1: Product: syz [ 274.941796][ T5690] usb 3-1: Manufacturer: syz [ 274.946393][ T5690] usb 3-1: SerialNumber: syz [ 274.953157][ T5690] usb 3-1: config 0 descriptor?? [ 274.990545][ T5690] cp210x 3-1:0.76: cp210x converter detected [ 275.076347][ T6019] XFS (loop0): Unmounting Filesystem [ 275.410117][ T5690] cp210x 3-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 275.449858][ T5690] cp210x 3-1:0.76: querying part number failed [ 275.880541][ T6818] loop3: detected capacity change from 0 to 16 [ 276.320367][ T5690] usb 3-1: cp210x converter now attached to ttyUSB0 [ 276.336799][ T6818] erofs: (device loop3): mounted with root inode @ nid 36. [ 276.393202][ T5690] cp210x 3-1:0.12: cp210x converter detected [ 276.421231][ T5690] cp210x 3-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 276.436289][ T5690] cp210x 3-1:0.12: querying part number failed [ 276.491927][ T5690] usb 3-1: cp210x converter now attached to ttyUSB1 [ 276.559224][ T5690] usb 3-1: USB disconnect, device number 9 [ 276.571561][ T5690] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 276.591251][ T5690] cp210x 3-1:0.76: device disconnected [ 276.601342][ T5690] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 276.609562][ T5690] cp210x 3-1:0.12: device disconnected [ 277.560939][ T6830] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 277.570125][ T6830] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 277.579152][ T6830] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 277.588340][ T6830] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 277.597537][ T6830] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 277.607458][ T6830] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 277.616766][ T6830] handle_bad_sector: 2 callbacks suppressed [ 277.616786][ T6830] attempt to access beyond end of device [ 277.616786][ T6830] loop3: rw=524288, want=6536, limit=16 [ 277.633867][ T6830] attempt to access beyond end of device [ 277.633867][ T6830] loop3: rw=524288, want=34359736344, limit=16 [ 277.645656][ T6830] attempt to access beyond end of device [ 277.645656][ T6830] loop3: rw=524288, want=736, limit=16 [ 277.656815][ T6830] attempt to access beyond end of device [ 277.656815][ T6830] loop3: rw=524288, want=536576872, limit=16 [ 277.668546][ T6830] attempt to access beyond end of device [ 277.668546][ T6830] loop3: rw=524288, want=24, limit=16 [ 277.679502][ T6830] attempt to access beyond end of device [ 277.679502][ T6830] loop3: rw=524288, want=13478624040, limit=16 [ 277.912977][ T6829] loop4: detected capacity change from 0 to 512 [ 278.203451][ T6829] EXT4-fs (loop4): 1 truncate cleaned up [ 278.207140][ T6840] loop3: detected capacity change from 0 to 512 [ 278.209161][ T6829] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.286874][ T6840] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.989754][ T6840] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 279.250665][ T6840] EXT4-fs (loop3): 1 truncate cleaned up [ 279.286977][ T6840] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.702471][ T6867] xt_time: unknown flags 0xc [ 281.761009][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 283.320523][ T5600] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 283.352261][ T5600] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 283.438569][ T5600] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 283.814433][ T6898] loop4: detected capacity change from 0 to 256 [ 283.876531][ T5149] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 283.971432][ T6898] FAT-fs (loop4): Directory bread(block 64) failed [ 283.992006][ T6898] FAT-fs (loop4): Directory bread(block 65) failed [ 284.026257][ T6898] FAT-fs (loop4): Directory bread(block 66) failed [ 284.055502][ T6898] FAT-fs (loop4): Directory bread(block 67) failed [ 284.069588][ T6898] FAT-fs (loop4): Directory bread(block 68) failed [ 284.077509][ T6898] FAT-fs (loop4): Directory bread(block 69) failed [ 284.106861][ T6898] FAT-fs (loop4): Directory bread(block 70) failed [ 284.133968][ T6898] FAT-fs (loop4): Directory bread(block 71) failed [ 284.158619][ T6898] FAT-fs (loop4): Directory bread(block 72) failed [ 284.179589][ T6898] FAT-fs (loop4): Directory bread(block 73) failed [ 284.289679][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.412693][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.454450][ T5149] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.173441][ T5149] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 285.185471][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.243653][ T5149] usb 1-1: config 0 descriptor?? [ 285.383467][ T6906] loop3: detected capacity change from 0 to 16 [ 285.495087][ T6906] erofs: (device loop3): mounted with root inode @ nid 36. [ 285.529832][ T6906] attempt to access beyond end of device [ 285.529832][ T6906] loop3: rw=0, want=40, limit=16 [ 285.548501][ T6906] attempt to access beyond end of device [ 285.548501][ T6906] loop3: rw=0, want=40, limit=16 [ 285.613844][ T6906] erofs: (device loop3): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 285.827634][ T5149] logitech 0003:046D:C293.000B: item fetching failed at offset 5/7 [ 285.846822][ T5149] logitech 0003:046D:C293.000B: parse failed [ 285.866938][ T5149] logitech: probe of 0003:046D:C293.000B failed with error -22 [ 285.891947][ T6915] loop2: detected capacity change from 0 to 4096 [ 285.936725][ T6919] loop4: detected capacity change from 0 to 1764 [ 286.114640][ T25] audit: type=1804 audit(1725449510.952:18): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.693" name="/newroot/73/file0/bus" dev="loop2" ino=33 res=1 errno=0 [ 286.116530][ T5149] usb 1-1: USB disconnect, device number 8 [ 288.847730][ T25] audit: type=1804 audit(1725449513.602:19): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.693" name="/newroot/73/file0/bus" dev="loop2" ino=33 res=1 errno=0 [ 288.889514][ T6946] loop4: detected capacity change from 0 to 64 [ 289.341831][ T6946] attempt to access beyond end of device [ 289.341831][ T6946] loop4: rw=0, want=32784, limit=64 [ 289.422345][ T6946] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 294.061193][ T6974] loop2: detected capacity change from 0 to 1764 [ 294.101167][ T7001] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 295.420169][ T3612] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 295.852039][ T7022] chnl_net:caif_netlink_parms(): no params data found [ 296.018868][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.026215][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.039605][ T3612] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 296.056120][ T7022] device bridge_slave_0 entered promiscuous mode [ 296.062634][ T3612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.078666][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.089416][ T3612] usb 5-1: Product: syz [ 296.093585][ T3612] usb 5-1: Manufacturer: syz [ 296.098176][ T3612] usb 5-1: SerialNumber: syz [ 296.103277][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.105466][ T3612] usb 5-1: config 0 descriptor?? [ 296.133603][ T7022] device bridge_slave_1 entered promiscuous mode [ 296.152710][ T3612] xillyusb 5-1:0.0: Failed to send quiesce request. Aborting. [ 296.197766][ T7022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.207512][ T3612] xillyusb: probe of 5-1:0.0 failed with error -5 [ 296.220221][ T7022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.283866][ T7022] team0: Port device team_slave_0 added [ 296.312032][ T7022] team0: Port device team_slave_1 added [ 296.382341][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.397434][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.459311][ T5149] usb 5-1: USB disconnect, device number 5 [ 296.477556][ T7022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.498467][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.520662][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.548919][ T7022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.572449][ T7031] netlink: 44 bytes leftover after parsing attributes in process `syz.1.731'. [ 296.597329][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.604745][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.627308][ T7034] loop0: detected capacity change from 0 to 256 [ 296.731669][ T7022] device hsr_slave_0 entered promiscuous mode [ 296.906555][ T7022] device hsr_slave_1 entered promiscuous mode [ 296.997763][ T7034] FAT-fs (loop0): Directory bread(block 64) failed [ 297.048207][ T7022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.060311][ T7034] FAT-fs (loop0): Directory bread(block 65) failed [ 297.096060][ T7034] FAT-fs (loop0): Directory bread(block 66) failed [ 297.137609][ T7022] Cannot create hsr debugfs directory [ 297.223968][ T7034] FAT-fs (loop0): Directory bread(block 67) failed [ 297.349134][ T7034] FAT-fs (loop0): Directory bread(block 68) failed [ 297.390877][ T7034] FAT-fs (loop0): Directory bread(block 69) failed [ 297.403710][ T7034] FAT-fs (loop0): Directory bread(block 70) failed [ 297.420649][ T7034] FAT-fs (loop0): Directory bread(block 71) failed [ 297.453371][ T7034] FAT-fs (loop0): Directory bread(block 72) failed [ 297.460919][ T7034] FAT-fs (loop0): Directory bread(block 73) failed [ 297.677480][ T7022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.877967][ T5597] Bluetooth: hci6: command 0x0409 tx timeout [ 299.176321][ T7022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.614806][ T7022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.922349][ T1074] Bluetooth: hci6: command 0x041b tx timeout [ 300.013855][ T7022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.990587][ T7022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 301.133679][ T7022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 301.167781][ T7022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 301.187669][ T7022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.994070][ T7079] loop0: detected capacity change from 0 to 1764 [ 301.999592][ T5149] Bluetooth: hci6: command 0x040f tx timeout [ 302.028954][ T7022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.048090][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.068499][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.090716][ T7022] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.104967][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.123754][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.173273][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.180410][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.200124][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.209050][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.217993][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.225130][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.236540][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.250939][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.275027][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.298708][ T7086] loop2: detected capacity change from 0 to 128 [ 302.318224][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.342198][ T7089] loop0: detected capacity change from 0 to 64 [ 302.345196][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.373787][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.400850][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.425503][ T7089] attempt to access beyond end of device [ 302.425503][ T7089] loop0: rw=0, want=32784, limit=64 [ 302.430527][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.466528][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.495773][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.505895][ T7092] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 302.541549][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.570706][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.587645][ T7022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.811177][ T7086] loop2: detected capacity change from 0 to 4096 [ 302.909409][ T7086] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 302.970690][ T7086] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 302.988725][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.005485][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.044616][ T7022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.145186][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.175003][ T1222] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 303.176618][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.194148][ T7086] Cannot find add_set index 0 as target [ 303.246511][ T7022] device veth0_vlan entered promiscuous mode [ 303.285101][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.297581][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.312619][ T7022] device veth1_vlan entered promiscuous mode [ 303.323452][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.335018][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.348421][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 303.370550][ T4756] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 303.408021][ T6278] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 303.430147][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 303.510202][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.549467][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.561779][ T7022] device veth0_macvtap entered promiscuous mode [ 303.672281][ T7022] device veth1_macvtap entered promiscuous mode [ 303.737426][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.748494][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.759510][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.770741][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.782655][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.796688][ T7107] loop0: detected capacity change from 0 to 2048 [ 303.866168][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.879940][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.891117][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.902177][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.913449][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.918476][ T7107] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.923648][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.951543][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.154052][ T1074] Bluetooth: hci6: command 0x0419 tx timeout [ 304.256729][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.522208][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.611635][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.632322][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.653735][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.664902][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.675876][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.687927][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.698569][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.709800][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.720437][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.730401][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.741360][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.756481][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.782234][ T7022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.793286][ T7022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.802838][ T7022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.812880][ T7022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.950745][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.971621][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.990545][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.000622][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.015852][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.027673][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.320759][ T4441] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.921763][ T4441] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.283097][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.339697][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.380783][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.397797][ T4441] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.436663][ T3815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.456144][ T3815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.486130][ T4441] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.504195][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.789296][ T7130] chnl_net:caif_netlink_parms(): no params data found [ 308.796939][ T4179] Bluetooth: hci2: command 0x0406 tx timeout [ 308.803675][ T4343] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 308.805312][ T7151] loop4: detected capacity change from 0 to 128 [ 308.914866][ T7155] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 308.993749][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.001281][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.010494][ T7130] device bridge_slave_0 entered promiscuous mode [ 309.019075][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.026818][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.039901][ T7130] device bridge_slave_1 entered promiscuous mode [ 309.688756][ T4343] usb 2-1: Using ep0 maxpacket: 16 [ 309.697482][ T5690] Bluetooth: hci0: command 0x0409 tx timeout [ 309.765860][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.813014][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.874122][ T7151] loop4: detected capacity change from 0 to 4096 [ 309.888914][ T7130] team0: Port device team_slave_0 added [ 309.897981][ T7130] team0: Port device team_slave_1 added [ 309.929613][ T4343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.945193][ T7151] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 309.971970][ T7167] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.766'. [ 310.001539][ T4343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.034566][ T4343] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 310.064454][ T4343] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 310.114864][ T7151] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 310.200350][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.209088][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.242695][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.255409][ T3815] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 310.257042][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.262275][ T4343] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.269479][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.307350][ T7174] Cannot find add_set index 0 as target [ 310.311986][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.313128][ T3815] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 310.326165][ T4343] usb 2-1: Product: syz [ 310.329814][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.342098][ T4343] usb 2-1: Manufacturer: syz [ 310.342120][ T4343] usb 2-1: SerialNumber: syz [ 310.434985][ T7130] device hsr_slave_0 entered promiscuous mode [ 310.442941][ T7130] device hsr_slave_1 entered promiscuous mode [ 310.449904][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.457610][ T7130] Cannot create hsr debugfs directory [ 310.988317][ T5747] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 312.016331][ T4179] Bluetooth: hci0: command 0x041b tx timeout [ 312.118420][ T4343] usb 2-1: 0:2 : does not exist [ 312.166379][ T4343] usb 2-1: USB disconnect, device number 10 [ 312.268976][ T7196] loop0: detected capacity change from 0 to 2048 [ 312.637065][ T7196] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 313.340202][ T4441] device hsr_slave_0 left promiscuous mode [ 313.369688][ T4441] device hsr_slave_1 left promiscuous mode [ 313.377343][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.399790][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.408216][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.440404][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.460488][ T4441] device bridge_slave_1 left promiscuous mode [ 313.466695][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.490882][ T4441] device bridge_slave_0 left promiscuous mode [ 313.497105][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.529751][ T4441] device veth1_vlan left promiscuous mode [ 313.535564][ T4441] device veth0_vlan left promiscuous mode [ 313.548087][ T4756] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 313.585020][ T4756] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 298 with error 28 [ 313.606183][ T4756] EXT4-fs (loop0): This should not happen!! Data will be lost [ 313.606183][ T4756] [ 313.619126][ T4756] EXT4-fs (loop0): Total free blocks count 0 [ 313.635684][ T4756] EXT4-fs (loop0): Free/Dirty block details [ 313.644948][ T4756] EXT4-fs (loop0): free_blocks=2415919104 [ 313.656529][ T4756] EXT4-fs (loop0): dirty_blocks=304 [ 313.665261][ T4756] EXT4-fs (loop0): Block reservation details [ 313.677233][ T4756] EXT4-fs (loop0): i_reserved_data_blocks=19 [ 313.808949][ T4343] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 313.919453][ T5600] Bluetooth: hci3: command 0x0406 tx timeout [ 314.079590][ T5149] Bluetooth: hci0: command 0x040f tx timeout [ 314.584344][ T4441] team0 (unregistering): Port device team_slave_1 removed [ 314.608705][ T4441] team0 (unregistering): Port device team_slave_0 removed [ 314.635856][ T4441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.652346][ T4441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.748992][ T4441] bond0 (unregistering): Released all slaves [ 314.809665][ T4343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.820657][ T4343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.830476][ T4343] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 314.841986][ T4343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.864944][ T4343] usb 2-1: config 0 descriptor?? [ 314.952716][ T7130] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.963684][ T7130] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.973357][ T7130] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.983782][ T7130] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.088491][ T7207] chnl_net:caif_netlink_parms(): no params data found [ 315.178290][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.213741][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.222057][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.232125][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.242991][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.255460][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.263863][ T7207] device bridge_slave_0 entered promiscuous mode [ 315.274694][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.284039][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.292669][ T3814] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.299764][ T3814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.307486][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.316002][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.323200][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.331506][ T7207] device bridge_slave_1 entered promiscuous mode [ 315.355545][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.370682][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.382063][ T4343] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 315.394891][ T4343] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 315.403744][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.410828][ T7183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.418290][ T4343] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 315.426496][ T4343] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 315.435478][ T4343] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 315.446328][ T4343] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 315.455965][ T4343] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0 [ 315.480678][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.500940][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.513382][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.534213][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.555763][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.569137][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.578203][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.588526][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.612145][ T3612] usb 2-1: USB disconnect, device number 11 [ 315.649164][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.667292][ T7207] team0: Port device team_slave_0 added [ 315.681329][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.690129][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.701540][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.718176][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.728602][ T7207] team0: Port device team_slave_1 added [ 315.746334][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.799335][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.808378][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.835188][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.839931][ T5600] Bluetooth: hci4: command 0x0409 tx timeout [ 315.848402][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.858752][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.901305][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.982440][ T7207] device hsr_slave_0 entered promiscuous mode [ 315.991443][ T7207] device hsr_slave_1 entered promiscuous mode [ 315.998339][ T7207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.006449][ T7207] Cannot create hsr debugfs directory [ 316.061238][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.076199][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.084124][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.120983][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.133469][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.149600][ T3612] Bluetooth: hci0: command 0x0419 tx timeout [ 316.778978][ T7236] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.770'. [ 316.954952][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.961835][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.122937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.150611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.160621][ T7130] device veth0_vlan entered promiscuous mode [ 317.200125][ T7207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.380183][ T7238] loop0: detected capacity change from 0 to 512 [ 318.049897][ T7130] device veth1_vlan entered promiscuous mode [ 318.109864][ T5602] Bluetooth: hci4: command 0x041b tx timeout [ 318.251915][ T7238] EXT4-fs (loop0): Ignoring removed bh option [ 318.902598][ T7238] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 318.924712][ T7207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.001610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.020585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.056213][ T7238] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 319.090184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.118538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.153015][ T7130] device veth0_macvtap entered promiscuous mode [ 319.217015][ T7207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.329451][ T4179] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 319.371097][ T7130] device veth1_macvtap entered promiscuous mode [ 319.433688][ T7207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.485527][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.509494][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.529413][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.569469][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.599420][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.619397][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.640607][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.668539][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.689475][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.708238][ T4179] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 319.712032][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.726811][ T4179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.848144][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.880217][ T4179] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 319.920973][ T4179] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 319.929322][ T4179] usb 4-1: Manufacturer: syz [ 319.995883][ T4179] usb 4-1: config 0 descriptor?? [ 320.025301][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.160423][ T7268] xt_hashlimit: overflow, rate too high: 0 [ 320.319234][ T5149] Bluetooth: hci4: command 0x040f tx timeout [ 320.328331][ T7258] udc-core: couldn't find an available UDC or it's busy [ 320.371161][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.379850][ T7258] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 320.492042][ T4179] rc_core: IR keymap rc-hauppauge not found [ 320.498143][ T4179] Registered IR keymap rc-empty [ 320.510464][ T4179] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 320.536235][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.559589][ T4179] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 320.570703][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.652430][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.726244][ T4179] usb 4-1: USB disconnect, device number 13 [ 320.869907][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.105174][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.196835][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.297737][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.308284][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.318211][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.328739][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.338570][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.350929][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.366133][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.390829][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.477304][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 321.579751][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.722682][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.795083][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.849132][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.915281][ T7130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.949465][ T7130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.019911][ T7130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.028752][ T7130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.286407][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.297007][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.339740][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.388092][ T7207] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 322.413094][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.424651][ T7207] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 322.438806][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.473544][ T7207] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 322.518043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.539885][ T7207] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.559791][ T5600] Bluetooth: hci4: command 0x0419 tx timeout [ 322.920543][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.976658][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.989997][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.013051][ T7207] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.050242][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.059467][ T5600] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 323.069884][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.079090][ T3719] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.086203][ T3719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.115026][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.123857][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.136745][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.150037][ T3719] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.157174][ T3719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.179448][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.212829][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.227569][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.255022][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.272222][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.322653][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.366079][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.375979][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.386069][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.395563][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.405113][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.418325][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.440618][ T5600] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.456401][ T5600] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 323.475499][ T5600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.538104][ T5600] usb 1-1: config 0 descriptor?? [ 324.294657][ T5600] pwc: Askey VC010 type 2 USB webcam detected. [ 324.320199][ T5600] pwc: send_video_command error -71 [ 324.325427][ T5600] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 324.334424][ T5600] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 324.364805][ T5600] usb 1-1: USB disconnect, device number 9 [ 324.372235][ T7304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'. [ 324.488997][ T7207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.510463][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.518000][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.649155][ T4441] device hsr_slave_0 left promiscuous mode [ 324.655816][ T4441] device hsr_slave_1 left promiscuous mode [ 324.662939][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.671891][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.680697][ T4179] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 324.914835][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.949628][ T4179] usb 2-1: Using ep0 maxpacket: 16 [ 325.048951][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.089764][ T4179] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.150081][ T4179] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.162328][ T4441] device bridge_slave_1 left promiscuous mode [ 325.168584][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.183672][ T4441] device bridge_slave_0 left promiscuous mode [ 325.189219][ T4179] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 325.209476][ T4179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.210544][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.236490][ T4179] usb 2-1: config 0 descriptor?? [ 325.255678][ T4441] device veth1_macvtap left promiscuous mode [ 325.265831][ T4441] device veth0_macvtap left promiscuous mode [ 325.290893][ T4441] device veth1_vlan left promiscuous mode [ 325.301896][ T7321] loop0: detected capacity change from 0 to 64 [ 325.328499][ T4441] device veth0_vlan left promiscuous mode [ 325.539482][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 326.186113][ T25] audit: type=1800 audit(1725449551.022:20): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.787" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 326.416284][ T7337] loop2: detected capacity change from 0 to 512 [ 326.501608][ T4441] team0 (unregistering): Port device team_slave_1 removed [ 326.540046][ T7337] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 326.555687][ T4441] team0 (unregistering): Port device team_slave_0 removed [ 326.575710][ T7337] EXT4-fs (loop2): 1 truncate cleaned up [ 326.585172][ T4441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.608309][ T7337] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,discard,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 326.629846][ T4179] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 327.234998][ T4441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.250443][ T7347] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 327.774375][ T5602] usb 2-1: USB disconnect, device number 12 [ 327.860954][ T4441] bond0 (unregistering): Released all slaves [ 328.052472][ T4179] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 328.065973][ T4179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.160342][ T4179] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 328.175310][ T4179] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 328.207733][ T4179] usb 1-1: Manufacturer: syz [ 328.617411][ T4179] usb 1-1: config 0 descriptor?? [ 328.918780][ T7334] udc-core: couldn't find an available UDC or it's busy [ 328.922776][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.936248][ T7334] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 328.953329][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.993568][ T7207] device veth0_vlan entered promiscuous mode [ 329.042633][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.079414][ T4179] rc_core: IR keymap rc-hauppauge not found [ 329.085572][ T4179] Registered IR keymap rc-empty [ 329.091396][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.108861][ T4179] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 329.121672][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.141053][ T4179] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 329.152951][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.173863][ T7207] device veth1_vlan entered promiscuous mode [ 329.205839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.215782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.227099][ T4179] usb 1-1: USB disconnect, device number 10 [ 329.240364][ T7207] device veth0_macvtap entered promiscuous mode [ 329.293596][ T7207] device veth1_macvtap entered promiscuous mode [ 329.330564][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.350035][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.370809][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.391214][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.410069][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.421616][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.432069][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.442929][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.453243][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.464142][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.474499][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.486659][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.498526][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.508696][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.521947][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.532568][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.543676][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.562656][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.626315][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.640690][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.651782][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.665386][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.676618][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.686897][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.698589][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.728299][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.740303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.760456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 329.801748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.820417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.829320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.859026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.915699][ T7373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.802'. [ 329.941960][ T7373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.971856][ T7375] loop0: detected capacity change from 0 to 8192 [ 329.984043][ T7207] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.005377][ T7207] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.014138][ T7207] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.022995][ T7207] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.257789][ T25] audit: type=1326 audit(1725449555.092:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5539aef9 code=0x7ffc0000 [ 330.291115][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.299325][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.314419][ T25] audit: type=1326 audit(1725449555.092:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7faa5539aef9 code=0x7ffc0000 [ 330.338126][ T25] audit: type=1326 audit(1725449555.092:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5539aef9 code=0x7ffc0000 [ 330.360459][ T25] audit: type=1326 audit(1725449555.092:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa55399890 code=0x7ffc0000 [ 330.383211][ T25] audit: type=1326 audit(1725449555.092:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5539aafb code=0x7ffc0000 [ 330.415200][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.415677][ T25] audit: type=1326 audit(1725449555.092:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5539aafb code=0x7ffc0000 [ 330.454391][ T25] audit: type=1326 audit(1725449555.122:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5539aafb code=0x7ffc0000 [ 330.482926][ T25] audit: type=1326 audit(1725449555.122:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5539aafb code=0x7ffc0000 [ 330.486233][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.516439][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.544821][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.559467][ T3647] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 330.589834][ T25] audit: type=1326 audit(1725449555.432:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5539aafb code=0x7ffc0000 [ 330.667819][ T7392] loop4: detected capacity change from 0 to 64 [ 330.749010][ T7392] attempt to access beyond end of device [ 330.749010][ T7392] loop4: rw=0, want=32784, limit=64 [ 330.754108][ T7393] loop2: detected capacity change from 0 to 2048 [ 330.802885][ T7392] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 330.949922][ T3647] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.987759][ T7393] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 331.011185][ T3647] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.083028][ T7393] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 331.139829][ T3647] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.185351][ T3647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.228499][ T3647] usb 1-1: SerialNumber: syz [ 331.270222][ T25] kauditd_printk_skb: 11 callbacks suppressed [ 331.270236][ T25] audit: type=1326 audit(1725449556.112:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5539aafb code=0x7ffc0000 [ 331.355588][ T25] audit: type=1326 audit(1725449556.112:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5539aafb code=0x7ffc0000 [ 331.532766][ T3647] usb 1-1: 0:2 : does not exist [ 331.559578][ T25] audit: type=1326 audit(1725449556.112:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5539aafb code=0x7ffc0000 [ 331.605737][ T25] audit: type=1326 audit(1725449556.132:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa553ccfe5 code=0x7ffc0000 [ 331.638104][ T25] audit: type=1326 audit(1725449556.332:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5539aef9 code=0x7ffc0000 [ 331.655605][ T3647] usb 1-1: USB disconnect, device number 11 [ 331.673673][ T25] audit: type=1326 audit(1725449556.342:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5539aef9 code=0x7ffc0000 [ 332.339290][ T150] block nbd1: Attempted send on invalid socket [ 332.346724][ T150] blk_update_request: I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.364257][ T7407] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 332.768609][ T7409] loop4: detected capacity change from 0 to 516 [ 333.353476][ T7409] EXT4-fs (loop4): Ignoring removed bh option [ 333.379678][ T7409] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 333.511823][ T7409] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 336.406017][ T7430] loop2: detected capacity change from 0 to 1024 [ 336.750910][ T7430] fscrypt: Error allocating hmac(sha512): -2 [ 336.933478][ T7430] EXT4-fs (loop2): Error processing option "test_dummy_encryption" [-2] [ 337.670016][ T4187] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 337.939690][ T3647] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 338.039520][ T4187] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 338.048079][ T4187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.132916][ T4187] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 338.142323][ T4187] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 338.150415][ T4187] usb 5-1: Manufacturer: syz [ 338.159018][ T4187] usb 5-1: config 0 descriptor?? [ 338.259591][ T4187] rc_core: IR keymap rc-hauppauge not found [ 338.266350][ T4187] Registered IR keymap rc-empty [ 338.272667][ T4187] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 338.284144][ T4187] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 338.339741][ T3647] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.359380][ T3647] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.419801][ T7443] udc-core: couldn't find an available UDC or it's busy [ 338.426899][ T7443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 338.439615][ T3647] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 338.464179][ T3647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 338.472675][ T3647] usb 4-1: SerialNumber: syz [ 338.483676][ T3615] usb 5-1: USB disconnect, device number 6 [ 338.585756][ T7474] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 338.611789][ T7472] loop2: detected capacity change from 0 to 516 [ 339.355663][ T7472] EXT4-fs (loop2): Ignoring removed bh option [ 339.362408][ T7464] netlink: 'syz.3.824': attribute type 12 has an invalid length. [ 339.377802][ T7472] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 339.386684][ T7481] loop0: detected capacity change from 0 to 512 [ 339.399747][ T7464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.824'. [ 339.464373][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.824'. [ 339.527996][ T3647] usb 4-1: 0:2 : does not exist [ 339.544039][ T3647] usb 4-1: unit 56 not found! [ 339.561074][ T3647] usb 4-1: unit 52 not found! [ 339.579269][ T3647] usb 4-1: unit 54 not found! [ 339.596466][ T3647] usb 4-1: unit 55 not found! [ 339.606616][ T3647] usb 4-1: unit 48 not found! [ 339.637154][ T4187] Bluetooth: hci1: command 0x0406 tx timeout [ 339.673267][ T3647] usb 4-1: unit 51 not found! [ 339.690749][ T3647] usb 4-1: unit 57 not found! [ 339.698299][ T7472] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 339.707921][ T3647] usb 4-1: unit 53 not found! [ 340.056651][ T7481] EXT4-fs (loop0): Test dummy encryption mode enabled [ 340.333622][ T3647] usb 4-1: unit 49 not found! [ 340.339101][ T3647] usb 4-1: unit 3 not found! [ 340.464530][ T3647] usb 4-1: USB disconnect, device number 14 [ 341.858435][ T7481] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 1: comm syz.0.830: invalid block [ 341.902443][ T7481] EXT4-fs (loop0): Remounting filesystem read-only [ 341.912170][ T7481] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.830: couldn't read orphan inode 11 (err -117) [ 341.973403][ T7513] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 341.990215][ T3559] udevd[3559]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.019828][ T7481] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,test_dummy_encryption,errors=remount-ro,acl,. Quota mode: writeback. [ 342.086700][ T7513] syz.1.836[7513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.087204][ T7513] syz.1.836[7513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.042895][ T7549] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 344.699113][ T7566] loop4: detected capacity change from 0 to 1024 [ 345.164340][ T7566] hfsplus: failed to load extents file [ 345.389499][ T4179] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 346.309880][ T4179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.351368][ T4179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.395687][ T4179] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.449057][ T4179] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 346.623231][ T4179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.666597][ T4179] usb 1-1: config 0 descriptor?? [ 347.480970][ T4179] hid-udraw 0003:20D6:CB17.000D: unknown main item tag 0x0 [ 347.493131][ T4179] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000D/input/input16 [ 348.765886][ T4179] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000D/input/input17 [ 348.904784][ T4179] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000D/input/input18 [ 349.026408][ T4179] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000D/input/input19 [ 349.237351][ T4179] hid-udraw 0003:20D6:CB17.000D: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 349.734947][ T4179] usb 1-1: USB disconnect, device number 12 [ 349.958334][ T7605] loop4: detected capacity change from 0 to 8192 [ 350.016669][ T150] block nbd2: Attempted send on invalid socket [ 350.024978][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 350.036477][ T7628] exFAT-fs (nbd2): unable to read boot sector [ 350.042649][ T7628] exFAT-fs (nbd2): failed to read boot sector [ 350.049704][ T7628] exFAT-fs (nbd2): failed to recognize exfat type [ 350.135999][ T7605] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.381965][ T3615] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 352.482075][ T7665] loop0: detected capacity change from 0 to 128 [ 352.543966][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.883'. [ 352.568730][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.883'. [ 352.599270][ T7665] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 352.677274][ T7665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.759592][ T3615] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 352.827495][ T3615] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.865807][ T3615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.963177][ T3615] usb 5-1: config 0 descriptor?? [ 353.011416][ T3615] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 353.143280][ T7680] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 353.284234][ T7685] netlink: 'syz.3.890': attribute type 27 has an invalid length. [ 353.421728][ T3615] usb 5-1: USB disconnect, device number 7 [ 354.751831][ T7708] netlink: 'syz.4.896': attribute type 3 has an invalid length. [ 354.759613][ T7708] netlink: 'syz.4.896': attribute type 3 has an invalid length. [ 355.381880][ T3647] Bluetooth: hci5: command 0x0406 tx timeout [ 355.400137][ T25] audit: type=1326 audit(1725449580.242:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.4.899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66ed026ef9 code=0x0 [ 355.453821][ T7715] netlink: 140 bytes leftover after parsing attributes in process `syz.4.899'. [ 357.038607][ T7710] loop2: detected capacity change from 0 to 32768 [ 357.084730][ T7710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.897 (7710) [ 357.139415][ T4179] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 357.145586][ T7710] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 357.165990][ T7749] loop4: detected capacity change from 0 to 1764 [ 357.196480][ T7710] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 357.229375][ T7710] BTRFS info (device loop2): use zstd compression, level 3 [ 357.237943][ T7710] BTRFS info (device loop2): using free space tree [ 357.263659][ T7710] BTRFS info (device loop2): has skinny extents [ 357.509714][ T4179] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 357.544571][ T4179] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.600622][ T7710] BTRFS info (device loop2): enabling ssd optimizations [ 357.669570][ T4179] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 357.710463][ T4179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 357.774873][ T4179] usb 1-1: SerialNumber: syz [ 357.862563][ T4179] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 357.871990][ T4179] usb-storage 1-1:1.0: USB Mass Storage device detected [ 357.988991][ T4179] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 358.044401][ T4179] scsi host1: usb-storage 1-1:1.0 [ 359.857616][ T7802] loop2: detected capacity change from 0 to 4096 [ 360.384006][ T7802] EXT4-fs (loop2): Test dummy encryption mode enabled [ 360.391018][ T7802] EXT4-fs (loop2): bad block size 8192 [ 360.442057][ T7809] bridge_slave_0: default FDB implementation only supports local addresses [ 360.566108][ T25] audit: type=1326 audit(1725449585.402:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.3.920" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d33c4fef9 code=0x0 [ 360.651203][ T5597] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 360.731957][ T7817] loop2: detected capacity change from 0 to 1024 [ 360.889606][ T7817] hfsplus: failed to load root directory [ 360.915894][ T5597] usb 5-1: Using ep0 maxpacket: 32 [ 361.063093][ T5597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.136055][ T3647] usb 1-1: USB disconnect, device number 13 [ 361.160190][ T5602] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 361.326624][ T5597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.469476][ T5602] usb 2-1: Using ep0 maxpacket: 32 [ 361.575666][ T5597] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 361.594581][ T7817] loop2: detected capacity change from 0 to 512 [ 361.598510][ T5597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.629709][ T5602] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 361.644820][ T5597] usb 5-1: config 0 descriptor?? [ 361.695278][ T7817] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 361.709840][ T7817] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 361.819750][ T5602] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 361.836218][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 361.990992][ T5602] usb 2-1: Product: syz [ 361.995595][ T5602] usb 2-1: Manufacturer: syz [ 362.000613][ T5602] usb 2-1: SerialNumber: syz [ 362.006962][ T5602] usb 2-1: config 0 descriptor?? [ 362.029657][ T7835] hub 6-0:1.0: USB hub found [ 362.036419][ T7835] hub 6-0:1.0: 1 port detected [ 362.041736][ T7822] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 362.449006][ T5597] waltop 0003:172F:0501.000E: item fetching failed at offset 2/5 [ 362.486107][ T5597] waltop: probe of 0003:172F:0501.000E failed with error -22 [ 362.502687][ T5602] usb 2-1: USB disconnect, device number 13 [ 362.591262][ T5597] usb 5-1: USB disconnect, device number 8 [ 363.037750][ T25] audit: type=1326 audit(1725449587.872:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ed026ef9 code=0x7ffc0000 [ 363.065320][ T25] audit: type=1326 audit(1725449587.902:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ed026ef9 code=0x7ffc0000 [ 363.089718][ T5602] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 363.108792][ T25] audit: type=1326 audit(1725449587.932:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f66ed026ef9 code=0x7ffc0000 [ 363.133814][ T25] audit: type=1326 audit(1725449587.932:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ed026ef9 code=0x7ffc0000 [ 363.157432][ T25] audit: type=1326 audit(1725449587.932:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ed026ef9 code=0x7ffc0000 [ 363.213182][ T25] audit: type=1326 audit(1725449587.932:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66ed026ef9 code=0x7ffc0000 [ 363.247514][ T25] audit: type=1326 audit(1725449587.932:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ed026ef9 code=0x7ffc0000 [ 363.271074][ T25] audit: type=1326 audit(1725449587.932:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ed026ef9 code=0x7ffc0000 [ 363.295781][ T25] audit: type=1326 audit(1725449587.932:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66ed026ef9 code=0x7ffc0000 [ 364.099462][ T5602] usb 4-1: Using ep0 maxpacket: 8 [ 364.207609][ T7857] Process accounting resumed [ 364.349656][ T5602] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.394232][ T5602] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.482438][ T5602] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.492980][ T5602] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.506236][ T5602] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.518859][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.552324][ T5602] usb 4-1: can't set config #16, error -71 [ 366.565826][ T5602] usb 4-1: USB disconnect, device number 15 [ 366.979429][ T3612] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 367.266526][ T7877] loop4: detected capacity change from 0 to 32768 [ 367.320050][ T7877] XFS: noikeep mount option is deprecated. [ 367.329174][ T7904] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 367.389645][ T3612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.400971][ T3612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.429426][ T3612] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 367.455061][ T7877] XFS (loop4): Mounting V5 Filesystem [ 367.466872][ T7912] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 367.469053][ T3612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.497428][ T3612] usb 2-1: config 0 descriptor?? [ 367.606086][ T7877] XFS (loop4): Ending clean mount [ 367.615355][ T7877] XFS (loop4): Quotacheck needed: Please wait. [ 367.763033][ T7877] XFS (loop4): Quotacheck: Done. [ 369.706654][ T3612] uclogic 0003:256C:006D.000F: interface is invalid, ignoring [ 369.901833][ T7941] xt_l2tp: v2 doesn't support IP mode [ 369.925211][ T3612] usb 2-1: USB disconnect, device number 14 [ 370.039153][ T7207] XFS (loop4): Unmounting Filesystem [ 370.063358][ T7944] netlink: 128 bytes leftover after parsing attributes in process `syz.2.958'. [ 370.149659][ C1] eth0: bad gso: type: 1, size: 1408 [ 370.203554][ T7948] IPv6: NLM_F_REPLACE set, but no existing node found! [ 370.436852][ T4345] libceph: connect (1)[c::]:6789 error -101 [ 370.444834][ T4345] libceph: mon0 (1)[c::]:6789 connect error [ 370.636288][ T7953] ceph: No mds server is up or the cluster is laggy [ 370.718786][ T4189] libceph: connect (1)[c::]:6789 error -101 [ 370.725740][ T27] INFO: task syz.1.481:6095 blocked for more than 143 seconds. [ 370.803927][ T4189] libceph: mon0 (1)[c::]:6789 connect error [ 370.812684][ T27] Not tainted 5.15.165-syzkaller #0 [ 370.976707][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.065868][ T27] task:syz.1.481 state:D stack:23040 pid: 6095 ppid: 5583 flags:0x00004004 [ 371.087379][ T27] Call Trace: [ 371.087575][ T3615] libceph: connect (1)[c::]:6789 error -101 [ 371.094147][ T27] [ 371.107791][ T27] __schedule+0x12c4/0x45b0 [ 371.111412][ T3615] libceph: mon0 (1)[c::]:6789 connect error [ 371.118056][ T27] ? blk_flush_plug_list+0x452/0x490 [ 371.220496][ T27] ? release_firmware_map_entry+0x190/0x190 [ 371.224021][ T7956] ceph: No mds server is up or the cluster is laggy [ 371.226506][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 371.239166][ T27] ? blk_check_plugged+0x250/0x250 [ 371.244353][ T27] ? print_irqtrace_events+0x210/0x210 [ 371.249938][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 371.255066][ T27] schedule+0x11b/0x1f0 [ 371.259260][ T27] io_schedule+0x88/0x100 [ 371.270237][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 371.279511][ T27] ? wait_on_page_bit+0x50/0x50 [ 371.284439][ T27] ? rcu_lock_release+0x20/0x20 [ 371.299462][ T27] ? bio_add_page+0x2b3/0x450 [ 371.304433][ T27] z_erofs_runqueue+0x788/0x1a80 [ 371.309491][ T27] ? tick_nohz_tick_stopped+0x77/0xb0 [ 371.327604][ T27] ? z_erofs_do_read_page+0x2600/0x2600 [ 371.337737][ T27] ? __bpf_trace_erofs_destroy_inode+0x20/0x20 [ 371.344783][ T27] z_erofs_readahead+0xc9a/0x1280 [ 371.367279][ T27] ? z_erofs_readpage+0x840/0x840 [ 371.383014][ T27] read_pages+0x159/0x8e0 [ 371.387401][ T27] ? page_cache_ra_unbounded+0x930/0x930 [ 371.393427][ T27] ? add_to_page_cache_locked+0x40/0x40 [ 371.398996][ T27] ? down_read+0x1b3/0x2e0 [ 371.399971][ T3615] libceph: connect (1)[c::]:6789 error -101 [ 371.403800][ T27] page_cache_ra_unbounded+0x7b0/0x930 [ 371.415413][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 371.422416][ T27] force_page_cache_ra+0x378/0x3e0 [ 371.424242][ T3615] libceph: mon0 (1)[c::]:6789 connect error [ 371.427666][ T27] generic_fadvise+0x5ba/0x8b0 [ 371.439221][ T27] ? dump_task+0x5f0/0x5f0 [ 371.444160][ T27] ? __fdget+0x191/0x220 [ 371.448487][ T27] __x64_sys_fadvise64+0x138/0x180 [ 371.456119][ T27] do_syscall_64+0x3b/0xb0 [ 371.462584][ T27] ? clear_bhb_loop+0x15/0x70 [ 371.467905][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 371.473972][ T27] RIP: 0033:0x7f29b9ed8ef9 [ 371.478436][ T27] RSP: 002b:00007f29b8352038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 371.486994][ T27] RAX: ffffffffffffffda RBX: 00007f29ba091f80 RCX: 00007f29b9ed8ef9 [ 371.495124][ T27] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 371.503195][ T27] RBP: 00007f29b9f4b01e R08: 0000000000000000 R09: 0000000000000000 [ 371.511313][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 371.519541][ T27] R13: 0000000000000000 R14: 00007f29ba091f80 R15: 00007fff3202ed58 [ 371.527631][ T27] [ 371.535988][ T27] [ 371.535988][ T27] Showing all locks held in the system: [ 371.597875][ T27] 1 lock held by khungtaskd/27: [ 371.610233][ T4345] libceph: connect (1)[c::]:6789 error -101 [ 371.616239][ T4345] libceph: mon0 (1)[c::]:6789 connect error [ 371.622244][ T27] #0: ffffffff8c91fbe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 371.636512][ T27] 2 locks held by getty/3326: [ 371.641457][ T27] #0: ffff88814aff9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 371.653908][ T27] #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 371.664599][ T27] 2 locks held by kworker/0:4/3612: [ 371.672751][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 371.684294][ T27] #1: ffffc90003297d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 371.697366][ T27] 4 locks held by kworker/u4:6/3630: [ 371.702766][ T27] #0: ffff8880171d5938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 371.713854][ T27] #1: ffffc90003357d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 371.724296][ T27] #2: ffffffff8da25210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 371.734062][ T27] #3: ffffffff8c9240b0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 371.744513][ T27] 3 locks held by kworker/1:11/4189: [ 371.749993][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 371.763210][ T27] #1: ffffc90004ef7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 371.776680][ T27] #2: ffffffff8c9241a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 371.788691][ T27] 2 locks held by kworker/0:19/5602: [ 371.794408][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 371.805304][ T27] #1: ffffc90003a27d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 371.817158][ T27] 1 lock held by syz.1.481/6095: [ 371.822247][ T27] #0: ffff88806534ad20 (mapping.invalidate_lock#7){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 371.833984][ T27] 1 lock held by syz.3.691/6906: [ 371.838986][ T27] #0: ffff888065349d60 (mapping.invalidate_lock#7){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 371.850656][ T27] 2 locks held by syz.2.962/7953: [ 371.855834][ T27] #0: ffff88805f33a870 (&fc->uapi_mutex){+.+.}-{3:3}, at: __se_sys_fsconfig+0x7c1/0xec0 [ 371.866043][ T27] #1: ffffffff8c9241a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 371.879709][ T27] 1 lock held by syz.2.962/7956: [ 371.884740][ T27] #0: ffff888061f83470 (&fc->uapi_mutex){+.+.}-{3:3}, at: __se_sys_fsconfig+0x7c1/0xec0 [ 371.895025][ T27] [ 371.912668][ T27] ============================================= [ 371.912668][ T27] [ 371.921895][ T27] NMI backtrace for cpu 1 [ 371.926243][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.165-syzkaller #0 [ 371.934227][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 371.944289][ T27] Call Trace: [ 371.947576][ T27] [ 371.950515][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 371.955209][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 371.960845][ T27] ? panic+0x860/0x860 [ 371.965262][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 371.970367][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 371.975294][ T27] ? __wake_up_klogd+0xd5/0x100 [ 371.980138][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 371.986285][ T27] ? _printk+0xd1/0x120 [ 371.990433][ T27] ? panic+0x860/0x860 [ 371.994491][ T27] ? __wake_up_klogd+0xcc/0x100 [ 371.999327][ T27] ? panic+0x860/0x860 [ 372.003383][ T27] ? __rcu_read_unlock+0x92/0x100 [ 372.008434][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 372.014486][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 372.020456][ T27] watchdog+0xe72/0xeb0 [ 372.024604][ T27] kthread+0x3f6/0x4f0 [ 372.028655][ T27] ? hungtask_pm_notify+0x50/0x50 [ 372.033664][ T27] ? kthread_blkcg+0xd0/0xd0 [ 372.038237][ T27] ret_from_fork+0x1f/0x30 [ 372.042646][ T27] [ 372.046765][ T27] Sending NMI from CPU 1 to CPUs 0: [ 372.052469][ C0] NMI backtrace for cpu 0 [ 372.052480][ C0] CPU: 0 PID: 7956 Comm: syz.2.962 Not tainted 5.15.165-syzkaller #0 [ 372.052496][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 372.052504][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 372.052530][ C0] Code: 14 0e 82 7e 65 8b 15 15 0e 82 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 <83> fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 48 8d 7e 01 8b 89 14 [ 372.052541][ C0] RSP: 0018:ffffc90002f47298 EFLAGS: 00000246 [ 372.052555][ C0] RAX: ffffffff81ad0e83 RBX: ffffea0001e4e548 RCX: ffff88802a20bb80 [ 372.052566][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.052574][ C0] RBP: ffffc90002f473d0 R08: ffffffff81ad0e71 R09: fffff940003c9ca7 [ 372.052585][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 372.052594][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffea0001e4e540 [ 372.052604][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 372.052616][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.052626][ C0] CR2: 000000110c381702 CR3: 000000000c68e000 CR4: 00000000003506f0 [ 372.052638][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.052646][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 372.052655][ C0] Call Trace: [ 372.052659][ C0] [ 372.052664][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 372.052681][ C0] ? read_lock_is_recursive+0x10/0x10 [ 372.052697][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 372.052712][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 372.052734][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 372.052748][ C0] ? nmi_handle+0xf7/0x370 [ 372.052763][ C0] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 372.052778][ C0] ? default_do_nmi+0x62/0x150 [ 372.052794][ C0] ? exc_nmi+0xa8/0x100 [ 372.052808][ C0] ? end_repeat_nmi+0x16/0x31 [ 372.052826][ C0] ? release_pages+0x251/0x1f40 [ 372.052841][ C0] ? release_pages+0x263/0x1f40 [ 372.052856][ C0] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 372.052871][ C0] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 372.052887][ C0] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 372.052903][ C0] [ 372.052906][ C0] [ 372.052911][ C0] release_pages+0x263/0x1f40 [ 372.052931][ C0] ? lru_cache_disable+0x30/0x30 [ 372.052946][ C0] ? free_swap_cache+0x15a/0x2d0 [ 372.052967][ C0] tlb_flush_mmu+0xc8/0x170 [ 372.052983][ C0] unmap_page_range+0x214d/0x2630 [ 372.053011][ C0] ? mmu_notifier_invalidate_range_end+0xf0/0xf0 [ 372.053026][ C0] ? __pagevec_lru_add+0x1584/0x18d0 [ 372.053040][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 372.053052][ C0] ? uprobe_munmap+0x17a/0x400 [ 372.053071][ C0] ? unmap_single_vma+0x1a1/0x2d0 [ 372.053089][ C0] unmap_vmas+0x1f8/0x390 [ 372.053105][ C0] ? unmap_page_range+0x2630/0x2630 [ 372.053124][ C0] ? tlb_gather_mmu_fullmm+0x159/0x200 [ 372.053140][ C0] exit_mmap+0x3b6/0x670 [ 372.053156][ C0] ? vm_brk+0x20/0x20 [ 372.053175][ C0] ? uprobe_clear_state+0x304/0x460 [ 372.053193][ C0] __mmput+0x112/0x3b0 [ 372.053207][ C0] exit_mm+0x688/0x7f0 [ 372.053222][ C0] ? _raw_spin_unlock+0x40/0x40 [ 372.053240][ C0] ? do_exit+0x2480/0x2480 [ 372.053255][ C0] ? taskstats_exit+0x491/0xa10 [ 372.053274][ C0] ? tty_audit_exit+0x150/0x1f0 [ 372.053291][ C0] do_exit+0x626/0x2480 [ 372.053310][ C0] ? put_task_struct+0x80/0x80 [ 372.053326][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 372.053345][ C0] do_group_exit+0x144/0x310 [ 372.053361][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 372.053377][ C0] get_signal+0xc66/0x14e0 [ 372.053398][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 372.053422][ C0] ? kick_process+0xd8/0x150 [ 372.053439][ C0] ? get_sigframe_size+0x10/0x10 [ 372.053461][ C0] ? __x64_sys_fsconfig+0xc0/0xc0 [ 372.053478][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 372.053494][ C0] exit_to_user_mode_loop+0x97/0x130 [ 372.053508][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 372.053522][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 372.053539][ C0] do_syscall_64+0x47/0xb0 [ 372.053552][ C0] ? clear_bhb_loop+0x15/0x70 [ 372.053567][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 372.053583][ C0] RIP: 0033:0x7f8b54a4eef9 [ 372.053594][ C0] Code: Unable to access opcode bytes at RIP 0x7f8b54a4eecf. [ 372.053601][ C0] RSP: 002b:00007f8b52ea7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 372.053614][ C0] RAX: ffffffffffffff8f RBX: 00007f8b54c08058 RCX: 00007f8b54a4eef9 [ 372.053624][ C0] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 372.053633][ C0] RBP: 00007f8b54ac101e R08: 0000000000000000 R09: 0000000000000000 [ 372.053641][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.053650][ C0] R13: 0000000000000000 R14: 00007f8b54c08058 R15: 00007ffec455c8a8 [ 372.053666][ C0] [ 372.336632][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 372.543949][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.165-syzkaller #0 [ 372.551921][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 372.561966][ T27] Call Trace: [ 372.565250][ T27] [ 372.568176][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 372.572853][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 372.578483][ T27] ? panic+0x860/0x860 [ 372.582557][ T27] panic+0x318/0x860 [ 372.586449][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 372.592076][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 372.598234][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 372.603432][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 372.609497][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 372.615644][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 372.621794][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 372.627945][ T27] watchdog+0xeb0/0xeb0 [ 372.632152][ T27] kthread+0x3f6/0x4f0 [ 372.636241][ T27] ? hungtask_pm_notify+0x50/0x50 [ 372.641265][ T27] ? kthread_blkcg+0xd0/0xd0 [ 372.645851][ T27] ret_from_fork+0x1f/0x30 [ 372.650276][ T27] [ 372.653379][ T27] Kernel Offset: disabled [ 372.657696][ T27] Rebooting in 86400 seconds..