last executing test programs: 52.064115212s ago: executing program 4 (id=1123): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002140), 0x0, 0x4000001) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) userfaultfd(0x80001) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = memfd_secret(0x0) ftruncate(r2, 0x51a9497) unshare(0x8040080) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xd3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x40043, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r3}) sendto$inet6(r0, &(0x7f0000001fc0)="a7", 0x1, 0x24005041, 0x0, 0x0) 44.858653058s ago: executing program 4 (id=1145): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r0 = syz_mount_image$fuse(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x24, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize}], [{@hash}]}}, 0x0, 0x0, &(0x7f0000000780)) symlinkat(&(0x7f00000005c0)='./file1\x00', r0, &(0x7f00000007c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r1, 0xe0ffff, 0x4101, 0x3) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000800)={0x3, 0x0, {0x3, 0x0, 0x0, 0x6d7e9f1b10751f30, 0x7}, 0x3}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 43.847875921s ago: executing program 4 (id=1153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r0}, 0xc) 43.358384838s ago: executing program 4 (id=1156): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x238, 0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 42.766719907s ago: executing program 4 (id=1161): socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) connect$inet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000e40)={0x0, 0x0, 0xeac7}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x404c534a, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x542f, 0x0) socket(0x2, 0x3, 0xff) 33.251938398s ago: executing program 4 (id=1175): syz_emit_vhci(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80206433, 0x0) syz_emit_vhci(0x0, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e21, @broadcast}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x4c000000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x22) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r4, 0x20, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x186dc67b, 0x58}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x28}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffc, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e) 33.135058899s ago: executing program 5 (id=1176): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_io_uring_setup(0x689b, 0x0, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000380)={0x0, 0x0, 0x400, 0x0, 0x111}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48ed, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 31.766067467s ago: executing program 5 (id=1181): r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) 26.925824102s ago: executing program 5 (id=1183): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="10008100", 0x5dc, 0x0, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 26.792314673s ago: executing program 3 (id=1185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 26.099918996s ago: executing program 5 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xbc, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x58, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x22, 0x1, 0x7, 0x0, {0x5, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xa539, 0x7}}, @void, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0x6}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x101}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3e63b1c1b9643efcadca84c710a170c80e69b6a2ca18c8cdd8aa1e"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xfff9}]}, 0xbc}}, 0x0) 25.187364978s ago: executing program 5 (id=1190): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) 25.092029884s ago: executing program 3 (id=1191): syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006366e240f30c7593c9310000000109022d00010000000009040000032fadc600"], 0x0) 24.723805464s ago: executing program 5 (id=1193): unshare(0x6a040000) 22.970238976s ago: executing program 3 (id=1195): r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) 22.61896042s ago: executing program 3 (id=1196): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3}, 0x0) 22.192015787s ago: executing program 3 (id=1197): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 21.745646146s ago: executing program 3 (id=1198): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x41009432, &(0x7f0000000100)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) 7.119890315s ago: executing program 0 (id=1232): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, r1, 0x333, 0x0, 0x25dfdbfb, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r4, &(0x7f0000002980), 0x4000000000001c1, 0x1f8) 6.88964673s ago: executing program 0 (id=1233): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x46800) r0 = open(0x0, 0x44e543, 0x100) ioctl$TIOCSBRK(r0, 0x5427) pipe(&(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r1, 0x4b36) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) 6.658310965s ago: executing program 0 (id=1234): socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) connect$inet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000e40)={0x0, 0x0, 0xeac7}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x404c534a, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x542f, 0x0) socket(0x2, 0x3, 0xff) 5.430550207s ago: executing program 0 (id=1235): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 5.03489185s ago: executing program 0 (id=1236): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3b, 0x1) 3.50399432s ago: executing program 1 (id=1240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, 0x0}, 0x90) r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 3.416685125s ago: executing program 1 (id=1241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2"], 0x0) 3.30862901s ago: executing program 1 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 3.100333471s ago: executing program 2 (id=1243): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@jqfmt_vfsv1}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nouid32}, {@sysvgroups}, {@grpjquota}, {@debug}]}, 0xdc, 0x564, &(0x7f0000000940)="$eJzs3V1rHFUYAOB3Nkm/tSmUol5IoRdWajdN4kcFwXopWizofV2SaSjZdEt2U5pYsL2wN95IEUQsiD/Aey+Lf8BfUdBCkRL0QoTIbGbTbbMfSbp1t93ngUnOmZnNmXdn3pNzdnbZAIbW0exHIeLliPgmiTjYtG008o1H1/dbfXBtJluSWFv79M8kknxdY/8k/70/r7wUEb9+FXGisLnd6vLKfKlcThfz+kRt4fJEdXnl5MWF0lw6l16amp4+/db01LvvvN2zWF8/9/f3n9z58PTXx1a/+/neoVtJnIkD+bbmOJ7A9ebK0dK/eWkszjy242QPGhskSb8PgB0ZyfN8LLI+4GCM5FkPPP++jIg1YEgl8h+GVGMc0Jjb92ge/My4/8H6BGhz/KPrr43EnvrcaN9q8sjMKJvvjveg/ayNX/64fStbovPrEHu71AG25fqNiDg1Orq5/0vy/m/nTtVfPO7s8TaG7f8P9NOdbPzzRqvxT2Fj/BMtxj/7W+TuTnTP/8K9HjTTVjb+e6/l+Hej6xofyWsv1Md8Y8mFi+X0VES8GBHHY2x3Vu90P+f06t21dtuax3/ZkrXfGAvmx3FvdPejj5kt1UpPEnOz+zciXmk5/k02zn/S4vxnz8e5LbZxJL39artt3eN/utZ+init5fl/eEcr6Xx/cqJ+PUw0rorN/rp55Ld27fc7/uz87+sc/3jSfL+2uv02ftzzT9pu206v/13JZ/Xyrnzd1VKttjgZsSv5ePP6qYePbdQb+2fxHz/Wuf9rdf1nk6/Ptxj/zcM32+46COd/dlvnf/uFux998UO79rd2/t+sl47na7bS/231AJ/kuQMAAAAAAIBBU4iIA5EUihvlQqFYXH9/x+HYVyhXqrUTFypLl2aj/lnZ8RgrNO50H2x6P8Rk/n7YRn3qsfp0RByKiG9H9tbrxZlKebbfwQMAAAAAAAAAAAAAAAAAAMCA2N/m8/+Z30f6fXTAU1f/YoPd/T4KoB+6fuV/L77pCRhIXfMfeG7Jfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2rK0+uDaT1WevLC/NV66cnE2r88WFpZniTGXxcnGuUpkrp8WZykK3v1euVC5PTsXS1YlaWq1NVJdXzi9Uli7Vzl9cKM2l59Ox/yUqAAAAAAAAAAAAAAAAAAAAeLZUl1fmS+VyuqjQtvB+DMRhPM0A1+3o4aODEoVCTwt97pgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMl/AQAA//9k/TZJ") chdir(&(0x7f0000000080)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[], 0xe01, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000800)='\x00', 0x1}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20008480) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 2.768020413s ago: executing program 0 (id=1244): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x46800) r0 = open(0x0, 0x44e543, 0x100) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r1, 0x4b36) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) 2.393602946s ago: executing program 1 (id=1246): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r0 = syz_mount_image$fuse(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x24, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize}], [{@hash}]}}, 0x0, 0x0, &(0x7f0000000780)) symlinkat(&(0x7f00000005c0)='./file1\x00', r0, &(0x7f00000007c0)='./file1\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r1, 0xe0ffff, 0x4101, 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000800)={0x3, 0x0, {0x3, 0x0, 0x0, 0x6d7e9f1b10751f30, 0x7}, 0x3}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 2.360508401s ago: executing program 2 (id=1247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) 1.989871088s ago: executing program 1 (id=1248): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000380)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x19, "00769a7d8200010000001495595915303d6000"}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) syz_socket_connect_nvme_tcp() ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000180)={0x2, 0x7, 0xc3, &(0x7f0000000340)=""/195}) 940.035287ms ago: executing program 2 (id=1249): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 899.466336ms ago: executing program 1 (id=1250): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200012, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f00000002c0), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = openat(r1, 0x0, 0x202000, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$setsig(0x4203, r4, 0x8, &(0x7f0000000240)={0x22, 0x7, 0x7fff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e20, 0x80000, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000000)=0x80000001, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) 787.731407ms ago: executing program 2 (id=1251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, 0x0}, 0x90) r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}], 0x1, 0x0) 539.515782ms ago: executing program 2 (id=1252): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2"], 0x0) 0s ago: executing program 2 (id=1253): socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000000002010400000000000000000200000030e196802c00018014000300050000000000000000000000000000000a000400000000000000000000000000000000000400038004000180403f1a47e50c5e5100974dd0af1e98f357331de02ed327a0b94cc29a4cb255b59522c0c2a5c968533cfe9f90caabc92e3f333d338249763301ea8fc5386632ba420af31eda076122d39236e84bcc0d75"], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x3, 0x10, 0xb483, 0x8e8189e6de8dedf8, 0xffffffffffffffff, 0x1, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5, 0x200}, 0x48) socket$kcm(0x29, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="74b61dd9a00d1ab3", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmsg$can_bcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/5, 0x5}], 0x2, &(0x7f0000000540)=""/36, 0x24}, 0x40000003) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 00.0004: unknown main item tag 0x0 [ 244.110313][ T5294] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 244.120262][ T5294] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 244.148450][ T5294] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 244.760734][ T35] team0 (unregistering): Port device team_slave_1 removed [ 244.813990][ T35] team0 (unregistering): Port device team_slave_0 removed [ 245.312774][ T7493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.332839][ T7356] veth0_macvtap: entered promiscuous mode [ 245.395929][ T7356] veth1_macvtap: entered promiscuous mode [ 245.485611][ T7160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.735702][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.966643][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.041807][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.064673][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.446768][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.745326][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.777871][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.827799][ T7493] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.882601][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.889778][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.919330][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.926529][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.978336][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.023017][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.023055][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.023078][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.023108][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.023128][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.025426][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.154140][ T7356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.154189][ T7356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.154229][ T7356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.154268][ T7356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.186190][ T7452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.903072][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.903095][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.355031][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.355061][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.461992][ T7786] tty tty28: ldisc open failed (-12), clearing slot 27 [ 248.483545][ T7794] tty tty1: ldisc open failed (-12), clearing slot 0 [ 248.655324][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.690345][ T7452] veth0_vlan: entered promiscuous mode [ 248.707544][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.796779][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.861740][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.863197][ T7452] veth1_vlan: entered promiscuous mode [ 249.950901][ T35] IPVS: stop unused estimator thread 0... [ 250.097910][ T7452] veth0_macvtap: entered promiscuous mode [ 250.217128][ T7452] veth1_macvtap: entered promiscuous mode [ 250.402003][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.423424][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.453017][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.481756][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.527395][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.548249][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.573190][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.610080][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.640897][ T7452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.737424][ T7827] fuse: Bad value for 'group_id' [ 250.747037][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.776863][ T7827] fuse: Bad value for 'group_id' [ 250.781727][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.811491][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.845174][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.872946][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.012648][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.060080][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.106098][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.121574][ T7452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.206266][ T7840] loop4: detected capacity change from 0 to 2048 [ 251.228234][ T7493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.365419][ T7452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.389091][ T7840] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.428588][ T7452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.495525][ T7452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.574162][ T7452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.979755][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.017298][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.068391][ T7493] veth0_vlan: entered promiscuous mode [ 252.117314][ T7851] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.682'. [ 252.151883][ T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 252.411942][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 252.417064][ T5630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.436217][ T5630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.447089][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.474111][ T8] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 252.492348][ T7493] veth1_vlan: entered promiscuous mode [ 252.537559][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=1ea1, bcdDevice=e8.9c [ 252.567401][ T8] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 252.611047][ T8] usb 6-1: Product: syz [ 252.651553][ T8] usb 6-1: Manufacturer: syz [ 252.670764][ T8] usb 6-1: SerialNumber: syz [ 252.809799][ T7493] veth0_macvtap: entered promiscuous mode [ 252.943452][ T7493] veth1_macvtap: entered promiscuous mode [ 252.975497][ T1165] usb 6-1: USB disconnect, device number 14 [ 253.184318][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.248285][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.309095][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.369983][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.383196][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.443021][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.475019][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.509978][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.557148][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.621847][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.702792][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.853776][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.885336][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.900243][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.926643][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.927742][ T7882] fuse: Bad value for 'group_id' [ 253.937944][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.952873][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.954218][ T7882] fuse: Bad value for 'group_id' [ 253.963379][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.981526][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.991978][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.010286][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.040923][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.065334][ T7879] netlink: 'syz.5.688': attribute type 2 has an invalid length. [ 254.084520][ T7879] netlink: 'syz.5.688': attribute type 1 has an invalid length. [ 254.102286][ T7879] netlink: 132 bytes leftover after parsing attributes in process `syz.5.688'. [ 254.308242][ T7493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.321525][ T7493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.340598][ T7493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.349643][ T7493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.368133][ T7887] loop2: detected capacity change from 0 to 2048 [ 254.502065][ T7887] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 254.515425][ T7893] loop5: detected capacity change from 0 to 764 [ 254.538061][ T7887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.543290][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.549644][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.321343][ T7374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.459016][ T7913] netlink: 25 bytes leftover after parsing attributes in process `syz.0.694'. [ 256.494712][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.535542][ T7918] loop4: detected capacity change from 0 to 16 [ 256.542376][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.611219][ T7918] erofs: (device loop4): mounted with root inode @ nid 36. [ 256.711306][ T7918] syz.4.699: attempt to access beyond end of device [ 256.711306][ T7918] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 256.742365][ T7921] batadv_slave_1: default FDB implementation only supports local addresses [ 256.781417][ T7918] syz.4.699: attempt to access beyond end of device [ 256.781417][ T7918] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 256.819964][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.849053][ T7922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.856812][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.928888][ T7923] syz.4.699: attempt to access beyond end of device [ 256.928888][ T7923] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 257.588936][ T7939] loop4: detected capacity change from 0 to 2048 [ 258.342571][ T7939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.430413][ T7947] syzkaller0: entered allmulticast mode [ 258.699871][ T7947] syzkaller0 (unregistering): left allmulticast mode [ 259.133750][ T7951] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(253984171262870) <= P.seqno(0) <= S.SWH(253984171262944)) and (P.ackno exists or LAWL(194995401418348) <= P.ackno(194995401418349) <= S.AWH(194995401418349), sending SYNC... [ 269.081854][ T5336] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 269.201933][ T5338] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 269.393610][ T5338] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 269.393655][ T5338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.403937][ T5338] usb 1-1: config 0 descriptor?? [ 269.503981][ T8012] loop2: detected capacity change from 0 to 1024 [ 269.505371][ T8012] EXT4-fs: Ignoring removed orlov option [ 269.535151][ T8012] EXT4-fs (loop2): Test dummy encryption mode enabled [ 269.541818][ T5336] usb 4-1: Using ep0 maxpacket: 8 [ 269.546398][ T5336] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 269.546435][ T5336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.546462][ T5336] usb 4-1: Product: syz [ 269.546481][ T5336] usb 4-1: Manufacturer: syz [ 269.546502][ T5336] usb 4-1: SerialNumber: syz [ 269.555952][ T5336] usb 4-1: config 0 descriptor?? [ 269.612998][ T8012] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 269.800085][ T8012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.970467][ T8012] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.722: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 270.054087][ T5338] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 270.286828][ T5336] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 270.302053][ T5249] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 270.331817][ T5336] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 270.386411][ T7374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.460738][ T5338] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 270.491204][ T5336] radio-raremono 4-1:0.0: Thanko's Raremono connected: (10C4:818A) [ 270.533327][ T5249] usb 5-1: Using ep0 maxpacket: 8 [ 270.564628][ T5249] usb 5-1: config 64 has an invalid interface number: 19 but max is 0 [ 270.601799][ T5338] usb 1-1: USB disconnect, device number 17 [ 270.612352][ T5249] usb 5-1: config 64 has no interface number 0 [ 270.629028][ T5249] usb 5-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 136 [ 270.695786][ T5249] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 270.740502][ T5249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.777242][ T5336] radio-raremono 4-1:0.0: V4L2 device registered as radio32 [ 270.785167][ T8018] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 270.835450][ T5249] usb 5-1: probing VID:PID(2201:012C) [ 270.889557][ T5249] usb 5-1: vub300 testing BULK OUT EndPoint(0) 02 [ 270.953162][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.962477][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.998775][ T5249] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 271.177309][ T8039] netlink: 'syz.4.723': attribute type 6 has an invalid length. [ 271.195489][ T8039] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.723'. [ 271.303177][ T5249] vub300 5-1:64.19: probe with driver vub300 failed with error -22 [ 271.602541][ T5336] usb 4-1: USB disconnect, device number 15 [ 271.631453][ T5336] radio-raremono 4-1:0.0: Thanko's Raremono disconnected [ 271.640345][ T8044] loop0: detected capacity change from 0 to 512 [ 271.736436][ T8044] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 271.804192][ T8044] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 271.871815][ T8044] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 271.937734][ T8044] System zones: 0-2, 18-18, 34-34 [ 271.965447][ T8044] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.730: iget: bogus i_mode (2755) [ 271.968745][ T29] audit: type=1326 audit(1725334117.341:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c979eb9 code=0x0 [ 272.028527][ T8044] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.730: couldn't read orphan inode 15 (err -117) [ 272.082357][ T8044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.200574][ T8044] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 3: comm syz.0.730: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 272.445308][ T5249] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 272.525681][ T7452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.251795][ T5249] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 273.271804][ T5249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.541909][ T5249] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 273.551002][ T5249] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 273.573443][ T5249] usb 2-1: Manufacturer: syz [ 273.584117][ T8069] bridge0: port 3(ip6gretap0) entered blocking state [ 273.626397][ T8069] bridge0: port 3(ip6gretap0) entered disabled state [ 273.639153][ T8] usb 5-1: USB disconnect, device number 14 [ 273.659971][ T5249] usb 2-1: config 0 descriptor?? [ 273.668198][ T8069] ip6gretap0: entered allmulticast mode [ 273.703699][ T8069] ip6gretap0: entered promiscuous mode [ 273.710291][ T8069] bridge0: port 3(ip6gretap0) entered blocking state [ 273.717320][ T8069] bridge0: port 3(ip6gretap0) entered forwarding state [ 273.904456][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.916884][ T5249] rc_core: IR keymap rc-hauppauge not found [ 273.983048][ T5249] Registered IR keymap rc-empty [ 273.984897][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.067541][ T5249] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 274.140310][ T5249] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 274.262306][ T8082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.358982][ T5249] usb 2-1: USB disconnect, device number 17 [ 279.109037][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 279.155700][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 279.230825][ T8097] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 279.388439][ T8107] batadv0: entered promiscuous mode [ 279.400548][ T8107] batadv0: left promiscuous mode [ 279.462036][ T5249] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 279.701762][ T5249] usb 4-1: Using ep0 maxpacket: 16 [ 279.776958][ T5249] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 279.823144][ T5249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.861438][ T5249] usb 4-1: Product: syz [ 279.876890][ T5249] usb 4-1: Manufacturer: syz [ 279.900672][ T5249] usb 4-1: SerialNumber: syz [ 279.947289][ T5249] usb 4-1: config 0 descriptor?? [ 279.969398][ T5249] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 280.174130][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 280.207874][ T5249] pwc: Warning: more than 1 configuration available. [ 280.500674][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.521405][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.529660][ T8] usb 5-1: Product: syz [ 280.533910][ T8] usb 5-1: Manufacturer: syz [ 280.538517][ T8] usb 5-1: SerialNumber: syz [ 280.556605][ T8] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.637151][ T5249] pwc: send_video_command error -71 [ 280.673400][ T5249] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 280.707193][ T5336] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.709084][ T5249] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 281.200327][ T5249] usb 4-1: USB disconnect, device number 16 [ 281.575436][ T5294] usb 5-1: USB disconnect, device number 15 [ 281.629617][ T5336] usb 5-1: ath9k_htc: Unable to allocate URBs [ 281.646113][ T5294] usb 5-1: ath9k_htc: USB layer deinitialized [ 282.310832][ T8155] bridge0: port 3(ip6gretap0) entered blocking state [ 282.375495][ T8155] bridge0: port 3(ip6gretap0) entered disabled state [ 282.430707][ T8155] ip6gretap0: entered allmulticast mode [ 282.499410][ T8155] ip6gretap0: entered promiscuous mode [ 282.532770][ T8155] bridge0: port 3(ip6gretap0) entered blocking state [ 282.539757][ T8155] bridge0: port 3(ip6gretap0) entered forwarding state [ 284.729178][ T8186] loop5: detected capacity change from 0 to 16 [ 284.796567][ T8186] erofs: (device loop5): mounted with root inode @ nid 36. [ 284.848365][ T8186] syz.5.780: attempt to access beyond end of device [ 284.848365][ T8186] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 284.913435][ T8186] syz.5.780: attempt to access beyond end of device [ 284.913435][ T8186] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 285.027110][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a82cc00: rx timeout, send abort [ 285.122829][ T8195] : renamed from ipvlan1 [ 285.244868][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 285.538775][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a82cc00: abort rx timeout. Force session deactivation [ 285.643532][ T5294] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 285.845966][ T8212] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 285.865167][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.884913][ T8212] bond0: (slave bond_slave_0): Releasing backup interface [ 285.903682][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.940902][ T5294] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.976445][ T5294] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 285.999890][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.046641][ T5294] usb 1-1: config 0 descriptor?? [ 286.289294][ T5294] usbhid 1-1:0.0: can't add hid device: -71 [ 286.296207][ T5294] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 286.313632][ T5294] usb 1-1: USB disconnect, device number 18 [ 286.445121][ T8226] fuse: Unknown parameter 'grou00000000000000000000' [ 286.848178][ T8232] loop1: detected capacity change from 0 to 8192 [ 286.935772][ T5294] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 287.061803][ T5295] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 287.160630][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.185256][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.208566][ T5294] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.240360][ T5294] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 287.268694][ T5295] usb 5-1: Using ep0 maxpacket: 16 [ 287.291873][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.311248][ T5294] usb 1-1: config 0 descriptor?? [ 287.338775][ T5295] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 287.361028][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.399762][ T5295] usb 5-1: Product: syz [ 287.406411][ T5295] usb 5-1: Manufacturer: syz [ 287.411038][ T5295] usb 5-1: SerialNumber: syz [ 287.425975][ T5295] usb 5-1: config 0 descriptor?? [ 287.451187][ T5295] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 287.580090][ T5294] usbhid 1-1:0.0: can't add hid device: -71 [ 287.610239][ T5294] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 287.670697][ T5295] pwc: Warning: more than 1 configuration available. [ 287.679587][ T5294] usb 1-1: USB disconnect, device number 19 [ 287.796400][ T8248] loop2: detected capacity change from 0 to 2048 [ 287.874783][ T5295] pwc: Failed to set LED on/off time (-71) [ 287.886347][ T5295] pwc: send_video_command error -71 [ 287.895733][ T5295] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 287.907873][ T8248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.908168][ T5295] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 287.957043][ T5295] usb 5-1: USB disconnect, device number 16 [ 287.988522][ T29] audit: type=1800 audit(1725334133.361:128): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.806" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 288.028126][ T29] audit: type=1800 audit(1725334133.401:129): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.806" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 288.825202][ T7374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.269832][ T8273] fuse: Unknown parameter 'grou00000000000000000000' [ 289.824425][ T8286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.641069][ T8286] vxlan0: entered promiscuous mode [ 292.930490][ T5338] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 293.026363][ T8307] fuse: Unknown parameter 'grou00000000000000000000' [ 293.194682][ T5338] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 293.232113][ T5338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.272742][ T5338] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 293.302217][ T5338] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 293.321820][ T5338] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 293.329949][ T5338] usb 5-1: Manufacturer: syz [ 293.370031][ T5338] usb 5-1: config 0 descriptor?? [ 293.393480][ T5338] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 294.026250][ T8327] loop0: detected capacity change from 0 to 512 [ 294.048427][ T8327] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.092104][ T8327] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.831: corrupted in-inode xattr: invalid ea_ino [ 294.106087][ T8327] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.831: couldn't read orphan inode 12 (err -117) [ 294.138431][ T8327] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.203455][ T8327] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.831: Directory hole found for htree leaf block 0 [ 294.262306][ T8327] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.831: Directory hole found for htree leaf block 0 [ 294.325262][ T8331] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.831: Directory hole found for htree leaf block 0 [ 294.373314][ T8327] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.831: Directory hole found for htree leaf block 0 [ 294.387757][ T8327] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.831: Directory hole found for htree leaf block 0 [ 294.415455][ T8327] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.831: Directory hole found for htree leaf block 0 [ 294.489015][ T7452] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 295.429622][ T5338] usb 5-1: USB disconnect, device number 17 [ 295.909561][ T8352] fuse: Unknown parameter 'group_i00000000000000000000' [ 296.061375][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.085343][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.096345][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.113873][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.132006][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 296.149471][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.789308][ T29] audit: type=1326 audit(1725334143.161:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 297.814239][ T29] audit: type=1326 audit(1725334143.161:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 298.151809][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 298.242912][ T5237] Bluetooth: hci6: command tx timeout [ 298.313205][ T8401] fuse: Unknown parameter 'group_i00000000000000000000' [ 298.363886][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 298.434719][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.467417][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 298.632405][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 298.670132][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 298.701597][ T9] usb 2-1: Manufacturer: syz [ 298.953135][ T9] usb 2-1: config 0 descriptor?? [ 299.569330][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 300.118884][ T8358] chnl_net:caif_netlink_parms(): no params data found [ 300.326279][ T5237] Bluetooth: hci6: command tx timeout [ 300.472554][ T5338] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 300.683932][ T5338] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 300.699949][ T5338] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.731454][ T5338] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 300.755248][ T8358] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.759918][ T5338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 300.791868][ T5338] usb 5-1: SerialNumber: syz [ 300.802762][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.814484][ T8358] bridge_slave_0: entered allmulticast mode [ 300.825865][ T8358] bridge_slave_0: entered promiscuous mode [ 300.836770][ T8358] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.846259][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.854907][ T8358] bridge_slave_1: entered allmulticast mode [ 300.879189][ T8358] bridge_slave_1: entered promiscuous mode [ 301.093203][ T5338] usb 5-1: 0:2 : does not exist [ 301.130608][ T5338] usb 5-1: unit 5 not found! [ 301.250234][ T8445] fuse: Unknown parameter 'group_i00000000000000000000' [ 301.328337][ T5338] usb 5-1: USB disconnect, device number 18 [ 301.466803][ T8358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.545063][ T8358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.596501][ T8] usb 2-1: USB disconnect, device number 18 [ 301.971012][ T29] audit: type=1326 audit(1725334147.341:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe201979eb9 code=0x7ffc0000 [ 302.099764][ T29] audit: type=1326 audit(1725334147.341:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe201979eb9 code=0x7ffc0000 [ 302.123562][ T29] audit: type=1326 audit(1725334147.341:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fe201979eb9 code=0x7ffc0000 [ 302.147668][ T29] audit: type=1326 audit(1725334147.341:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe201979eb9 code=0x7ffc0000 [ 302.209995][ T8358] team0: Port device team_slave_0 added [ 302.414015][ T5237] Bluetooth: hci6: command tx timeout [ 303.153237][ T8358] team0: Port device team_slave_1 added [ 303.550208][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.595313][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.874137][ T8358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.576313][ T5237] Bluetooth: hci6: command tx timeout [ 304.741874][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.811829][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.888261][ T8358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.288521][ T8358] hsr_slave_0: entered promiscuous mode [ 305.326082][ T8358] hsr_slave_1: entered promiscuous mode [ 305.371085][ T8358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.412306][ T8358] Cannot create hsr debugfs directory [ 305.772565][ T5338] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 305.994096][ T5338] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 306.017901][ T5338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.060724][ T5338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.083676][ T5338] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 306.121573][ T8499] loop1: detected capacity change from 0 to 8192 [ 306.154419][ T5338] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 306.193524][ T5338] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 306.222594][ T5338] usb 5-1: Manufacturer: syz [ 306.274148][ T5338] usb 5-1: config 0 descriptor?? [ 306.523262][ T8358] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.528429][ T8503] loop2: detected capacity change from 0 to 2048 [ 306.612118][ T8503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.698672][ T5338] usbhid 5-1:0.0: can't add hid device: -71 [ 306.706789][ T5338] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 306.732045][ T5338] usb 5-1: USB disconnect, device number 19 [ 306.915625][ T8358] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.110388][ T8503] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 307.133471][ T8358] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.212820][ T8503] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 307.261853][ T8503] EXT4-fs (loop2): This should not happen!! Data will be lost [ 307.261853][ T8503] [ 307.261941][ T8503] EXT4-fs (loop2): Total free blocks count 0 [ 307.261962][ T8503] EXT4-fs (loop2): Free/Dirty block details [ 307.262066][ T8503] EXT4-fs (loop2): free_blocks=2415919104 [ 307.262161][ T8503] EXT4-fs (loop2): dirty_blocks=16 [ 307.262181][ T8503] EXT4-fs (loop2): Block reservation details [ 307.262197][ T8503] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 307.437383][ T8501] loop0: detected capacity change from 0 to 40427 [ 307.473611][ T7374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.575852][ T8501] F2FS-fs (loop0): Found nat_bits in checkpoint [ 307.606409][ T8358] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.960916][ T8501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 308.257725][ T8501] syz.0.885: attempt to access beyond end of device [ 308.257725][ T8501] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 308.380733][ T8358] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 308.563182][ T8358] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.593821][ T7452] syz-executor: attempt to access beyond end of device [ 308.593821][ T7452] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 308.651913][ T7452] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 309.546895][ T8358] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 309.607980][ T8358] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 310.134613][ T5338] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 310.182873][ T8358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.299571][ T8358] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.354973][ T5338] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 310.397504][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.404833][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.428670][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.489022][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.542191][ T5338] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 310.561297][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.568503][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.608486][ T5338] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 310.629143][ T5338] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 310.648833][ T5338] usb 4-1: Manufacturer: syz [ 310.665365][ T5338] usb 4-1: config 0 descriptor?? [ 311.171520][ T5338] usbhid 4-1:0.0: can't add hid device: -71 [ 311.221281][ T5338] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 311.259116][ T5338] usb 4-1: USB disconnect, device number 17 [ 313.039496][ T8585] loop0: detected capacity change from 0 to 8192 [ 313.502005][ T8358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.525889][ T8592] loop4: detected capacity change from 0 to 40427 [ 314.561015][ T8592] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 314.601123][ T8592] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 314.704035][ T8592] F2FS-fs (loop4): invalid crc value [ 314.724839][ T8592] F2FS-fs (loop4): invalid crc value [ 314.750669][ T8592] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 314.773686][ T8358] veth0_vlan: entered promiscuous mode [ 314.835578][ T8358] veth1_vlan: entered promiscuous mode [ 314.928141][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 314.995419][ T8358] veth0_macvtap: entered promiscuous mode [ 315.046321][ T8358] veth1_macvtap: entered promiscuous mode [ 315.127859][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.149746][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.168451][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.170252][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.181190][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.190999][ T5338] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 315.226292][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.248692][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.261959][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.270678][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.309251][ T25] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 315.338235][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.360436][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.371073][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 315.375131][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 315.402782][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.411701][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 315.430264][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.441217][ T25] usb 1-1: SerialNumber: syz [ 315.450929][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.497813][ T5338] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 315.499332][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.545510][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.599341][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.608304][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.636995][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.657477][ T5338] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 315.658496][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.695691][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.711261][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.735860][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.751122][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.776414][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.801257][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.805535][ T25] usb 1-1: 0:2 : does not exist [ 315.836489][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.848021][ T5338] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 315.850724][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.877289][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.911869][ T5338] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 315.921880][ T25] usb 1-1: unit 5 not found! [ 315.968179][ T5338] usb 4-1: Manufacturer: syz [ 315.989297][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.004456][ T5338] usb 4-1: config 0 descriptor?? [ 316.014890][ T25] usb 1-1: USB disconnect, device number 20 [ 316.088979][ T8358] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.152398][ T8358] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.182041][ T8358] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.204197][ T8358] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.345238][ T7981] udevd[7981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.487178][ T5338] usbhid 4-1:0.0: can't add hid device: -71 [ 316.501817][ T5338] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 316.527150][ T5338] usb 4-1: USB disconnect, device number 18 [ 316.808557][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.815456][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.275112][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.348689][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.428248][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.460665][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.616262][ T8651] loop1: detected capacity change from 0 to 8192 [ 319.756687][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 320.873790][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 321.341780][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.430012][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 321.517562][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.555027][ T25] usb 5-1: Product: syz [ 321.571713][ T25] usb 5-1: Manufacturer: syz [ 321.579632][ T25] usb 5-1: SerialNumber: syz [ 321.597986][ T25] usb 5-1: config 0 descriptor?? [ 321.808425][ T8698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.832511][ T8696] 9pnet_fd: Insufficient options for proto=fd [ 322.873433][ T8708] loop1: detected capacity change from 0 to 2048 [ 322.965539][ T8715] capability: warning: `syz.2.948' uses 32-bit capabilities (legacy support in use) [ 322.976694][ T5336] usb 5-1: USB disconnect, device number 20 [ 323.143911][ T8708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.277345][ T29] audit: type=1800 audit(1725334168.651:136): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.945" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 323.409857][ T8730] loop3: detected capacity change from 0 to 512 [ 323.430979][ T29] audit: type=1800 audit(1725334168.681:137): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.945" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 323.507656][ T8730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.531387][ T8730] ext4 filesystem being mounted at /50 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.566632][ T8737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.739411][ T7493] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 323.744062][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.772278][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.780033][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.791127][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.807056][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.815885][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.824401][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.832684][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.850535][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.869563][ T7493] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 323.887830][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.896022][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.919207][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.932583][ T5336] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 323.953592][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.980539][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 323.991567][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.062952][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.072677][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.083018][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.139580][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.156850][ T5336] usb 5-1: Using ep0 maxpacket: 16 [ 324.165055][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.173560][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.218379][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.244210][ T5336] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 324.265845][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.284948][ T5336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.296505][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.313788][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.344687][ T7493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.354248][ T5336] usb 5-1: Product: syz [ 324.372134][ T5336] usb 5-1: Manufacturer: syz [ 324.386183][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.397472][ T5336] usb 5-1: SerialNumber: syz [ 324.399413][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.450376][ T5336] usb 5-1: config 0 descriptor?? [ 324.464039][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.487855][ T5336] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 324.490952][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.571727][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.579165][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.643804][ T5237] Bluetooth: hci3: command 0x0406 tx timeout [ 324.652791][ T5338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 324.710816][ T5336] pwc: Warning: more than 1 configuration available. [ 324.713919][ T5338] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 324.811926][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.915005][ T7356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.985176][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.134578][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.150883][ T5336] pwc: send_video_command error -71 [ 325.160959][ T5336] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 325.173421][ T5336] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 325.200329][ T5336] usb 5-1: USB disconnect, device number 21 [ 325.326567][ T8754] loop1: detected capacity change from 0 to 512 [ 325.390086][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.512210][ T8754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.637229][ T8754] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.313903][ T8769] loop0: detected capacity change from 0 to 128 [ 326.333631][ T7356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.361366][ T8770] loop4: detected capacity change from 0 to 512 [ 326.439851][ T8769] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000020) [ 326.481581][ T8770] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 326.514317][ T53] ip6gretap0: left allmulticast mode [ 326.519670][ T53] ip6gretap0: left promiscuous mode [ 326.573007][ T53] bridge0: port 3(ip6gretap0) entered disabled state [ 326.679495][ T53] bridge_slave_1: left allmulticast mode [ 326.712381][ T53] bridge_slave_1: left promiscuous mode [ 326.756877][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.947417][ T53] bridge_slave_0: left allmulticast mode [ 328.281287][ T53] bridge_slave_0: left promiscuous mode [ 328.482099][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.778234][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.809567][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.818156][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.834739][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.845145][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.853363][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.943279][ T8795] mmap: syz.1.970 (8795) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 330.078149][ T8814] loop4: detected capacity change from 0 to 2048 [ 330.185751][ T8814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.312684][ T29] audit: type=1800 audit(1725334175.661:138): pid=8814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.976" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 330.459054][ T29] audit: type=1800 audit(1725334175.711:139): pid=8814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.976" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 330.962165][ T5244] Bluetooth: hci4: command tx timeout [ 331.152044][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.169398][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.190971][ T53] bond0 (unregistering): Released all slaves [ 331.323018][ T5338] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 331.605640][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.636278][ T5338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.682114][ T5338] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.778018][ T5338] usb 3-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 331.887662][ T5338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.925230][ T5338] usb 3-1: config 0 descriptor?? [ 331.964363][ T5338] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 333.042519][ T5245] Bluetooth: hci4: command tx timeout [ 333.601102][ T5336] usb 3-1: USB disconnect, device number 11 [ 333.775770][ T8851] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.984'. [ 334.246752][ T5252] Bluetooth: hci2: command 0x0406 tx timeout [ 334.254345][ T5245] Bluetooth: hci5: command 0x0406 tx timeout [ 334.789009][ T5336] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 335.023718][ T5338] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 335.034923][ T5336] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 335.070599][ T5336] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 335.111552][ T5336] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.123303][ T5237] Bluetooth: hci4: command tx timeout [ 335.154743][ T5336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 335.181575][ T5336] usb 6-1: SerialNumber: syz [ 335.215062][ T5338] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.239104][ T5338] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.248726][ T5338] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 335.261789][ T5338] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 335.267328][ T8867] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 335.278290][ T5338] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 335.291055][ T5338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 335.299387][ T5338] usb 5-1: SerialNumber: syz [ 335.592469][ T8867] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 335.806181][ T5338] usb 5-1: 0:2 : does not exist [ 335.811175][ T5338] usb 5-1: unit 5 not found! [ 336.113958][ T5336] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 336.190004][ T5338] usb 5-1: USB disconnect, device number 22 [ 336.766456][ T53] hsr_slave_0: left promiscuous mode [ 336.803625][ T53] hsr_slave_1: left promiscuous mode [ 336.827217][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.849698][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.869755][ T7981] udevd[7981]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.886965][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.910810][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.981771][ T5338] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 336.986342][ T53] veth1_macvtap: left promiscuous mode [ 336.996801][ T53] veth0_macvtap: left promiscuous mode [ 337.002910][ T53] veth1_vlan: left promiscuous mode [ 337.008590][ T53] veth0_vlan: left promiscuous mode [ 337.169382][ T5244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.181352][ T5244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.197072][ T5244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.207803][ T5338] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 97, changing to 10 [ 337.220361][ T5244] Bluetooth: hci4: command tx timeout [ 337.222289][ T5245] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.226697][ T5338] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24929, setting to 1024 [ 337.234978][ T5245] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.244164][ T5338] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.261494][ T5338] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 337.262907][ T5245] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.284715][ T5338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.319777][ T5338] usb 5-1: Product: syz [ 337.338376][ T5338] usb 5-1: Manufacturer: syz [ 337.346035][ T5338] usb 5-1: SerialNumber: syz [ 337.362587][ T5338] usb 5-1: config 0 descriptor?? [ 337.392335][ T5338] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 337.414053][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 337.465869][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 337.500243][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 337.541984][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 337.549781][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 337.567644][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 337.574556][ T8907] loop2: detected capacity change from 0 to 512 [ 337.640722][ T8907] EXT4-fs (loop2): 1 truncate cleaned up [ 337.652316][ T8907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.678764][ T8907] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.994: Directory hole found for htree leaf block 0 [ 337.685725][ T5338] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 337.983360][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 337.991424][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 338.000812][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 338.008954][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 338.016777][ T5338] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 338.027387][ T5338] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 338.099596][ T8911] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.994: Directory hole found for htree leaf block 0 [ 338.929171][ T5338] usb 5-1: USB disconnect, device number 23 [ 338.938820][ T7374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.947044][ T5338] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 338.976482][ T5338] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 338.988647][ T5338] keyspan 5-1:0.0: device disconnected [ 339.188820][ T8924] loop2: detected capacity change from 0 to 512 [ 339.250326][ T8924] EXT4-fs (loop2): 1 truncate cleaned up [ 339.257756][ T8924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.308161][ T8924] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.997: Directory hole found for htree leaf block 0 [ 339.388003][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 339.394772][ T5245] Bluetooth: hci7: command tx timeout [ 339.497464][ T53] team0 (unregistering): Port device team_slave_1 removed [ 339.657810][ T53] team0 (unregistering): Port device team_slave_0 removed [ 339.858205][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 340.111820][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.130147][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.181707][ T8] usb 5-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 340.230206][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.273393][ T8] usb 5-1: config 0 descriptor?? [ 340.551208][ T7374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.892280][ T8934] loop2: detected capacity change from 0 to 2048 [ 340.962674][ T8934] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.972023][ T8] usb 5-1: USB disconnect, device number 24 [ 341.046460][ T8936] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1000'. [ 341.482006][ T5244] Bluetooth: hci7: command tx timeout [ 342.467122][ T5245] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 342.484538][ T5245] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 342.496553][ T5245] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 342.505472][ T5245] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 342.516097][ T5245] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 342.524521][ T5245] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 342.613791][ T25] usb 6-1: USB disconnect, device number 15 [ 342.623831][ T25] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 343.384253][ T8798] chnl_net:caif_netlink_parms(): no params data found [ 343.522832][ T5244] Bluetooth: hci7: command tx timeout [ 344.553714][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.564911][ T5244] Bluetooth: hci8: command tx timeout [ 344.595915][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.492535][ T8798] bridge_slave_0: entered allmulticast mode [ 345.543228][ T8976] fuse: Unknown parameter '' [ 345.562024][ T8798] bridge_slave_0: entered promiscuous mode [ 345.602367][ T5244] Bluetooth: hci7: command tx timeout [ 345.912394][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.919601][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.964676][ T8798] bridge_slave_1: entered allmulticast mode [ 346.001399][ T8798] bridge_slave_1: entered promiscuous mode [ 346.444049][ T1047] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.555738][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.590569][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.642004][ T5244] Bluetooth: hci8: command tx timeout [ 346.730309][ T1047] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.805423][ T8991] loop4: detected capacity change from 0 to 32768 [ 346.829744][ T8991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1012 (8991) [ 346.886553][ T8991] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 346.925605][ T8991] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 346.946654][ T8991] BTRFS info (device loop4): using free-space-tree [ 346.986243][ T1047] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.159425][ T9012] loop2: detected capacity change from 0 to 512 [ 347.176189][ T9012] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.216183][ T8798] team0: Port device team_slave_0 added [ 347.232058][ T9012] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 347.281293][ T29] audit: type=1800 audit(1725334192.651:140): pid=8991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1012" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 347.304660][ T8798] team0: Port device team_slave_1 added [ 347.311113][ T9012] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.1015: inode #15: comm syz.2.1015: iget: illegal inode # [ 347.368519][ T29] audit: type=1800 audit(1725334192.711:141): pid=8991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1012" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 347.370808][ T9012] EXT4-fs (loop2): Remounting filesystem read-only [ 347.404395][ T9012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.452640][ T5295] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 347.476250][ T7374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.536738][ T1047] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.638350][ T5236] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 347.657196][ T5295] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.720962][ T5295] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 347.760372][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.785027][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.800799][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.840777][ T5295] usb 6-1: config 0 descriptor?? [ 347.851319][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.865735][ T5295] pwc: Askey VC010 type 2 USB webcam detected. [ 348.011577][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.019029][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.059253][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.085011][ T5295] pwc: send_video_command error -71 [ 348.090383][ T5295] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 348.113768][ T5295] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 348.138249][ T5295] usb 6-1: USB disconnect, device number 16 [ 348.725431][ T5244] Bluetooth: hci8: command tx timeout [ 349.041837][ T5295] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 349.156664][ T9031] loop4: detected capacity change from 0 to 128 [ 349.179918][ T9031] EXT4-fs: Ignoring removed nobh option [ 349.216125][ T9031] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 349.242931][ T5295] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.253809][ T5295] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 349.261894][ T9031] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 349.264889][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.287815][ T5295] usb 6-1: config 0 descriptor?? [ 349.312249][ T5295] pwc: Askey VC010 type 2 USB webcam detected. [ 349.328818][ T8798] hsr_slave_0: entered promiscuous mode [ 349.356894][ T8798] hsr_slave_1: entered promiscuous mode [ 349.366853][ T8798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.382655][ T8798] Cannot create hsr debugfs directory [ 349.578538][ T5236] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.721351][ T5295] pwc: recv_control_msg error -32 req 02 val 2b00 [ 349.744774][ T5295] pwc: recv_control_msg error -32 req 02 val 2700 [ 349.762934][ T5295] pwc: recv_control_msg error -32 req 02 val 2c00 [ 349.774068][ T5295] pwc: recv_control_msg error -32 req 04 val 1000 [ 349.790004][ T5295] pwc: recv_control_msg error -32 req 04 val 1300 [ 349.802913][ T5295] pwc: recv_control_msg error -32 req 04 val 1400 [ 349.834492][ T5295] pwc: recv_control_msg error -32 req 02 val 2000 [ 349.879031][ T5295] pwc: recv_control_msg error -32 req 02 val 2100 [ 349.908593][ T5295] pwc: recv_control_msg error -32 req 04 val 1500 [ 349.962403][ T5295] pwc: recv_control_msg error -32 req 02 val 2500 [ 350.009788][ T5295] pwc: recv_control_msg error -71 req 02 val 2400 [ 350.075277][ T5295] pwc: recv_control_msg error -71 req 02 val 2600 [ 350.129744][ T5295] pwc: recv_control_msg error -71 req 02 val 2900 [ 350.147803][ T5295] pwc: recv_control_msg error -71 req 02 val 2800 [ 350.191255][ T9037] loop2: detected capacity change from 0 to 8192 [ 350.199585][ T5295] pwc: recv_control_msg error -71 req 04 val 1100 [ 350.208611][ T5295] pwc: recv_control_msg error -71 req 04 val 1200 [ 350.217335][ T5295] pwc: Registered as video71. [ 350.229417][ T5295] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 350.253402][ T5295] usb 6-1: USB disconnect, device number 17 [ 350.266749][ T9037] loop2: p1 < > p4 < > [ 350.572356][ T1047] ip6gretap0: left allmulticast mode [ 350.577884][ T1047] ip6gretap0: left promiscuous mode [ 350.613182][ T1047] bridge0: port 3(ip6gretap0) entered disabled state [ 350.677998][ T1047] bridge_slave_1: left allmulticast mode [ 350.681506][ T8034] udevd[8034]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 350.690555][ T8147] udevd[8147]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 350.718603][ T1047] bridge_slave_1: left promiscuous mode [ 350.742028][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.801983][ T5244] Bluetooth: hci8: command tx timeout [ 350.842445][ T1047] bridge_slave_0: left allmulticast mode [ 350.868294][ T8034] udevd[8034]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 350.885747][ T1047] bridge_slave_0: left promiscuous mode [ 350.894910][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.152980][ T29] audit: type=1326 audit(1725334196.521:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743379eb9 code=0x7ffc0000 [ 351.224928][ T29] audit: type=1326 audit(1725334196.521:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743379eb9 code=0x7ffc0000 [ 351.324360][ T29] audit: type=1326 audit(1725334196.521:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fc743379eb9 code=0x7ffc0000 [ 351.439396][ T29] audit: type=1326 audit(1725334196.521:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743379eb9 code=0x7ffc0000 [ 351.479221][ T29] audit: type=1326 audit(1725334196.601:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743379eb9 code=0x7ffc0000 [ 354.096450][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.127344][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.147430][ T1047] bond0 (unregistering): Released all slaves [ 354.288238][ T8904] chnl_net:caif_netlink_parms(): no params data found [ 354.329316][ T9087] netlink: 'syz.2.1032': attribute type 10 has an invalid length. [ 354.345777][ T9087] bond0: (slave bond_slave_0): Releasing backup interface [ 354.606392][ T9102] vivid-007: disconnect [ 354.633232][ T9101] vivid-007: reconnect [ 356.727181][ T8944] chnl_net:caif_netlink_parms(): no params data found [ 357.656770][ T29] audit: type=1326 audit(1725334203.031:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 357.776458][ T29] audit: type=1326 audit(1725334203.061:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 357.912198][ T29] audit: type=1326 audit(1725334203.061:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 358.002683][ T29] audit: type=1326 audit(1725334203.061:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 358.044625][ T29] audit: type=1326 audit(1725334203.071:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 358.092519][ T29] audit: type=1326 audit(1725334203.071:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 358.127396][ T29] audit: type=1326 audit(1725334203.071:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 358.180573][ T29] audit: type=1326 audit(1725334203.071:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 358.270947][ T29] audit: type=1326 audit(1725334203.071:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 358.295264][ T29] audit: type=1326 audit(1725334203.071:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9c979eb9 code=0x7ffc0000 [ 358.580790][ T9137] netlink: 'syz.2.1043': attribute type 10 has an invalid length. [ 358.802109][ T8904] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.809356][ T8904] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.892613][ T8904] bridge_slave_0: entered allmulticast mode [ 358.973778][ T8904] bridge_slave_0: entered promiscuous mode [ 359.024657][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.057483][ T8904] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.074133][ T8904] bridge_slave_1: entered allmulticast mode [ 359.167131][ T8904] bridge_slave_1: entered promiscuous mode [ 360.552567][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.559767][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.583546][ T8944] bridge_slave_0: entered allmulticast mode [ 360.591606][ T8944] bridge_slave_0: entered promiscuous mode [ 360.629278][ T1047] hsr_slave_0: left promiscuous mode [ 360.643135][ T1047] hsr_slave_1: left promiscuous mode [ 360.681769][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.689266][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.727338][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.753065][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.839361][ T1047] veth1_macvtap: left promiscuous mode [ 360.857114][ T1047] veth0_macvtap: left promiscuous mode [ 360.870911][ T1047] veth1_vlan: left promiscuous mode [ 360.880715][ T9181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.892692][ T1047] veth0_vlan: left promiscuous mode [ 362.530856][ T9194] loop4: detected capacity change from 0 to 1024 [ 362.539699][ T9194] EXT4-fs: Ignoring removed oldalloc option [ 362.640599][ T9194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.679597][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 362.786038][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 363.006170][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.547795][ T9200] loop4: detected capacity change from 0 to 1024 [ 363.563221][ T9200] EXT4-fs: Ignoring removed oldalloc option [ 363.631444][ T9200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.821158][ T8904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.850128][ T8904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.874223][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.881485][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.905529][ T8944] bridge_slave_1: entered allmulticast mode [ 363.928184][ T8944] bridge_slave_1: entered promiscuous mode [ 364.061244][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.181498][ T9207] loop2: detected capacity change from 0 to 512 [ 364.261304][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.272920][ T9207] EXT4-fs: Ignoring removed orlov option [ 364.278649][ T9207] EXT4-fs: Ignoring removed i_version option [ 364.296165][ T9207] EXT4-fs: Ignoring removed bh option [ 364.326003][ T9207] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 364.407701][ T8904] team0: Port device team_slave_0 added [ 364.447486][ T8904] team0: Port device team_slave_1 added [ 364.480459][ T9211] overlayfs: failed to resolve './file0': -2 [ 365.471848][ T9209] netlink: 'syz.4.1056': attribute type 10 has an invalid length. [ 365.527198][ T9209] bond0: (slave bond_slave_0): Releasing backup interface [ 365.565210][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.817860][ T8944] team0: Port device team_slave_0 added [ 365.846511][ T8944] team0: Port device team_slave_1 added [ 365.910755][ T8904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.936283][ T8904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.964225][ T8904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.058729][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.076639][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.109111][ T8944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.123367][ T8904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.130340][ T8904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.159042][ T8904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.245072][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.253476][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.292595][ T8944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.312550][ T8798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.474450][ T8798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.550312][ T8944] hsr_slave_0: entered promiscuous mode [ 367.603371][ T8944] hsr_slave_1: entered promiscuous mode [ 367.630650][ T8944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.655404][ T8944] Cannot create hsr debugfs directory [ 367.680732][ T8904] hsr_slave_0: entered promiscuous mode [ 367.709798][ T8904] hsr_slave_1: entered promiscuous mode [ 367.746443][ T8904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.772307][ T8904] Cannot create hsr debugfs directory [ 367.779749][ T9238] syz.4.1066[9238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.779961][ T9238] syz.4.1066[9238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.918368][ T8798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.467672][ T8798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.948193][ T1047] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.222221][ T1047] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.241805][ T5297] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 369.364100][ T1047] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.424421][ T5297] usb 5-1: Using ep0 maxpacket: 16 [ 369.500390][ T5297] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 369.533337][ T5297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.573530][ T5297] usb 5-1: Product: syz [ 369.589742][ T5297] usb 5-1: Manufacturer: syz [ 369.618351][ T5297] usb 5-1: SerialNumber: syz [ 369.664406][ T5297] usb 5-1: config 0 descriptor?? [ 369.703400][ T5297] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 369.752528][ T9254] overlayfs: failed to resolve './file0': -2 [ 369.764792][ T1047] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.912160][ T5297] pwc: Warning: more than 1 configuration available. [ 369.950314][ T9256] netlink: 'syz.5.1071': attribute type 10 has an invalid length. [ 369.976537][ T9256] bond0: (slave bond_slave_0): Releasing backup interface [ 370.196271][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.307903][ T1047] bridge_slave_1: left allmulticast mode [ 370.326599][ T1047] bridge_slave_1: left promiscuous mode [ 370.333812][ T5297] pwc: send_video_command error -71 [ 370.339155][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.346747][ T5297] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 370.362382][ T5297] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 370.374659][ T1047] bridge_slave_0: left allmulticast mode [ 370.382407][ T5297] usb 5-1: USB disconnect, device number 25 [ 370.389539][ T1047] bridge_slave_0: left promiscuous mode [ 370.411230][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.535023][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.550747][ T1047] bond0 (unregistering): Released all slaves [ 372.613036][ T8798] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.844523][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.851800][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.223225][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.230439][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.322338][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 373.522005][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 373.553505][ T8] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 373.574547][ T8] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 373.607694][ T8] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 373.635162][ T8] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 373.697915][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 373.772360][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 373.802724][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 373.816228][ T8] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 373.826841][ T8] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 373.854654][ T8] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 373.883127][ T8] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 373.942765][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 374.007162][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 374.057533][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 374.103077][ T8] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 374.140842][ T8] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 374.172751][ T8] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 374.219775][ T8] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 374.261737][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 374.305427][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 374.361136][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 374.414281][ T8] usb 5-1: string descriptor 0 read error: -22 [ 374.420667][ T8] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 374.471335][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.479776][ T1047] hsr_slave_0: left promiscuous mode [ 374.565184][ T8] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 374.581914][ T1047] hsr_slave_1: left promiscuous mode [ 374.603093][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.618492][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.633717][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.652835][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.722904][ T1047] veth1_macvtap: left promiscuous mode [ 374.734634][ T1047] veth0_macvtap: left promiscuous mode [ 374.740381][ T1047] veth1_vlan: left promiscuous mode [ 374.763992][ T1047] veth0_vlan: left promiscuous mode [ 375.789997][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 375.872587][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 376.721052][ T8904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 376.821877][ T8904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.878049][ T8904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.143397][ T8904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.626108][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.488848][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.496540][ T5297] usb 5-1: USB disconnect, device number 26 [ 378.504267][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.891937][ T8944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.345375][ T8944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 379.663585][ T8944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.145615][ T8944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.392308][ T8798] veth0_vlan: entered promiscuous mode [ 380.554753][ T8904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.589725][ T9377] loop4: detected capacity change from 0 to 256 [ 380.616058][ T8798] veth1_vlan: entered promiscuous mode [ 380.696529][ T9377] FAT-fs (loop4): Directory bread(block 64) failed [ 380.712507][ T9377] FAT-fs (loop4): Directory bread(block 65) failed [ 380.787379][ T9377] FAT-fs (loop4): Directory bread(block 66) failed [ 380.816902][ T9377] FAT-fs (loop4): Directory bread(block 67) failed [ 380.845102][ T9377] FAT-fs (loop4): Directory bread(block 68) failed [ 380.863511][ T9377] FAT-fs (loop4): Directory bread(block 69) failed [ 380.880535][ T9377] FAT-fs (loop4): Directory bread(block 70) failed [ 380.885465][ T8904] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.902343][ T9377] FAT-fs (loop4): Directory bread(block 71) failed [ 380.922748][ T9377] FAT-fs (loop4): Directory bread(block 72) failed [ 380.930583][ T9377] FAT-fs (loop4): Directory bread(block 73) failed [ 380.968761][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.976778][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.075209][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.082597][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.152713][ T8798] veth0_macvtap: entered promiscuous mode [ 381.238673][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.249775][ T8798] veth1_macvtap: entered promiscuous mode [ 381.417738][ T8944] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.507373][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.525431][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.536031][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.546984][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.571415][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.583052][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.593531][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.604602][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.633277][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.686865][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.694239][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.733867][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.745776][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.758092][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.773725][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.802300][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.813885][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.825232][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.842126][ T5336] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 381.848441][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.878981][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.019260][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.026699][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.036009][ T5336] usb 3-1: Using ep0 maxpacket: 8 [ 382.063853][ T5336] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 382.084660][ T5336] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 382.102254][ T5336] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 382.115916][ T5336] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 382.124581][ T8798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.136854][ T5336] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 382.152833][ T8798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.154279][ T5336] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 382.164215][ T8798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.218598][ T5336] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 382.228947][ T8798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.248599][ T5336] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 382.269985][ T5336] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 382.304343][ T5336] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 382.351447][ T5336] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 382.398815][ T5336] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 382.464529][ T5336] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 382.508758][ T5336] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 382.575129][ T8944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.581506][ T5336] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 382.632968][ T5336] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 382.686447][ T5336] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 382.861954][ T5336] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 382.924134][ T5336] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 382.954815][ T5336] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 382.998259][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.015911][ T5336] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 383.042246][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.071113][ T5336] usb 3-1: string descriptor 0 read error: -22 [ 383.088363][ T5336] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 383.138013][ T5336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.219475][ T5336] adutux 3-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 383.245671][ T7978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.277654][ T7978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.419267][ T8904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.680752][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.807697][ T8904] veth0_vlan: entered promiscuous mode [ 383.879294][ T9438] bridge0: port 3(ip6gretap0) entered blocking state [ 383.909620][ T9438] bridge0: port 3(ip6gretap0) entered disabled state [ 383.957739][ T9438] ip6gretap0: entered allmulticast mode [ 383.996570][ T9438] ip6gretap0: entered promiscuous mode [ 384.003533][ T9438] bridge0: port 3(ip6gretap0) entered blocking state [ 384.010458][ T9438] bridge0: port 3(ip6gretap0) entered forwarding state [ 384.038330][ T8904] veth1_vlan: entered promiscuous mode [ 384.957939][ T8944] veth0_vlan: entered promiscuous mode [ 385.080588][ T8944] veth1_vlan: entered promiscuous mode [ 385.170877][ T8904] veth0_macvtap: entered promiscuous mode [ 385.285419][ T8904] veth1_macvtap: entered promiscuous mode [ 385.437366][ T8944] veth0_macvtap: entered promiscuous mode [ 385.519052][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.567544][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.578536][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.599883][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.637188][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.680091][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.744888][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.767963][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.978216][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.988827][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.582061][ T8904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.620352][ T8944] veth1_macvtap: entered promiscuous mode [ 386.778582][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.813691][ T5294] usb 3-1: USB disconnect, device number 12 [ 386.841024][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.928322][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.963804][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.002008][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.053305][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.097077][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.143315][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.179583][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.221882][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.271005][ T8904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.326830][ T8904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.382140][ T8904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.423240][ T8904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.445704][ T9489] loop2: detected capacity change from 0 to 256 [ 387.465435][ T8904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.576146][ T9489] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 387.599092][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.674275][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.730357][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.761070][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.791980][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.829512][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.871560][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.912399][ T9497] overlayfs: failed to resolve './file1': -2 [ 387.921421][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.960478][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.982985][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.023436][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.061474][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.085729][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.150573][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.236292][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.288313][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.338198][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.381360][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.418409][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.455069][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.504163][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.553996][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.592459][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.613656][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.643222][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.677547][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.979419][ T8944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.989489][ T8944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.000115][ T8944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.017387][ T8944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.069536][ T9535] loop2: detected capacity change from 0 to 16 [ 390.092631][ T7978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.100485][ T7978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.107555][ T9535] erofs: (device loop2): mounted with root inode @ nid 36. [ 390.192662][ T9535] syz.2.1130: attempt to access beyond end of device [ 390.192662][ T9535] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 390.312543][ T9540] syz.2.1130: attempt to access beyond end of device [ 390.312543][ T9540] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 390.339286][ T9539] loop3: detected capacity change from 0 to 1024 [ 390.379410][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.414908][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.417858][ T9535] syz.2.1130: attempt to access beyond end of device [ 390.417858][ T9535] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 391.306865][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.343138][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.619299][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.673706][ T9555] overlayfs: failed to resolve './file1': -2 [ 391.681781][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.385807][ T9600] loop4: detected capacity change from 0 to 16 [ 395.462137][ T9602] loop1: detected capacity change from 0 to 128 [ 395.476801][ T9600] erofs: (device loop4): mounted with root inode @ nid 36. [ 395.582177][ T9600] syz.4.1145: attempt to access beyond end of device [ 395.582177][ T9600] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 395.802620][ T9602] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 395.831238][ T9615] syz.4.1145: attempt to access beyond end of device [ 395.831238][ T9615] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 395.833373][ T9602] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 395.950664][ T9600] syz.4.1145: attempt to access beyond end of device [ 395.950664][ T9600] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 396.205271][ T9622] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1150'. [ 396.284363][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1150'. [ 396.297621][ T8904] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.361523][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.385613][ T9622] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.393149][ T9622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.365395][ T9642] loop3: detected capacity change from 0 to 128 [ 401.498841][ T9642] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 401.525490][ T9642] EXT4-fs: failed to create workqueue [ 401.875906][ T9642] EXT4-fs (loop3): mount failed [ 403.243053][ T9670] overlayfs: failed to resolve './file1': -2 [ 403.421800][ T5338] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 404.471789][ T5338] usb 2-1: Using ep0 maxpacket: 32 [ 404.532114][ T5338] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 404.561737][ T5338] usb 2-1: config 0 has no interface number 0 [ 404.567925][ T5338] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.588739][ T5338] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 404.604148][ T5338] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 404.616264][ T5338] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 404.631743][ T5338] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 404.651736][ T5338] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.695889][ T5338] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 404.730217][ T5338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.743308][ T5338] usb 2-1: Product: syz [ 404.750292][ T5338] usb 2-1: Manufacturer: syz [ 404.758607][ T5338] usb 2-1: SerialNumber: syz [ 404.786109][ T5338] usb 2-1: config 0 descriptor?? [ 404.799833][ T9666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.847190][ T9666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 405.651681][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 405.651778][ T29] audit: type=1326 audit(1725334250.691:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.3.1171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a8a779eb9 code=0x0 [ 405.653700][ T9696] loop0: detected capacity change from 0 to 64 [ 406.012968][ T5338] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 406.193542][ T5338] etas_es58x 2-1:0.219: could not retrieve the product info string [ 406.564119][ T5338] usb 2-1: USB disconnect, device number 19 [ 406.625873][ T5338] etas_es58x 2-1:0.219: Disconnecting syz syz [ 407.992752][ T9721] vivid-007: disconnect [ 408.027417][ T9720] vivid-007: reconnect [ 413.021437][ T9744] overlayfs: failed to resolve './file0': -2 [ 413.398766][ T9750] netlink: 'syz.0.1184': attribute type 10 has an invalid length. [ 413.569009][ T9750] bond0: (slave bond_slave_0): Releasing backup interface [ 414.017592][ T9762] loop2: detected capacity change from 0 to 1024 [ 415.441852][ T5338] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 415.920188][ T5338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.956411][ T5338] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.021739][ T5338] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 416.049198][ T5338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.093291][ T5338] usb 4-1: config 0 descriptor?? [ 416.108664][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 416.205063][ T9780] bridge1: entered promiscuous mode [ 416.251745][ T9780] bridge1: entered allmulticast mode [ 416.334494][ T5338] ath6kl: Failed to submit usb control message: -71 [ 416.381969][ T5338] ath6kl: unable to send the bmi data to the device: -71 [ 416.439362][ T5338] ath6kl: Unable to send get target info: -71 [ 416.501145][ T5338] ath6kl: Failed to init ath6kl core: -71 [ 416.527959][ T5338] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 416.588800][ T5338] usb 4-1: USB disconnect, device number 19 [ 417.266552][ T9800] loop2: detected capacity change from 0 to 256 [ 418.124351][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.137919][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.147169][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 418.166494][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 418.201901][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 418.209482][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.615316][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.194775][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.316592][ T9823] loop1: detected capacity change from 0 to 1024 [ 420.323985][ T9823] hfsplus: unable to parse mount options [ 420.401861][ T5244] Bluetooth: hci0: command tx timeout [ 421.600110][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.612820][ T5237] Bluetooth: hci6: command 0x0406 tx timeout [ 421.624996][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.634937][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.658997][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.679475][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 421.690281][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.863957][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.960935][ T9830] loop2: detected capacity change from 0 to 4096 [ 422.022138][ T9830] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 422.128195][ T9830] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 422.193134][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.482406][ T5245] Bluetooth: hci0: command tx timeout [ 424.324284][ T5245] Bluetooth: hci2: command tx timeout [ 424.571870][ T5237] Bluetooth: hci0: command tx timeout [ 424.817660][ T35] ip6gretap0: left allmulticast mode [ 424.826771][ T35] ip6gretap0: left promiscuous mode [ 424.833393][ T35] bridge0: port 3(ip6gretap0) entered disabled state [ 424.848154][ T35] bridge_slave_1: left allmulticast mode [ 424.854128][ T35] bridge_slave_1: left promiscuous mode [ 424.861239][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.724170][ T35] bridge_slave_0: left allmulticast mode [ 425.729865][ T35] bridge_slave_0: left promiscuous mode [ 425.761969][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.402339][ T5237] Bluetooth: hci2: command tx timeout [ 426.641906][ T5237] Bluetooth: hci0: command tx timeout [ 428.511885][ T5237] Bluetooth: hci2: command tx timeout [ 428.732505][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.812542][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.885931][ T35] bond0 (unregistering): Released all slaves [ 430.001924][ T5237] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 430.010916][ T5237] Bluetooth: hci7: Injecting HCI hardware error event [ 430.021154][ T5245] Bluetooth: hci7: hardware error 0x00 [ 430.319509][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.333674][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.346445][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.358029][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.372358][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 430.382588][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.565507][ T5237] Bluetooth: hci2: command tx timeout [ 432.482092][ T5244] Bluetooth: hci1: command tx timeout [ 432.482298][ T5245] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 432.566575][ T35] hsr_slave_0: left promiscuous mode [ 432.615201][ T35] hsr_slave_1: left promiscuous mode [ 432.638005][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.651830][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.682903][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.701120][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.779630][ T35] veth1_macvtap: left promiscuous mode [ 432.805683][ T35] veth0_macvtap: left promiscuous mode [ 432.825920][ T35] veth1_vlan: left promiscuous mode [ 432.831327][ T35] veth0_vlan: left promiscuous mode [ 432.842111][ T5295] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 433.044298][ T5295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.076642][ T5295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.106140][ T5295] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.132809][ T5295] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 433.179835][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.218760][ T5295] usb 2-1: config 0 descriptor?? [ 433.443391][ T5295] usbhid 2-1:0.0: can't add hid device: -71 [ 433.478362][ T5295] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 433.511835][ T5295] usb 2-1: USB disconnect, device number 20 [ 434.032920][ T5295] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 434.233874][ T5295] usb 2-1: Using ep0 maxpacket: 8 [ 434.284499][ T5295] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.303598][ T5295] usb 2-1: config 0 has no interface number 0 [ 434.314752][ T5295] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x7 has invalid maxpacket 256, setting to 64 [ 434.347486][ T5295] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.359206][ T5295] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.369683][ T5295] usb 2-1: config 0 interface 1 has no altsetting 0 [ 434.379765][ T5295] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 434.393080][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.410379][ T5295] usb 2-1: config 0 descriptor?? [ 434.415054][ T5245] Bluetooth: hci8: command tx timeout [ 434.440823][ T5295] hso 2-1:0.1: Failed to find BULK IN ep [ 434.544271][ T35] team0 (unregistering): Port device team_slave_1 removed [ 434.573343][ T5237] Bluetooth: hci1: command tx timeout [ 434.646107][ T9944] loop0: detected capacity change from 0 to 128 [ 434.655596][ T5297] usb 2-1: USB disconnect, device number 21 [ 434.698143][ T35] team0 (unregistering): Port device team_slave_0 removed [ 434.748707][ T9944] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 434.768508][ T9944] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 436.641783][ T5237] Bluetooth: hci1: command tx timeout [ 436.772383][ T9811] chnl_net:caif_netlink_parms(): no params data found [ 436.995768][ T9967] loop2: detected capacity change from 0 to 1024 [ 437.022871][ T9967] EXT4-fs: Ignoring removed orlov option [ 437.068081][ T9967] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0102] [ 437.097218][ T9967] System zones: 0-1, 3-12 [ 437.105748][ T8944] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 437.114502][ T9967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.119745][ T9826] chnl_net:caif_netlink_parms(): no params data found [ 437.242725][ T9973] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 437.369444][ T29] audit: type=1800 audit(1725334282.741:172): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1243" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 437.428274][ T9967] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #14: comm syz.2.1243: corrupted in-inode xattr: bad magic number in in-inode xattr [ 437.516918][ T9967] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.1243: attempt to clear invalid blocks 1886221359 len 1 [ 437.545831][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.557554][ T9811] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.641910][ T9811] bridge_slave_0: entered allmulticast mode [ 437.668304][ T9811] bridge_slave_0: entered promiscuous mode [ 437.680597][ T9980] loop1: detected capacity change from 0 to 16 [ 437.693311][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.700471][ T9811] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.723982][ T9980] erofs: (device loop1): mounted with root inode @ nid 36. [ 437.735479][ T7374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.745184][ T9811] bridge_slave_1: entered allmulticast mode [ 437.753719][ T9811] bridge_slave_1: entered promiscuous mode [ 437.822102][ T9980] syz.1.1246: attempt to access beyond end of device [ 437.822102][ T9980] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 437.897091][ T9980] syz.1.1246: attempt to access beyond end of device [ 437.897091][ T9980] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 437.925379][ T9982] syz.1.1246: attempt to access beyond end of device [ 437.925379][ T9982] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 438.951732][ T5237] Bluetooth: hci1: command tx timeout [ 439.191999][ T9811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.236258][ T9811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.292536][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.299725][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.303239][ T9995] loop1: detected capacity change from 0 to 512 [ 439.324055][ T9826] bridge_slave_0: entered allmulticast mode [ 439.345881][ T9826] bridge_slave_0: entered promiscuous mode [ 439.373158][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 439.389551][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 439.399294][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 439.410152][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 439.428675][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 439.436368][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 439.473150][ T9995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 439.496481][ T9995] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.539568][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.596801][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.709050][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.733591][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.747769][ T9826] bridge_slave_1: entered allmulticast mode [ 439.909073][ T9826] bridge_slave_1: entered promiscuous mode [ 440.266954][ T9811] team0: Port device team_slave_0 added [ 440.324170][ T30] INFO: task syz.5.780:8191 blocked for more than 143 seconds. [ 440.352087][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 440.360968][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 440.379493][ T30] task:syz.5.780 state:D stack:26096 pid:8191 tgid:8185 ppid:7160 flags:0x00004004 [ 440.398293][ T30] Call Trace: [ 440.410685][ T30] [ 440.414221][ T30] __schedule+0x1800/0x4a60 [ 440.420230][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.432091][ T30] ? __pfx___schedule+0x10/0x10 [ 440.447363][ T30] ? __blk_flush_plug+0x449/0x500 [ 440.457681][ T30] ? __pfx_lock_release+0x10/0x10 [ 440.472142][ T30] ? __blk_flush_plug+0x449/0x500 [ 440.480689][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 440.492412][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 440.527268][ T30] ? schedule+0x90/0x320 [ 440.554735][ T30] schedule+0x14b/0x320 [ 440.601797][ T30] io_schedule+0x8d/0x110 [ 440.606200][ T30] folio_wait_bit_common+0x882/0x12b0 [ 440.622831][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 440.628682][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 440.653483][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 440.658851][ T30] z_erofs_runqueue+0xa8c/0x2010 [ 440.667869][ T30] ? __pfx_z_erofs_runqueue+0x10/0x10 [ 440.673718][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.679386][ T30] ? _raw_spin_unlock+0x28/0x50 [ 440.687516][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.698991][ T30] ? lockref_put_or_lock+0x75/0xc0 [ 440.708881][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.714925][ T30] z_erofs_readahead+0xbae/0xf00 [ 440.721775][ T30] ? __pfx_z_erofs_readahead+0x10/0x10 [ 440.727310][ T30] ? __pfx_lock_release+0x10/0x10 [ 440.741761][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.761665][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.767346][ T30] ? blk_start_plug+0x70/0x1b0 [ 440.776315][ T30] read_pages+0x180/0x840 [ 440.780688][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 440.785674][ T30] ? __pfx_read_pages+0x10/0x10 [ 440.790549][ T30] ? filemap_add_folio+0x26d/0x650 [ 440.795756][ T30] ? __pfx_filemap_add_folio+0x10/0x10 [ 440.801372][ T30] page_cache_ra_unbounded+0x6ce/0x7f0 [ 440.807003][ T30] force_page_cache_ra+0x280/0x2f0 [ 440.812230][ T30] generic_fadvise+0x528/0x840 [ 440.817044][ T30] ? __pfx_generic_fadvise+0x10/0x10 [ 440.822462][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.828145][ T30] ? __fget_files+0x3f6/0x470 [ 440.832942][ T30] ? __fget_files+0x29/0x470 [ 440.837577][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.843311][ T30] __x64_sys_fadvise64+0x145/0x190 [ 440.851288][ T30] do_syscall_64+0xf3/0x230 [ 440.855919][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.864260][ T30] RIP: 0033:0x7f290b779eb9 [ 440.868712][ T30] RSP: 002b:00007f290c5c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 440.877566][ T30] RAX: ffffffffffffffda RBX: 00007f290b916058 RCX: 00007f290b779eb9 [ 440.888977][ T30] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 440.897218][ T30] RBP: 00007f290b7e793e R08: 0000000000000000 R09: 0000000000000000 [ 440.905304][ T30] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 440.913372][ T30] R13: 0000000000000000 R14: 00007f290b916058 R15: 00007ffe6b083c18 [ 440.921394][ T30] [ 440.925497][ T30] [ 440.925497][ T30] Showing all locks held in the system: [ 440.934146][ T30] 3 locks held by kworker/u8:0/11: [ 440.939287][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 440.981632][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 441.001700][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 441.028560][ T30] 1 lock held by khungtaskd/30: [ 441.034291][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 441.079857][ T30] 4 locks held by kworker/u8:2/35: [ 441.086183][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 441.101956][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 441.120759][ T30] #2: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 441.141634][ T30] #3: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: ipmr_net_exit_batch+0x20/0x90 [ 441.151229][ T30] 3 locks held by kworker/0:3/1173: [ 441.168626][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 441.181503][ T30] #1: ffffc90004157d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 441.202590][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 441.222793][ T30] 2 locks held by getty/4983: [ 441.227510][ T30] #0: ffff888034e200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 441.249256][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 441.281577][ T30] 1 lock held by syz.5.780/8191: [ 441.306837][ T30] #0: ffff888059570880 (mapping.invalidate_lock#8){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 441.319087][ T30] 1 lock held by syz-executor/9811: [ 441.334643][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 441.349908][ T30] 1 lock held by syz-executor/9881: [ 441.359044][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 441.381688][ T30] 2 locks held by syz-executor/9998: [ 441.387011][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 441.405469][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 441.417870][ T30] 3 locks held by syz.2.1253/10009: [ 441.423149][ T30] #0: ffff88806a71cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 441.433417][ T30] #1: ffff88806a71c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 441.445744][ T30] #2: ffffffff8fdf7828 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 441.456245][ T30] [ 441.458587][ T30] ============================================= [ 441.458587][ T30] [ 441.501653][ T30] NMI backtrace for cpu 1 [ 441.506030][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 441.516541][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 441.526598][ T30] Call Trace: [ 441.529873][ T30] [ 441.532799][ T30] dump_stack_lvl+0x241/0x360 [ 441.537487][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.542692][ T30] ? __pfx__printk+0x10/0x10 [ 441.547281][ T30] ? vprintk_emit+0x667/0x7c0 [ 441.551962][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 441.556994][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 441.561978][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 441.567713][ T30] ? _printk+0xd5/0x120 [ 441.571882][ T30] ? __pfx__printk+0x10/0x10 [ 441.576467][ T30] ? __wake_up_klogd+0xcc/0x110 [ 441.581315][ T30] ? __pfx__printk+0x10/0x10 [ 441.585992][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.591646][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 441.596700][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 441.602701][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 441.608733][ T30] watchdog+0xff4/0x1040 [ 441.612992][ T30] ? watchdog+0x1ea/0x1040 [ 441.617422][ T30] ? __pfx_watchdog+0x10/0x10 [ 441.622109][ T30] kthread+0x2f2/0x390 [ 441.626176][ T30] ? __pfx_watchdog+0x10/0x10 [ 441.630872][ T30] ? __pfx_kthread+0x10/0x10 [ 441.636005][ T30] ret_from_fork+0x4d/0x80 [ 441.640433][ T30] ? __pfx_kthread+0x10/0x10 [ 441.645025][ T30] ret_from_fork_asm+0x1a/0x30 [ 441.649815][ T30] [ 441.654839][ T30] Sending NMI from CPU 1 to CPUs 0: [ 441.660075][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 441.672156][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 441.679035][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 441.689552][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 441.699620][ T30] Call Trace: [ 441.702908][ T30] [ 441.705952][ T30] dump_stack_lvl+0x241/0x360 [ 441.710657][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.715875][ T30] ? __pfx__printk+0x10/0x10 [ 441.720478][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.726503][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.732336][ T30] ? vscnprintf+0x5d/0x90 [ 441.736692][ T30] panic+0x349/0x860 [ 441.740601][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.746265][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 441.752427][ T30] ? __pfx_panic+0x10/0x10 [ 441.756834][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 441.762206][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.767838][ T30] ? __irq_work_queue_local+0x137/0x410 [ 441.773402][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.779123][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 441.784499][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 441.790662][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 441.796846][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.802505][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 441.808673][ T30] watchdog+0x1033/0x1040 [ 441.813015][ T30] ? watchdog+0x1ea/0x1040 [ 441.817438][ T30] ? __pfx_watchdog+0x10/0x10 [ 441.822126][ T30] kthread+0x2f2/0x390 [ 441.826194][ T30] ? __pfx_watchdog+0x10/0x10 [ 441.830877][ T30] ? __pfx_kthread+0x10/0x10 [ 441.835469][ T30] ret_from_fork+0x4d/0x80 [ 441.839899][ T30] ? __pfx_kthread+0x10/0x10 [ 441.844491][ T30] ret_from_fork_asm+0x1a/0x30 [ 441.849280][ T30] [ 441.852511][ T30] Kernel Offset: disabled [ 441.856830][ T30] Rebooting in 86400 seconds..