last executing test programs: 21.840484454s ago: executing program 1 (id=301): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="6e6f666c7573685f6d657267652c6e6f757365725f78617474722c6e6f71756f74612c6e6f71756f74612c6e6f646973636172642c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6a71666d743d7666737630000072706a71756f74613d272c6e6f62ba6172726965722c6e6f696e6c696e655f78617474722c00532ce9c75edc805c73af1e7e080908b718fd0828a937e3586554bcab7e1be7aa73459f8662170e991ca8c4b33e9be8c461e5cf93a3f06906d6fa59c7f8886f0b8367599af6dfca0f52ccf121a48c05cee074649107e6b6f3c1de6e4ecb13afd6d0b7a37e1ca7f2a73cfa86fec83ff91813514fc5dad59ef8a68267e2bc0900000000000000a3459a462407e6200beefe217570be55fa53ae668bc248f9910750fe29462516b37659f6d761b21b6ad0715f34", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5524, &(0x7f0000007200)="$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") r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000406) truncate(&(0x7f0000000240)='./file0\x00', 0xa000a0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000300)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 19.970583387s ago: executing program 1 (id=309): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="6f05ba995dc3436a09f47f71c9a7f36737a2b8a8123412081c9e742c33a601eb", 0x20}], 0x1, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/82, 0x1c}], 0x2}}], 0x1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xaa) 18.803208301s ago: executing program 1 (id=311): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003400)={0x4c, 0x12, 0x4, 0x70bd27, 0x25dfdc01, {0xf, 0x9f, 0x7, 0xf8, {0x4e22, 0x4e22, [0xffff, 0xbf9, 0x2, 0x36], [0xd4c5, 0x3, 0x6, 0x81], 0x0, [0x3180000, 0x5]}, 0x2, 0xfffffe01}}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x64, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68520, 0x10044}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x40008000}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}}, 0x4040) 18.350745342s ago: executing program 1 (id=312): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x800a, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 17.58884397s ago: executing program 1 (id=316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3a85}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x38}}, 0x4) 16.09664315s ago: executing program 1 (id=323): r0 = socket$unix(0x1, 0x5, 0x0) fanotify_init(0x200, 0x0) dup(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40025b0c, &(0x7f0000000040)) 15.13019234s ago: executing program 2 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="530000000700004600995e509ca397af0e"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 15.063493978s ago: executing program 0 (id=331): pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='q', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) write$binfmt_script(r1, 0x0, 0x4f) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000001e8640, 0x0) 14.931650873s ago: executing program 4 (id=333): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x38011, r0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4000080) ioprio_set$uid(0x3, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 14.803319248s ago: executing program 2 (id=335): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004780)=""/11, 0xb}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}, 0x4461b9d2}], 0x2, 0x31002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) 14.576378744s ago: executing program 2 (id=336): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_io_uring_setup(0x2bbe, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000011c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 14.460509627s ago: executing program 4 (id=337): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000070000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) 14.250412311s ago: executing program 0 (id=338): symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) 14.059830623s ago: executing program 2 (id=339): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000ec0)={0x0, 0x0, r2, r5, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "f617bf12f85ec608623fd5c9416ff7ab766cf1de733075a1def5082be47a6f4b"}}) 14.043638345s ago: executing program 0 (id=340): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0) 13.925139148s ago: executing program 2 (id=341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 13.453848822s ago: executing program 3 (id=342): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000001340)={{@local}, @any, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f0000000180)={{@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000007, 0x20000005}) close_range(r0, 0xffffffffffffffff, 0x0) 13.431090415s ago: executing program 4 (id=343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 13.400267808s ago: executing program 0 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff11"]) 13.399564178s ago: executing program 4 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002900)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x1a, 0x0, "87dd858ca74a5ffce09be60124903a9ac701f068352d50277e0a86687944c5a2d328cc483825f489bde0a8fc2cb227bb257805a4597f3509b628bcc4d6b94511f69f0ff69b74823316cb5c0277633f84"}, 0xd8) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 12.355663528s ago: executing program 3 (id=346): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={0x0}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000380)=""/205, 0xcd}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) 10.888696415s ago: executing program 3 (id=347): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.887663435s ago: executing program 2 (id=348): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r1 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r2, 0x626d, 0x0) write$binfmt_elf64(r2, &(0x7f0000000d80)=ANY=[], 0xfd14) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0x2020) sendfile(r0, r1, 0x0, 0x100000000) 9.836652505s ago: executing program 4 (id=349): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_io_uring_setup(0x2bbe, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000011c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 8.299284132s ago: executing program 4 (id=350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0x6000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x3000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3c}, {0xd5dc1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xd, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xfe}, {0x1000, 0x3}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x0, 0xf801}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000080)) 6.803323562s ago: executing program 0 (id=351): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000ec0)={0x0, 0x0, r2, r5, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "f617bf12f85ec608623fd5c9416ff7ab766cf1de733075a1def5082be47a6f4b"}}) 6.716675252s ago: executing program 3 (id=352): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) 4.760107076s ago: executing program 3 (id=353): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.839203186s ago: executing program 3 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 0s ago: executing program 0 (id=356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002100000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) kernel console output (not intermixed with test programs): bridge0: port 2(bridge_slave_1) entered disabled state [ 63.499270][ T3793] bond0: (slave bond_slave_0): Releasing backup interface [ 63.511690][ T3796] input: syz0 as /devices/virtual/input/input5 [ 63.538633][ T3793] bond0: (slave bond_slave_1): Releasing backup interface [ 63.570604][ T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.588196][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.600204][ T21] usb 4-1: SerialNumber: syz [ 63.636037][ T3793] team0: Port device team_slave_0 removed [ 63.689691][ T3793] team0: Port device team_slave_1 removed [ 63.690089][ T3617] hub 1-1:0.0: set hub depth failed [ 63.706463][ T3793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.735992][ T3793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.747876][ T3793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.757783][ T3617] usb 1-1: USB disconnect, device number 2 [ 63.785522][ T3793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.862240][ T3783] chnl_net:caif_netlink_parms(): no params data found [ 63.894496][ T21] usb 4-1: 0:2 : does not exist [ 64.177823][ T21] usb 4-1: USB disconnect, device number 2 [ 64.206926][ T3794] loop2: detected capacity change from 0 to 32768 [ 64.233365][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.277043][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.293428][ T3783] device bridge_slave_0 entered promiscuous mode [ 64.344828][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.378957][ T3809] loop0: detected capacity change from 0 to 1024 [ 64.403048][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.454103][ T3783] device bridge_slave_1 entered promiscuous mode [ 64.482449][ T3809] ======================================================= [ 64.482449][ T3809] WARNING: The mand mount option has been deprecated and [ 64.482449][ T3809] and is ignored by this kernel. Remove the mand [ 64.482449][ T3809] option from the mount to silence this warning. [ 64.482449][ T3809] ======================================================= [ 64.614029][ T3809] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.635029][ T3809] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.682204][ T3783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.767567][ T3783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.886256][ T3783] team0: Port device team_slave_0 added [ 64.925366][ T3783] team0: Port device team_slave_1 added [ 65.040477][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 65.108096][ T3783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.159960][ T3783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.280626][ T3783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.364898][ T3783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.402964][ T3783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.463432][ T3783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.486015][ T3847] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 65.575424][ T3816] loop3: detected capacity change from 0 to 32768 [ 65.630628][ T3816] XFS: noattr2 mount option is deprecated. [ 65.649760][ T3783] device hsr_slave_0 entered promiscuous mode [ 65.650215][ T3816] xfs: Unknown parameter 'nobarrier' [ 65.686955][ T3783] device hsr_slave_1 entered promiscuous mode [ 65.708309][ T3783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.734139][ T3783] Cannot create hsr debugfs directory [ 65.993630][ T3681] device hsr_slave_0 left promiscuous mode [ 66.031990][ T3681] device hsr_slave_1 left promiscuous mode [ 66.046311][ T3833] loop2: detected capacity change from 0 to 32768 [ 66.056787][ T3681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.098821][ T3833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.56 (3833) [ 66.121030][ T3681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.166890][ T3681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.185740][ T3681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.193520][ T3833] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 66.212767][ T3833] BTRFS info (device loop2): using free space tree [ 66.227020][ T3681] device bridge_slave_1 left promiscuous mode [ 66.254805][ T3681] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.266663][ T3833] BTRFS info (device loop2): has skinny extents [ 66.303572][ T3681] device bridge_slave_0 left promiscuous mode [ 66.322433][ T3681] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.482480][ T3681] device veth1_macvtap left promiscuous mode [ 66.543876][ T3681] device veth0_macvtap left promiscuous mode [ 66.553738][ T3681] device veth1_vlan left promiscuous mode [ 66.601542][ T3681] device veth0_vlan left promiscuous mode [ 66.633762][ T3833] BTRFS info (device loop2): enabling ssd optimizations [ 67.155948][ T3896] Bluetooth: hci3: command 0x041b tx timeout [ 67.331888][ T3899] loop2: detected capacity change from 0 to 128 [ 67.347860][ T3681] team0 (unregistering): Port device team_slave_1 removed [ 67.365680][ T3681] team0 (unregistering): Port device team_slave_0 removed [ 67.380466][ T3681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.396997][ T3681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.436654][ T3899] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.448363][ T3899] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.548677][ T3574] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=0, rec_len=0, size=1024 fake=0 [ 67.603145][ T3681] bond0 (unregistering): Released all slaves [ 67.611999][ T3574] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 67.655609][ T3574] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 67.692978][ T3862] Zero length message leads to an empty skb [ 67.727392][ T3574] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 67.765218][ T3574] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 67.827946][ T3574] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 67.873113][ T3574] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 67.919678][ T3574] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 67.979063][ T3574] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 68.020481][ T3574] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 68.450816][ T3918] block nbd0: shutting down sockets [ 68.454691][ T3783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.472402][ T3783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.502634][ T3783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.565335][ T3783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.609407][ T3920] loop0: detected capacity change from 0 to 512 [ 68.782292][ T3920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.68: inode #1: comm syz.0.68: iget: illegal inode # [ 68.923550][ T3920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.68: error while reading EA inode 1 err=-117 [ 68.987682][ T3920] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.007144][ T3783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.020268][ T3920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.68: inode #1: comm syz.0.68: iget: illegal inode # [ 69.052054][ T3920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.68: error while reading EA inode 1 err=-117 [ 69.078678][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.090682][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.118847][ T3920] EXT4-fs (loop0): 1 orphan inode deleted [ 69.119526][ T3783] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.133845][ T3920] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,nogrpid,debug_want_extra_isize=0x0000000000000058,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 69.164453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.176482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.196554][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.203659][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.211446][ T3895] Bluetooth: hci3: command 0x040f tx timeout [ 69.276951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.292086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.314672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.340715][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.347835][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.386032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.424494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.459163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.517369][ T3936] loop0: detected capacity change from 0 to 512 [ 69.561190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.606688][ T3936] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.611667][ T3783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.677317][ T3936] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.719735][ T3783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.759866][ T3936] EXT4-fs (loop0): 1 truncate cleaned up [ 69.780060][ T3936] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,max_batch_time=0x0000000000000fff,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 69.851968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.872523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.906399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.950519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.968755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.020656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.050652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.089413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.307394][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.329149][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.375671][ T3783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.593030][ T3943] chnl_net:caif_netlink_parms(): no params data found [ 70.720717][ T3940] loop3: detected capacity change from 0 to 40427 [ 70.760116][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.824816][ T3943] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.833290][ T3940] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 70.841705][ T3940] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 70.851310][ T3943] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.859303][ T3943] device bridge_slave_0 entered promiscuous mode [ 70.869204][ T3943] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.877017][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.885571][ T3943] device bridge_slave_1 entered promiscuous mode [ 70.903247][ T3940] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.926445][ T3943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.952450][ T3943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.025965][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 71.045148][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.051852][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.053264][ T3943] team0: Port device team_slave_0 added [ 71.086804][ T3940] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 71.094399][ T3940] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.105005][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.113932][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.141753][ T3943] team0: Port device team_slave_1 added [ 71.152119][ T7] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 71.185865][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.208441][ T3783] device veth0_vlan entered promiscuous mode [ 71.231563][ T7] usb 2-1: config 0 descriptor?? [ 71.257786][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.275291][ T7] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 71.280541][ T3895] Bluetooth: hci3: command 0x0419 tx timeout [ 71.282459][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.311020][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.341728][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.391170][ T3943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.398130][ T3943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.429755][ T3943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.443601][ T3943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.451057][ T3943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.481000][ T3943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.498804][ T3783] device veth1_vlan entered promiscuous mode [ 71.603341][ T3943] device hsr_slave_0 entered promiscuous mode [ 71.620237][ T3943] device hsr_slave_1 entered promiscuous mode [ 71.648751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.657648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.673211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.701075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.734295][ T3783] device veth0_macvtap entered promiscuous mode [ 71.770225][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 71.826159][ T3783] device veth1_macvtap entered promiscuous mode [ 71.891649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.899814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.928842][ T3783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.955931][ T3783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.979955][ T3783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.999986][ T3783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.009871][ T3783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.031235][ T3783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.049712][ T3783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.076937][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.116592][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.154260][ T3783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.187752][ T3783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.216616][ T3783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.247518][ T3783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.258154][ T3783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.269125][ T3783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.281152][ T3783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.306966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.319770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.331989][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 72.338121][ T3582] Bluetooth: hci5: sending frame failed (-49) [ 72.352709][ T3681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.375968][ T3783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.392200][ T3783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.406138][ T3783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.419308][ T3783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.454636][ T4014] loop3: detected capacity change from 0 to 32768 [ 72.464198][ T3681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.529341][ T3681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.543250][ T4014] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.77 (4014) [ 72.564309][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.586194][ T2672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.586718][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.607938][ T4014] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 72.612158][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.627638][ T4014] BTRFS info (device loop3): enabling auto defrag [ 72.636397][ T2672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.644086][ T4014] BTRFS info (device loop3): doing ref verification [ 72.653910][ T4014] BTRFS info (device loop3): max_inline at 0 [ 72.660946][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.676412][ T3681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.686805][ T4014] BTRFS info (device loop3): force clearing of disk cache [ 72.694118][ T4014] BTRFS info (device loop3): turning on sync discard [ 72.702942][ T4014] BTRFS info (device loop3): disabling free space tree [ 72.719601][ T4014] BTRFS info (device loop3): has skinny extents [ 72.754616][ T4022] netlink: 165 bytes leftover after parsing attributes in process `syz.4.48'. [ 72.805585][ T4022] netlink: 277 bytes leftover after parsing attributes in process `syz.4.48'. [ 72.866471][ T7] gspca_sonixj: i2c_w8 err -71 [ 72.893271][ T4014] BTRFS info (device loop3): enabling ssd optimizations [ 72.904866][ T4014] BTRFS info (device loop3): clearing free space tree [ 72.910330][ T7] sonixj: probe of 2-1:0.0 failed with error -71 [ 72.913673][ T4014] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.929808][ T4014] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.974271][ T7] usb 2-1: USB disconnect, device number 2 [ 73.026704][ T4039] loop4: detected capacity change from 0 to 4096 [ 73.083072][ T4039] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 73.485791][ T4057] loop1: detected capacity change from 0 to 2048 [ 73.586858][ T4057] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 73.617978][ T4057] UDF-fs: Scanning with blocksize 512 failed [ 73.692929][ T4057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.890598][ T1966] Bluetooth: hci2: command 0x041b tx timeout [ 74.028083][ T3943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.096313][ T3943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.112380][ T3943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.138797][ T3943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.356385][ T3827] attempt to access beyond end of device [ 74.356385][ T3827] loop1: rw=1, want=2050, limit=2048 [ 74.373739][ T3681] device hsr_slave_0 left promiscuous mode [ 74.396218][ T3681] device hsr_slave_1 left promiscuous mode [ 74.410118][ T4070] Bluetooth: hci5: command 0x1001 tx timeout [ 74.417820][ T3681] device veth1_macvtap left promiscuous mode [ 74.420071][ T3582] Bluetooth: hci5: sending frame failed (-49) [ 74.430538][ T3827] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 74.435241][ T3681] device veth0_macvtap left promiscuous mode [ 74.439217][ T3827] attempt to access beyond end of device [ 74.439217][ T3827] loop1: rw=1, want=2050, limit=2048 [ 74.456666][ T3827] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 74.465870][ T3827] attempt to access beyond end of device [ 74.465870][ T3827] loop1: rw=1, want=2050, limit=2048 [ 74.477375][ T3827] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 74.486241][ T3827] attempt to access beyond end of device [ 74.486241][ T3827] loop1: rw=1, want=2050, limit=2048 [ 74.497139][ T3827] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 74.497618][ T3681] device veth1_vlan left promiscuous mode [ 74.506935][ T3827] attempt to access beyond end of device [ 74.506935][ T3827] loop1: rw=1, want=2052, limit=2048 [ 74.522578][ T3827] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 74.531435][ T3827] attempt to access beyond end of device [ 74.531435][ T3827] loop1: rw=1, want=2052, limit=2048 [ 74.549946][ T3827] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 74.573865][ T3681] device veth0_vlan left promiscuous mode [ 74.579356][ T3827] attempt to access beyond end of device [ 74.579356][ T3827] loop1: rw=1, want=2052, limit=2048 [ 74.602012][ T3827] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 74.618249][ T3827] attempt to access beyond end of device [ 74.618249][ T3827] loop1: rw=1, want=2052, limit=2048 [ 74.629725][ T3827] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 74.647416][ T3827] attempt to access beyond end of device [ 74.647416][ T3827] loop1: rw=1, want=2054, limit=2048 [ 74.669366][ T3827] Buffer I/O error on dev loop1, logical block 1026, lost async page write [ 74.688204][ T3827] attempt to access beyond end of device [ 74.688204][ T3827] loop1: rw=1, want=2054, limit=2048 [ 74.701108][ T3827] Buffer I/O error on dev loop1, logical block 1026, lost async page write [ 75.046811][ T4100] loop3: detected capacity change from 0 to 4096 [ 75.178449][ T4101] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.265827][ T4100] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 75.269246][ T3681] bond0 (unregistering): Released all slaves [ 75.313796][ T4100] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 75.348097][ T4100] Remounting filesystem read-only [ 75.360334][ T4100] NILFS (loop3): error -5 truncating bmap (ino=12) [ 75.452761][ T3943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.466892][ T3570] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 75.487443][ T3570] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 75.491846][ T3943] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.519199][ T3570] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 75.519299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.535347][ T3570] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 75.560148][ T3570] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 75.568281][ T3570] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 75.580278][ T3570] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 75.580673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.587598][ T3570] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 75.609138][ T3570] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 75.610768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.624952][ T3570] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 75.632983][ T3570] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 75.651855][ T3570] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 75.656950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.658698][ T3570] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 75.674518][ T3570] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 75.682407][ T3570] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 75.687192][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.689845][ T3570] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 75.696778][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.704184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.719005][ T3570] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 75.742110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.760580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.780055][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.787118][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.800221][ T3895] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.808405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.835901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.864590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.891123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.928105][ T3943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.939385][ T4069] Bluetooth: hci2: command 0x040f tx timeout [ 75.946722][ T3943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.959558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.967962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.989178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.999809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.016329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.030794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.044653][ T3895] usb 2-1: Using ep0 maxpacket: 8 [ 76.049830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.065639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.163273][ T1312] cfg80211: failed to load regulatory.db [ 76.180452][ T3895] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 76.188796][ T3895] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 76.208536][ T3895] usb 2-1: config 135 has no interface number 0 [ 76.216159][ T3895] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.304759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.322595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.355295][ T3943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.400545][ T3895] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 76.409604][ T3895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.438615][ T3895] usb 2-1: Product: syz [ 76.451636][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.466196][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.475378][ T3895] usb 2-1: Manufacturer: syz [ 76.480382][ T4070] Bluetooth: hci5: command 0x1009 tx timeout [ 76.485725][ T3895] usb 2-1: SerialNumber: syz [ 76.496407][ T3943] device veth0_vlan entered promiscuous mode [ 76.546572][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.559557][ T3895] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 76.567716][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.582163][ T3895] usb 2-1: No valid video chain found. [ 76.594467][ T3943] device veth1_vlan entered promiscuous mode [ 76.639202][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.657628][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.688823][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.769398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.808107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.845877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.879776][ T3943] device veth0_macvtap entered promiscuous mode [ 76.927632][ T3943] device veth1_macvtap entered promiscuous mode [ 76.974340][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.015379][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.044310][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.075273][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.104192][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.135871][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.164412][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.192240][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.224801][ T3943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.255809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.286941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.318931][ T4070] usb 2-1: USB disconnect, device number 3 [ 77.360730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.385424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.427965][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.467249][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.520283][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.540120][ T4117] input: syz0 as /devices/virtual/input/input6 [ 77.567735][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.600291][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.629944][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.639764][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.705280][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.705467][ T4108] loop3: detected capacity change from 0 to 65536 [ 77.746656][ T3943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.779603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.797035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.862310][ T3943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.875439][ T4108] XFS (loop3): Mounting V5 Filesystem [ 77.890688][ T3943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.918088][ T3943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.964726][ T3943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.987156][ T4108] XFS (loop3): Ending clean mount [ 78.007328][ T4069] Bluetooth: hci2: command 0x0419 tx timeout [ 78.153424][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.167695][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.195644][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.216474][ T3827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.226000][ T3827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.237348][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.316167][ T4129] syz.2.71[4129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.316255][ T4129] syz.2.71[4129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.527299][ T4131] loop1: detected capacity change from 0 to 2048 [ 78.555146][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.594411][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.607213][ T4131] loop1: p3 p4 < > [ 78.617967][ T4131] loop1: p3 start 4284289 is beyond EOD, truncated [ 78.626366][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.696709][ T4135] device bridge_slave_0 left promiscuous mode [ 78.747365][ T4135] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.776337][ T4135] device bridge_slave_1 left promiscuous mode [ 78.794430][ T4135] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.851915][ T3585] udevd[3585]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 78.906777][ T4135] bond0: (slave bond_slave_0): Releasing backup interface [ 78.963920][ T4135] bond0: (slave bond_slave_1): Releasing backup interface [ 79.084502][ T4135] team0: Port device team_slave_0 removed [ 79.139023][ T4135] team0: Port device team_slave_1 removed [ 79.188742][ T4135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.223603][ T4108] syz.3.89 (4108) used greatest stack depth: 17752 bytes left [ 79.241119][ T3570] XFS (loop3): Unmounting Filesystem [ 79.247087][ T4135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.296302][ T4135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.326678][ T4135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.423476][ T4145] loop1: detected capacity change from 0 to 2048 [ 79.589324][ T4145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.778562][ T4136] loop2: detected capacity change from 0 to 32768 [ 79.965989][ T4151] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 79.982825][ T4151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.185201][ T4156] loop3: detected capacity change from 0 to 512 [ 80.336279][ T4156] EXT4-fs (loop3): 1 truncate cleaned up [ 80.367634][ T4156] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,quota,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 80.669415][ T4172] bridge0: port 3(erspan0) entered blocking state [ 80.677057][ T4172] bridge0: port 3(erspan0) entered disabled state [ 80.723697][ T4172] device erspan0 entered promiscuous mode [ 80.731494][ T4172] bridge0: port 3(erspan0) entered blocking state [ 80.738189][ T4172] bridge0: port 3(erspan0) entered forwarding state [ 80.766718][ T4173] bridge0: port 4(gretap0) entered blocking state [ 80.795877][ T4173] bridge0: port 4(gretap0) entered disabled state [ 80.834442][ T4173] device gretap0 entered promiscuous mode [ 80.892984][ T4173] bridge0: port 4(gretap0) entered blocking state [ 80.899510][ T4173] bridge0: port 4(gretap0) entered forwarding state [ 80.979369][ T4175] device gretap0 left promiscuous mode [ 81.018166][ T4175] bridge0: port 4(gretap0) entered disabled state [ 81.319290][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.457309][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.543596][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 81.601774][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.739319][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.897410][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.919057][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.961641][ T4167] device bridge_slave_0 entered promiscuous mode [ 81.981317][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.988377][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.006905][ T4167] device bridge_slave_1 entered promiscuous mode [ 82.155993][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.210134][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.269148][ T4202] loop2: detected capacity change from 0 to 2048 [ 82.314369][ T4167] team0: Port device team_slave_0 added [ 82.361732][ T4167] team0: Port device team_slave_1 added [ 82.443031][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.478974][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.521933][ T4202] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.544041][ T4193] loop1: detected capacity change from 0 to 32768 [ 82.566586][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.642789][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.649752][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.670849][ T4219] loop3: detected capacity change from 0 to 4096 [ 82.730287][ T4069] Bluetooth: hci6: command 0x0409 tx timeout [ 82.794207][ T4228] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.803481][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.811967][ T4193] XFS (loop1): Mounting V5 Filesystem [ 82.885425][ T26] audit: type=1804 audit(1729621517.389:2): pid=4231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.120" name="/newroot/32/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 82.986275][ T4193] XFS (loop1): Ending clean mount [ 83.028612][ T4167] device hsr_slave_0 entered promiscuous mode [ 83.036799][ T26] audit: type=1804 audit(1729621517.539:3): pid=4237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.120" name="/newroot/32/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 83.069394][ T4167] device hsr_slave_1 entered promiscuous mode [ 83.089368][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.097356][ T4167] Cannot create hsr debugfs directory [ 83.109444][ T4237] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 524288 [ 83.145083][ T4237] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 83.206698][ T4237] Remounting filesystem read-only [ 83.230173][ T4237] NILFS (loop3): error -5 truncating bmap (ino=15) [ 83.396438][ T3569] XFS (loop1): Unmounting Filesystem [ 83.400664][ T3570] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 83.409171][ T3570] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 83.417865][ T3570] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 83.428091][ T3570] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 83.434955][ T3570] NILFS (loop3): discard dirty block: blocknr=18, size=4096 [ 83.443881][ T3570] NILFS (loop3): discard dirty page: offset=925696, ino=3 [ 83.451058][ T3570] NILFS (loop3): discard dirty block: blocknr=36, size=4096 [ 83.671795][ T4251] loop2: detected capacity change from 0 to 512 [ 83.827793][ T4251] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.839794][ T4252] IPVS: Scheduler module ip_vs_ not found [ 83.852402][ T4251] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.186214][ T4242] chnl_net:caif_netlink_parms(): no params data found [ 84.410627][ T4070] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.655137][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.663260][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.691217][ T4242] device bridge_slave_0 entered promiscuous mode [ 84.721928][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.728988][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.771130][ T4242] device bridge_slave_1 entered promiscuous mode [ 84.790266][ T4070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.819944][ T4070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.829695][ T4070] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 84.849997][ T4070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.858758][ T3616] Bluetooth: hci6: command 0x041b tx timeout [ 84.886375][ T4070] usb 4-1: config 0 descriptor?? [ 84.973453][ T4242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.004316][ T4242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.163757][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.195823][ T4242] team0: Port device team_slave_0 added [ 85.214815][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.242814][ T4242] team0: Port device team_slave_1 added [ 85.262028][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.287638][ T9] device hsr_slave_0 left promiscuous mode [ 85.315658][ T9] device hsr_slave_1 left promiscuous mode [ 85.323157][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.332731][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.341081][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.348503][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.360143][ T9] device bridge_slave_1 left promiscuous mode [ 85.373698][ T4070] apple 0003:05AC:0262.0001: unbalanced delimiter at end of report description [ 85.394765][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.405252][ T4070] apple 0003:05AC:0262.0001: parse failed [ 85.416613][ T4070] apple: probe of 0003:05AC:0262.0001 failed with error -22 [ 85.460073][ T1966] Bluetooth: hci4: command 0x0409 tx timeout [ 85.468840][ T9] device bridge_slave_0 left promiscuous mode [ 85.484033][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.515738][ T9] device veth1_macvtap left promiscuous mode [ 85.551630][ T9] device veth0_macvtap left promiscuous mode [ 85.557823][ T9] device veth1_vlan left promiscuous mode [ 85.577154][ T4309] loop1: detected capacity change from 0 to 1024 [ 85.580114][ T9] device veth0_vlan left promiscuous mode [ 85.612156][ T1966] usb 4-1: USB disconnect, device number 3 [ 85.808768][ T4313] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 85.849353][ T4309] EXT4-fs (loop1): Test dummy encryption mode enabled [ 85.860643][ T4309] EXT4-fs (loop1): Ignoring removed orlov option [ 85.891146][ T4309] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 85.944454][ T4318] loop2: detected capacity change from 0 to 1024 [ 86.032038][ T4318] EXT4-fs (loop2): Ignoring removed orlov option [ 86.096364][ T4318] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nombcache,journal_dev=0x0000000000000001,usrjquota=,orlov,lazytime,journal_dev=0x0000000000000006,jqfmt=vfsold,grpjquota=,,errors=continue. Quota mode: none. [ 86.302252][ T4324] "syz.1.144" (4324) uses obsolete ecb(arc4) skcipher [ 86.425868][ T9] team0 (unregistering): Port device team_slave_1 removed [ 86.513992][ T4331] loop3: detected capacity change from 0 to 256 [ 86.514146][ T9] team0 (unregistering): Port device team_slave_0 removed [ 86.593999][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.702551][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.755508][ T4339] loop2: detected capacity change from 0 to 1024 [ 86.880842][ T1966] Bluetooth: hci6: command 0x040f tx timeout [ 86.997897][ T9] bond0 (unregistering): Released all slaves [ 87.014267][ T26] audit: type=1800 audit(1729621521.519:4): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.152" name=CCBDF1B8553597FBA48B4762ABEE9344AC2CA398C4352DCB658D672ED45C35BEFBBE3155CCE8308DA653BDCB076D378F75C5C647EDD93A36F6A99FAEFDBDA4790DBB67C5F78A1B17E76F5C279A476FC7B9239DBFABB07E14D79B4EA7F154FFCACBD279AE6C4C57F48964D5F7C56BBFCECA5E98C5529F4EB9AA8DF176D558889F7B36D67A9EA3378B5FFC5991D8AD03 dev="loop2" ino=26 res=0 errno=0 [ 87.058825][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.107666][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.170533][ T4242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.184249][ T4242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.240368][ T4242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.279487][ T4242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.315219][ T4242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.369401][ T4242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.399630][ T4353] loop2: detected capacity change from 0 to 64 [ 87.494471][ T4242] device hsr_slave_0 entered promiscuous mode [ 87.531416][ T4070] Bluetooth: hci4: command 0x041b tx timeout [ 87.546505][ T4242] device hsr_slave_1 entered promiscuous mode [ 87.561056][ T4242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.593155][ T4242] Cannot create hsr debugfs directory [ 87.660099][ T4353] loop_set_status: loop2 () has still dirty pages (nrpages=2) [ 87.719482][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.776424][ T3943] hfs: walked past end of dir [ 87.844092][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.879126][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.905683][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.032978][ T4370] loop1: detected capacity change from 0 to 128 [ 88.069518][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.086605][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.111377][ T2672] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.118524][ T2672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.148034][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.164956][ T4370] EXT4-fs (loop1): Ignoring removed bh option [ 88.172515][ T4370] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 88.172669][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.227969][ T2672] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.235133][ T2672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.329741][ T4242] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.363586][ T26] audit: type=1326 audit(1729621522.869:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767c390ff9 code=0x7ffc0000 [ 88.396940][ T4370] loop1: detected capacity change from 0 to 512 [ 88.428458][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.453053][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.455463][ T26] audit: type=1326 audit(1729621522.869:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767c390ff9 code=0x7ffc0000 [ 88.472418][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.540880][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.557164][ T4370] EXT4-fs (loop1): Ignoring removed nobh option [ 88.595398][ T4370] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 88.630671][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.659977][ T26] audit: type=1326 audit(1729621522.879:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f767c390ff9 code=0x7ffc0000 [ 88.684320][ T4370] EXT4-fs (loop1): can't mount with both data=journal and dax [ 88.695353][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.717529][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.750020][ T26] audit: type=1326 audit(1729621522.879:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767c390ff9 code=0x7ffc0000 [ 88.757853][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.860618][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.870015][ T26] audit: type=1326 audit(1729621522.879:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767c390ff9 code=0x7ffc0000 [ 88.899517][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.928889][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.970971][ T3616] Bluetooth: hci6: command 0x0419 tx timeout [ 88.992599][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.010016][ T26] audit: type=1326 audit(1729621522.889:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f767c390ff9 code=0x7ffc0000 [ 89.027336][ T4388] syz.1.163 sent an empty control message without MSG_MORE. [ 89.052462][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.092105][ T26] audit: type=1326 audit(1729621522.889:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767c390ff9 code=0x7ffc0000 [ 89.137168][ T4242] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.220233][ T26] audit: type=1326 audit(1729621522.889:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767c390ff9 code=0x7ffc0000 [ 89.296985][ T26] audit: type=1326 audit(1729621522.899:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f767c390ff9 code=0x7ffc0000 [ 89.341774][ T4242] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.366523][ T26] audit: type=1326 audit(1729621522.899:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767c390ff9 code=0x7ffc0000 [ 89.390618][ T4393] device syzkaller1 entered promiscuous mode [ 89.515627][ T4242] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.607975][ T3616] Bluetooth: hci4: command 0x040f tx timeout [ 89.610119][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.630297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.637856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.732673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.748176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.841205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.849440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.878714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.897277][ T4414] loop0: detected capacity change from 0 to 7 [ 89.912685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.940723][ T4167] device veth0_vlan entered promiscuous mode [ 89.949659][ T4414] Dev loop0: unable to read RDB block 7 [ 89.990016][ T4414] loop0: unable to read partition table [ 90.006839][ T4167] device veth1_vlan entered promiscuous mode [ 90.025493][ T4414] loop0: partition table beyond EOD, truncated [ 90.045664][ T4414] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 90.045664][ T4414] ) failed (rc=-5) [ 90.081157][ T4242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.090788][ T4242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.121829][ T4242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.130929][ T4242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.248524][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.286091][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.340620][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.349320][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.413011][ T4167] device veth0_macvtap entered promiscuous mode [ 90.453102][ T4389] chnl_net:caif_netlink_parms(): no params data found [ 90.550932][ T4167] device veth1_macvtap entered promiscuous mode [ 90.599718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.620249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.766844][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.814226][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.838688][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.849218][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.859688][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.870519][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.884341][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.942549][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.960739][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.989951][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.010014][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.019867][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.049958][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.070924][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.078387][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.100715][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.110845][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.130587][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.160162][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.172846][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.193790][ T4422] loop1: detected capacity change from 0 to 40427 [ 91.200806][ T3612] Bluetooth: hci2: command 0x0409 tx timeout [ 91.212226][ T4389] device bridge_slave_0 entered promiscuous mode [ 91.243508][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.264081][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.282900][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.302683][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.324051][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.340027][ T4422] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 91.347688][ T4422] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 91.368832][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.389370][ T4389] device bridge_slave_1 entered promiscuous mode [ 91.400407][ T4422] F2FS-fs (loop1): invalid crc value [ 91.429163][ T4242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.466770][ T4422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.498295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.522764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.562348][ T4389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.594201][ T4389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.604875][ T4422] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 91.619971][ T4422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 91.690335][ T4070] Bluetooth: hci4: command 0x0419 tx timeout [ 91.742523][ T4242] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.784593][ T3569] attempt to access beyond end of device [ 91.784593][ T3569] loop1: rw=2049, want=45104, limit=40427 [ 91.802541][ T4389] team0: Port device team_slave_0 added [ 91.854959][ T4389] team0: Port device team_slave_1 added [ 91.902235][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.920868][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.932843][ T2672] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.939948][ T2672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.948720][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.022198][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.084090][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.110539][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.125202][ T2672] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.132318][ T2672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.140153][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.148930][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.157976][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.205355][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.216455][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.241032][ T4389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.247979][ T4389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.297758][ T4389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.319158][ T4389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.326546][ T4389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.354404][ T4389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.375977][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.395450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.404837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.457613][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.474586][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.510174][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.516147][ T3616] libceph: connect (1)[c::]:6789 error -101 [ 92.554011][ T3616] libceph: mon0 (1)[c::]:6789 connect error [ 92.565258][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.592278][ T4445] ceph: No mds server is up or the cluster is laggy [ 92.616473][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.631366][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.639226][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.647787][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.699674][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.736735][ T4389] device hsr_slave_0 entered promiscuous mode [ 92.743754][ T4389] device hsr_slave_1 entered promiscuous mode [ 92.770821][ T4389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.778500][ T4389] Cannot create hsr debugfs directory [ 92.865193][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.916761][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.934441][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.978867][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.284350][ T3616] Bluetooth: hci2: command 0x041b tx timeout [ 93.295398][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.302877][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.384498][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.397383][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.419200][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 93.507347][ T4242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.689888][ T4479] tipc: Started in network mode [ 93.697254][ T4476] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 93.704085][ T4476] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.737266][ T4479] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 93.763243][ T4484] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 93.782525][ T4479] tipc: Enabled bearer , priority 27 [ 93.799194][ T4476] vhci_hcd vhci_hcd.0: Device attached [ 93.852989][ T4486] tipc: Enabled bearer , priority 12 [ 93.853124][ T4488] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 93.866350][ T4488] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 93.963854][ T4488] vhci_hcd vhci_hcd.0: Device attached [ 93.997224][ T21] vhci_hcd: vhci_device speed not set [ 94.004263][ T4484] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(8) [ 94.010787][ T4484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.070164][ T21] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 94.094904][ T4484] vhci_hcd vhci_hcd.0: Device attached [ 94.116472][ T4476] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 94.164457][ T4484] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 94.171077][ T4484] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 94.201289][ T4389] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.224567][ T4484] vhci_hcd vhci_hcd.0: Device attached [ 94.250759][ T4488] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(17) [ 94.257370][ T4488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.286233][ T4488] vhci_hcd vhci_hcd.0: Device attached [ 94.311373][ T4389] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.348857][ T4506] vhci_hcd: connection closed [ 94.348916][ T4494] vhci_hcd: connection closed [ 94.359985][ T4489] vhci_hcd: connection closed [ 94.364889][ T4481] vhci_hcd: connection reset by peer [ 94.365822][ T4510] vhci_hcd: connection closed [ 94.375822][ T154] vhci_hcd: stop threads [ 94.403959][ T154] vhci_hcd: release socket [ 94.430337][ T154] vhci_hcd: disconnect device [ 94.438146][ T154] vhci_hcd: stop threads [ 94.438488][ T4389] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.460656][ T154] vhci_hcd: release socket [ 94.473950][ T4389] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.475332][ T154] vhci_hcd: disconnect device [ 94.515335][ T154] vhci_hcd: stop threads [ 94.515697][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.529796][ T154] vhci_hcd: release socket [ 94.540438][ T154] vhci_hcd: disconnect device [ 94.549101][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.557253][ T154] vhci_hcd: stop threads [ 94.557269][ T154] vhci_hcd: release socket [ 94.557341][ T154] vhci_hcd: disconnect device [ 94.570473][ T154] vhci_hcd: stop threads [ 94.576497][ T154] vhci_hcd: release socket [ 94.591211][ T154] vhci_hcd: disconnect device [ 94.680404][ T4242] device veth0_vlan entered promiscuous mode [ 94.697878][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.721340][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.783216][ T4242] device veth1_vlan entered promiscuous mode [ 94.801478][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.809875][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.819261][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.852714][ T4069] tipc: Node number set to 8432298 [ 95.003278][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.092754][ T9] device hsr_slave_0 left promiscuous mode [ 95.099179][ T9] device hsr_slave_1 left promiscuous mode [ 95.140317][ T9] device veth1_macvtap left promiscuous mode [ 95.146378][ T9] device veth0_macvtap left promiscuous mode [ 95.176961][ T4500] loop1: detected capacity change from 0 to 32768 [ 95.183228][ T9] device veth1_vlan left promiscuous mode [ 95.218748][ T9] device veth0_vlan left promiscuous mode [ 95.321279][ T4500] XFS (loop1): Mounting V5 Filesystem [ 95.352475][ T4503] loop0: detected capacity change from 0 to 40427 [ 95.360718][ T1966] Bluetooth: hci2: command 0x040f tx timeout [ 95.481261][ T4503] F2FS-fs (loop0): invalid crc value [ 95.508362][ T4503] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.574967][ T4500] XFS (loop1): Ending clean mount [ 95.584507][ T4500] XFS (loop1): Quotacheck needed: Please wait. [ 95.683131][ T4503] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.691638][ T4500] XFS (loop1): Quotacheck: Done. [ 95.878488][ T4167] attempt to access beyond end of device [ 95.878488][ T4167] loop0: rw=2049, want=45128, limit=40427 [ 95.902110][ T3569] XFS (loop1): Unmounting Filesystem [ 96.203241][ T9] bond0 (unregistering): Released all slaves [ 96.456238][ T4242] device veth0_macvtap entered promiscuous mode [ 96.498192][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.523569][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.557773][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.585526][ T4242] device veth1_macvtap entered promiscuous mode [ 96.607602][ T4389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.685063][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.727074][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.766455][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.802765][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.832461][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.847706][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.865278][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.878205][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.901286][ T4242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.915559][ T4389] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.952788][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.972883][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.982061][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.990316][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.000900][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.013728][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.025647][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.039979][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 97.059331][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.069693][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.087894][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.098232][ T4242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.115717][ T4242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.127132][ T3612] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.145294][ T4242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.190684][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.235622][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.254986][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.276662][ T4560] loop1: detected capacity change from 0 to 512 [ 97.286569][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.300436][ T2672] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.307515][ T2672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.353675][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.401617][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.421223][ T3612] usb 1-1: Using ep0 maxpacket: 8 [ 97.426879][ T4560] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.440121][ T4067] Bluetooth: hci2: command 0x0419 tx timeout [ 97.468869][ T2672] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.475969][ T2672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.504196][ T4560] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.540168][ T3612] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 97.559119][ T3612] usb 1-1: config 179 has no interface number 0 [ 97.611735][ T4242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.621040][ T3612] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 97.630939][ T4242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.635573][ T3612] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 97.658077][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 97.658091][ T26] audit: type=1800 audit(1729621532.169:33): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 97.679341][ T3612] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.701250][ T4242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.730711][ T4242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.739607][ T3612] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 97.749956][ T26] audit: type=1800 audit(1729621532.169:34): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 97.776342][ T3612] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 97.801082][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.819400][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.827459][ T3612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 97.863298][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.880050][ T3612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.895187][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.930219][ T4558] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.939832][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.021125][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.041187][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.054230][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.081461][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.100019][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.130743][ T4389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.200178][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.214436][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.230692][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.247958][ T1312] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 98.423124][ T2672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.453498][ T3695] usb 1-1: USB disconnect, device number 3 [ 98.459960][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 98.468635][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 98.491857][ T3827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.507864][ T2672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.527309][ T3695] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 98.548200][ T3827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.573977][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.599268][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.722957][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.734023][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.754430][ T4389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.852675][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.872628][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.943176][ T4389] device veth0_vlan entered promiscuous mode [ 98.980059][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.988339][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.016839][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.052818][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.079067][ T4389] device veth1_vlan entered promiscuous mode [ 99.152851][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.187267][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.200860][ T21] vhci_hcd: vhci_device speed not set [ 99.246130][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.281373][ T4594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.205'. [ 99.309810][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.330238][ T4594] unsupported nlmsg_type 40 [ 99.343807][ T4389] device veth0_macvtap entered promiscuous mode [ 99.350130][ T4599] binder: 4598:4599 ioctl c0306201 200001c0 returned -14 [ 99.383120][ T4389] device veth1_macvtap entered promiscuous mode [ 99.460966][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.504679][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.554233][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.619970][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.649965][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.672680][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.692131][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.722696][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.744934][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.775565][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.809279][ T4389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.836815][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.871297][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.883230][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.930665][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.972823][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.005986][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.043500][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.099969][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.134921][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.158948][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.199495][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.251932][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.283083][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.315992][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.367615][ T4389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.531970][ T4624] loop0: detected capacity change from 0 to 1024 [ 100.567610][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.587647][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.613674][ T4389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.639794][ T4389] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.655792][ T4389] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.676954][ T4389] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.836905][ T4624] hfsplus: xattr searching failed [ 100.964562][ T4624] hfsplus: b-tree write err: -5, ino 3 [ 101.196872][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.243914][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.300334][ T2672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.308517][ T2672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.322626][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.382180][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.416928][ T4640] loop0: detected capacity change from 0 to 1024 [ 102.170513][ T4652] loop3: detected capacity change from 0 to 2048 [ 102.183233][ T4654] loop0: detected capacity change from 0 to 2048 [ 102.401437][ T4654] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 102.490962][ T4654] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none. [ 102.520907][ T4652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.726210][ T4652] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.937686][ T4668] loop1: detected capacity change from 0 to 128 [ 103.037687][ T154] Trying to write to read-only block-device loop3 [ 103.046785][ T3570] Trying to write to read-only block-device loop3 [ 103.088703][ T4644] loop2: detected capacity change from 0 to 40427 [ 103.090038][ T154] Trying to write to read-only block-device loop3 [ 103.099274][ T4668] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 103.112483][ T3570] Trying to write to read-only block-device loop3 [ 103.124333][ T3570] Trying to write to read-only block-device loop3 [ 103.124478][ T4670] tipc: Enabled bearer , priority 10 [ 103.181671][ T3570] Trying to write to read-only block-device loop3 [ 103.208108][ T26] audit: type=1804 audit(1729621537.709:35): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.230" name="/newroot/65/file1/bus" dev="loop1" ino=1048607 res=1 errno=0 [ 103.220799][ T3570] Trying to write to read-only block-device loop3 [ 103.243918][ T4644] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 103.261152][ T4644] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 103.303972][ T26] audit: type=1804 audit(1729621537.759:36): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.230" name="/newroot/65/file1/bus" dev="loop1" ino=1048607 res=1 errno=0 [ 103.323262][ T4644] F2FS-fs (loop2): invalid crc value [ 103.417374][ T4644] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.436242][ T3570] Trying to write to read-only block-device loop3 [ 103.481694][ T4659] Trying to write to read-only block-device loop3 [ 103.616924][ T4644] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 103.635386][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 103.650300][ T4644] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.764409][ T4688] netlink: 60 bytes leftover after parsing attributes in process `syz.0.237'. [ 103.825521][ T4690] tipc: Started in network mode [ 103.848236][ T4690] tipc: Node identity be6d68218c6, cluster identity 4711 [ 103.884965][ T4642] attempt to access beyond end of device [ 103.884965][ T4642] loop2: rw=10241, want=45104, limit=40427 [ 103.908834][ T4690] tipc: Enabled bearer , priority 10 [ 103.932616][ T4644] attempt to access beyond end of device [ 103.932616][ T4644] loop2: rw=2049, want=45104, limit=40427 [ 103.957061][ T4693] netlink: 'syz.3.238': attribute type 4 has an invalid length. [ 103.965079][ T4693] netlink: 152 bytes leftover after parsing attributes in process `syz.3.238'. [ 104.013697][ T4693] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 104.064818][ T4695] netlink: 'syz.3.238': attribute type 33 has an invalid length. [ 104.140433][ T9] attempt to access beyond end of device [ 104.140433][ T9] loop2: rw=1, want=45104, limit=40427 [ 104.148113][ T4695] tipc: Resetting bearer [ 104.187843][ T144] tipc: Resetting bearer [ 104.204673][ T144] tipc: Resetting bearer [ 104.878814][ T4714] device veth1_macvtap left promiscuous mode [ 104.900051][ T4714] device macsec0 entered promiscuous mode [ 104.940647][ T4070] tipc: Node number set to 839739425 [ 104.959057][ T4719] device veth1_macvtap entered promiscuous mode [ 104.982062][ T4719] device macsec0 left promiscuous mode [ 105.151264][ T1312] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.510223][ T1312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.537996][ T1312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.538678][ T4737] loop3: detected capacity change from 0 to 2048 [ 105.574266][ T1312] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 105.597994][ T1312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.629134][ T1312] usb 2-1: config 0 descriptor?? [ 105.710381][ T4737] loop3: detected capacity change from 0 to 1024 [ 105.728207][ T4739] loop2: detected capacity change from 0 to 4096 [ 105.812912][ T4739] NILFS (loop2): invalid segment: Checksum error in segment payload [ 105.850008][ T4739] NILFS (loop2): trying rollback from an earlier position [ 105.931483][ T4739] NILFS (loop2): recovery complete [ 105.952652][ T4743] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.028586][ T26] audit: type=1326 audit(1729621540.529:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41ff95ff9 code=0x7ffc0000 [ 106.068926][ T26] audit: type=1326 audit(1729621540.569:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41ff95ff9 code=0x7ffc0000 [ 106.112713][ T26] audit: type=1326 audit(1729621540.569:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe41ff95ff9 code=0x7ffc0000 [ 106.130763][ T1312] hid (null): bogus close delimiter [ 106.193229][ T26] audit: type=1326 audit(1729621540.569:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41ff95ff9 code=0x7ffc0000 [ 106.269963][ T26] audit: type=1326 audit(1729621540.569:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41ff95ff9 code=0x7ffc0000 [ 106.362507][ T26] audit: type=1326 audit(1729621540.569:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe41ff95ff9 code=0x7ffc0000 [ 106.420311][ T26] audit: type=1326 audit(1729621540.569:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41ff95ff9 code=0x7ffc0000 [ 106.500147][ T26] audit: type=1326 audit(1729621540.569:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41ff95ff9 code=0x7ffc0000 [ 106.541313][ T4759] netlink: 44 bytes leftover after parsing attributes in process `syz.4.264'. [ 106.646453][ T4756] loop3: detected capacity change from 0 to 4096 [ 106.762957][ T4763] netlink: 56 bytes leftover after parsing attributes in process `syz.4.267'. [ 106.800346][ T4756] /dev/loop3: Can't open blockdev [ 106.820339][ T1312] usb 2-1: language id specifier not provided by device, defaulting to English [ 107.050148][ T1312] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 107.066634][ T1312] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 107.087152][ T1312] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 107.112133][ T1312] usb 2-1: USB disconnect, device number 4 [ 107.280026][ T3616] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.407886][ T4784] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.570259][ T3616] usb 4-1: Using ep0 maxpacket: 8 [ 107.646109][ T4794] loop0: detected capacity change from 0 to 512 [ 107.761685][ T4794] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 107.812684][ T4794] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.920358][ T3616] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 107.939664][ T3616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.949795][ T3616] usb 4-1: Product: syz [ 107.958364][ T3616] usb 4-1: Manufacturer: syz [ 107.966608][ T3616] usb 4-1: SerialNumber: syz [ 107.989547][ T3616] usb 4-1: config 0 descriptor?? [ 108.055454][ T4794] EXT4-fs error (device loop0): ext4_xattr_block_list:719: inode #15: comm syz.0.278: corrupted xattr block 33 [ 108.072550][ T3616] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 108.104545][ T4794] EXT4-fs (loop0): Remounting filesystem read-only [ 108.186222][ T4167] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 108.267063][ T4167] EXT4-fs (loop0): Remounting filesystem read-only [ 108.287017][ T4167] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 108.338360][ T4167] EXT4-fs (loop0): Remounting filesystem read-only [ 108.354775][ T4167] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error [ 108.382058][ T4167] EXT4-fs (loop0): Remounting filesystem read-only [ 108.444478][ T4167] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 108.495463][ T4167] EXT4-fs (loop0): Remounting filesystem read-only [ 108.513652][ T4167] EXT4-fs error (device loop0): ext4_quota_off:6486: inode #4: comm syz-executor: mark_inode_dirty error [ 108.554147][ T4167] EXT4-fs (loop0): Remounting filesystem read-only [ 108.681751][ T4802] loop1: detected capacity change from 0 to 32768 [ 108.753716][ T4802] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.281 (4802) [ 108.849167][ T4802] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 108.869751][ T4802] BTRFS info (device loop1): enabling auto defrag [ 108.889038][ T4802] BTRFS info (device loop1): max_inline at 0 [ 108.895876][ T4802] BTRFS info (device loop1): enabling ssd optimizations [ 108.916789][ T4802] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 108.942411][ T4802] BTRFS info (device loop1): use lzo compression, level 0 [ 108.956960][ T4802] BTRFS info (device loop1): using free space tree [ 108.971579][ T4802] BTRFS info (device loop1): has skinny extents [ 109.001114][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.111895][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 109.120959][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.134117][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.236842][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.280178][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 109.352610][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.567737][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 109.567753][ T26] audit: type=1804 audit(1729621544.069:54): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.281" name="/newroot/70/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 109.611490][ T3616] gspca_vc032x: reg_w err -71 [ 109.616321][ T3616] vc032x: probe of 4-1:0.0 failed with error -71 [ 109.664187][ T3616] usb 4-1: USB disconnect, device number 4 [ 109.748291][ T26] audit: type=1804 audit(1729621544.139:55): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.281" name="/newroot/70/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 109.785508][ T154] tipc: Disabling bearer [ 109.794299][ T154] tipc: Disabling bearer [ 109.860515][ T154] tipc: Disabling bearer [ 109.884126][ T154] tipc: Left network mode [ 110.735046][ T4837] chnl_net:caif_netlink_parms(): no params data found [ 111.334583][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.346440][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.412027][ T4837] device bridge_slave_0 entered promiscuous mode [ 111.432354][ T4870] loop3: detected capacity change from 0 to 40427 [ 111.458551][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.474230][ T4856] loop1: detected capacity change from 0 to 40427 [ 111.482666][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.491460][ T4837] device bridge_slave_1 entered promiscuous mode [ 111.524310][ T4856] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 111.538322][ T4856] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 111.620252][ T4852] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.629881][ T4856] F2FS-fs (loop1): invalid crc value [ 111.653517][ T4837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.732223][ T4837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.744842][ T4856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.755852][ T4894] loop3: detected capacity change from 0 to 256 [ 111.811520][ T4894] exfat: Deprecated parameter 'namecase' [ 111.830611][ T4894] /dev/loop3: Can't open blockdev [ 111.840181][ T3614] Bluetooth: hci5: command 0x0409 tx timeout [ 111.950886][ T4856] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 111.971896][ T4837] team0: Port device team_slave_0 added [ 111.987850][ T4856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.035453][ T154] device hsr_slave_0 left promiscuous mode [ 112.082385][ T154] device hsr_slave_1 left promiscuous mode [ 112.098860][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.100156][ T4852] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.115664][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.150359][ T4852] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.169996][ T1312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.178317][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.205369][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.212428][ T4852] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.241792][ T154] device bridge_slave_1 left promiscuous mode [ 112.243988][ T4852] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.258230][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.284839][ T4855] attempt to access beyond end of device [ 112.284839][ T4855] loop1: rw=10241, want=45104, limit=40427 [ 112.309208][ T154] device bridge_slave_0 left promiscuous mode [ 112.318414][ T4856] attempt to access beyond end of device [ 112.318414][ T4856] loop1: rw=2049, want=45104, limit=40427 [ 112.348240][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.377930][ T154] device veth1_macvtap left promiscuous mode [ 112.395887][ T154] device veth0_macvtap left promiscuous mode [ 112.416620][ T154] device veth1_vlan left promiscuous mode [ 112.437695][ T154] device veth0_vlan left promiscuous mode [ 112.453792][ T1312] usb 3-1: Using ep0 maxpacket: 8 [ 112.458590][ T144] attempt to access beyond end of device [ 112.458590][ T144] loop1: rw=1, want=45104, limit=40427 [ 112.480333][ T4852] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.501260][ T4852] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.509273][ T4852] usb 5-1: Product: syz [ 112.533784][ T4852] usb 5-1: Manufacturer: syz [ 112.570540][ T1312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.595531][ T4852] cdc_wdm 5-1:1.0: skipping garbage [ 112.604951][ T4852] cdc_wdm 5-1:1.0: skipping garbage [ 112.610585][ T1312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.646873][ T4852] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 112.650943][ T1312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.678316][ T1312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 112.687661][ T4852] cdc_wdm 5-1:1.0: Unknown control protocol [ 112.704973][ T1312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.734084][ T1312] usb 3-1: config 0 descriptor?? [ 113.018707][ T4907] loop3: detected capacity change from 0 to 32768 [ 113.060634][ T4907] xfs: Unknown parameter 'pcr' [ 113.121103][ T4914] netlink: 'syz.1.300': attribute type 1 has an invalid length. [ 113.167046][ T154] team0 (unregistering): Port device team_slave_1 removed [ 113.211896][ T1312] pyra 0003:1E7D:2C24.0003: item fetching failed at offset 5/7 [ 113.237574][ T1312] pyra 0003:1E7D:2C24.0003: parse failed [ 113.249955][ T1312] pyra: probe of 0003:1E7D:2C24.0003 failed with error -22 [ 113.271782][ T154] team0 (unregistering): Port device team_slave_0 removed [ 113.299669][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.350601][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.442740][ T3895] usb 3-1: USB disconnect, device number 2 [ 113.569346][ T154] bond0 (unregistering): Released all slaves [ 113.638140][ T4837] team0: Port device team_slave_1 added [ 113.719776][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.748114][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.814983][ T4837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.837847][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.896763][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.924889][ T3614] Bluetooth: hci5: command 0x041b tx timeout [ 114.026545][ T4837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.258460][ T4837] device hsr_slave_0 entered promiscuous mode [ 114.274953][ T4837] device hsr_slave_1 entered promiscuous mode [ 114.347053][ T4916] loop1: detected capacity change from 0 to 40427 [ 114.440241][ T4916] F2FS-fs (loop1): invalid crc value [ 114.456057][ T4852] usb 5-1: USB disconnect, device number 2 [ 114.470047][ T3695] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.495823][ T4916] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.659257][ T4916] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.850204][ T3695] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.890865][ T4930] attempt to access beyond end of device [ 114.890865][ T4930] loop1: rw=2049, want=45112, limit=40427 [ 115.060220][ T3695] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.076228][ T3695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.104642][ T3695] usb 3-1: Product: syz [ 115.130009][ T3695] usb 3-1: Manufacturer: syz [ 115.134620][ T3695] usb 3-1: SerialNumber: syz [ 115.488757][ T4837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.531488][ T4837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.571028][ T4837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.592630][ T4837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.841078][ T4837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.883696][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.898173][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.965288][ T4837] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.985051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.000106][ T3614] Bluetooth: hci5: command 0x040f tx timeout [ 116.013540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.050534][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.057709][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.108553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.138769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.178970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.218363][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.225643][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.274710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.305617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.315236][ T3695] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 116.330455][ T3695] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 116.372464][ T3695] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 116.406310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.428243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.445107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.456458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.484497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.504229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.544867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.580967][ T4837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.623037][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.667097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.681728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.730109][ T3695] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 116.746004][ T4975] loop1: detected capacity change from 0 to 512 [ 116.781380][ T3695] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 116.853050][ T3695] usb 3-1: USB disconnect, device number 3 [ 116.884072][ T3695] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 116.966258][ T4975] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 116.990112][ T4975] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.107654][ T4837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.122321][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.180126][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.220350][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.230287][ T4975] EXT4-fs error (device loop1): ext4_xattr_block_list:719: inode #15: comm syz.1.312: corrupted xattr block 33 [ 117.244177][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.286676][ T4975] EXT4-fs (loop1): Remounting filesystem read-only [ 117.311556][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.368008][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.400850][ T3569] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 117.410998][ T4837] device veth0_vlan entered promiscuous mode [ 117.442191][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.463317][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.487978][ T3569] EXT4-fs (loop1): Remounting filesystem read-only [ 117.503022][ T4837] device veth1_vlan entered promiscuous mode [ 117.516351][ T3569] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 117.527680][ T5002] netlink: 'syz.2.317': attribute type 6 has an invalid length. [ 117.540506][ T5002] netlink: 72 bytes leftover after parsing attributes in process `syz.2.317'. [ 117.573210][ T3569] EXT4-fs (loop1): Remounting filesystem read-only [ 117.579768][ T3569] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error [ 117.622796][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.636830][ T3569] EXT4-fs (loop1): Remounting filesystem read-only [ 117.680533][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.688720][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.736355][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.754768][ T3569] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 117.791133][ T3569] EXT4-fs (loop1): Remounting filesystem read-only [ 117.796249][ T4837] device veth0_macvtap entered promiscuous mode [ 117.804237][ T3569] EXT4-fs error (device loop1): ext4_quota_off:6486: inode #4: comm syz-executor: mark_inode_dirty error [ 117.842132][ T4837] device veth1_macvtap entered promiscuous mode [ 117.859945][ T3569] EXT4-fs (loop1): Remounting filesystem read-only [ 117.900033][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.914918][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.954583][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.994799][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.042419][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.075743][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.090188][ T3616] Bluetooth: hci5: command 0x0419 tx timeout [ 118.106195][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.138077][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.181275][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.214209][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.235387][ T4984] loop3: detected capacity change from 0 to 32768 [ 118.246193][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.265842][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.279533][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.299835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.315363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.397777][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.421608][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.444607][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.474238][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.499618][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.529171][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.550240][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.577495][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.610071][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.639500][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.668767][ T5023] loop2: detected capacity change from 0 to 1024 [ 118.693184][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.750488][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.804547][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.834497][ T4837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.863407][ T5023] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.939857][ T4837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.021384][ T4837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.038577][ T4837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.112630][ T5038] loop3: detected capacity change from 0 to 512 [ 119.241506][ T4535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.288699][ T4535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.382069][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.417685][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.444513][ T5041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.451881][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.581686][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.649236][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.726658][ T5052] loop3: detected capacity change from 0 to 1024 [ 119.774906][ T5055] nbd: must specify at least one socket [ 119.824995][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.982477][ T5067] 9pnet: p9_errstr2errno: server reported unknown error ™^Pœ£—¯ÿÿÿ [ 119.997081][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.188747][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.233078][ T5045] chnl_net:caif_netlink_parms(): no params data found [ 120.649716][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.686796][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.750092][ T5045] device bridge_slave_0 entered promiscuous mode [ 120.789840][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.799483][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.808569][ T5045] device bridge_slave_1 entered promiscuous mode [ 120.969223][ T5045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.020637][ T5109] loop0: detected capacity change from 0 to 128 [ 121.039633][ T5045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.110031][ T5109] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.121068][ T5109] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.152844][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.237801][ T5045] team0: Port device team_slave_0 added [ 121.311466][ C0] hrtimer: interrupt took 7687388 ns [ 121.371329][ T5045] team0: Port device team_slave_1 added [ 121.376137][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.420874][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.465269][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.608838][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.740066][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.858261][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.980672][ T3614] Bluetooth: hci0: command 0x0409 tx timeout [ 122.068547][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.256845][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.421268][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.666784][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.880342][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.015686][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.078653][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.282617][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.365514][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.620505][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.848397][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.091551][ T3895] Bluetooth: hci0: command 0x041b tx timeout [ 124.122362][ T5131] loop2: detected capacity change from 0 to 512 [ 124.128902][ T5045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.146263][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.178499][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.192093][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.218666][ T5045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.463826][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.777077][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.176250][ T5045] device hsr_slave_0 entered promiscuous mode [ 125.187677][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.615981][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.040146][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.468585][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 126.475519][ T5045] device hsr_slave_1 entered promiscuous mode [ 126.531403][ T5045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.549264][ T5045] Cannot create hsr debugfs directory [ 128.157500][ T4852] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.186953][ T5131] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.266067][ T5131] EXT4-fs: failed to create workqueue [ 128.305854][ T5131] EXT4-fs (loop2): mount failed [ 129.964828][ T3896] Bluetooth: hci0: command 0x0419 tx timeout [ 134.360234][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.366536][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.200538][ T5174] chnl_net:caif_netlink_parms(): no params data found [ 137.474516][ T3896] Bluetooth: hci6: command 0x0409 tx timeout [ 140.946376][ T3896] Bluetooth: hci6: command 0x041b tx timeout [ 140.952668][ T3896] Bluetooth: hci7: command 0x0409 tx timeout [ 144.768466][ T3895] Bluetooth: hci6: command 0x040f tx timeout [ 144.792082][ T21] Bluetooth: hci7: command 0x041b tx timeout [ 148.632846][ T1312] Bluetooth: hci7: command 0x040f tx timeout [ 148.648550][ T1312] Bluetooth: hci6: command 0x0419 tx timeout [ 148.702011][ T1312] Bluetooth: hci2: command 0x0409 tx timeout [ 150.640502][ T1312] Bluetooth: hci7: command 0x0419 tx timeout [ 150.720197][ T1312] Bluetooth: hci2: command 0x041b tx timeout [ 150.880015][ T1312] Bluetooth: hci8: command 0x0409 tx timeout [ 152.800193][ T1312] Bluetooth: hci2: command 0x040f tx timeout [ 152.962526][ T1312] Bluetooth: hci8: command 0x041b tx timeout [ 155.022151][ T3896] Bluetooth: hci2: command 0x0419 tx timeout [ 155.081373][ T3896] Bluetooth: hci8: command 0x040f tx timeout [ 162.511490][ T3895] Bluetooth: hci8: command 0x0419 tx timeout [ 178.160076][ T3612] Bluetooth: hci1: command 0x0406 tx timeout [ 181.289962][ T3896] Bluetooth: hci4: command 0x0409 tx timeout [ 183.440368][ T3895] Bluetooth: hci4: command 0x041b tx timeout [ 185.520311][ T1312] Bluetooth: hci4: command 0x040f tx timeout [ 185.759965][ T1312] Bluetooth: hci3: command 0x0406 tx timeout [ 187.600142][ T3612] Bluetooth: hci4: command 0x0419 tx timeout [ 196.739219][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.750022][ T5174] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.758229][ T5174] device bridge_slave_0 entered promiscuous mode [ 197.339480][ T5194] chnl_net:caif_netlink_parms(): no params data found [ 197.360001][ T3612] Bluetooth: hci1: command 0x0409 tx timeout [ 197.436345][ T5205] chnl_net:caif_netlink_parms(): no params data found [ 197.474883][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 197.497853][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 199.452123][ T3612] Bluetooth: hci1: command 0x041b tx timeout [ 200.399986][ T1312] Bluetooth: hci5: command 0x0409 tx timeout [ 201.052416][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.058720][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.093065][ T5200] chnl_net:caif_netlink_parms(): no params data found [ 201.520103][ T3897] Bluetooth: hci1: command 0x040f tx timeout [ 202.480102][ T1312] Bluetooth: hci5: command 0x041b tx timeout [ 203.599949][ T1312] Bluetooth: hci1: command 0x0419 tx timeout [ 204.559985][ T1312] Bluetooth: hci5: command 0x040f tx timeout [ 206.640020][ T3615] Bluetooth: hci5: command 0x0419 tx timeout [ 207.360297][ T3615] Bluetooth: hci6: command 0x0409 tx timeout [ 209.441623][ T1312] Bluetooth: hci6: command 0x041b tx timeout [ 211.520535][ T1312] Bluetooth: hci7: command 0x0409 tx timeout [ 211.526562][ T1312] Bluetooth: hci6: command 0x040f tx timeout [ 213.600259][ T1312] Bluetooth: hci6: command 0x0419 tx timeout [ 214.720030][ T3896] Bluetooth: hci7: command 0x041b tx timeout [ 216.800164][ T1312] Bluetooth: hci7: command 0x040f tx timeout [ 218.880448][ T3897] Bluetooth: hci7: command 0x0419 tx timeout [ 241.520106][ T3897] Bluetooth: hci2: command 0x0409 tx timeout [ 242.079945][ T3897] Bluetooth: hci0: command 0x0406 tx timeout [ 243.599980][ T1312] Bluetooth: hci2: command 0x041b tx timeout [ 245.679959][ T3612] Bluetooth: hci2: command 0x040f tx timeout [ 247.759988][ T3612] Bluetooth: hci2: command 0x0419 tx timeout [ 247.968540][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.980577][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.007414][ T5223] device bridge_slave_0 entered promiscuous mode [ 248.077894][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.090772][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.110046][ T5223] device bridge_slave_1 entered promiscuous mode [ 252.363505][ T5266] chnl_net:caif_netlink_parms(): no params data found [ 257.920509][ T3895] Bluetooth: hci4: command 0x0409 tx timeout [ 260.000248][ T3896] Bluetooth: hci4: command 0x041b tx timeout [ 260.880516][ T3896] Bluetooth: hci8: command 0x0409 tx timeout [ 262.080213][ T3896] Bluetooth: hci4: command 0x040f tx timeout [ 264.160161][ T3896] Bluetooth: hci4: command 0x0419 tx timeout [ 266.401154][ T3612] Bluetooth: hci8: command 0x041b tx timeout [ 267.839975][ T3612] Bluetooth: hci1: command 0x0409 tx timeout [ 268.480142][ T3612] Bluetooth: hci8: command 0x040f tx timeout [ 269.618391][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.624721][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.920033][ T3895] Bluetooth: hci1: command 0x041b tx timeout [ 270.212765][ T5289] chnl_net:caif_netlink_parms(): no params data found [ 270.560061][ T3896] Bluetooth: hci8: command 0x0419 tx timeout [ 272.002265][ T3895] Bluetooth: hci1: command 0x040f tx timeout [ 272.400077][ T3895] Bluetooth: hci9: command 0x0409 tx timeout [ 274.080069][ T3895] Bluetooth: hci1: command 0x0419 tx timeout [ 308.099046][ T27] INFO: task kworker/0:12:4067 blocked for more than 153 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 308.149936][ T27] Not tainted 5.15.169-syzkaller #0 [ 308.219894][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.228601][ T27] task:kworker/0:12 state:D stack:24992 pid: 4067 ppid: 2 flags:0x00004000 [ 308.259918][ T27] Workqueue: events nsim_dev_trap_report_work [ 308.266065][ T27] Call Trace: [ 308.269366][ T27] [ 308.281568][ T27] __schedule+0x12c4/0x45b0 [ 308.286131][ T27] ? mark_lock+0x98/0x340 [ 308.299937][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 308.305996][ T27] ? release_firmware_map_entry+0x190/0x190 [ 308.329882][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 308.335422][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 308.349885][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 308.355150][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 308.369879][ T27] schedule+0x11b/0x1f0 [ 308.374066][ T27] schedule_preempt_disabled+0xf/0x20 [ 308.379437][ T27] __mutex_lock_common+0xe34/0x25a0 [ 308.399937][ T27] ? nsim_dev_trap_report_work+0x56/0xab0 [ 308.405698][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 308.429869][ T27] mutex_lock_nested+0x17/0x20 [ 308.434698][ T27] nsim_dev_trap_report_work+0x56/0xab0 [ 308.449879][ T27] ? print_irqtrace_events+0x210/0x210 [ 308.455354][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 308.469854][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 308.475082][ T27] process_one_work+0x8a1/0x10c0 [ 308.499932][ T27] ? worker_detach_from_pool+0x260/0x260 [ 308.505622][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 308.511916][ T27] ? kthread_data+0x4e/0xc0 [ 308.516444][ T27] ? wq_worker_running+0x97/0x170 [ 308.539918][ T27] worker_thread+0xaca/0x1280 [ 308.544655][ T27] kthread+0x3f6/0x4f0 [ 308.548743][ T27] ? rcu_lock_release+0x20/0x20 [ 308.559890][ T27] ? kthread_blkcg+0xd0/0xd0 [ 308.564506][ T27] ret_from_fork+0x1f/0x30 [ 308.568947][ T27] [ 308.588849][ T27] [ 308.588849][ T27] Showing all locks held in the system: [ 308.609881][ T27] 1 lock held by khungtaskd/27: [ 308.614758][ T27] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 308.639950][ T27] 4 locks held by kworker/u4:2/154: [ 308.645182][ T27] #0: ffff8880171cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 308.669877][ T27] #1: ffffc90002027d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 308.691321][ T27] #2: ffffffff8da26590 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 308.709880][ T27] #3: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 308.729897][ T27] 1 lock held by dhcpcd/3240: [ 308.734625][ T27] #0: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6d0 [ 308.759896][ T27] 2 locks held by getty/3338: [ 308.764680][ T27] #0: ffff88802a426098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 308.789871][ T27] #1: ffffc9000208e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 308.809851][ T27] 4 locks held by kworker/u5:6/3583: [ 308.815141][ T27] #0: ffff8880782ae938 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 308.849888][ T27] #1: ffffc90002ec7d20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 308.869889][ T27] #2: ffff88805ae2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xb3/0xb50 [ 308.889862][ T27] #3: ffffffff8db7b4e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x52f/0xb50 [ 308.909878][ T27] 2 locks held by kworker/0:4/3614: [ 308.915087][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 308.939924][ T27] #1: ffffc90003057d20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 308.949626][ T27] 3 locks held by kworker/u4:7/3827: [ 308.969860][ T27] #0: ffff888017079138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 308.998461][ T27] #1: ffffc900031b7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 309.019931][ T27] #2: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 309.028949][ T27] 3 locks held by kworker/1:11/3896: [ 309.049884][ T27] 3 locks held by syz.4.78/4039: [ 309.054847][ T27] 3 locks held by kworker/0:12/4067: [ 309.069878][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 309.089922][ T27] #1: ffffc90004857d20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 309.119986][ T27] #2: ffff888062e92400 (&nsim_dev->port_list_lock#2){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x56/0xab0 [ 309.149893][ T27] 7 locks held by syz-executor/5045: [ 309.155205][ T27] #0: ffff88802a750460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 309.181962][ T27] #1: ffff888065795088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 309.199913][ T27] #2: ffff88814745cae8 (kn->active#232){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 309.219918][ T27] #3: ffffffff8d3739e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf1/0x470 [ 309.239913][ T27] #4: ffff888062e91178 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xc2/0x7f0 [ 309.259918][ T27] #5: ffff888062e92400 (&nsim_dev->port_list_lock#2){+.+.}-{3:3}, at: nsim_dev_reload_destroy+0x118/0x240 [ 309.289866][ T27] #6: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0xa4f/0xc40 [ 309.299148][ T27] 1 lock held by syz-executor/5215: [ 309.319929][ T27] #0: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0xa4f/0xc40 [ 309.329208][ T27] 1 lock held by syz-executor/5223: [ 309.349894][ T27] #0: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0xa4f/0xc40 [ 309.359166][ T27] 2 locks held by syz-executor/5253: [ 309.379983][ T27] #0: ffff888069374ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 309.389792][ T27] #1: ffff888069374078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 309.419957][ T27] 3 locks held by syz-executor/5260: [ 309.425270][ T27] #0: ffff888064674ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 309.449878][ T27] #1: ffff888064674078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 309.459428][ T27] #2: ffffffff8db7b4e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 309.489914][ T27] 3 locks held by syz-executor/5266: [ 309.495224][ T27] #0: ffff888058ed4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 309.520022][ T27] #1: ffff888058ed4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 309.529549][ T27] #2: ffffffff8db7b4e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 309.559933][ T27] 2 locks held by syz-executor/5289: [ 309.565234][ T27] #0: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 309.589848][ T27] #1: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 309.619906][ T27] 1 lock held by syz-executor/5313: [ 309.625135][ T27] #0: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 309.649877][ T27] 1 lock held by syz-executor/5360: [ 309.655095][ T27] #0: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 309.679912][ T27] 1 lock held by syz-executor/5366: [ 309.685131][ T27] #0: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 309.709922][ T27] 1 lock held by syz-executor/5376: [ 309.717081][ T27] #0: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 309.739962][ T27] 1 lock held by syz-executor/5404: [ 309.750122][ T27] #0: ffffffff8da32148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 309.759569][ T27] 1 lock held by udevd/5405: [ 309.779928][ T27] [ 309.782263][ T27] ============================================= [ 309.782263][ T27] [ 309.799920][ T27] NMI backtrace for cpu 1 [ 309.804250][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.169-syzkaller #0 [ 309.812227][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.822278][ T27] Call Trace: [ 309.825550][ T27] [ 309.828491][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 309.833188][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 309.838823][ T27] ? panic+0x860/0x860 [ 309.842903][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 309.848022][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 309.852965][ T27] ? __wake_up_klogd+0xd5/0x100 [ 309.857823][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 309.863990][ T27] ? _printk+0xd1/0x120 [ 309.868154][ T27] ? panic+0x860/0x860 [ 309.872231][ T27] ? __wake_up_klogd+0xcc/0x100 [ 309.877081][ T27] ? panic+0x860/0x860 [ 309.881154][ T27] ? __rcu_read_unlock+0x92/0x100 [ 309.886180][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 309.892269][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 309.898283][ T27] watchdog+0xe72/0xeb0 [ 309.902457][ T27] kthread+0x3f6/0x4f0 [ 309.906524][ T27] ? hungtask_pm_notify+0x50/0x50 [ 309.911549][ T27] ? kthread_blkcg+0xd0/0xd0 [ 309.916145][ T27] ret_from_fork+0x1f/0x30 [ 309.920583][ T27] [ 309.924453][ T27] Sending NMI from CPU 1 to CPUs 0: [ 309.929680][ C0] NMI backtrace for cpu 0 [ 309.929688][ C0] CPU: 0 PID: 5405 Comm: udevd Not tainted 5.15.169-syzkaller #0 [ 309.929703][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.929711][ C0] RIP: 0010:mark_lock+0x71/0x340 [ 309.929727][ C0] Code: f5 09 eb 0b 89 d5 83 fa 20 0f 83 d0 02 00 00 41 be 01 00 00 00 89 e9 41 d3 e6 49 8d 5f 20 48 89 d8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 27 02 00 00 8b 1b 81 e3 ff 1f 00 00 89 d8 c1 e8 06 48 [ 309.929740][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00000802 [ 309.929752][ C0] RAX: 0000000000000000 RBX: ffff88802a4328f8 RCX: 0000000000000008 [ 309.929762][ C0] RDX: 0000000000000008 RSI: ffff88802a4328d8 RDI: ffff88802a431dc0 [ 309.929772][ C0] RBP: 0000000000000008 R08: dffffc0000000000 R09: fffffbfff20ec622 [ 309.929782][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 309.929791][ C0] R13: dffffc0000000000 R14: 0000000000000100 R15: ffff88802a4328d8 [ 309.929802][ C0] FS: 00007f6e7d563c80(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 309.929816][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.929827][ C0] CR2: 00007ffe86ac2d48 CR3: 000000005c43f000 CR4: 00000000003506f0 [ 309.929840][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.929849][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.929857][ C0] Call Trace: [ 309.929862][ C0] [ 309.929867][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 309.929884][ C0] ? read_lock_is_recursive+0x10/0x10 [ 309.929901][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 309.929925][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 309.929941][ C0] ? nmi_handle+0xf7/0x370 [ 309.929958][ C0] ? mark_lock+0x71/0x340 [ 309.929972][ C0] ? default_do_nmi+0x62/0x150 [ 309.929990][ C0] ? exc_nmi+0xa8/0x100 [ 309.930005][ C0] ? end_repeat_nmi+0x16/0x31 [ 309.930023][ C0] ? mark_lock+0x71/0x340 [ 309.930038][ C0] ? mark_lock+0x71/0x340 [ 309.930052][ C0] ? mark_lock+0x71/0x340 [ 309.930065][ C0] [ 309.930069][ C0] [ 309.930074][ C0] __lock_acquire+0xc97/0x1ff0 [ 309.930093][ C0] lock_acquire+0x1db/0x4f0 [ 309.930106][ C0] ? __hrtimer_run_queues+0x662/0xcf0 [ 309.930122][ C0] ? read_lock_is_recursive+0x10/0x10 [ 309.930136][ C0] ? rcu_lock_release+0x5/0x20 [ 309.930150][ C0] ? __netif_schedule+0xc0/0x310 [ 309.930167][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 309.930183][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 309.930200][ C0] _raw_spin_lock_irq+0xcf/0x110 [ 309.930232][ C0] ? __hrtimer_run_queues+0x662/0xcf0 [ 309.930247][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 309.930267][ C0] __hrtimer_run_queues+0x662/0xcf0 [ 309.930288][ C0] ? hrtimer_interrupt+0x980/0x980 [ 309.930305][ C0] hrtimer_interrupt+0x392/0x980 [ 309.930328][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 309.930348][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 309.930366][ C0] [ 309.930370][ C0] [ 309.930374][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 309.930392][ C0] RIP: 0010:lock_is_held_type+0x137/0x180 [ 309.930410][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 309.930422][ C0] RSP: 0018:ffffc900031d73b8 EFLAGS: 00000206 [ 309.930434][ C0] RAX: 0a624506fe9d5500 RBX: 0000000000000001 RCX: ffff88802a431dc0 [ 309.930445][ C0] RDX: 0000000000000000 RSI: ffffffff8a8b3d20 RDI: ffffffff8ad90480 [ 309.930455][ C0] RBP: 0000000000000000 R08: ffffffff81d8604d R09: fffffbfff2d1a44d [ 309.930466][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246 [ 309.930475][ C0] R13: ffff88802a431dc0 R14: 00000000ffffffff R15: ffffffff8c91fcc0 [ 309.930489][ C0] ? __lookup_slow+0x14d/0x3d0 [ 309.930512][ C0] ___might_sleep+0xa2/0x6a0 [ 309.930529][ C0] ? d_alloc_parallel+0x125d/0x1390 [ 309.930543][ C0] ? __might_sleep+0xc0/0xc0 [ 309.930575][ C0] down_read+0x21/0x2e0 [ 309.930591][ C0] kernfs_iop_lookup+0x4b/0x2f0 [ 309.930626][ C0] __lookup_slow+0x275/0x3d0 [ 309.930646][ C0] ? lookup_one_len+0x2d0/0x2d0 [ 309.930668][ C0] ? down_read+0x1b3/0x2e0 [ 309.930684][ C0] lookup_slow+0x53/0x70 [ 309.930702][ C0] walk_component+0x48c/0x610 [ 309.930720][ C0] ? nd_alloc_stack+0xf0/0xf0 [ 309.930736][ C0] ? kernfs_iop_permission+0x25b/0x360 [ 309.930751][ C0] ? inode_permission+0x21e/0x450 [ 309.930770][ C0] ? inode_permission+0xf7/0x450 [ 309.930786][ C0] ? kernfs_evict_inode+0x60/0x60 [ 309.930801][ C0] ? bpf_lsm_inode_permission+0x5/0x10 [ 309.930820][ C0] ? security_inode_permission+0xad/0xf0 [ 309.930841][ C0] link_path_walk+0x642/0xd90 [ 309.930856][ C0] ? set_root+0x332/0x3b0 [ 309.930876][ C0] ? handle_lookup_down+0x130/0x130 [ 309.930895][ C0] path_openat+0x249/0x2f20 [ 309.930911][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 309.930929][ C0] ? mark_lock+0x98/0x340 [ 309.930944][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 309.930964][ C0] ? do_filp_open+0x460/0x460 [ 309.930987][ C0] do_filp_open+0x21c/0x460 [ 309.931002][ C0] ? vfs_tmpfile+0x2e0/0x2e0 [ 309.931023][ C0] ? _raw_spin_unlock+0x24/0x40 [ 309.931040][ C0] ? alloc_fd+0x598/0x630 [ 309.931059][ C0] do_sys_openat2+0x13b/0x4f0 [ 309.931078][ C0] ? do_sys_open+0x220/0x220 [ 309.931099][ C0] __x64_sys_openat+0x243/0x290 [ 309.931116][ C0] ? __ia32_sys_open+0x270/0x270 [ 309.931133][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 309.931151][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 309.931169][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 309.931189][ C0] do_syscall_64+0x3b/0xb0 [ 309.931204][ C0] ? clear_bhb_loop+0x15/0x70 [ 309.931218][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.931237][ C0] RIP: 0033:0x7f6e7d68e9a4 [ 309.931252][ C0] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 309.931265][ C0] RSP: 002b:00007ffe86ac2c20 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 309.931280][ C0] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f6e7d68e9a4 [ 309.931291][ C0] RDX: 0000000000080000 RSI: 00007ffe86ac2d58 RDI: 00000000ffffff9c [ 309.931302][ C0] RBP: 00007ffe86ac2d58 R08: 0000000000000008 R09: 0000000000000001 [ 309.931312][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 309.931321][ C0] R13: 00005560d1a9cb42 R14: 0000000000000001 R15: 00005560d1ab8160 [ 309.931338][ C0] [ 311.359859][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 311.366826][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.169-syzkaller #0 [ 311.374800][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 311.384850][ T27] Call Trace: [ 311.388125][ T27] [ 311.391067][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 311.395752][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 311.401385][ T27] ? panic+0x860/0x860 [ 311.405476][ T27] panic+0x318/0x860 [ 311.409372][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 311.415020][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 311.421174][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 311.426374][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 311.432449][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 311.438604][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 311.444757][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 311.450915][ T27] watchdog+0xeb0/0xeb0 [ 311.455084][ T27] kthread+0x3f6/0x4f0 [ 311.459168][ T27] ? hungtask_pm_notify+0x50/0x50 [ 311.464192][ T27] ? kthread_blkcg+0xd0/0xd0 [ 311.468778][ T27] ret_from_fork+0x1f/0x30 [ 311.473199][ T27] [ 312.611714][ T27] Shutting down cpus with NMI [ 312.616817][ T27] Kernel Offset: disabled [ 312.621152][ T27] Rebooting in 86400 seconds..