last executing test programs: 15.319341765s ago: executing program 2 (id=11089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) 15.230767421s ago: executing program 2 (id=11092): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="71e79fd811000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 11.665406784s ago: executing program 2 (id=11101): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161102, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40086610, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 11.149149376s ago: executing program 3 (id=11103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.578961623s ago: executing program 2 (id=11105): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xf8000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f041}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000640)=0xa0000) r6 = dup(r5) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper}, @host, 0x0, 0xffffffffffdfffff}) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10.399125147s ago: executing program 3 (id=11107): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000300)=ANY=[@ANYBLOB="d0000000080211000000080211000001ffffffffffff0000030000000000000000d8aae09a2ac0054ecc14f00a16a0cac2207b"], 0x21) r5 = socket(0x18, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x2042, 0x0, 0x0) connect$llc(r3, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200048e0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) socket(0x23, 0x5, 0x0) gettid() sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 8.821034887s ago: executing program 3 (id=11110): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xf8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f041}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000640)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper}, @host, 0x0, 0xffffffffffdfffff}) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 8.798165639s ago: executing program 0 (id=11111): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="71e79fd811000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 7.597251836s ago: executing program 1 (id=11115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2600}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7.504292184s ago: executing program 1 (id=11116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="010000000000000000e401000000440004800500030005000000050003000100000005000300050000002000030001000000050003000500000055fe0300020000000500030000000000050003000100000008000200020000000800010003"], 0x68}}, 0x0) 7.247463176s ago: executing program 1 (id=11117): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161102, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40086610, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 6.231256199s ago: executing program 1 (id=11119): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000c00)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c756d61736b3d30303030303030303030303030303030303030303030362c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c63726561746f723d25b5e9122c6e6f6465636f6d706f73652c6e6f626172726965722c666f7263652c7569643d", @ANYRESHEX, @ANYBLOB="2c6372626172726965722c6e6f621a32b86172726965722c646f6e745f6d65617375757365723d3b5e283a232c0000000000000000"], 0x1, 0x6da, &(0x7f0000000300)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x20}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 5.890894687s ago: executing program 2 (id=11121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a7ff070000000000004da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05dfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f9ff86086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace85c370183f23cf0838fb5a1d75c145feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000000000000000000000000000000096e4a7b57a867432217cf0be18b96865ee3dca3a03a5e0d3060705c499776bb3e8c442aa1d3b26842c96080c4c251b8cbc5de68938316e95857b0e3cdb14d4a93d49dd4f7a08639ee6943861886fabfac35f9aab09c77bc495b5c7116de70619c5ac798f1974d7a6e9b80ac4bab0f1657488278a40480731b7f51ff921e8ad8a1986b6da1660c40875504d1265679a718dc9a1400ac15ce81696f712a1074ac47de09e95d64eb72a186f11bf360e5841a283841762a0cda06ac7c74520427465c128763e3258169d32bce06dbf95fcf8e19ffdb7c56fb5e236f2422f631ead769969699318140ad2b431b21f88bf824e1590524a0aea10ad2c5f961533e78d8e46da0e6ef484d25bd09f6de08e398485d95c51f3a5dc76dbdea7b2d236d819018b22467116b359e8c38147565203c75a4a2789019e7e4bf06a2b3779cea3206cc2d10e5a458b81"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES64], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x38}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = eventfd(0x800a6) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mlockall(0x3) mlockall(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 5.499297079s ago: executing program 1 (id=11122): r0 = socket(0x840000000002, 0x3, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}}}, 0x0) r2 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = getpgrp(0x0) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, 0x0) fcntl$setsig(r7, 0xa, 0x12) readv(r8, &(0x7f0000000000)=[{&(0x7f0000000400)=""/223, 0xdf}], 0x1) r9 = dup2(r7, r8) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) sendmsg$netlink(r9, &(0x7f0000000340)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)=[{&(0x7f000001bcc0)=ANY=[@ANYBLOB="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"], 0xfc}, {&(0x7f0000019900)={0x2c0, 0x2d, 0x100, 0x70bd25, 0x25dfdbfc, "", [@generic="4a8c75acf52e84fcc8b0ced6d0718c425512ce4e54bc220d7deb7317a0db5042a91568178d097efb4794", @generic="a01bac2d8a0bd6e764b28e1f5b149bb69c985b2a19598a74d69500c27b6dd703061abd95e056847fbbd91efdf8a1dad6c2d2a78cf33c5110406ed99f0f68fdc26fa280efb456d735f68dd7789787e14d34d0956b1e4fd7a6b8d4a9041e87a9adf8610c8d6bf5806674a61a586e6cd06ea0cdb52e37cd9ea41f9d1bcc02b39fb6ff242fbb736a095f4d48414b3d349a51676ccf83027ceac5", @generic="31ab2ede2921d98fd9853b053920c8fb53f881593ba0f9e87739e30443315ef7e62b844194c9c215aaa9a4da7c70db7268e7e94d16b00bb6a370f6c5d7d30b7fee67aeaf0a9a5aaa6adac9ba0de82f3f7b89286f91d32a65e5a6b7317875cac494ac1881f53ef8fbfe0fea57083959b0d8b2425f2e0f7f5f81fad5992b27dc1cb4b94da04005a9f17082ff394a7d4eb14b6c41f945ff5b8eeea9d353fabf54b82931acd3e9ca22e7e7d66054fbbc548afb3704c0d7a80ae92d7e2504ec18", @nested={0x8e, 0xdc, 0x0, 0x1, [@typed={0x8, 0xf8, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x27, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x6a, 0x0, 0x0, @pid=r6}, @generic="ae6cd068a221233d4c798afcae723e27f748ed68289546370abc039a8e2d3c8afdf9fd18a5722ec80604809204688f9b8804f5e8b1b55b149826d497e4dacf24d093ccca0b1f00d508c26830cae82c47adfe73b9cf3afd38ff508f3a597ac4d93137d12411aae577f1955b764ed3d74f5bfa"]}, @generic="3192b9b726640d9d2b31b6482082ec9b6ca3d9a751ed69db5c9b8c1090de007af5499efa7277d254f8b009929714802e3928cea5570b80afd11e831dbe26773dc9f01fa860c0339f1b3f976376b863fbb86767b5199672f5e281a6d0dfc67454670fb988e6c6fbf315cfd97c368beb35cd92961c4483845fa80032a356392e71ca9e7297bf58d4a2247f59", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x2c0}, {&(0x7f000001be00)=ANY=[@ANYBLOB="3c1200003500040025bd", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="33000700dabfeb2f3dcd12247d6c83f0b38a", @ANYRES32=r10, @ANYBLOB="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"], 0x123c}], 0x3, 0x0, 0x0, 0x4cddb3268952b3d4}, 0xa0c0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc3, 0xa1, 0xd7, 0x8, 0xccd, 0x99, 0x950d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0x71, 0xf9}}]}}]}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x34, 0x0, &(0x7f0000000100)) 4.557393786s ago: executing program 0 (id=11123): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e7", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6", 0x1b}, {&(0x7f0000001bc0)="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", 0x355}], 0x2}}], 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.555134046s ago: executing program 4 (id=11124): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = gettid() r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300)=r1, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x800}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) 4.371081101s ago: executing program 4 (id=11125): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getpid() openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000440)='./file0\x00', 0x2) r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000280)="511bd178746e4fabf2ba027e32a14f4ed5688a980491cb305cad31d7c814bd69d46b5b9e644a6ad9b648c94d5abf6527a72d41f4ff04e8bea91a57", 0x3b, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x3, 0xe, 0x2, 0x1080, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, r0, 0x5, 0x1, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r4}, 0x10) 4.355807982s ago: executing program 0 (id=11126): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) close(r1) 3.358862104s ago: executing program 0 (id=11127): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000e401000000440004800500030005000000050003000100000005000300050000002000030001000000050003000500000055fe0300020000000500030000000000050003000100000008000200020000000800010003"], 0x68}}, 0x0) 3.357918544s ago: executing program 4 (id=11128): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b6a, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x10e, &(0x7f00000003c0)={[{@errors_remount}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@nodelalloc}, {@block_validity}, {@noblock_validity}]}, 0x1, 0x45d, &(0x7f0000001380)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJiYGj7UUgizU0JoIIYrG4NGQeDceTfwLPOnFqCcTr3o3JMRwET2tmd0Z9ge7ZVmWTnU/n2TZ92be8N63b97sm3m7AQytqeyfJGJ7RPwWERP1bGuBqfrbtavnF/++en4xiWr1zT+TWrm/rp5fLIoWx23LM9NpRPppEns71Lty9tzJhUpl6Uyen1099d7sytlzz5w4tXB86fjS6fnDhw8dnHv+uflnBxLn3Vlb93y4vG/3q29fen3xyKV3fvomKeJvi2NAptba+Xi1OuDqyrUjf38r6/rRkhtDz0YiIuuusdr4n4iRaHTeRLzySamNA+6oaq7L7gtV4H8sibJbAJSj+KDP7n+L1/rNPsp35cX6DVAW97X8Vd8zGmleZqzp/nbQpiLiyIV/vsxecWeeQwAAtPgum/883Wn+l8Z9TeXuyteGJvO1lJ0RcU9E7IqIeyNqZe+PiAdusf72RZIb5z/p5b4C61E2/3shX9tqnf8Vs7+YHMlzO2rxjyXHTlSWDuR/k+kY25zl59ao4/uXf/28277m+V/2yuov5oJ5Oy6Pbm495ujC6sLtxNzsyscRe0Y7xZ9cXwlIImJ3ROzps44TT369r9u+m8e/hgGsM1W/inii3v8Xoi3+QrL2+uTslqgsHZgtzoob/fzLxTe61X9b8Q9A1v9bO57/1+OfTJrXa1duvY6Lv3/W9Z5mpq/zv7FhU/7+wcLq6pm5iE3Ja/VGN2+fbxxb5IvyWfzT+zuP/53R+EvsjYjsJH4wIh6KiIfzvnskIh6NiP2dw8tuHePHlx57t1v8G6D/x6Ot/ydbi7T1fyOxKdq3dE6MnPzh29b/sZHs7fp3qJaazrf0cv3rpV39nc0AAADw35NGxPZI0pnr6fF0Zqb+Hf5dsTWtLK+sPnVs+f3TR+u/EZiMsbR40jXR9Dx0Lr+tL/LzbfmD+XPjL0bGa/mZxeXK0bKDhyG37Ybxn9bGf+aPkbJbB9xxfq8Fw6tp/CdltgNYfz7/YXgZ/zC8Ooz/8TLaAay/Tp//H5XQDmD9tY1/y34wRNz/w/Ay/mF4NY9/XwCAobEyHjf/kXynxJbo5yiJHhPZZXgDNGONRKQbohmDSSR9joJeE9vLDvDWE2VfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbj3wAAAP//kwjmEQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8}, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000000)={r5}, &(0x7f0000000080)=0x10) 3.221331806s ago: executing program 0 (id=11129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2600}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.186680038s ago: executing program 3 (id=11130): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161102, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40086610, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 3.0363254s ago: executing program 0 (id=11131): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xf8000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f041}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000640)=0xa0000) r6 = dup(r5) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper}, @host, 0x0, 0xffffffffffdfffff}) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.276913313s ago: executing program 4 (id=11132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.06043519s ago: executing program 3 (id=11133): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000c00)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c756d61736b3d30303030303030303030303030303030303030303030362c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c63726561746f723d25b5e9122c6e6f6465636f6d706f73652c6e6f626172726965722c666f7263652c7569643d", @ANYRESHEX, @ANYBLOB="2c6372626172726965722c6e6f621a32b86172726965722c646f6e745f6d65617375757365723d3b5e283a232c0000000000000000"], 0x1, 0x6da, &(0x7f0000000300)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x20}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 1.970126508s ago: executing program 1 (id=11134): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="71e79fd811000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.969077208s ago: executing program 4 (id=11135): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000300)=ANY=[@ANYBLOB="d0000000080211000000080211000001ffffffffffff0000030000000000000000d8aae09a2ac0054ecc14f00a16a0cac2207b"], 0x21) r5 = socket(0x18, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x2042, 0x0, 0x0) connect$llc(r3, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200048e0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) socket(0x23, 0x5, 0x0) gettid() sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 86.656342ms ago: executing program 2 (id=11136): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = gettid() r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300)=r1, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x800}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) 58.665685ms ago: executing program 3 (id=11137): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e7", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6", 0x1b}, {&(0x7f0000001bc0)="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", 0x355}], 0x2}}], 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 0s ago: executing program 4 (id=11138): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getpid() openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000440)='./file0\x00', 0x2) r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000280)="511bd178746e4fabf2ba027e32a14f4ed5688a980491cb305cad31d7c814bd69d46b5b9e644a6ad9b648c94d5abf6527a72d41f4ff04e8bea91a57", 0x3b, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x3, 0xe, 0x2, 0x1080, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, r0, 0x5, 0x1, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r4}, 0x10) kernel console output (not intermixed with test programs): syz.4.10278: couldn't read orphan inode 12 (err -117) [ 1684.869780][ T2832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1685.518903][T28578] EXT4-fs (loop4): unmounting filesystem. [ 1685.997587][ T2877] loop1: detected capacity change from 0 to 512 [ 1686.037528][ T2877] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1686.068495][ T2877] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.10297: inline data xattr refers to an external xattr inode [ 1686.260733][ T2877] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.10297: couldn't read orphan inode 12 (err -117) [ 1686.283843][ T2877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1686.732203][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 1686.732284][ T26] audit: type=1800 audit(1723748240.798:4223): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.10296" name="/" dev="sockfs" ino=160044 res=0 errno=0 [ 1686.773319][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1686.795699][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1686.870341][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1686.884697][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1686.894438][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1686.901907][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1687.009429][T31420] EXT4-fs (loop1): unmounting filesystem. [ 1687.140189][ T3803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.303332][ T3803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.411763][ T3803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.612952][ T3803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.710715][ T2920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1687.923959][ T2889] chnl_net:caif_netlink_parms(): no params data found [ 1688.362024][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.374368][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.390058][ T2889] device bridge_slave_0 entered promiscuous mode [ 1688.452013][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.459305][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.471498][ T2889] device bridge_slave_1 entered promiscuous mode [ 1688.563025][ T2889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.586215][ T2889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1688.683209][ T2889] team0: Port device team_slave_0 added [ 1688.746455][ T2889] team0: Port device team_slave_1 added [ 1688.789882][ T2889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.809985][ T2889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.842144][ T2889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.921503][ T2889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.930518][ T47] Bluetooth: hci3: command tx timeout [ 1688.940232][ T2889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.980375][ T2889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1689.055625][ T2889] device hsr_slave_0 entered promiscuous mode [ 1689.064692][ T2889] device hsr_slave_1 entered promiscuous mode [ 1689.071639][ T2889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1689.079495][ T2889] Cannot create hsr debugfs directory [ 1689.701547][ T3803] device hsr_slave_0 left promiscuous mode [ 1689.725815][ T3803] device hsr_slave_1 left promiscuous mode [ 1689.755595][ T3803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1689.784178][ T3803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1689.811859][ T3803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1689.841041][ T3803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1689.867942][ T3803] device bridge_slave_1 left promiscuous mode [ 1689.890858][ T3803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.914992][ T3803] device bridge_slave_0 left promiscuous mode [ 1689.926986][ T3803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.064138][ T3803] device veth1_macvtap left promiscuous mode [ 1690.099643][ T3803] device veth0_macvtap left promiscuous mode [ 1690.114302][ T3803] device veth1_vlan left promiscuous mode [ 1690.149547][ T3803] device veth0_vlan left promiscuous mode [ 1690.956874][ T2988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1691.139270][ T47] Bluetooth: hci3: command tx timeout [ 1691.674437][ T3803] team0 (unregistering): Port device team_slave_1 removed [ 1691.747819][ T3803] team0 (unregistering): Port device team_slave_0 removed [ 1691.800499][ T3803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.866169][ T3803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1692.788399][ T3803] bond0 (unregistering): Released all slaves [ 1692.897273][ T3053] serio: Serial port pts0 [ 1693.180365][T24982] Bluetooth: hci3: command tx timeout [ 1693.418460][ T2889] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1693.463509][ T2889] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1693.535190][ T2889] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1693.576316][ T2889] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1693.790983][ T2889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.828435][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1693.864680][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1693.905976][ T2889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1693.931728][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1693.962341][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1693.981203][T14091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.988351][T14091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.029217][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1694.077933][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1694.102389][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1694.140824][T14091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.147952][T14091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.211918][ T3100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1694.460740][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1694.492280][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1694.541962][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1694.574689][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1694.622183][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1694.683854][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1694.693106][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1694.708370][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1694.757707][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1694.801402][ T2889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1694.821498][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1694.841285][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1694.858453][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1695.080680][T24898] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1695.250520][T24982] Bluetooth: hci3: command tx timeout [ 1695.271262][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1695.278725][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1695.299505][ T2889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.324008][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1695.349604][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1695.392689][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1695.409421][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1695.467173][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1695.491152][T24898] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.511782][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1695.537648][T24898] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1695.553776][ T2889] device veth0_vlan entered promiscuous mode [ 1695.558461][T24898] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1695.579150][ T2889] device veth1_vlan entered promiscuous mode [ 1695.601029][T24898] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1695.613917][T24898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.649844][T24898] usb 2-1: config 0 descriptor?? [ 1695.657058][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1695.666006][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1695.700780][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1695.719682][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1695.744097][ T2889] device veth0_macvtap entered promiscuous mode [ 1695.790287][ T2889] device veth1_macvtap entered promiscuous mode [ 1695.830896][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.870352][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.894366][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.912680][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.928743][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.953285][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.990441][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.041506][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.110537][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.130083][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.174851][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.358062][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.565495][ T2889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1696.797468][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.827885][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.839383][ T3173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.880214][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.904788][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.935105][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.970985][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.017177][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1697.055078][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.075243][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1697.104110][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.127739][ T2889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1697.162630][ T2889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.194031][ T2889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.219534][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1697.236099][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1697.278081][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1697.320825][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1697.349626][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1697.392408][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1697.435372][ T2889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.451070][ T2889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.473187][ T2889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.497752][ T2889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.833658][T14091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.860487][T14091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.892483][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1697.895255][ C1] eth0: bad gso: type: 1, size: 1408 [ 1697.908354][ T3762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.917601][ T3762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.934115][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1698.610576][T24898] usbhid 2-1:0.0: can't add hid device: -71 [ 1698.616848][T24898] usbhid: probe of 2-1:0.0 failed with error -71 [ 1698.660168][T24898] usb 2-1: USB disconnect, device number 90 [ 1699.586774][ T3234] nbd2: detected capacity change from 0 to 8388607 [ 1699.660394][T24898] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1699.680951][ T3244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.090474][T24898] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1700.103031][T24898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.121293][T24898] usb 5-1: config 0 descriptor?? [ 1700.195356][T24898] cp210x 5-1:0.0: cp210x converter detected [ 1700.352072][ T47] block nbd2: Receive control failed (result -104) [ 1700.366292][ T3242] ldm_validate_partition_table(): Disk read failed. [ 1700.384862][ T3242] Dev nbd2: unable to read RDB block 0 [ 1700.410720][T24898] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1700.418683][T24898] cp210x 5-1:0.0: querying part number failed [ 1700.433838][ T3242] nbd2: unable to read partition table [ 1700.464271][ T3242] nbd2: partition table beyond EOD, truncated [ 1700.484626][T24898] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1700.613571][T24898] usb 5-1: USB disconnect, device number 94 [ 1700.635061][T24898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1700.682623][T24898] cp210x 5-1:0.0: device disconnected [ 1703.260667][ T3297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.942044][ T3362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1706.098404][ T3371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10498'. [ 1706.108422][ T3372] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10499'. [ 1706.143646][ T3369] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10499'. [ 1706.220234][ T3373] netlink: 'syz.0.10498': attribute type 3 has an invalid length. [ 1706.271592][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1707.289818][ T3388] loop0: detected capacity change from 0 to 512 [ 1707.326721][ T3388] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1707.379096][ T3388] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.10506: inline data xattr refers to an external xattr inode [ 1707.402729][ T3388] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.10506: couldn't read orphan inode 12 (err -117) [ 1707.420084][ T3388] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1708.051192][ T400] EXT4-fs (loop0): unmounting filesystem. [ 1708.388623][ T3416] loop0: detected capacity change from 0 to 512 [ 1708.443918][ T3416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1708.480216][ T3416] EXT4-fs: old and new quota format mixing [ 1708.522973][ T3418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1708.569839][ T3423] loop1: detected capacity change from 0 to 1024 [ 1708.586532][ T3416] loop0: detected capacity change from 0 to 1764 [ 1708.604573][ T3425] loop4: detected capacity change from 0 to 512 [ 1708.616780][ T3423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1708.763478][ T3425] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.10517: casefold flag without casefold feature [ 1708.791416][ T3425] EXT4-fs error (device loop4): ext4_do_update_inode:5221: inode #3: comm syz.4.10517: corrupted inode contents [ 1708.806043][ T3425] EXT4-fs error (device loop4): ext4_dirty_inode:6083: inode #3: comm syz.4.10517: mark_inode_dirty error [ 1708.821089][ T3425] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10517: bg 0: block 64: padding at end of block bitmap is not set [ 1708.837390][ T3425] Quota error (device loop4): write_blk: dquota write failed [ 1708.846794][ T3425] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1708.856915][ T3425] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.10517: Failed to acquire dquot type 0 [ 1708.988236][ T3425] EXT4-fs (loop4): 1 truncate cleaned up [ 1709.024440][ T3425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1709.086520][ T3425] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038 (0x7fffffff) [ 1709.326017][ T26] audit: type=1326 audit(1723748263.398:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3424 comm="syz.4.10517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2a1d799b9 code=0x0 [ 1709.499437][T31420] EXT4-fs (loop1): unmounting filesystem. [ 1709.703901][T28578] EXT4-fs (loop4): unmounting filesystem. [ 1709.923815][T12854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.928935][ T3439] loop4: detected capacity change from 0 to 128 [ 1710.138248][T24982] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1710.146789][T24982] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1710.154893][T24982] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1710.173990][T24982] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1710.181710][T24982] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1710.191029][T24982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1710.197157][T12854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.333738][T14955] kworker/u4:3: attempt to access beyond end of device [ 1710.333738][T14955] loop4: rw=1, sector=145, nr_sectors = 480 limit=128 [ 1710.418895][T12854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.430594][T24982] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1710.456541][T24982] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1710.465807][T24982] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1710.475583][T24982] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1710.483427][T24982] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1710.490825][T24982] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1710.553452][ T3449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.560217][T12854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.912667][ T3443] chnl_net:caif_netlink_parms(): no params data found [ 1711.091967][ T3445] chnl_net:caif_netlink_parms(): no params data found [ 1711.227806][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.246017][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.265812][ T3443] device bridge_slave_0 entered promiscuous mode [ 1711.329844][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.337482][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.346282][ T3443] device bridge_slave_1 entered promiscuous mode [ 1711.513068][ T3443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.625440][ T3443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.782200][ T3443] team0: Port device team_slave_0 added [ 1711.788599][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.804028][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.817587][ T3445] device bridge_slave_0 entered promiscuous mode [ 1711.849041][ T3443] team0: Port device team_slave_1 added [ 1711.863986][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.873446][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.881725][ T3445] device bridge_slave_1 entered promiscuous mode [ 1711.939802][ T3443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1711.947736][ T3443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1711.974205][ T3443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1711.987777][ T3445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.015917][ T3443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1712.023138][ T3443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.050760][ T3443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1712.064879][ T3445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.125952][ T3443] device hsr_slave_0 entered promiscuous mode [ 1712.134782][ T3443] device hsr_slave_1 entered promiscuous mode [ 1712.143397][ T3443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1712.151155][ T3443] Cannot create hsr debugfs directory [ 1712.168799][ T3445] team0: Port device team_slave_0 added [ 1712.229316][ T3445] team0: Port device team_slave_1 added [ 1712.275937][ T3445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1712.285318][ T3445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.312290][ T47] Bluetooth: hci3: command tx timeout [ 1712.315340][ T3445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1712.332117][ T3445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1712.339165][ T3445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.365405][ T3445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1712.499393][ T3445] device hsr_slave_0 entered promiscuous mode [ 1712.506763][ T3445] device hsr_slave_1 entered promiscuous mode [ 1712.514663][ T3445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1712.524166][ T3445] Cannot create hsr debugfs directory [ 1712.530559][T24982] Bluetooth: hci6: command tx timeout [ 1712.561059][T12854] device hsr_slave_0 left promiscuous mode [ 1712.567466][T12854] device hsr_slave_1 left promiscuous mode [ 1712.573877][T12854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1712.582381][T12854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1712.590048][T12854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1712.597568][T12854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1712.605431][T12854] device bridge_slave_1 left promiscuous mode [ 1712.620435][T12854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.629310][T12854] device bridge_slave_0 left promiscuous mode [ 1712.635849][T12854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.710983][T12854] device veth1_macvtap left promiscuous mode [ 1712.721181][T12854] device veth0_macvtap left promiscuous mode [ 1712.727308][T12854] device veth1_vlan left promiscuous mode [ 1712.735566][T12854] device veth0_vlan left promiscuous mode [ 1712.791118][ T3496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1712.937002][ T3498] loop1: detected capacity change from 0 to 1024 [ 1713.012584][ T26] audit: type=1800 audit(1723748267.098:4225): pid=3498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10537" name="file0" dev="loop1" ino=18 res=0 errno=0 [ 1713.406651][ T3505] loop4: detected capacity change from 0 to 1024 [ 1713.415700][ T3505] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1713.503084][ T3506] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 1714.021192][ T3505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1714.372065][T24982] Bluetooth: hci3: command tx timeout [ 1714.458429][T12854] team0 (unregistering): Port device team_slave_1 removed [ 1714.612392][T24982] Bluetooth: hci6: command tx timeout [ 1714.732108][T12854] team0 (unregistering): Port device team_slave_0 removed [ 1714.771403][ T26] audit: type=1800 audit(1723748268.838:4226): pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10540" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1714.871283][T12854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.928976][T28578] EXT4-fs (loop4): unmounting filesystem. [ 1714.978829][T12854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.517959][T12854] bond0 (unregistering): Released all slaves [ 1715.831139][ T3517] loop4: detected capacity change from 0 to 1024 [ 1715.965698][ T3443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.045132][ T3527] loop4: detected capacity change from 0 to 256 [ 1716.178691][ T3443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.620765][T24982] Bluetooth: hci3: command tx timeout [ 1716.690603][ T47] Bluetooth: hci6: command tx timeout [ 1717.115896][ T3443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.328213][ T3542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1717.340017][ T3443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.761979][ T3552] loop1: detected capacity change from 0 to 4096 [ 1717.814991][ T3557] loop4: detected capacity change from 0 to 1024 [ 1717.975961][ T3559] loop3: detected capacity change from 0 to 1024 [ 1718.028104][ T3559] hfsplus: invalid uid specified [ 1718.033597][ T3559] hfsplus: unable to parse mount options [ 1718.762360][ T47] Bluetooth: hci3: command tx timeout [ 1718.770556][ T47] Bluetooth: hci6: command tx timeout [ 1718.802574][ T3443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1718.872444][ T3443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1718.923180][ T3564] loop1: detected capacity change from 0 to 1024 [ 1718.935986][ T3443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1718.950410][ T3564] hfsplus: invalid uid specified [ 1718.970822][ T3443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1718.981751][ T3564] hfsplus: unable to parse mount options [ 1718.990470][ T3568] loop4: detected capacity change from 0 to 256 [ 1719.079513][ T3570] netlink: 'syz.3.10565': attribute type 3 has an invalid length. [ 1719.133342][ T3445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1719.152879][ T3445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1719.198700][ T3445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1719.226599][ T3445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1719.291384][ T3443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.373839][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1719.501228][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1719.561182][ T3443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.765538][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1719.895190][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1720.071952][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.079135][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1720.242173][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1720.301170][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1720.348920][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.356083][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1720.402588][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1720.441716][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1720.458843][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1720.481456][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1720.505193][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1720.525158][ T3585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1720.565305][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1720.583993][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1720.604852][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1720.623392][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1720.639252][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1720.668516][ T3445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1720.685158][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1720.698413][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1720.719324][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1720.743305][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1720.756848][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1720.785589][ T3445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1720.809019][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1720.822251][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1720.837874][T23105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.845058][T23105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1720.969035][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1721.021074][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1721.040865][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1721.089042][T23105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.096191][T23105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1721.141167][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1721.195366][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1721.221751][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1721.223845][ T3576] loop4: detected capacity change from 0 to 32768 [ 1721.257555][ T3576] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.10568 (3576) [ 1721.276783][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1721.288527][ T3576] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1721.309469][ T3576] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1721.311131][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1721.358464][ T3576] BTRFS info (device loop4): using free space tree [ 1721.367149][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1721.384715][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1721.415690][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1721.427227][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1721.435670][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1721.450019][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1721.463211][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1721.479882][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1721.489180][ T3602] loop3: detected capacity change from 0 to 256 [ 1721.497732][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1721.498553][ T3602] exfat: Deprecated parameter 'namecase' [ 1721.511649][ T3602] exfat: Deprecated parameter 'utf8' [ 1721.516989][ T3602] exfat: Deprecated parameter 'namecase' [ 1721.533399][ T3602] exfat: Deprecated parameter 'utf8' [ 1721.544310][ T3602] exfat: Bad value for 'gid' [ 1721.549169][ T3443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1721.592403][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1721.611270][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1721.619822][ T3576] BTRFS info (device loop4): enabling ssd optimizations [ 1722.738011][ T3443] device veth0_vlan entered promiscuous mode [ 1722.772172][ T3443] device veth1_vlan entered promiscuous mode [ 1722.784930][ T3627] loop3: detected capacity change from 0 to 8 [ 1722.852435][ T3443] device veth0_macvtap entered promiscuous mode [ 1722.903023][ T3443] device veth1_macvtap entered promiscuous mode [ 1722.944726][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1722.954085][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1722.965707][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1722.974152][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1722.983814][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1722.992664][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1723.001172][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1723.001788][T28578] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1723.009174][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1723.037273][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1723.326245][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1723.635942][ T3445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1723.663613][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1723.698784][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1723.752146][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1723.777440][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.787793][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1723.810874][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.821827][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1723.844979][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.855408][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1723.866450][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.899811][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1723.918883][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.928829][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1723.949000][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.983867][ T3443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1724.011486][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1724.040670][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1724.041787][ T3630] loop1: detected capacity change from 0 to 32768 [ 1724.059012][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1724.070885][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.081845][ T3630] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.10577 (3630) [ 1724.089743][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1724.105547][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.112724][ T3630] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1724.115398][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1724.130244][ T3630] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1724.144525][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.144548][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1724.144565][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.144582][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1724.144594][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.154736][ T3630] BTRFS info (device loop1): using free space tree [ 1724.198028][ T3443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1724.214561][ T3443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.241583][ T3443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1724.250816][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1724.261179][ T3630] BTRFS info (device loop1): enabling ssd optimizations [ 1724.265038][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1724.277790][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1724.286726][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1724.305956][ T3443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.325852][ T3443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.343542][ T3443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.356711][ T3443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.383940][ T3445] device veth0_vlan entered promiscuous mode [ 1724.397537][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1724.409851][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1724.428429][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1724.446281][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1724.473295][ T3445] device veth1_vlan entered promiscuous mode [ 1724.481909][ T3664] loop4: detected capacity change from 0 to 512 [ 1724.499422][ T3664] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1724.506094][T31420] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1724.582933][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1724.608017][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1724.616285][ T3664] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.10576: invalid indirect mapped block 83886080 (level 1) [ 1724.617852][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1724.675601][ T3664] EXT4-fs (loop4): Remounting filesystem read-only [ 1724.712005][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1724.724353][ T3664] EXT4-fs (loop4): 1 orphan inode deleted [ 1724.730135][ T3664] EXT4-fs (loop4): 1 truncate cleaned up [ 1724.736948][ T3664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1724.889590][ T3445] device veth0_macvtap entered promiscuous mode [ 1725.380440][ T3666] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1725.418981][ T3762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.458784][ T3445] device veth1_macvtap entered promiscuous mode [ 1725.478253][ T3762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.491250][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1725.502868][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1725.515287][ T3666] EXT4-fs (loop4): Remounting filesystem read-only [ 1725.533829][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1725.535351][T28578] EXT4-fs (loop4): unmounting filesystem. [ 1725.601274][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.620171][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.630786][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.638277][ T3678] loop4: detected capacity change from 0 to 2048 [ 1725.641493][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.658143][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.668648][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.678651][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.689372][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.690234][ T3678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1725.713855][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.733917][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.746277][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.759116][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.773935][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.786550][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.798951][ T3445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1725.817174][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1725.829728][T11391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1725.848645][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.850095][T23105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.865737][ T2543] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1725.869386][T23105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.878018][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.897329][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.907907][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.918396][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.944156][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.954259][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.965133][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.975160][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.985903][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.996219][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.006696][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.016606][ T3445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.027133][ T3445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.038991][ T3445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.054481][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1726.073891][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1726.083793][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1726.095803][ T3445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.101459][T28578] EXT4-fs (loop4): unmounting filesystem. [ 1726.105064][ T3445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.110459][ T2543] usb 2-1: Using ep0 maxpacket: 32 [ 1726.119382][ T3445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.133930][ T3445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.250534][ T2543] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1726.268911][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.280673][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.339879][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1726.352310][T12854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.373501][T12854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.419377][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1726.427796][ T2543] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1726.457067][ T2543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.475101][ T2543] usb 2-1: Product: syz [ 1726.484176][ T2543] usb 2-1: Manufacturer: syz [ 1726.494467][ T2543] usb 2-1: SerialNumber: syz [ 1726.872286][ T3704] loop2: detected capacity change from 0 to 2048 [ 1726.904736][ T2543] usb 2-1: USB disconnect, device number 91 [ 1727.388920][ T3704] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1728.256684][ T3443] EXT4-fs (loop2): unmounting filesystem. [ 1728.450146][ T3725] netlink: 59 bytes leftover after parsing attributes in process `syz.2.10591'. [ 1730.051908][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.110360][ T52] block nbd2: Possible stuck request ffff88801fff8e00: control (read@0,4096B). Runtime 30 seconds [ 1731.134776][ T3746] loop3: detected capacity change from 0 to 1024 [ 1731.151358][ T3746] hfsplus: invalid uid specified [ 1731.176655][ T3746] hfsplus: unable to parse mount options [ 1731.829499][ T3774] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 1732.518280][ T3785] dccp_invalid_packet: P.Data Offset(68) too large [ 1732.605983][ T3785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10613'. [ 1733.809145][ T3813] Bluetooth: MGMT ver 1.22 [ 1733.820378][T22023] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1733.833861][ T3813] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 1733.936912][ T3820] netlink: 'syz.1.10624': attribute type 30 has an invalid length. [ 1734.477964][ T3824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10624'. [ 1736.923972][T24982] Bluetooth: hci6: command tx timeout [ 1737.560478][T22023] usb 5-1: device descriptor read/all, error -71 [ 1738.017068][ T3854] netlink: 212 bytes leftover after parsing attributes in process `syz.4.10634'. [ 1739.351414][ T3715] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1739.396338][ T3887] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10647'. [ 1739.680470][T22023] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1739.730641][ T3715] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.771097][ T3715] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1739.838500][ T3715] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1739.865277][ T3715] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1739.913996][ T3715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.928691][ T3715] usb 4-1: config 0 descriptor?? [ 1739.943102][T22023] usb 3-1: Using ep0 maxpacket: 32 [ 1740.060591][T22023] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30130, setting to 1024 [ 1740.092962][T22023] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1741.120437][T22023] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1741.133056][T22023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.141257][T22023] usb 3-1: Product: syz [ 1741.145538][T22023] usb 3-1: Manufacturer: syz [ 1741.150234][T22023] usb 3-1: SerialNumber: syz [ 1741.181056][ T3887] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1741.198202][ T3906] device vlan2 entered promiscuous mode [ 1741.234448][ T3906] device ip6gretap0 entered promiscuous mode [ 1741.253132][ T3906] device ip6gretap0 left promiscuous mode [ 1741.295552][ T3885] can: request_module (can-proto-0) failed. [ 1741.421772][T22023] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1741.626703][ T3912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10655'. [ 1742.410507][ T3715] usbhid 4-1:0.0: can't add hid device: -71 [ 1742.421459][ T3715] usbhid: probe of 4-1:0.0 failed with error -71 [ 1742.430427][T22023] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1742.474069][ T3715] usb 4-1: USB disconnect, device number 115 [ 1742.519005][ T3927] loop1: detected capacity change from 0 to 512 [ 1742.553010][ T3927] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1742.608175][ T3927] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.10661: inline data xattr refers to an external xattr inode [ 1742.641670][T24898] usb 3-1: USB disconnect, device number 81 [ 1742.667123][T24898] usblp0: removed [ 1742.689907][ T3927] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.10661: couldn't read orphan inode 12 (err -117) [ 1742.700372][T22023] usb 1-1: Using ep0 maxpacket: 16 [ 1742.747146][ T3927] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1742.820594][T22023] usb 1-1: config 7 has an invalid interface number: 152 but max is 0 [ 1742.840004][T22023] usb 1-1: config 7 has no interface number 0 [ 1742.868393][T22023] usb 1-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 1743.145024][T22023] usb 1-1: config 7 interface 152 altsetting 190 bulk endpoint 0x2 has invalid maxpacket 8 [ 1743.328690][T22023] usb 1-1: config 7 interface 152 has no altsetting 0 [ 1743.876190][T22023] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 1743.898637][T22023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.965109][ T3946] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1743.986712][T22023] usb 1-1: Product: syz [ 1743.991132][T22023] usb 1-1: Manufacturer: syz [ 1743.995873][T22023] usb 1-1: SerialNumber: syz [ 1744.023432][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1744.110774][T31420] EXT4-fs (loop1): unmounting filesystem. [ 1744.143725][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1744.155940][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1744.169664][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1744.181618][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1744.190141][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1744.233356][ T3920] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1744.720577][T22023] usbtest 1-1:7.152: couldn't get endpoints, -71 [ 1744.733150][T22023] usbtest: probe of 1-1:7.152 failed with error -71 [ 1744.769427][T22023] usb 1-1: USB disconnect, device number 54 [ 1744.904486][ T3951] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1745.008940][T24568] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.031655][ T3943] chnl_net:caif_netlink_parms(): no params data found [ 1745.060583][ T3636] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1745.128978][T24568] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.142825][ T3943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.149936][ T3943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.159200][ T3943] device bridge_slave_0 entered promiscuous mode [ 1745.168218][ T3943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.175689][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.203277][ T3943] device bridge_slave_1 entered promiscuous mode [ 1745.256142][T24568] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.295560][ T3943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1745.308820][ T3943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1745.310475][ T3636] usb 4-1: Using ep0 maxpacket: 16 [ 1745.356358][T24568] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.378886][ T3943] team0: Port device team_slave_0 added [ 1745.387351][ T3943] team0: Port device team_slave_1 added [ 1745.409281][ T3943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1745.418708][ T3943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1745.445034][ T3943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1745.450520][ T3636] usb 4-1: config 7 has an invalid interface number: 152 but max is 0 [ 1745.465699][ T3943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1745.473452][ T3636] usb 4-1: config 7 has no interface number 0 [ 1745.473618][ T3943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1745.506245][ T3715] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1745.506483][ T3636] usb 4-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 1745.523953][ T3943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1745.540604][ T2543] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1745.562349][ T3636] usb 4-1: config 7 interface 152 has no altsetting 0 [ 1745.597604][ T3943] device hsr_slave_0 entered promiscuous mode [ 1745.604865][ T3943] device hsr_slave_1 entered promiscuous mode [ 1745.611860][ T3943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1745.619431][ T3943] Cannot create hsr debugfs directory [ 1745.720720][ T3636] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 1745.734534][ T3636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.743054][ T3636] usb 4-1: Product: syz [ 1745.747299][ T3636] usb 4-1: Manufacturer: syz [ 1745.752078][ T3636] usb 4-1: SerialNumber: syz [ 1745.791132][ T2543] usb 3-1: Using ep0 maxpacket: 32 [ 1745.860756][ T3715] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.874043][ T3715] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1745.886942][ T3715] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1745.907968][ T3715] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1745.917223][ T2543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.927116][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.935232][ T2543] usb 3-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 1745.946224][ T3715] usb 1-1: config 0 descriptor?? [ 1745.951267][ T2543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.960543][ T2543] usb 3-1: config 0 descriptor?? [ 1746.100457][ T3636] usbtest 4-1:7.152: couldn't get endpoints, -71 [ 1746.107041][ T3636] usbtest: probe of 4-1:7.152 failed with error -71 [ 1746.118706][ T3636] usb 4-1: USB disconnect, device number 116 [ 1746.301405][T16948] Bluetooth: hci5: command tx timeout [ 1747.074436][ T3964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1747.111767][ T3964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1747.348598][ T2543] hid-generic 0003:057E:201E.001E: hidraw0: USB HID v0.00 Device [HID 057e:201e] on usb-dummy_hcd.2-1/input0 [ 1747.413235][ T3974] loop3: detected capacity change from 0 to 512 [ 1747.423143][ T3974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1747.438751][ T3974] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.10676: invalid indirect mapped block 83886080 (level 1) [ 1747.454176][ T3974] EXT4-fs (loop3): Remounting filesystem read-only [ 1747.461344][ T3974] EXT4-fs (loop3): 1 orphan inode deleted [ 1747.468054][ T3974] EXT4-fs (loop3): 1 truncate cleaned up [ 1747.474419][ T3974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1747.605464][ T3964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1747.618225][ T3964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1747.629069][ T3964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1748.316579][ T3964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.401105][T16948] Bluetooth: hci5: command tx timeout [ 1748.440713][ T3715] usbhid 1-1:0.0: can't add hid device: -71 [ 1748.448650][T30620] EXT4-fs (loop3): unmounting filesystem. [ 1748.456936][ T3715] usbhid: probe of 1-1:0.0 failed with error -71 [ 1748.472297][ T3715] usb 1-1: USB disconnect, device number 55 [ 1748.493680][ T3981] loop0: detected capacity change from 0 to 512 [ 1748.503243][ T3981] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1748.544747][ T3943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1748.559263][ T3981] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.10677: inline data xattr refers to an external xattr inode [ 1748.609675][T24568] device hsr_slave_0 left promiscuous mode [ 1748.627936][T24568] device hsr_slave_1 left promiscuous mode [ 1748.638862][ T3981] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.10677: couldn't read orphan inode 12 (err -117) [ 1748.639014][T22023] usb 3-1: USB disconnect, device number 82 [ 1748.661744][T24568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1748.669854][ T3981] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1748.679491][T24568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.707469][T24568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1748.720395][T24568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.732994][T24568] device bridge_slave_1 left promiscuous mode [ 1748.818311][T24568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.022499][T24568] device bridge_slave_0 left promiscuous mode [ 1749.094356][T24568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.264928][ C1] eth0: bad gso: type: 1, size: 1408 [ 1749.275779][ T3445] EXT4-fs (loop0): unmounting filesystem. [ 1749.343246][T24568] device veth1_macvtap left promiscuous mode [ 1749.370928][T24568] device veth0_macvtap left promiscuous mode [ 1749.392489][T24568] device veth1_vlan left promiscuous mode [ 1749.402657][T24568] device veth0_vlan left promiscuous mode [ 1750.026604][T24568] team0 (unregistering): Port device team_slave_1 removed [ 1750.075841][T24568] team0 (unregistering): Port device team_slave_0 removed [ 1750.126582][T24568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1750.174148][T24568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1750.450599][T16948] Bluetooth: hci5: command tx timeout [ 1750.746135][T24568] bond0 (unregistering): Released all slaves [ 1750.823741][ T3943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1750.848765][ T4004] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10683'. [ 1750.863563][ T3943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1750.932470][ T3943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1751.078574][ T4014] loop3: detected capacity change from 0 to 512 [ 1751.087937][ T4014] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1751.134642][ T4014] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.10687: invalid indirect mapped block 83886080 (level 1) [ 1751.162194][ T4014] EXT4-fs (loop3): Remounting filesystem read-only [ 1751.168264][ T3943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1751.169081][ T4014] EXT4-fs (loop3): 1 orphan inode deleted [ 1751.197706][ T4014] EXT4-fs (loop3): 1 truncate cleaned up [ 1751.214748][ T3943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1751.221007][ T4014] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1751.255260][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1751.265746][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1751.273758][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1751.282701][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1751.291619][T14955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.298748][T14955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1751.306848][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1751.316500][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1751.325620][T14955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.332799][T14955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.391443][T13004] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1751.402120][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1751.411437][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1751.421422][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1751.433117][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1751.442929][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1751.451965][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1752.070062][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1752.079018][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1752.087577][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1752.095994][T30620] EXT4-fs (loop3): unmounting filesystem. [ 1752.096576][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1752.131616][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1752.144870][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1752.184147][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1752.277696][ T4028] xt_TCPMSS: Only works on TCP SYN packets [ 1752.310668][T13004] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.335778][T13004] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1752.372073][T13004] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1752.392127][T13004] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1752.417288][T13004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.442313][T13004] usb 1-1: config 0 descriptor?? [ 1752.530709][T16948] Bluetooth: hci5: command tx timeout [ 1754.552147][T24576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1755.350147][T24576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1755.374284][ T3943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1755.397040][ T4056] binder_alloc: 4055: binder_alloc_buf size -8377418949323018792 failed, no address space [ 1755.409928][ T4056] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1755.580682][T13004] usbhid 1-1:0.0: can't add hid device: -71 [ 1755.586696][T13004] usbhid: probe of 1-1:0.0 failed with error -71 [ 1755.627006][T13004] usb 1-1: USB disconnect, device number 56 [ 1755.878278][ T4071] loop0: detected capacity change from 0 to 512 [ 1755.895448][ T4074] bridge0: port 3(netdevsim0) entered blocking state [ 1755.909308][ T4071] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1755.918016][ T4074] bridge0: port 3(netdevsim0) entered disabled state [ 1755.946884][ T4074] device netdevsim0 entered promiscuous mode [ 1755.972417][ T4074] bridge0: port 3(netdevsim0) entered blocking state [ 1755.980042][ T4074] bridge0: port 3(netdevsim0) entered forwarding state [ 1756.000390][ T4071] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.10698: invalid indirect mapped block 83886080 (level 1) [ 1756.120587][ T4071] EXT4-fs (loop0): Remounting filesystem read-only [ 1756.127426][ T4071] EXT4-fs (loop0): 1 orphan inode deleted [ 1756.165346][ T4087] netlink: 'syz.2.10703': attribute type 30 has an invalid length. [ 1756.222172][ T4071] EXT4-fs (loop0): 1 truncate cleaned up [ 1756.230457][ T4071] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1756.349358][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1756.376034][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1756.455408][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1756.481278][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1757.308713][ T3943] device veth0_vlan entered promiscuous mode [ 1757.369513][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1757.511114][ T3445] EXT4-fs (loop0): unmounting filesystem. [ 1757.556559][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1757.715954][ T3943] device veth1_vlan entered promiscuous mode [ 1757.756102][ T3943] device veth0_macvtap entered promiscuous mode [ 1757.808407][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1757.830413][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1757.863288][ T3943] device veth1_macvtap entered promiscuous mode [ 1757.881021][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1757.902351][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1757.929623][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.948355][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.975183][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.000377][ T3632] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1758.004061][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.037749][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.059732][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.083882][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.094567][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.104997][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.116135][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.126200][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.137398][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.156596][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.169595][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.180491][T13004] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1758.192771][ T3943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1758.220663][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1758.249651][T23105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1758.250395][ T3632] usb 3-1: Using ep0 maxpacket: 8 [ 1758.269965][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.298059][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.316852][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.349958][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.372903][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.410672][ T3632] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1758.429607][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.459904][ T3632] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1758.482885][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.494898][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.505143][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.515597][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.520446][ T3632] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1758.525523][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.681955][ T4126] loop0: detected capacity change from 0 to 2048 [ 1758.704726][ T4126] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1758.723195][ T4126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1759.051047][ T3632] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1759.090985][ T3632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.160904][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.166942][ T3632] usb 3-1: Product: syz [ 1759.170766][ T3943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.170785][ T3943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.172224][ T3943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1759.187166][ T3632] usb 3-1: Manufacturer: syz [ 1759.223021][ T4129] loop3: detected capacity change from 0 to 512 [ 1759.235619][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1759.244275][ T4129] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1759.255594][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1759.271071][ T3943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.280449][ T3943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.289151][ T3943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.298852][T13004] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.312907][ T3632] usb 3-1: SerialNumber: syz [ 1759.320320][ T3943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.332730][ T4129] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.10717: invalid indirect mapped block 83886080 (level 1) [ 1759.340741][ T4105] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1759.352579][T13004] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1759.366154][ T3632] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1759.366578][T13004] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1759.373976][ T3632] usbtest 3-1:1.0: Linux user mode ISO test driver [ 1759.382879][T13004] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1759.386695][ T4129] EXT4-fs (loop3): Remounting filesystem read-only [ 1759.402462][ T3632] usbtest 3-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 1759.403060][T13004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.420124][ T4129] EXT4-fs (loop3): 1 orphan inode deleted [ 1759.425949][ T4129] EXT4-fs (loop3): 1 truncate cleaned up [ 1759.431748][ T4129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1759.485621][T13004] usb 2-1: config 0 descriptor?? [ 1759.695286][ T3636] usb 3-1: USB disconnect, device number 83 [ 1760.368452][T26307] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1760.383687][ T52] block nbd2: Possible stuck request ffff88801fff8e00: control (read@0,4096B). Runtime 60 seconds [ 1760.462832][T14091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.472685][T14091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.498049][T30620] EXT4-fs (loop3): unmounting filesystem. [ 1760.505698][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1760.569137][T14955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.581933][ T4138] vivid-002: disconnect [ 1760.586183][T14955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.604400][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1760.630795][T26307] usb 1-1: Using ep0 maxpacket: 8 [ 1760.655307][ T4139] loop3: detected capacity change from 0 to 512 [ 1760.763126][ T4139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1760.780482][ T4139] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038 (0x7fffffff) [ 1760.781363][T26307] usb 1-1: config index 0 descriptor too short (expected 1581, got 45) [ 1760.799667][T26307] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1760.810368][T26307] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 197 [ 1760.820583][T26307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12336, setting to 64 [ 1760.831581][T26307] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1760.845578][T26307] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1760.854750][T26307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.876850][T26307] usb 1-1: config 0 descriptor?? [ 1760.990736][ T4132] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1761.223748][ T4147] netlink: 192 bytes leftover after parsing attributes in process `syz.3.10719'. [ 1761.701374][T30620] EXT4-fs (loop3): unmounting filesystem. [ 1762.002379][ T4132] xt_socket: unknown flags 0xc [ 1762.008312][ T3636] usb 1-1: USB disconnect, device number 57 [ 1762.157529][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10723'. [ 1762.470513][ T3715] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1762.605647][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.613540][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.880867][ T3715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.956191][ T3715] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1763.063418][ T4170] device bridge_slave_1 left promiscuous mode [ 1763.080890][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.093806][ T3715] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1763.138537][ T4135] vivid-002: reconnect [ 1763.157382][ T3715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.184184][ T4173] loop3: detected capacity change from 0 to 1024 [ 1763.192378][ T3715] usb 3-1: config 0 descriptor?? [ 1763.214948][ T4173] EXT4-fs: Ignoring removed orlov option [ 1763.236712][ T3715] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1763.244350][ T4173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1763.260853][T13004] usbhid 2-1:0.0: can't add hid device: -71 [ 1763.266919][T13004] usbhid: probe of 2-1:0.0 failed with error -71 [ 1763.271065][ T4170] device bridge_slave_0 left promiscuous mode [ 1763.279462][ T4173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1763.293472][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.319678][T13004] usb 2-1: USB disconnect, device number 92 [ 1763.325882][ T4173] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 1763.340510][ T4173] System zones: 0-1, 3-36 [ 1763.342374][ T4175] loop0: detected capacity change from 0 to 512 [ 1763.381301][ T4175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1763.384748][ T4173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1763.493499][ T4175] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.10728: invalid indirect mapped block 83886080 (level 1) [ 1763.542525][ T4175] EXT4-fs (loop0): Remounting filesystem read-only [ 1763.549334][ T4175] EXT4-fs (loop0): 1 orphan inode deleted [ 1763.558576][T30620] EXT4-fs (loop3): unmounting filesystem. [ 1763.600612][ T4175] EXT4-fs (loop0): 1 truncate cleaned up [ 1763.606479][ T4175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1763.775150][T26307] usb 3-1: USB disconnect, device number 84 [ 1764.538566][ T3445] EXT4-fs (loop0): unmounting filesystem. [ 1766.011311][ T4219] loop1: detected capacity change from 0 to 1024 [ 1766.036579][ T4219] hfsplus: failed to load root directory [ 1766.080627][T12997] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1766.088377][T13004] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1766.096060][T26307] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1766.096105][ T4221] loop3: detected capacity change from 0 to 512 [ 1766.121449][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10745'. [ 1766.133988][ T4221] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1766.184070][ T4221] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.10746: invalid indirect mapped block 83886080 (level 1) [ 1766.219200][ T4221] EXT4-fs (loop3): Remounting filesystem read-only [ 1766.229200][ T4221] EXT4-fs (loop3): 1 orphan inode deleted [ 1766.243075][ T4221] EXT4-fs (loop3): 1 truncate cleaned up [ 1766.248758][ T4221] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1766.490379][T12997] usb 3-1: Using ep0 maxpacket: 8 [ 1767.139346][T30620] EXT4-fs (loop3): unmounting filesystem. [ 1767.210517][T12997] usb 3-1: config index 0 descriptor too short (expected 1581, got 45) [ 1767.218991][T26307] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.230704][T12997] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1767.237154][ T4237] loop1: detected capacity change from 0 to 128 [ 1767.240901][T26307] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1767.240931][T26307] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1767.240963][T26307] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1767.240986][T26307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.242449][T26307] usb 5-1: config 0 descriptor?? [ 1767.289130][T12997] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 197 [ 1767.300094][T12997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12336, setting to 64 [ 1767.311083][T12997] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1767.324021][T12997] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1767.331645][ T4237] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1767.333537][T12997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.352429][T12997] usb 3-1: config 0 descriptor?? [ 1767.370609][ T4206] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1767.387061][ T4237] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1767.410626][T13004] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1767.419685][T13004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.427948][ T4237] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1767.450402][ T4237] UDF-fs: Scanning with blocksize 512 failed [ 1767.457293][T13004] usb 1-1: Product: syz [ 1767.461681][T13004] usb 1-1: Manufacturer: syz [ 1767.466283][T13004] usb 1-1: SerialNumber: syz [ 1767.482398][ T4237] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1767.493314][T13004] usb 1-1: config 0 descriptor?? [ 1767.522875][ T4237] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1767.540379][ T4237] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1767.548047][ T4237] UDF-fs: Scanning with blocksize 1024 failed [ 1767.575232][ T4237] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1767.649068][ T4206] xt_socket: unknown flags 0xc [ 1767.654967][ T4237] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1767.674944][ T4237] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1767.691468][T24898] usb 3-1: USB disconnect, device number 85 [ 1767.709643][ T4237] UDF-fs: Scanning with blocksize 2048 failed [ 1767.750713][T13004] hso 1-1:0.0: Failed to find INT IN ep [ 1767.756780][T13004] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1767.768818][ T4237] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1767.790094][ T4237] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1767.800010][ T4237] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1767.819296][ T4237] UDF-fs: Scanning with blocksize 4096 failed [ 1767.828022][ T4237] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1767.977539][T12994] usb 1-1: USB disconnect, device number 58 [ 1768.003396][ T4253] vivid-008: disconnect [ 1768.739601][ T4249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1769.624687][ T4266] loop0: detected capacity change from 0 to 512 [ 1769.654868][ T4266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1769.690603][ T4270] loop3: detected capacity change from 0 to 256 [ 1769.717368][ T4266] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.10762: invalid indirect mapped block 83886080 (level 1) [ 1769.794611][ T4266] EXT4-fs (loop0): Remounting filesystem read-only [ 1769.911407][ T4266] EXT4-fs (loop0): 1 orphan inode deleted [ 1769.917216][ T4266] EXT4-fs (loop0): 1 truncate cleaned up [ 1769.972488][ T4266] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1771.745246][ T3445] EXT4-fs (loop0): unmounting filesystem. [ 1772.087072][ T4244] vivid-008: reconnect [ 1772.170552][T26307] usbhid 5-1:0.0: can't add hid device: -71 [ 1772.176688][T26307] usbhid: probe of 5-1:0.0 failed with error -71 [ 1772.189025][T26307] usb 5-1: USB disconnect, device number 97 [ 1774.561377][ T4300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1775.024307][ T4330] loop0: detected capacity change from 0 to 1024 [ 1775.117658][ T4330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1775.190410][ T3668] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1775.334934][ T3445] EXT4-fs (loop0): unmounting filesystem. [ 1775.571747][ T3668] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.599259][ T3668] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1775.637797][ T3668] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1775.659293][ T3668] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1775.696769][ T3668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.733188][ T3668] usb 5-1: config 0 descriptor?? [ 1775.930416][ T26] audit: type=1326 audit(1723748329.998:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.3.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851df799b9 code=0x7ffc0000 [ 1775.969446][ T26] audit: type=1326 audit(1723748330.028:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.3.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f851df799b9 code=0x7ffc0000 [ 1776.015455][ T3638] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1776.260391][ T3638] usb 3-1: Using ep0 maxpacket: 8 [ 1776.380602][ T3638] usb 3-1: config index 0 descriptor too short (expected 1581, got 45) [ 1776.394172][ T3638] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1776.427856][ T3638] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 197 [ 1776.462831][ T26] audit: type=1326 audit(1723748330.028:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.3.10796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f851df799b9 code=0x0 [ 1776.538060][ T3638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12336, setting to 64 [ 1776.613704][ T3638] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1776.710897][ T3638] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1776.789605][ T3638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.898151][ T4361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1777.426681][ T3638] usb 3-1: config 0 descriptor?? [ 1777.450744][ T4358] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1777.528426][T16948] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1777.538788][T16948] Bluetooth: hci6: Injecting HCI hardware error event [ 1777.549011][T16948] Bluetooth: hci6: hardware error 0x00 [ 1777.680356][ T3639] usb 3-1: USB disconnect, device number 86 [ 1778.692399][ T4410] loop3: detected capacity change from 0 to 1024 [ 1778.702366][ T4410] hfsplus: unable to parse mount options [ 1780.981149][T16948] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1781.002329][ T4404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1781.021552][ T4413] loop0: detected capacity change from 0 to 1024 [ 1781.062668][ T4410] netlink: 25 bytes leftover after parsing attributes in process `syz.3.10812'. [ 1781.072132][ T4413] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1781.083123][ T4413] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1781.096173][ T4413] EXT4-fs error (device loop0): ext4_get_journal_inode:5733: comm syz.0.10813: inode #1: comm syz.0.10813: iget: illegal inode # [ 1781.101010][ T4410] device gretap0 entered promiscuous mode [ 1781.109806][ T4413] EXT4-fs (loop0): no journal found [ 1781.143749][ T4413] EXT4-fs (loop0): can't get journal size [ 1781.171790][ T4413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1781.236138][ T4410] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10812'. [ 1781.350774][ T4410] 0ªX¹¦Dö»: renamed from gretap0 [ 1781.361778][ T4410] device 00ªX¹¦Dö» left promiscuous mode [ 1782.043740][ T4414] loop3: detected capacity change from 0 to 1024 [ 1782.062267][ T4427] binder_alloc: 4421: binder_alloc_buf, no vma [ 1782.100522][ T4414] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 1782.100522][ T4414] [ 1782.170481][ T4414] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 1782.263974][ T3445] EXT4-fs (loop0): unmounting filesystem. [ 1782.398490][ T4434] vcan0: Master is either lo or non-ether device [ 1782.468925][ T3668] usbhid 5-1:0.0: can't add hid device: -71 [ 1782.480861][ T3668] usbhid: probe of 5-1:0.0 failed with error -71 [ 1782.500505][ T3668] usb 5-1: USB disconnect, device number 98 [ 1783.977081][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10824'. [ 1783.986176][ T4449] netlink: 19 bytes leftover after parsing attributes in process `syz.2.10824'. [ 1783.995298][ T4449] netlink: 19 bytes leftover after parsing attributes in process `syz.2.10824'. [ 1786.254542][ T4461] loop0: detected capacity change from 0 to 1024 [ 1786.959992][ T4467] vcan0: Master is either lo or non-ether device [ 1787.310591][ T3668] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1787.551663][ T4496] loop2: detected capacity change from 0 to 1024 [ 1787.559962][ T4496] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1787.573504][ T4496] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1787.583792][ T4496] EXT4-fs error (device loop2): ext4_get_journal_inode:5733: comm syz.2.10845: inode #1: comm syz.2.10845: iget: illegal inode # [ 1787.607987][ T4496] EXT4-fs (loop2): no journal found [ 1787.624538][ T4496] EXT4-fs (loop2): can't get journal size [ 1787.704386][ T4496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1787.714099][ T3668] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.729113][ T3668] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1787.963870][ T4500] vcan0: Master is either lo or non-ether device [ 1789.323900][ T3668] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1789.330649][ T3668] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1789.339761][ T3668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.352047][ T3668] usb 5-1: config 0 descriptor?? [ 1789.381231][ T3443] EXT4-fs (loop2): unmounting filesystem. [ 1789.548438][ T4513] loop2: detected capacity change from 0 to 1024 [ 1789.585557][ T4513] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1789.657775][ T4513] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1789.704518][ T4513] EXT4-fs error (device loop2): ext4_get_journal_inode:5733: comm syz.2.10847: inode #1: comm syz.2.10847: iget: illegal inode # [ 1789.784789][ T4513] EXT4-fs (loop2): no journal found [ 1789.790048][ T4513] EXT4-fs (loop2): can't get journal size [ 1789.798697][ T4513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1789.969100][ T4525] vivid-008: disconnect [ 1790.473451][ T4532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10856'. [ 1790.641921][ T3443] EXT4-fs (loop2): unmounting filesystem. [ 1790.677346][ T4536] loop3: detected capacity change from 0 to 1024 [ 1790.703443][ T4536] hfsplus: walked past end of dir [ 1790.772095][ T4535] loop1: detected capacity change from 0 to 1024 [ 1790.799975][ T4535] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1790.860023][ T52] block nbd2: Possible stuck request ffff88801fff8e00: control (read@0,4096B). Runtime 90 seconds [ 1790.881593][ T4535] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1790.898956][ T4535] EXT4-fs error (device loop1): ext4_get_journal_inode:5733: comm syz.1.10857: inode #1: comm syz.1.10857: iget: illegal inode # [ 1790.932843][ T4535] EXT4-fs (loop1): no journal found [ 1790.938096][ T4535] EXT4-fs (loop1): can't get journal size [ 1791.187221][ T4535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1791.511015][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1794.046877][T31420] EXT4-fs (loop1): unmounting filesystem. [ 1794.212970][ T4561] loop2: detected capacity change from 0 to 1024 [ 1794.280878][ T4561] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1794.339278][ T26] audit: type=1800 audit(1723748348.408:4230): pid=4561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10868" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1794.359723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1794.448725][ T3443] EXT4-fs (loop2): unmounting filesystem. [ 1794.454839][ T3638] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1794.559951][ T4570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10870'. [ 1794.674491][ T4574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10871'. [ 1794.709943][ T4518] vivid-008: reconnect [ 1794.710486][ T3638] usb 2-1: Using ep0 maxpacket: 8 [ 1794.807768][ T3668] usbhid 5-1:0.0: can't add hid device: -71 [ 1794.830662][ T3638] usb 2-1: config index 0 descriptor too short (expected 1581, got 45) [ 1794.844862][ T3638] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1794.884254][ T3668] usbhid: probe of 5-1:0.0 failed with error -71 [ 1794.892292][ T3668] usb 5-1: USB disconnect, device number 99 [ 1794.910110][ T3638] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 197 [ 1794.929882][ T4580] loop0: detected capacity change from 0 to 128 [ 1795.085012][ T3638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12336, setting to 64 [ 1795.096858][ T3638] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1795.109952][ T3638] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1795.119844][ T3638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.129940][ T3638] usb 2-1: config 0 descriptor?? [ 1795.151065][ T4559] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1795.555642][ T3638] usb 2-1: USB disconnect, device number 93 [ 1795.820657][ T4589] netlink: 59 bytes leftover after parsing attributes in process `syz.0.10877'. [ 1795.918296][ T4594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10881'. [ 1796.200417][ T3638] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1797.277514][ T3636] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1798.336180][ T3638] usb 3-1: Using ep0 maxpacket: 16 [ 1798.460763][ T3638] usb 3-1: config 7 has an invalid interface number: 152 but max is 0 [ 1798.479458][ T3638] usb 3-1: config 7 has no interface number 0 [ 1798.498754][ T3638] usb 3-1: config 7 interface 152 has no altsetting 0 [ 1798.626507][ T4628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10894'. [ 1798.680613][ T3638] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 1798.689840][ T3638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.698251][ T3638] usb 3-1: Product: syz [ 1798.704473][ T3638] usb 3-1: Manufacturer: syz [ 1798.709139][ T3638] usb 3-1: SerialNumber: syz [ 1798.714089][ T3636] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.726896][ T3636] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1798.741209][ T3636] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1798.747920][ T3636] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1798.757124][ T3636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.766537][ T3636] usb 5-1: config 0 descriptor?? [ 1798.858996][ T4636] vcan0: Master is either lo or non-ether device [ 1799.090457][ T3638] usbtest 3-1:7.152: couldn't get endpoints, -71 [ 1799.096872][ T3638] usbtest: probe of 3-1:7.152 failed with error -71 [ 1799.112508][ T3638] usb 3-1: USB disconnect, device number 87 [ 1799.133140][ T4641] loop2: detected capacity change from 0 to 4096 [ 1799.230966][ T4643] netlink: 59 bytes leftover after parsing attributes in process `syz.3.10900'. [ 1799.242997][ T26] audit: type=1804 audit(1723748353.318:4231): pid=4641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.10899" name="/newroot/61/file2/bus" dev="loop2" ino=28 res=1 errno=0 [ 1799.379716][ T4649] vivid-008: disconnect [ 1802.042349][ T4662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10905'. [ 1802.062798][ T4664] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262207 (only 8 groups) [ 1802.285105][ T4674] vcan0: Master is either lo or non-ether device [ 1802.481508][ T4678] sg_write: process 1142 (syz.1.10912) changed security contexts after opening file descriptor, this is not allowed. [ 1803.283272][ T4686] netlink: 59 bytes leftover after parsing attributes in process `syz.2.10914'. [ 1803.440343][ T4644] vivid-008: reconnect [ 1803.467563][ T4691] device team_slave_0 entered promiscuous mode [ 1803.473873][ T4691] device team_slave_1 entered promiscuous mode [ 1803.505555][ T4691] device vlan2 entered promiscuous mode [ 1803.511337][ T4691] device team0 entered promiscuous mode [ 1803.520518][ T4691] device team0 left promiscuous mode [ 1803.526241][ T4691] device team_slave_0 left promiscuous mode [ 1803.532234][ T4691] device team_slave_1 left promiscuous mode [ 1803.560509][ T3636] usbhid 5-1:0.0: can't add hid device: -71 [ 1803.567443][ T3636] usbhid: probe of 5-1:0.0 failed with error -71 [ 1803.596760][ T3636] usb 5-1: USB disconnect, device number 100 [ 1804.267445][ T4698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10920'. [ 1804.616736][ T4719] netlink: 59 bytes leftover after parsing attributes in process `syz.0.10930'. [ 1804.780073][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10929'. [ 1805.060754][ T3632] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1805.497022][T26307] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1805.857623][ T4731] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1805.884802][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10935'. [ 1805.946622][ T4737] vcan0: Master is either lo or non-ether device [ 1805.947057][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10936'. [ 1805.970657][ T3632] usb 2-1: Using ep0 maxpacket: 8 [ 1806.030369][T26307] usb 5-1: Using ep0 maxpacket: 16 [ 1806.033115][ T4741] binder_alloc: 4740: binder_alloc_buf, no vma [ 1806.174997][T26307] usb 5-1: config 0 has no interfaces? [ 1806.260532][ T3632] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1806.269611][ T3632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.295374][ T3632] usb 2-1: Product: syz [ 1806.303976][ T3632] usb 2-1: Manufacturer: syz [ 1806.314732][ T3632] usb 2-1: SerialNumber: syz [ 1806.360493][T26307] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1806.418542][ T3632] usb 2-1: config 0 descriptor?? [ 1806.439566][T26307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.448528][T26307] usb 5-1: Product: syz [ 1806.457741][T26307] usb 5-1: Manufacturer: syz [ 1806.463454][T26307] usb 5-1: SerialNumber: syz [ 1807.234580][T26307] usb 5-1: config 0 descriptor?? [ 1807.283268][ T3632] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1807.289929][ T3632] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 1807.333106][ T4759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10947'. [ 1807.350548][ T3632] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1807.357131][ T3632] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22 [ 1807.470529][ T3632] usb 2-1: USB disconnect, device number 94 [ 1807.519064][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10928'. [ 1807.537098][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10928'. [ 1807.826980][ T4767] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1808.607370][ T4772] vcan0: Master is either lo or non-ether device [ 1808.618950][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10950'. [ 1808.635769][T12999] usb 5-1: USB disconnect, device number 101 [ 1808.756473][ T4779] binder_alloc: 4778: binder_alloc_buf, no vma [ 1808.913443][ T4786] loop0: detected capacity change from 0 to 512 [ 1808.924101][ T4786] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1809.180230][ T4794] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1809.284472][ T4786] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.10955: invalid indirect mapped block 83886080 (level 1) [ 1809.293240][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10960'. [ 1809.304896][ T4786] EXT4-fs (loop0): Remounting filesystem read-only [ 1809.715364][ T4786] EXT4-fs (loop0): 1 orphan inode deleted [ 1809.848186][ T4786] EXT4-fs (loop0): 1 truncate cleaned up [ 1809.854122][ T4786] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1810.106004][ T4807] netlink: 59 bytes leftover after parsing attributes in process `syz.4.10962'. [ 1810.289728][ T3445] EXT4-fs (loop0): unmounting filesystem. [ 1810.356347][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10966'. [ 1810.422416][ T4809] vcan0: Master is either lo or non-ether device [ 1810.667224][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10965'. [ 1810.815808][ T4828] binder: BINDER_SET_CONTEXT_MGR already set [ 1810.838723][ T4828] binder: 4827:4828 ioctl 4018620d 20000040 returned -16 [ 1811.190433][ T3636] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1811.680643][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10972'. [ 1811.732819][ T4836] loop2: detected capacity change from 0 to 128 [ 1811.761732][ T4838] loop1: detected capacity change from 0 to 512 [ 1811.769148][ T4838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1811.823260][ T4836] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1811.832957][ T4838] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.10975: invalid indirect mapped block 83886080 (level 1) [ 1811.848736][ T3636] usb 4-1: Using ep0 maxpacket: 8 [ 1811.876119][ T4836] ext4 filesystem being mounted at /proc/209/cgroup supports timestamps until 2038 (0x7fffffff) [ 1811.930040][ T4836] EXT4-fs (loop2): unmounting filesystem. [ 1811.937241][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 1812.068382][ T4838] EXT4-fs (loop1): 1 orphan inode deleted [ 1812.078605][ T4838] EXT4-fs (loop1): 1 truncate cleaned up [ 1812.084524][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1813.742768][T31420] EXT4-fs (loop1): unmounting filesystem. [ 1813.885893][ T4836] loop2: detected capacity change from 0 to 1024 [ 1813.910551][ T3636] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1813.919761][ T3636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.930601][ T3636] usb 4-1: config 0 descriptor?? [ 1813.939318][ T4855] netlink: 59 bytes leftover after parsing attributes in process `syz.1.10978'. [ 1813.959553][ T3636] usb 4-1: can't set config #0, error -71 [ 1813.972909][ T3636] usb 4-1: USB disconnect, device number 117 [ 1813.995998][ T4836] loop2: detected capacity change from 0 to 2048 [ 1814.017519][ T4859] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10980'. [ 1814.145042][ T4862] vcan0: Master is either lo or non-ether device [ 1814.398446][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10986'. [ 1815.383465][ T4879] loop2: detected capacity change from 0 to 1024 [ 1815.393331][ T4879] hfsplus: invalid uid specified [ 1815.400121][ T4879] hfsplus: unable to parse mount options [ 1815.660345][T13004] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1815.930520][T13004] usb 5-1: Using ep0 maxpacket: 8 [ 1816.060525][T13004] usb 5-1: config index 0 descriptor too short (expected 1581, got 45) [ 1816.089697][T13004] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1816.120617][T13004] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 197 [ 1816.133235][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10995'. [ 1816.160069][T13004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12336, setting to 64 [ 1816.186724][ T3668] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1816.220555][T13004] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1816.251308][T13004] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1816.271906][T13004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.300903][T13004] usb 5-1: config 0 descriptor?? [ 1816.320809][ T4880] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1816.440736][ T3668] usb 3-1: Using ep0 maxpacket: 16 [ 1816.460409][ T3636] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1816.616888][T26307] usb 5-1: USB disconnect, device number 102 [ 1816.623183][ T3668] usb 3-1: config 0 has no interfaces? [ 1816.743259][ T4905] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 1816.800453][ T3636] usb 2-1: Using ep0 maxpacket: 8 [ 1817.470579][ T3668] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1817.497328][ T3668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.530351][ T3668] usb 3-1: Product: syz [ 1817.534540][ T3668] usb 3-1: Manufacturer: syz [ 1817.559577][ T3668] usb 3-1: SerialNumber: syz [ 1817.567430][ T3668] usb 3-1: config 0 descriptor?? [ 1817.640502][ T3636] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1817.659824][ T3636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.765477][ T3636] usb 2-1: Product: syz [ 1817.770145][ T3636] usb 2-1: Manufacturer: syz [ 1817.774893][ T3636] usb 2-1: SerialNumber: syz [ 1817.782376][ T3636] usb 2-1: config 0 descriptor?? [ 1817.816323][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10994'. [ 1818.584840][ T4914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10994'. [ 1818.609937][T13004] usb 3-1: USB disconnect, device number 88 [ 1818.714806][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11001'. [ 1818.810857][ T3636] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1818.817921][ T3636] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 1818.843336][ T4920] loop0: detected capacity change from 0 to 1024 [ 1818.850163][ T4920] hfsplus: invalid uid specified [ 1818.859753][ T4920] hfsplus: unable to parse mount options [ 1818.863061][ T3636] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1818.872158][ T3636] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22 [ 1818.883754][ T3636] usb 2-1: USB disconnect, device number 95 [ 1819.378124][ T4933] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1819.757514][ T4944] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11012'. [ 1819.932879][ T4947] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 1820.754336][ T4954] loop2: detected capacity change from 0 to 1024 [ 1820.794190][ T4954] hfsplus: invalid uid specified [ 1820.799167][ T4954] hfsplus: unable to parse mount options [ 1820.931574][ T52] block nbd2: Possible stuck request ffff88801fff8e00: control (read@0,4096B). Runtime 120 seconds [ 1821.090388][T13004] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1821.179816][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11020'. [ 1821.275755][ T3632] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1821.350398][T13004] usb 4-1: Using ep0 maxpacket: 16 [ 1821.480466][ T3760] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1821.488227][ T3632] usb 2-1: device descriptor read/64, error -71 [ 1821.510533][T13004] usb 4-1: config 0 has no interfaces? [ 1821.606158][ T4980] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11025'. [ 1821.633369][ T4982] netlink: 'syz.4.11026': attribute type 3 has an invalid length. [ 1821.696815][T13004] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1821.726814][T13004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.730395][ T3760] usb 1-1: Using ep0 maxpacket: 8 [ 1821.735088][T13004] usb 4-1: Product: syz [ 1821.754308][T13004] usb 4-1: Manufacturer: syz [ 1821.764419][T13004] usb 4-1: SerialNumber: syz [ 1821.864835][ T3632] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1821.881382][T13004] usb 4-1: config 0 descriptor?? [ 1822.060382][ T4989] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 1822.180567][ T3632] usb 2-1: device descriptor read/64, error -71 [ 1822.301043][ T3632] usb usb2-port1: attempt power cycle [ 1822.720646][ T3632] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1822.770699][ T3760] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1822.780627][ T3760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.788888][ T3760] usb 1-1: Product: syz [ 1822.793777][ T3760] usb 1-1: Manufacturer: syz [ 1822.799439][ T3760] usb 1-1: SerialNumber: syz [ 1822.805684][ T4959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11017'. [ 1822.818930][ T3760] usb 1-1: config 0 descriptor?? [ 1822.824233][ T3632] usb 2-1: device descriptor read/8, error -71 [ 1822.834074][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11017'. [ 1822.844760][T13004] usb 4-1: USB disconnect, device number 118 [ 1823.100417][ T3632] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1823.110859][ T3760] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1823.118598][ T3760] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 1823.160563][ T3760] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1823.167551][ T3760] dvb_usb_af9035: probe of 1-1:0.0 failed with error -22 [ 1823.176277][ T3760] usb 1-1: USB disconnect, device number 59 [ 1823.210542][ T3632] usb 2-1: device descriptor read/8, error -71 [ 1823.330574][ T3632] usb usb2-port1: unable to enumerate USB device [ 1823.408778][ T5000] loop3: detected capacity change from 0 to 1024 [ 1823.417436][ T5000] hfsplus: invalid uid specified [ 1823.422758][ T5000] hfsplus: unable to parse mount options [ 1823.856251][ T5011] netlink: 'syz.4.11037': attribute type 3 has an invalid length. [ 1823.927784][ T5016] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1824.082399][ T5020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11039'. [ 1824.380632][ C1] eth0: bad gso: type: 1, size: 1408 [ 1824.498917][ T5029] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 1824.880580][ T3636] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1825.066763][ T5031] loop3: detected capacity change from 0 to 1024 [ 1825.104953][ T5031] hfsplus: invalid uid specified [ 1825.141241][ T5031] hfsplus: unable to parse mount options [ 1825.180457][ T3636] usb 2-1: Using ep0 maxpacket: 16 [ 1825.300774][ T3636] usb 2-1: config 0 has no interfaces? [ 1825.461192][ T3636] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1825.470236][ T3636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.484258][ T3636] usb 2-1: Product: syz [ 1825.488446][ T3636] usb 2-1: Manufacturer: syz [ 1825.497385][ T5043] netlink: 'syz.3.11048': attribute type 3 has an invalid length. [ 1825.510395][ T3636] usb 2-1: SerialNumber: syz [ 1825.532745][ T3636] usb 2-1: config 0 descriptor?? [ 1825.776862][ T5028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11042'. [ 1825.790906][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11042'. [ 1825.803434][ T3636] usb 2-1: USB disconnect, device number 100 [ 1825.993962][T26307] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1826.190379][T26307] usb 4-1: device descriptor read/64, error -71 [ 1826.500924][T26307] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1826.805481][T26307] usb 4-1: device descriptor read/64, error -71 [ 1826.936094][T26307] usb usb4-port1: attempt power cycle [ 1827.263446][ T5074] netlink: 59 bytes leftover after parsing attributes in process `syz.0.11060'. [ 1827.379323][ T5080] netlink: 'syz.1.11063': attribute type 30 has an invalid length. [ 1827.387608][T26307] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1827.510523][T26307] usb 4-1: device descriptor read/8, error -71 [ 1827.520750][ T5086] loop2: detected capacity change from 0 to 512 [ 1827.914073][ T5088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1827.983131][ T5086] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1828.120483][T26307] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1829.482046][ T5086] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.11065: invalid indirect mapped block 83886080 (level 1) [ 1829.500546][T26307] usb 4-1: device descriptor read/8, error -71 [ 1829.510956][ T5086] EXT4-fs (loop2): Remounting filesystem read-only [ 1829.528477][ T5086] EXT4-fs (loop2): 1 orphan inode deleted [ 1829.538283][ T5086] EXT4-fs (loop2): 1 truncate cleaned up [ 1829.554650][ T5086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1829.685771][ T5097] vivid-000: disconnect [ 1829.750513][T26307] usb usb4-port1: unable to enumerate USB device [ 1830.639229][ T3443] EXT4-fs (loop2): unmounting filesystem. [ 1830.920521][T12999] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1830.980636][ T5110] netlink: 'syz.2.11071': attribute type 3 has an invalid length. [ 1831.210529][T12999] usb 2-1: Using ep0 maxpacket: 16 [ 1831.360631][T12999] usb 2-1: config 0 has no interfaces? [ 1831.437730][ T5091] vivid-000: reconnect [ 1831.563115][T12999] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1831.588272][T12999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.596633][T12999] usb 2-1: Product: syz [ 1831.602390][T12999] usb 2-1: Manufacturer: syz [ 1831.608117][T12999] usb 2-1: SerialNumber: syz [ 1831.615210][T12999] usb 2-1: config 0 descriptor?? [ 1832.019466][ T5105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11069'. [ 1832.471018][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11069'. [ 1832.523617][T12999] usb 2-1: USB disconnect, device number 101 [ 1832.677007][ T5128] loop3: detected capacity change from 0 to 1024 [ 1832.710421][ T5128] hfsplus: invalid uid specified [ 1832.715397][ T5128] hfsplus: unable to parse mount options [ 1833.035987][ T5139] loop3: detected capacity change from 0 to 512 [ 1833.045472][ T5139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1833.086344][ T5139] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.11080: invalid indirect mapped block 83886080 (level 1) [ 1833.141567][ T5143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1833.233606][ T5139] EXT4-fs (loop3): Remounting filesystem read-only [ 1833.252840][ T5139] EXT4-fs (loop3): 1 orphan inode deleted [ 1833.294627][ T5139] EXT4-fs (loop3): 1 truncate cleaned up [ 1833.328453][ T5139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1834.500061][ T5153] netlink: 'syz.1.11082': attribute type 3 has an invalid length. [ 1834.540687][T16948] Bluetooth: hci3: command 0x0406 tx timeout [ 1834.775138][T30620] EXT4-fs (loop3): unmounting filesystem. [ 1835.726090][ T5164] vivid-002: disconnect [ 1835.793495][ T5169] netlink: 59 bytes leftover after parsing attributes in process `syz.4.11086'. [ 1836.922132][ T5175] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 1837.385590][ T5181] loop3: detected capacity change from 0 to 1024 [ 1837.410111][ T5181] hfsplus: invalid uid specified [ 1837.433111][ T5181] hfsplus: unable to parse mount options [ 1837.710609][ T3637] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1837.996546][ T3637] usb 3-1: Using ep0 maxpacket: 16 [ 1838.012527][ T5193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1839.804903][ T5160] vivid-002: reconnect [ 1839.820677][ T3637] usb 3-1: config 0 has no interfaces? [ 1839.990917][ T3637] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1840.005518][ T5205] loop3: detected capacity change from 0 to 512 [ 1840.008875][ T3637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.148881][ T5205] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1840.890588][ T3637] usb 3-1: Product: syz [ 1840.904676][ T3637] usb 3-1: Manufacturer: syz [ 1840.909264][ T3637] usb 3-1: SerialNumber: syz [ 1840.971269][ T3637] usb 3-1: config 0 descriptor?? [ 1840.976399][ T5205] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.11098: invalid indirect mapped block 83886080 (level 1) [ 1840.990579][ T3637] usb 3-1: can't set config #0, error -71 [ 1841.011637][ T3637] usb 3-1: USB disconnect, device number 89 [ 1841.026271][ T5205] EXT4-fs (loop3): Remounting filesystem read-only [ 1841.053726][ T5205] EXT4-fs (loop3): 1 orphan inode deleted [ 1841.059499][ T5205] EXT4-fs (loop3): 1 truncate cleaned up [ 1841.063731][ T5219] netlink: 59 bytes leftover after parsing attributes in process `syz.1.11102'. [ 1841.074727][ T5205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1841.352812][ T5222] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 1841.402193][T30620] EXT4-fs (loop3): unmounting filesystem. [ 1842.148125][ T5231] loop1: detected capacity change from 0 to 1024 [ 1842.166309][ T5231] hfsplus: invalid uid specified [ 1842.174720][ T5231] hfsplus: unable to parse mount options [ 1842.354643][ T5237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1844.868268][ T5256] vivid-006: disconnect [ 1845.005137][ T5261] netlink: 59 bytes leftover after parsing attributes in process `syz.1.11115'. [ 1845.043083][ T5263] loop4: detected capacity change from 0 to 512 [ 1845.060451][ T5263] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1845.085761][T26307] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1845.108210][ T5263] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.11114: invalid indirect mapped block 83886080 (level 1) [ 1845.145400][ T5263] EXT4-fs (loop4): Remounting filesystem read-only [ 1845.161055][ T5263] EXT4-fs (loop4): 1 orphan inode deleted [ 1845.168471][ T5263] EXT4-fs (loop4): 1 truncate cleaned up [ 1845.207531][ T5263] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1845.540388][T26307] usb 1-1: Using ep0 maxpacket: 16 [ 1845.589769][ T3943] EXT4-fs (loop4): unmounting filesystem. [ 1845.711132][ T5272] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 1846.352464][T26307] usb 1-1: config 0 has no interfaces? [ 1846.452220][ T5277] loop1: detected capacity change from 0 to 1024 [ 1846.459269][ T5277] hfsplus: invalid uid specified [ 1846.479526][ T5277] hfsplus: unable to parse mount options [ 1846.520656][T26307] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1846.548412][T26307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.585307][T26307] usb 1-1: Product: syz [ 1846.599904][T26307] usb 1-1: Manufacturer: syz [ 1846.613556][T26307] usb 1-1: SerialNumber: syz [ 1846.642935][T26307] usb 1-1: config 0 descriptor?? [ 1846.706432][ T5282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.005258][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11111'. [ 1847.105558][T26307] usb 1-1: USB disconnect, device number 60 [ 1849.257771][ T5247] vivid-006: reconnect [ 1849.321337][ T5308] loop4: detected capacity change from 0 to 512 [ 1849.357242][ T5308] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1849.450880][ T5308] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.11128: invalid indirect mapped block 83886080 (level 1) [ 1849.461826][ T5311] netlink: 59 bytes leftover after parsing attributes in process `syz.0.11129'. [ 1849.499013][ T5308] EXT4-fs (loop4): Remounting filesystem read-only [ 1849.516224][ T5308] EXT4-fs (loop4): 1 orphan inode deleted [ 1849.546403][ T5308] EXT4-fs (loop4): 1 truncate cleaned up [ 1849.566644][ T5308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1849.793906][ T5318] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 1850.259188][ T3943] EXT4-fs (loop4): unmounting filesystem. [ 1850.679134][ T5326] loop3: detected capacity change from 0 to 1024 [ 1850.714242][ T5326] hfsplus: invalid uid specified [ 1850.719208][ T5326] hfsplus: unable to parse mount options [ 1850.870349][ T5335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.012522][ T52] block nbd2: Possible stuck request ffff88801fff8e00: control (read@0,4096B). Runtime 150 seconds [ 1852.580962][ T27] INFO: task syz.2.10442:3242 blocked for more than 145 seconds. [ 1852.600561][ T27] Not tainted 6.1.105-syzkaller #0 [ 1852.606215][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1852.615070][ T27] task:syz.2.10442 state:D stack:24480 pid:3242 ppid:2889 flags:0x00004002 [ 1852.624333][ T27] Call Trace: [ 1852.627614][ T27] [ 1852.630594][ T27] __schedule+0x143f/0x4570 [ 1852.635428][ T27] ? release_firmware_map_entry+0x186/0x186 [ 1852.650343][ T3637] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1852.658069][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1852.664183][ T27] ? print_irqtrace_events+0x210/0x210 [ 1852.669660][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1852.678459][ T27] schedule+0xbf/0x180 [ 1852.682623][ T27] io_schedule+0x88/0x100 [ 1852.687190][ T27] folio_wait_bit_common+0x878/0x1290 [ 1852.693423][ T27] ? folio_wait_bit+0x20/0x20 [ 1852.698786][ T27] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 1852.706617][ T27] __filemap_get_folio+0x47c/0xe80 [ 1852.711776][ T27] ? __filemap_get_folio+0x150/0xe80 [ 1852.717052][ T27] ? page_cache_prev_miss+0x500/0x500 [ 1852.722511][ T27] ? smp_call_function_many+0x30/0x30 [ 1852.727956][ T27] truncate_inode_pages_range+0x598/0x1340 [ 1852.733888][ T27] ? mapping_evict_folio+0x5b0/0x5b0 [ 1852.739327][ T27] ? xas_next_entry+0x3d0/0x3d0 [ 1852.744283][ T27] ? filemap_write_and_wait_range+0x217/0x290 [ 1852.750460][ T27] ? __bread_gfp+0x370/0x370 [ 1852.755135][ T27] ? invalidate_bh_lrus+0x30/0x30 [ 1852.760219][ T27] blkdev_flush_mapping+0x154/0x2b0 [ 1852.765565][ T27] blkdev_put+0x4c0/0x750 [ 1852.769945][ T27] blkdev_close+0x56/0x80 [ 1852.774869][ T27] ? blkdev_open+0x2e0/0x2e0 [ 1852.779495][ T27] __fput+0x3f6/0x8d0 [ 1852.783720][ T27] task_work_run+0x246/0x300 [ 1852.788496][ T27] ? task_work_cancel+0x2e0/0x2e0 [ 1852.793638][ T27] ? exit_task_namespaces+0xdd/0xf0 [ 1852.798886][ T27] do_exit+0xa73/0x26a0 [ 1852.840450][ T27] ? put_task_struct+0x80/0x80 [ 1852.845301][ T27] ? get_signal+0x137e/0x17d0 [ 1852.850083][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1852.870372][ T27] ? print_irqtrace_events+0x210/0x210 [ 1852.875873][ T27] ? cgroup_freezing+0x2a4/0x350 [ 1852.888456][ T27] do_group_exit+0x202/0x2b0 [ 1852.893183][ T3637] usb 2-1: Using ep0 maxpacket: 16 [ 1852.898407][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1852.905403][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1852.913856][ T27] get_signal+0x16f7/0x17d0 [ 1852.918432][ T27] ? ptrace_notify+0x370/0x370 [ 1852.938125][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.947615][ T27] ? print_irqtrace_events+0x210/0x210 [ 1852.953198][ T27] arch_do_signal_or_restart+0xb0/0x1a10 [ 1852.968128][ T27] ? kmem_cache_free+0x292/0x510 [ 1852.973275][ T27] ? do_sys_openat2+0x1f9/0x4f0 [ 1852.978175][ T27] ? do_sys_openat2+0x1f9/0x4f0 [ 1852.993879][ T27] ? get_sigframe_size+0x10/0x10 [ 1852.998876][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1853.017315][ T27] ? __x64_sys_openat+0x243/0x290 [ 1853.022809][ T3637] usb 2-1: config 0 has no interfaces? [ 1853.031977][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 1853.037552][ T27] exit_to_user_mode_loop+0x6a/0x100 [ 1853.052542][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 1853.058149][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 1853.074113][ T27] do_syscall_64+0x47/0xb0 [ 1853.078589][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1853.089716][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1853.099962][ T27] RIP: 0033:0x7fde5e578350 [ 1853.109126][ T27] RSP: 002b:00007fde5f3adb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1853.127847][ T27] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 00007fde5e578350 [ 1853.137433][ T27] RDX: 0000000000000000 RSI: 00007fde5f3adc10 RDI: 00000000ffffff9c [ 1853.156488][ T27] RBP: 00007fde5f3adc10 R08: 0000000000000000 R09: 002364626e2f7665 [ 1853.169473][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1853.187413][ T27] R13: 0000000000000000 R14: 00007fde5e716058 R15: 00007fff6f2d1968 [ 1853.196874][ T27] [ 1853.199987][ T27] [ 1853.199987][ T27] Showing all locks held in the system: [ 1853.209138][ T3637] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1853.234909][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1853.245993][ T3637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.265071][ T27] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1853.291078][ T27] 1 lock held by rcu_tasks_trace/13: [ 1853.295254][ T3637] usb 2-1: Product: syz [ 1853.308787][ T27] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1853.309764][ T3637] usb 2-1: Manufacturer: syz [ 1853.331345][ T3637] usb 2-1: SerialNumber: syz [ 1853.341905][ T3637] usb 2-1: config 0 descriptor?? [ 1853.372621][ T27] 1 lock held by khungtaskd/27: [ 1853.395148][ T27] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1853.435575][ T27] 2 locks held by getty/3399: [ 1853.444454][ T27] #0: ffff8880292c4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1853.461565][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 1853.475418][ T27] 2 locks held by kworker/0:9/12999: [ 1853.485614][ T27] 2 locks held by kworker/1:0/2543: [ 1853.498932][ T27] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1853.512164][ T27] #1: ffffc90003937d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1853.545384][ T27] 1 lock held by syz.2.10442/3242: [ 1853.558305][ T27] #0: ffff88801fe554c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 1853.569214][ T27] 1 lock held by syz-executor/3943: [ 1853.575712][ T27] #0: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 1853.590395][ T27] 1 lock held by syz.0.11131/5315: [ 1853.595598][ T27] #0: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 1853.622703][ T27] [ 1853.628721][ T5328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11134'. [ 1853.629555][ T27] ============================================= [ 1853.629555][ T27] [ 1853.669605][T12999] usb 2-1: USB disconnect, device number 102 [ 1853.681747][ T27] NMI backtrace for cpu 1 [ 1853.686094][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.105-syzkaller #0 [ 1853.693988][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1853.704043][ T27] Call Trace: [ 1853.707322][ T27] [ 1853.710251][ T27] dump_stack_lvl+0x1e3/0x2cb [ 1853.714936][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 1853.720373][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 1853.725843][ T27] ? panic+0x764/0x764 [ 1853.729920][ T27] ? vprintk_emit+0x622/0x740 [ 1853.734625][ T27] ? printk_sprint+0x490/0x490 [ 1853.739394][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 1853.744532][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 1853.749484][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1853.755645][ T27] ? _printk+0xd1/0x111 [ 1853.759804][ T27] ? panic+0x764/0x764 [ 1853.763877][ T27] ? __wake_up_klogd+0xcc/0x100 [ 1853.768728][ T27] ? panic+0x764/0x764 [ 1853.772799][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 1853.778881][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1853.784959][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 1853.790952][ T27] watchdog+0xf88/0xfd0 [ 1853.795104][ T27] ? watchdog+0x1f8/0xfd0 [ 1853.799424][ T27] kthread+0x28d/0x320 [ 1853.803477][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1853.808487][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1853.813060][ T27] ret_from_fork+0x1f/0x30 [ 1853.817473][ T27] [ 1853.821593][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1853.827440][ C0] NMI backtrace for cpu 0 [ 1853.827450][ C0] CPU: 0 PID: 11391 Comm: kworker/u4:0 Not tainted 6.1.105-syzkaller #0 [ 1853.827466][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1853.827475][ C0] Workqueue: bat_events batadv_nc_worker [ 1853.827560][ C0] RIP: 0010:kasan_check_range+0x3/0x290 [ 1853.827594][ C0] Code: 48 89 c7 e8 8f ee c3 08 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc cc cc cc cc 55 41 57 <41> 56 53 b0 01 48 85 f6 0f 84 9a 01 00 00 48 89 fd 48 01 f5 0f 82 [ 1853.827607][ C0] RSP: 0018:ffffc900039df988 EFLAGS: 00000046 [ 1853.827619][ C0] RAX: 000000000000001a RBX: 00000000000006b3 RCX: ffffffff816a80ac [ 1853.827630][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9073a2f0 [ 1853.827641][ C0] RBP: ffff88802612a8e8 R08: dffffc0000000000 R09: fffffbfff20e745f [ 1853.827652][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 1853.827662][ C0] R13: ffff88802612a8e8 R14: 0000000000000001 R15: 0000000000000004 [ 1853.827672][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1853.827685][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1853.827696][ C0] CR2: 0000001b2ed1eff8 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 1853.827709][ C0] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 1853.827719][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1853.827728][ C0] Call Trace: [ 1853.827734][ C0] [ 1853.827740][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 1853.827759][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1853.827780][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1853.827805][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1853.827825][ C0] ? nmi_handle+0x12e/0x440 [ 1853.827861][ C0] ? nmi_handle+0x25/0x440 [ 1853.827879][ C0] ? kasan_check_range+0x3/0x290 [ 1853.827892][ C0] ? default_do_nmi+0x62/0x150 [ 1853.827911][ C0] ? exc_nmi+0xa8/0x100 [ 1853.827929][ C0] ? end_repeat_nmi+0x16/0x31 [ 1853.827949][ C0] ? __lock_acquire+0x78c/0x1f80 [ 1853.827967][ C0] ? kasan_check_range+0x3/0x290 [ 1853.827981][ C0] ? kasan_check_range+0x3/0x290 [ 1853.827995][ C0] ? kasan_check_range+0x3/0x290 [ 1853.828009][ C0] [ 1853.828013][ C0] [ 1853.828019][ C0] __lock_acquire+0x78c/0x1f80 [ 1853.828042][ C0] lock_acquire+0x1f8/0x5a0 [ 1853.828059][ C0] ? batadv_nc_worker+0xc7/0x610 [ 1853.828078][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1853.828097][ C0] ? batadv_nc_worker+0xc7/0x610 [ 1853.828114][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 1853.828133][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1853.828154][ C0] batadv_nc_worker+0xe8/0x610 [ 1853.828170][ C0] ? batadv_nc_worker+0xc7/0x610 [ 1853.828185][ C0] ? batadv_nc_worker+0xc7/0x610 [ 1853.828203][ C0] ? process_one_work+0x7a9/0x11d0 [ 1853.828219][ C0] process_one_work+0x8a9/0x11d0 [ 1853.828239][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1853.828257][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1853.828272][ C0] ? kthread_data+0x4e/0xc0 [ 1853.828291][ C0] ? wq_worker_running+0x97/0x190 [ 1853.828311][ C0] worker_thread+0xa47/0x1200 [ 1853.828335][ C0] kthread+0x28d/0x320 [ 1853.828348][ C0] ? worker_clr_flags+0x190/0x190 [ 1853.828362][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1853.828376][ C0] ret_from_fork+0x1f/0x30 [ 1853.828398][ C0] [ 1853.832668][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1853.832679][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.105-syzkaller #0 [ 1853.832696][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1853.832706][ T27] Call Trace: [ 1853.832711][ T27] [ 1853.832718][ T27] dump_stack_lvl+0x1e3/0x2cb [ 1853.832743][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 1853.832765][ T27] ? panic+0x764/0x764 [ 1853.832782][ T27] ? llist_add_batch+0x160/0x1d0 [ 1853.832851][ T27] ? vscnprintf+0x59/0x80 [ 1853.832870][ T27] panic+0x318/0x764 [ 1853.832887][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 1853.832909][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 1853.832930][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 1853.832951][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 1853.832974][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 1853.832998][ T27] watchdog+0xfc7/0xfd0 [ 1853.833023][ T27] ? watchdog+0x1f8/0xfd0 [ 1853.833046][ T27] kthread+0x28d/0x320 [ 1853.833060][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1853.833077][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1853.833094][ T27] ret_from_fork+0x1f/0x30 [ 1853.833124][ T27] [ 1853.834812][ T27] Kernel Offset: disabled [ 1854.276665][ T27] Rebooting in 86400 seconds..