last executing test programs: 11.490363639s ago: executing program 1 (id=775): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 11.153489976s ago: executing program 1 (id=777): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) 10.36765399s ago: executing program 1 (id=790): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_usb_connect$cdc_ecm(0x0, 0x93, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000302000010"], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 9.042291488s ago: executing program 2 (id=784): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000001440)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/43, 0x2b) getdents(r1, 0xfffffffffffffffd, 0xbb) 8.445267676s ago: executing program 2 (id=791): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg\x00'}) r1 = semget(0x3, 0x2, 0x4e) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x1, 0xb, 0x3ff, 0xffe1, 0xffe, 0x1ff]) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a63c3e471f00014006040400010404009bbc7a46e398826f9c00000000000068fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r5 = epoll_create1(0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f00000000c0)={0x3, 0x35, "2155cf09d142d6a9bc3c0025dfab7dc0207f6994b6a8660bce15d66787ef1e57a1c7df18bf60af9fb83ab7499ca4a318b7371a8111"}) ppoll(&(0x7f00000002c0)=[{r5, 0x481}, {r4}], 0x2, 0x0, 0x0, 0x0) close(r4) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x6e20, @empty}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0xc0403d11, &(0x7f0000002400)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x42, &(0x7f0000000040), 0x10) 7.988681643s ago: executing program 1 (id=796): futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x10b, 0x1, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000048000), 0x0) 7.019236801s ago: executing program 2 (id=800): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0x2, @raw_data="4fd76a90a0b2fb8f08609a39535a0ad4f720e5e8def91a5055cf6b5045c0a2a4f9e3855ae1236b8bdda9fc7dead5312dd23d0116cb51e390c99d97fa1aa799cf3f640e10dbbaabb6a71087a3f31fe6eb42a3564fb1d4071ea79a25b04eead99b802adbf8adb6f5f9aef5d4d235dbe25a0ee9535d1e3df13d908a3827e821f00ad07bcb79e9679581f46bffdff8327908f32f54711ae53e4d9b053e9c0fd7b6a06827721a886e0beb6f9d7b829588cad39dcd988ddf2c5e8117a10627e4e8625095076c935fc21c6a"}) 6.91419616s ago: executing program 2 (id=801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000300)={0x50, 0x500, 0x0, {}, {}, @cond}) 6.893060092s ago: executing program 1 (id=802): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) unshare(0x400) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.710969166s ago: executing program 3 (id=803): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x7, &(0x7f00000000c0)=[{0x79, 0xd, 0x0, 0x7}, {0xf1be, 0x0, 0x0, 0x7fff}, {0x9, 0xa, 0x2}, {0xf6ec, 0x5, 0x0, 0x69}, {0x7f9a, 0x64, 0x9, 0x2}, {0x0, 0x5, 0x2, 0x49}, {0xc67f, 0xd, 0x9, 0x7}]}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{'ac,'}]}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0x7) setuid(r5) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0xff, 0x8, 0x5}, 0x20) 5.4353633s ago: executing program 3 (id=804): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_SET(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="08000000010000", 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r5, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x240400a0}, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 4.254930305s ago: executing program 3 (id=808): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) 3.930485362s ago: executing program 3 (id=811): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd, 0x2}, 0x48) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x58) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8000c0008000500070800227cca1eb327c95af1d1bccd21c35f16000700"], 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x44d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}]}}]}, 0x38}}, 0x0) bind$unix(r2, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003e00f14500007000fedbdf210a000000342801"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r10, @ANYBLOB="1619020000000000"], 0x20}}, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 3.840955069s ago: executing program 4 (id=812): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0x8a5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000e80)='W', 0x1, 0x4008000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0101282, 0x0) 3.784693933s ago: executing program 0 (id=814): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83c6e613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038d0100a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b17680100969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06de269e97fbb0776bf56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105cfdf8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f01000080000000004febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60133641a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2e9a20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1015ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846899c6b23c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33694f40000000000005d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b95bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca86f750189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc681b6c9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8504611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c01446234437b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c64cd14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e87973d574ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7430100bf3825a1996c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb150963b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b16500"/4081], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x4}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) 3.494654847s ago: executing program 0 (id=815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa29, &(0x7f0000001580)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) write$tun(r0, 0x0, 0xfdef) 2.742273478s ago: executing program 2 (id=816): unshare(0x8000000) semget$private(0x0, 0x1, 0x0) r0 = timerfd_create(0x7, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x495, &(0x7f0000000a40)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT=r2, @ANYRES8=r2, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16=0x0, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socketpair(0x0, 0x0, 0x20, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3e}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, r1+60000000}}, 0x0) read(r0, &(0x7f0000000480)=""/265, 0x109) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) 2.731061489s ago: executing program 4 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x64}}, 0x0) 2.419378334s ago: executing program 4 (id=818): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 2.336738471s ago: executing program 0 (id=819): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000600", @ANYRES32, @ANYBLOB="0800b301", @ANYRES32, @ANYBLOB="080003"], 0x48}}, 0x0) 2.242525209s ago: executing program 1 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") r2 = dup(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0}, 0x90) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0040, &(0x7f0000000000)={[{@data_writeback}, {@resgid={'resgid', 0x3d, 0xee00}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000000dc0)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0, 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.625310889s ago: executing program 0 (id=821): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x3c0, 0x188, 0x188, 0xffffffff, 0xe0, 0x188, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x88}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x3, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 1.413397646s ago: executing program 0 (id=822): unshare(0x20400) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xb0000266) 1.413051576s ago: executing program 3 (id=823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/206, 0xce, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='dn:') r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) 1.388873968s ago: executing program 4 (id=824): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454156569cb03a5be811debc957b5831b89b59d703e748c7c"}, 0x48, 0xfffffffffffffffd) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 1.335296072s ago: executing program 2 (id=825): socket(0x2, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x0, 0x6, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c1110"], 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0xc008ae67, &(0x7f0000003e80)=ANY=[]) 959.364513ms ago: executing program 4 (id=826): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0), 0x191) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='#-,{\'-\x00'], 0x0) 2.91726ms ago: executing program 4 (id=827): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x199, &(0x7f0000000380)="$eJzsVT1vGkEQfXu33EGKKHUUKUVQAkXgOJIoXVJZ/ADXlhGcMfLhDw7JBlHgiv/hhj/i/+DClhtcWJZc4N46a3fn1os7S1jC0j7peG/e7OzuLbrZ3eQo8QE8LsYt/IeEi4+4ZAwcwFemvA1f8Z2nuELxLVdcJv+M+Io4GY72mnEc9YXIg4R2ViJWP+Naiq1XVxWAtzlxEgX1H2M9zscKK16I5/DfqYN72csuFuOWENsA0jRNhddWDzPHuADOjTGfuXyYi1SPEc1PBD8AVAe9w2oyHP3s9pqdqBPth2H9T/ArCH6H1Z1uHAXqlxlLOPT9CC4DED21YORzAK6pwX7AMpixNcozs9YzmnPp23Ktw7iuzThPOVFLvd0RR7CJ7zJ3PKGbAMItyl1zyFdqgMGloMaN/QEpHORlotI6iNtTMIh7JfWBYAau56jNkcsCUaqDqP53km17SlwkbhDPiOfE2Z2V3UVcznBDUWkCeDhpDgb9mrCU0l6ovfCTXtmhVR888+WALz4sLCwsLCwsLN4ZngIAAP//j+Nadw==") r0 = open(&(0x7f0000000200)='.\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) getdents(r0, 0x0, 0x0) 1.72163ms ago: executing program 0 (id=837): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) fcntl$setpipe(r0, 0x407, 0x974d) 0s ago: executing program 3 (id=828): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) kernel console output (not intermixed with test programs): 8.905171][ T4721] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 128.937026][ T4709] BTRFS info (device loop2): enabling ssd optimizations [ 128.949379][ T4709] BTRFS info (device loop2): checking UUID tree [ 129.020663][ T4721] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 130.192825][ T3637] XFS (loop0): Unmounting Filesystem [ 130.277193][ T3638] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.499762][ T3654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.560495][ T3654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.570853][ T3654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.581302][ T3654] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.592067][ T3654] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 130.600125][ T3654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.054105][ T4756] fuse: Bad value for 'fd' [ 131.337309][ T4319] usbhid 4-1:0.0: can't add hid device: -71 [ 131.343777][ T4319] usbhid: probe of 4-1:0.0 failed with error -71 [ 131.489756][ T4319] usb 4-1: USB disconnect, device number 6 [ 132.059640][ T11] bond0 (unregistering): Released all slaves [ 132.202522][ T4615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.232800][ T4615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.277133][ T4615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.427319][ T4615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.444794][ T4615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.517100][ T4615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.636437][ C0] eth0: bad gso: type: 1, size: 1408 [ 132.712054][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.718487][ T3639] Bluetooth: hci6: command tx timeout [ 132.726566][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.803566][ T4615] device hsr_slave_0 entered promiscuous mode [ 132.877410][ T4615] device hsr_slave_1 entered promiscuous mode [ 132.892950][ T4615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.916905][ T4615] Cannot create hsr debugfs directory [ 132.953362][ T4762] loop2: detected capacity change from 0 to 32768 [ 133.031942][ T4762] XFS (loop2): Mounting V5 Filesystem [ 133.358480][ T4762] XFS (loop2): Ending clean mount [ 133.415758][ T4762] XFS (loop2): Quotacheck needed: Please wait. [ 133.502916][ T4762] XFS (loop2): Quotacheck: Done. [ 133.608879][ T3648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.619666][ T3648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.628287][ T3648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.637357][ T3648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.645783][ T3648] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.653323][ T3648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.791050][ T4751] chnl_net:caif_netlink_parms(): no params data found [ 133.984496][ T3638] XFS (loop2): Unmounting Filesystem [ 134.503868][ T4794] Cannot find del_set index 0 as target [ 134.613574][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.628119][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.636570][ T4751] device bridge_slave_0 entered promiscuous mode [ 134.712924][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.720728][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.763684][ T4751] device bridge_slave_1 entered promiscuous mode [ 134.792482][ T3648] Bluetooth: hci6: command tx timeout [ 134.946437][ T4807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 135.069499][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.091190][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.223372][ T4751] team0: Port device team_slave_0 added [ 135.259942][ T4751] team0: Port device team_slave_1 added [ 135.320433][ T4784] chnl_net:caif_netlink_parms(): no params data found [ 135.344863][ T4814] loop2: detected capacity change from 0 to 512 [ 135.380048][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.404992][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.464432][ T4814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 135.496091][ T4751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.496440][ T4814] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 135.538827][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.587959][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.667247][ T3648] Bluetooth: hci0: command tx timeout [ 135.747697][ T4751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.808508][ T4826] netlink: 108 bytes leftover after parsing attributes in process `syz.3.264'. [ 135.885846][ T4615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.896486][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 136.106716][ T4615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.264399][ T4751] device hsr_slave_0 entered promiscuous mode [ 136.317524][ T4751] device hsr_slave_1 entered promiscuous mode [ 136.346205][ T4751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.371519][ T4751] Cannot create hsr debugfs directory [ 136.419689][ T4615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.478694][ T4615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.625040][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.647010][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.678376][ T4784] device bridge_slave_0 entered promiscuous mode [ 136.744309][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.757380][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.767446][ T4313] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.798798][ T4784] device bridge_slave_1 entered promiscuous mode [ 136.867294][ T3648] Bluetooth: hci6: command tx timeout [ 137.020268][ T4784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.037008][ T3725] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.086712][ T4784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.244759][ T4751] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.307074][ T4313] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=3c.71 [ 137.316178][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.334613][ T4313] usb 4-1: Product: syz [ 137.356626][ T4313] usb 4-1: Manufacturer: syz [ 137.365044][ T4313] usb 4-1: SerialNumber: syz [ 137.368248][ T4784] team0: Port device team_slave_0 added [ 137.406593][ T4313] usb 4-1: config 0 descriptor?? [ 137.437578][ T3725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.458815][ T4313] redrat3 4-1:0.0: Couldn't find all endpoints [ 137.466789][ T3725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.489979][ T3725] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 137.514539][ T4751] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.524424][ T3725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.555210][ T3725] usb 3-1: config 0 descriptor?? [ 137.599000][ T4784] team0: Port device team_slave_1 added [ 137.700425][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.740088][ T4312] usb 4-1: USB disconnect, device number 7 [ 137.747089][ T3648] Bluetooth: hci0: command tx timeout [ 137.807572][ T4751] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.890745][ T4615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.000500][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.080745][ T3725] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 138.097458][ T3725] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 138.104307][ T3725] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 138.112030][ T3725] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 138.126555][ T3725] sony 0003:054C:024B.0003: item fetching failed at offset 4/5 [ 138.140656][ T3725] sony 0003:054C:024B.0003: parse failed [ 138.146368][ T3725] sony: probe of 0003:054C:024B.0003 failed with error -22 [ 138.304118][ T4751] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.319463][ T4848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.347506][ T4848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.427111][ T4615] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.435046][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.446888][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.534647][ T4784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.568168][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.576318][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.605096][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.637009][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.686980][ T4784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.811176][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.880976][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.890697][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.899890][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.907247][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.915755][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.924837][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.936693][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.943896][ T3657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.952325][ T3648] Bluetooth: hci6: command tx timeout [ 138.973772][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.111963][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.175844][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.187858][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.207485][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.225999][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.235624][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.251776][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.278934][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.320713][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.335692][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.364883][ T4784] device hsr_slave_0 entered promiscuous mode [ 139.382053][ T4784] device hsr_slave_1 entered promiscuous mode [ 139.393442][ T4784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.415772][ T4784] Cannot create hsr debugfs directory [ 139.495564][ T4615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.518334][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.540372][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.551513][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.723772][ T4751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.808562][ T4751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.827048][ T3648] Bluetooth: hci0: command tx timeout [ 139.835936][ T4751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.928111][ T4751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.938730][ T3684] usb 3-1: USB disconnect, device number 5 [ 140.053735][ T4894] loop2: detected capacity change from 0 to 128 [ 140.139866][ T4894] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.162959][ T4894] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038 (0x7fffffff) [ 140.233549][ T26] audit: type=1800 audit(1723212908.189:43): pid=4894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.269" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 140.381471][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 140.652647][ T4904] loop2: detected capacity change from 0 to 64 [ 140.668827][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.677674][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.712786][ T4615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.770483][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.870228][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.878789][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.888016][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.898807][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.949745][ T4751] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.996968][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.017252][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.030566][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.039770][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.057473][ T3861] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.064656][ T3861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.082913][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.101885][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.117616][ T3861] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.124777][ T3861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.151670][ T4615] device veth0_vlan entered promiscuous mode [ 141.226095][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.244509][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.254400][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.269762][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.279486][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.303874][ T4615] device veth1_vlan entered promiscuous mode [ 141.350818][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.369119][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.378954][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.398404][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.425346][ T4751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.446139][ T4751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.467491][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 141.563208][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.578886][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.608016][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.627265][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.635924][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.727200][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 141.763206][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.795840][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.807974][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.831771][ T4615] device veth0_macvtap entered promiscuous mode [ 141.913650][ T3648] Bluetooth: hci0: command tx timeout [ 142.027403][ T14] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 142.036494][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.056927][ T14] usb 3-1: Product: syz [ 142.061147][ T14] usb 3-1: Manufacturer: syz [ 142.065757][ T14] usb 3-1: SerialNumber: syz [ 142.101673][ T14] usb 3-1: config 0 descriptor?? [ 142.105989][ T4784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.132473][ T4784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.150193][ T14] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 142.168312][ T4784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.191659][ T4784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.225863][ T4615] device veth1_macvtap entered promiscuous mode [ 142.352046][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.371767][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.441720][ T3860] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 142.460819][ T11] device hsr_slave_0 left promiscuous mode [ 142.468989][ T11] device hsr_slave_1 left promiscuous mode [ 142.475631][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.483999][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.497657][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.505115][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.514126][ T11] device bridge_slave_1 left promiscuous mode [ 142.520830][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.540697][ T11] device bridge_slave_0 left promiscuous mode [ 142.554450][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.627581][ T11] device veth1_macvtap left promiscuous mode [ 142.638968][ T11] device veth0_macvtap left promiscuous mode [ 142.645137][ T11] device veth1_vlan left promiscuous mode [ 142.663668][ T11] device veth0_vlan left promiscuous mode [ 142.709558][ T3860] usb 4-1: Using ep0 maxpacket: 8 [ 142.747492][ T14] gspca_m5602: Failed to find a sensor [ 142.753017][ T14] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 142.764904][ T14] usb 3-1: USB disconnect, device number 6 [ 142.847426][ T3860] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.867033][ T3860] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.886953][ T3860] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 142.907173][ T3860] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 142.926918][ T3860] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.957125][ T3860] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.966238][ T3860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.211681][ T4928] loop2: detected capacity change from 0 to 1024 [ 143.245684][ T4928] hfsplus: small dir entry [ 143.253584][ T3860] usb 4-1: GET_CAPABILITIES returned 0 [ 143.259649][ T3860] usbtmc 4-1:16.0: can't read capabilities [ 143.774857][ T4934] loop2: detected capacity change from 0 to 1024 [ 143.882166][ T26] audit: type=1804 audit(1723212911.839:44): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.277" name="/newroot/71/file0/bus" dev="loop2" ino=26 res=1 errno=0 [ 143.903481][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.937037][ T26] audit: type=1804 audit(1723212911.839:45): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.277" name="/newroot/71/file0/bus" dev="loop2" ino=26 res=1 errno=0 [ 144.097172][ T11] team0 (unregistering): Port device team_slave_1 removed [ 144.172339][ T4319] usb 4-1: USB disconnect, device number 8 [ 144.313185][ T11] team0 (unregistering): Port device team_slave_0 removed [ 144.447649][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.559018][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.080908][ T46] hfsplus: b-tree write err: -5, ino 4 [ 145.494241][ T4318] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.670022][ T11] bond0 (unregistering): Released all slaves [ 145.747006][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 145.777262][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.811254][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.827798][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.843556][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.855958][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.874502][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.887112][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.907323][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.922991][ T4615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.213465][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.237984][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.267177][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.468733][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.487979][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.498990][ T4318] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 149.508274][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.516472][ T4318] usb 3-1: Product: syz [ 149.521032][ T4318] usb 3-1: Manufacturer: syz [ 149.537267][ T4318] r8152-cfgselector 3-1: config 0 descriptor?? [ 149.546425][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.571458][ T4318] r8152-cfgselector 3-1: can't set config #0, error -71 [ 149.599616][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.607061][ T4318] r8152-cfgselector 3-1: Unknown version 0x0000 [ 149.635727][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.636613][ T4318] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 149.673984][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.726025][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.754589][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.782497][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.854126][ T4615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.883482][ T4751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.921812][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.931344][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.961477][ T4615] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.990806][ T4615] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.023105][ T4615] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.057071][ T4615] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.135596][ T4971] loop2: detected capacity change from 0 to 512 [ 150.272210][ T4784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.274436][ T4971] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 150.317108][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 150.325622][ T4971] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.285: invalid indirect mapped block 4278190080 (level 0) [ 150.396617][ T4784] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.421863][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.432596][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.436917][ T4971] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.285: invalid indirect mapped block 1 (level 1) [ 150.509604][ T4971] EXT4-fs (loop2): 1 truncate cleaned up [ 150.523497][ T4971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.538312][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.556583][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.585099][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.592301][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.637921][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.670880][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.698037][ T3866] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.705181][ T3866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.762141][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.789323][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.802935][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 150.808152][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.819358][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.828171][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.865958][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.889169][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.931641][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.954290][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.971268][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.005272][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.037540][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.055803][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.089733][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.106611][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.209996][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.912903][ T4998] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 151.921926][ T4998] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 151.999045][ T4653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.033430][ T4653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.060433][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.080250][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.103409][ T5001] loop2: detected capacity change from 0 to 128 [ 152.224610][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.262158][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.279555][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.300581][ T4751] device veth0_vlan entered promiscuous mode [ 152.321783][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.339961][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.412176][ T4751] device veth1_vlan entered promiscuous mode [ 152.490996][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.508456][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.516797][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.542435][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.568837][ T4751] device veth0_macvtap entered promiscuous mode [ 152.588640][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.599363][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.612528][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.636659][ T4784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.653704][ T4751] device veth1_macvtap entered promiscuous mode [ 152.713088][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.722160][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.731258][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.750859][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.774383][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.802131][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.816236][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.863300][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.902255][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.944035][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.973469][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.066169][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.311509][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.577849][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.835447][ T4784] device veth0_vlan entered promiscuous mode [ 153.888675][ T5020] loop1: detected capacity change from 0 to 128 [ 153.906520][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.916177][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.936144][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.946322][ T5020] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 153.963484][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.971535][ T5020] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 154.008738][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.022569][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.033117][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.043766][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.054869][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.065607][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.075824][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.076195][ T5020] syz.1.295 (pid 5020) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 154.086993][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.087016][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.087035][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.088713][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.158460][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.167908][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.186285][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.195691][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.210205][ T4751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.227389][ T4751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.270030][ T5020] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 154.326255][ T5020] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 154.366992][ T4751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.386333][ T5020] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 154.416941][ T4751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.438660][ T5020] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 154.498243][ T4784] device veth1_vlan entered promiscuous mode [ 154.510074][ T5020] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 154.939466][ T5020] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 155.048757][ T4784] device veth0_macvtap entered promiscuous mode [ 155.116089][ T4784] device veth1_macvtap entered promiscuous mode [ 155.150708][ T4615] EXT4-fs (loop1): unmounting filesystem. [ 155.250950][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.530443][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.540870][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.647902][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.658699][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.696921][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.707328][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.725631][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.747076][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.754986][ T5031] loop2: detected capacity change from 0 to 4096 [ 155.764257][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.787066][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.794566][ T5031] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (32768) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 155.833837][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.856575][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.878989][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.903364][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.925050][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.968729][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.097915][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.148172][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.218647][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.272448][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.304069][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.335293][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.354616][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.374523][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.384923][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.408747][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.427127][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.446069][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.465804][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.488021][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.541379][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.612176][ T5043] netlink: 'syz.2.300': attribute type 49 has an invalid length. [ 156.637308][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.667876][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.693246][ T4784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.707076][ T4784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.715932][ T4784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.746898][ T4784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.815071][ T5045] overlayfs: failed to resolve './file1': -2 [ 156.887885][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.896125][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.022421][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.116387][ T3902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.183098][ T3902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.205413][ T3742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.264292][ T3742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.722094][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.018447][ T3905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.046519][ T3905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.160144][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.181221][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.076345][ T5066] hub 9-0:1.0: USB hub found [ 159.083776][ T5066] hub 9-0:1.0: 8 ports detected [ 159.401749][ T5068] device wg1 entered promiscuous mode [ 159.429038][ T5076] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 159.660830][ T5080] device vlan1 entered promiscuous mode [ 159.677058][ T5080] device batadv_slave_1 entered promiscuous mode [ 159.685780][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'. [ 159.840237][ T5080] device vlan1 left promiscuous mode [ 159.870972][ T5084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.315'. [ 159.893252][ T5086] loop0: detected capacity change from 0 to 512 [ 159.941139][ T5079] device batadv_slave_1 left promiscuous mode [ 159.966067][ T5086] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.108571][ T5086] EXT4-fs (loop0): 1 orphan inode deleted [ 160.114381][ T5086] EXT4-fs (loop0): 1 truncate cleaned up [ 160.158216][ T5090] loop2: detected capacity change from 0 to 2048 [ 160.169977][ T5086] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.277349][ T5090] loop2: p2 < > [ 160.285043][ T5086] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 160.373733][ T5086] EXT4-fs (loop0): Remounting filesystem read-only [ 160.532629][ T4784] EXT4-fs (loop0): unmounting filesystem. [ 160.597468][ T4593] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 160.902703][ T5112] syz.0.327 (5112) used greatest stack depth: 18008 bytes left [ 160.961989][ T4593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.990165][ T4593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.025132][ T4593] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 161.043305][ T4593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.234066][ T3684] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 161.238953][ T4593] usb 2-1: config 0 descriptor?? [ 162.063150][ T3725] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.127188][ T3684] usb 3-1: Using ep0 maxpacket: 16 [ 162.270058][ T5126] device vlan2 entered promiscuous mode [ 162.309531][ T5126] device bridge0 entered promiscuous mode [ 162.337045][ T3725] usb 4-1: Using ep0 maxpacket: 8 [ 162.362400][ T4593] uclogic 0003:5543:0781.0004: item fetching failed at offset 5/7 [ 162.370991][ T4593] uclogic 0003:5543:0781.0004: parse failed [ 162.377034][ T4593] uclogic: probe of 0003:5543:0781.0004 failed with error -22 [ 162.404864][ T5126] device bridge0 left promiscuous mode [ 162.490896][ T3725] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 162.543689][ T3725] usb 4-1: config 179 has no interface number 0 [ 162.577469][ T3866] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.650090][ T3725] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 162.801600][ T3725] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 162.867440][ T3866] usb 5-1: Using ep0 maxpacket: 8 [ 163.029801][ T3866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.055060][ T3725] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.069999][ T3866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.099900][ T3866] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.117774][ T3725] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.161143][ T3866] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 163.171026][ T3725] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.200353][ T3866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.209086][ T3725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.287971][ T5118] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 163.295776][ T3861] usb 2-1: USB disconnect, device number 2 [ 163.319707][ T3866] hub 5-1:1.0: bad descriptor, ignoring hub [ 163.355856][ T3866] hub: probe of 5-1:1.0 failed with error -5 [ 164.376208][ T3864] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 164.440161][ T5135] loop0: detected capacity change from 0 to 8 [ 164.577448][ T3684] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.595805][ T3684] usb 3-1: no configurations [ 164.657042][ T3684] usb 3-1: can't read configurations, error -22 [ 164.661866][ T5141] netlink: 'syz.2.336': attribute type 6 has an invalid length. [ 164.729773][ T4319] usb 4-1: USB disconnect, device number 9 [ 164.746899][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 164.776526][ T4319] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 164.838247][ T3861] usb 5-1: USB disconnect, device number 4 [ 165.058687][ T5149] netlink: 'syz.1.341': attribute type 5 has an invalid length. [ 165.251007][ T5158] input: syz0 as /devices/virtual/input/input9 [ 165.483137][ T5155] loop2: detected capacity change from 0 to 512 [ 165.635234][ T5155] EXT4-fs: Invalid want_extra_isize 128 [ 166.156113][ T5173] loop1: detected capacity change from 0 to 128 [ 166.205663][ T5173] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 166.234997][ T5173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.209877][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 167.629200][ T5196] netlink: 'syz.0.356': attribute type 29 has an invalid length. [ 167.678878][ T5196] netlink: 'syz.0.356': attribute type 29 has an invalid length. [ 167.693320][ T5199] netlink: 'syz.0.356': attribute type 29 has an invalid length. [ 167.723461][ T5200] kvm: emulating exchange as write [ 168.538769][ T5188] loop2: detected capacity change from 0 to 40427 [ 168.592976][ T5188] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 168.639851][ T5188] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 168.780467][ T5188] F2FS-fs (loop2): Found nat_bits in checkpoint [ 169.047345][ T5188] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 169.061846][ T5188] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 169.385771][ T5188] syz.2.352: attempt to access beyond end of device [ 169.385771][ T5188] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.708200][ T5250] hub 9-0:1.0: USB hub found [ 169.719640][ T5250] hub 9-0:1.0: 8 ports detected [ 170.188426][ T5245] loop4: detected capacity change from 2048 to 64 [ 170.306134][ T3638] syz-executor: attempt to access beyond end of device [ 170.306134][ T3638] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 170.718214][ T5264] netlink: 'syz.0.381': attribute type 2 has an invalid length. [ 170.750342][ T5264] netlink: 244 bytes leftover after parsing attributes in process `syz.0.381'. [ 170.797141][ T3639] Bluetooth: hci0: command tx timeout [ 171.196626][ T5272] netlink: 'syz.4.384': attribute type 4 has an invalid length. [ 171.602355][ T5265] loop1: detected capacity change from 0 to 32768 [ 171.767373][ T3684] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 172.181441][ T4319] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.209883][ T5285] hub 9-0:1.0: USB hub found [ 172.217161][ T5285] hub 9-0:1.0: 8 ports detected [ 172.245745][ T5265] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 172.261925][ T5265] XFS (loop1): Mounting V5 Filesystem [ 172.328386][ T5265] XFS (loop1): Ending clean mount [ 172.350742][ T5265] XFS (loop1): Quotacheck needed: Please wait. [ 172.545721][ T5265] XFS (loop1): Quotacheck: Done. [ 172.572088][ T26] audit: type=1800 audit(1723212940.529:46): pid=5265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.382" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 172.596953][ T4319] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.640548][ T4319] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.658717][ T3684] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 172.661528][ T5302] ipt_CLUSTERIP: no config found for 172.20.20.170, need 'new' [ 172.677793][ T3684] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 172.688318][ T3684] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 172.697485][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.705032][ T4319] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.721406][ T4615] XFS (loop1): Unmounting Filesystem [ 172.725570][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.787933][ T5278] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 173.068146][ T5280] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 173.114549][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 173.167150][ T5280] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 173.207168][ T3684] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 173.226545][ T3684] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input10 [ 173.261418][ T3684] input: failed to attach handler kbd to device input10, error: -5 [ 173.323289][ T5312] loop2: detected capacity change from 0 to 512 [ 173.353144][ T3684] usb 5-1: USB disconnect, device number 5 [ 173.387472][ T5312] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.404799][ T5312] ext4 filesystem being mounted at /96/bus supports timestamps until 2038 (0x7fffffff) [ 173.428300][ T4313] usb 1-1: USB disconnect, device number 5 [ 173.940799][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 174.707222][ T3648] Bluetooth: hci6: command 0x0406 tx timeout [ 174.842313][ T5327] device bridge_slave_1 left promiscuous mode [ 174.848866][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.860590][ T5327] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 175.694984][ T5330] loop0: detected capacity change from 0 to 32768 [ 175.736367][ T5330] [ 175.736367][ T5330] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.736367][ T5330] [ 175.806329][ T5330] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 175.806329][ T5330] [ 175.841963][ T5330] ERROR: (device loop0): remounting filesystem as read-only [ 176.691648][ T5360] loop2: detected capacity change from 0 to 4096 [ 176.748206][ T5360] EXT4-fs: Ignoring removed oldalloc option [ 176.767053][ T5360] EXT4-fs (loop2): Test dummy encryption mode enabled [ 176.817970][ T5360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.856497][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 178.888139][ T5402] loop1: detected capacity change from 0 to 512 [ 178.904614][ T5375] syz.4.418 (5375): drop_caches: 2 [ 179.001235][ T5402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 179.067467][ T5402] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 179.272750][ T4615] EXT4-fs (loop1): unmounting filesystem. [ 179.366937][ T4319] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 179.912417][ T5419] hub 9-0:1.0: USB hub found [ 179.917823][ T5419] hub 9-0:1.0: 8 ports detected [ 180.145236][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 180.267196][ T4319] usb 3-1: config 0 has no interfaces? [ 180.272744][ T4319] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 180.314072][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.336197][ T4319] usb 3-1: config 0 descriptor?? [ 180.477099][ T3860] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 180.528124][ T5433] bond0: option use_carrier: invalid value (5) [ 180.737321][ T3860] usb 4-1: Using ep0 maxpacket: 8 [ 180.884113][ T3860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.904856][ T3860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.959637][ T3860] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 180.995210][ T3860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.040583][ T3860] usb 4-1: config 0 descriptor?? [ 181.271809][ T3684] usb 3-1: USB disconnect, device number 10 [ 181.296088][ T26] audit: type=1804 audit(1723212949.249:47): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.448" name="/newroot/40/bus/file0" dev="overlay" ino=232 res=1 errno=0 [ 181.643255][ T3860] wacom 0003:056A:003F.0005: unknown main item tag 0x0 [ 181.700042][ T3860] wacom 0003:056A:003F.0005: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.3-1/input0 [ 182.398758][ T5465] hub 9-0:1.0: USB hub found [ 182.407555][ T5465] hub 9-0:1.0: 8 ports detected [ 182.476784][ T4312] usb 4-1: USB disconnect, device number 10 [ 182.746921][ T3860] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 184.077105][ T3860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.088245][ T5494] loop1: detected capacity change from 0 to 1024 [ 184.116932][ T4318] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 184.394873][ T4318] usb 3-1: Using ep0 maxpacket: 32 [ 184.457591][ T3860] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 184.527377][ T5500] Bluetooth: MGMT ver 1.22 [ 184.582120][ T3860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.772351][ T3860] usb 1-1: Product: syz [ 184.862453][ T3860] usb 1-1: Manufacturer: syz [ 185.155008][ T3860] usb 1-1: SerialNumber: syz [ 185.235645][ T3860] usb 1-1: config 0 descriptor?? [ 185.274193][ T3860] usb 1-1: can't set config #0, error -71 [ 185.312626][ T3860] usb 1-1: USB disconnect, device number 6 [ 185.347077][ T4318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 185.356027][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 185.430068][ T4318] usb 3-1: config 0 interface 0 has no altsetting 1 [ 185.627353][ T4318] usb 3-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 185.646746][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.695924][ T4318] usb 3-1: Product: syz [ 185.716975][ T4318] usb 3-1: Manufacturer: syz [ 185.736520][ T4318] usb 3-1: SerialNumber: syz [ 185.824577][ T4318] usb 3-1: config 0 descriptor?? [ 185.980238][ T3684] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 186.625838][ T3648] Bluetooth: hci4: command 0x0406 tx timeout [ 186.632196][ T3639] Bluetooth: hci1: command 0x0406 tx timeout [ 186.638281][ T3644] Bluetooth: hci2: command 0x0406 tx timeout [ 186.650293][ T3684] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 186.678130][ T4318] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 186.706952][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.753789][ T3684] usb 2-1: config 0 descriptor?? [ 186.874837][ T3861] usb 3-1: USB disconnect, device number 11 [ 186.985511][ T5518] loop0: detected capacity change from 0 to 1024 [ 186.995348][ T5518] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.116284][ T5518] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 187.131248][ T3684] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 187.151405][ T3684] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 187.812013][ T3684] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 187.831127][ T3684] [drm] Initialized udl on minor 2 [ 187.929179][ T4784] EXT4-fs (loop0): unmounting filesystem. [ 188.117091][ T3684] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 188.155753][ T3684] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 188.195591][ T3684] usb 2-1: USB disconnect, device number 3 [ 188.537070][ T3861] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.816979][ T3861] usb 1-1: Using ep0 maxpacket: 32 [ 189.021268][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.028728][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.089306][ T5533] loop2: detected capacity change from 0 to 40427 [ 189.147139][ T3861] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 189.171319][ T3861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.190991][ T5533] F2FS-fs (loop2): invalid crc value [ 189.205845][ T3861] usb 1-1: Product: syz [ 189.223051][ T3861] usb 1-1: Manufacturer: syz [ 189.230640][ T3861] usb 1-1: SerialNumber: syz [ 189.247755][ T3861] usb 1-1: config 0 descriptor?? [ 189.284562][ T5533] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.508483][ T5533] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 189.513782][ T3861] usb 1-1: USB disconnect, device number 7 [ 189.572168][ T5533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 190.434061][ T3638] syz-executor: attempt to access beyond end of device [ 190.434061][ T3638] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.653964][ T5565] loop1: detected capacity change from 0 to 1024 [ 190.662452][ T5565] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.752675][ T5565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.450155][ T4615] EXT4-fs (loop1): unmounting filesystem. [ 191.769966][ T5578] program syz.1.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.235739][ T5588] capability: warning: `syz.2.492' uses 32-bit capabilities (legacy support in use) [ 194.164893][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.171704][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.741494][ T5639] hub 9-0:1.0: USB hub found [ 195.746949][ T5639] hub 9-0:1.0: 8 ports detected [ 196.378062][ T26] audit: type=1326 audit(1723212964.330:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0d1779f9 code=0x7ffc0000 [ 197.436307][ T5650] loop0: detected capacity change from 0 to 1024 [ 197.445512][ T5659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'. [ 197.457173][ T26] audit: type=1326 audit(1723212964.360:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0d1779f9 code=0x7ffc0000 [ 197.560468][ T26] audit: type=1326 audit(1723212964.360:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1c0d1779f9 code=0x7ffc0000 [ 197.656781][ T26] audit: type=1326 audit(1723212965.410:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0d1779f9 code=0x7ffc0000 [ 197.828716][ T26] audit: type=1326 audit(1723212965.410:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0d1779f9 code=0x7ffc0000 [ 197.879590][ T26] audit: type=1326 audit(1723212965.500:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f1c0d1779f9 code=0x7ffc0000 [ 197.977102][ T3684] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 197.990433][ T26] audit: type=1326 audit(1723212965.500:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0d1779f9 code=0x7ffc0000 [ 198.042030][ T26] audit: type=1326 audit(1723212965.500:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0d1779f9 code=0x7ffc0000 [ 198.128656][ T9] hfsplus: b-tree write err: -5, ino 3 [ 198.261971][ T3684] usb 2-1: Using ep0 maxpacket: 16 [ 198.387423][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 198.449720][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 198.564573][ T5683] hub 9-0:1.0: USB hub found [ 198.572383][ T5683] hub 9-0:1.0: 8 ports detected [ 198.988284][ T3684] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 199.033751][ T3684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.206887][ T3684] usb 2-1: Product: syz [ 199.211108][ T3684] usb 2-1: Manufacturer: syz [ 199.215728][ T3684] usb 2-1: SerialNumber: syz [ 199.248679][ T3684] usb 2-1: config 0 descriptor?? [ 199.327762][ T3684] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 199.927712][ T3684] usb 2-1: USB disconnect, device number 4 [ 200.028390][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 200.478480][ T5702] device team_slave_0 entered promiscuous mode [ 200.484873][ T5702] device team_slave_1 entered promiscuous mode [ 201.424792][ T5711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.546'. [ 201.831875][ T5719] loop0: detected capacity change from 0 to 256 [ 202.177033][ T3864] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.381596][ T5726] loop0: detected capacity change from 0 to 4096 [ 202.407596][ T5726] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 202.459694][ T5726] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 202.506937][ T5726] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 202.535307][ T5726] ntfs3: loop0: Failed to load $MFTMirr. [ 202.548643][ T5726] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 202.565572][ T5726] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 202.597295][ T3864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.627464][ T3864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.644105][ T3864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 202.669969][ T3864] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 202.706974][ T3864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.737249][ T3864] usb 2-1: config 0 descriptor?? [ 202.789452][ T3864] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 202.795939][ T3864] radioshark2: probe of 2-1:0.0 failed with error -22 [ 202.856022][ T3864] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 202.870529][ T5734] loop0: detected capacity change from 0 to 128 [ 202.974444][ T5736] FAT-fs (loop0): FAT read failed (blocknr 234) [ 203.085584][ T5738] FAT-fs (loop0): FAT read failed (blocknr 234) [ 203.150045][ T3685] usb 2-1: USB disconnect, device number 5 [ 203.854621][ T5750] loop2: detected capacity change from 0 to 1024 [ 203.889300][ T5750] hfsplus: failed to load root directory [ 203.935527][ T5750] loop2: detected capacity change from 0 to 512 [ 203.963721][ T5750] ext4: Unknown parameter 'obj_user' [ 204.041694][ T5750] loop2: detected capacity change from 0 to 512 [ 204.059774][ T5750] EXT4-fs: Ignoring removed i_version option [ 204.091351][ T5750] EXT4-fs error (device loop2): __ext4_iget:5044: inode #11: block 1: comm syz.2.564: invalid block [ 204.107134][ T4318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.154130][ T5750] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.564: couldn't read orphan inode 11 (err -117) [ 204.184982][ T5750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 204.243146][ T5756] syz.3.565[5756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.243701][ T5756] syz.3.565[5756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.262678][ T5756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.565'. [ 204.426977][ T4318] usb 2-1: Using ep0 maxpacket: 16 [ 204.548652][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.683890][ T5750] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.564: Directory hole found for htree leaf block 0 [ 204.720981][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.929697][ T4318] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 205.073547][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.133350][ T4318] usb 2-1: config 0 descriptor?? [ 205.630565][ T26] audit: type=1326 audit(1723212973.580:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35935779f9 code=0x7ffc0000 [ 205.762185][ T26] audit: type=1326 audit(1723212973.610:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35935779f9 code=0x7ffc0000 [ 205.871800][ T26] audit: type=1326 audit(1723212973.610:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f35935779f9 code=0x7ffc0000 [ 205.889536][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 205.904656][ T26] audit: type=1326 audit(1723212973.610:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35935779f9 code=0x7ffc0000 [ 205.931697][ T4318] elecom 0003:056E:00FD.0006: item fetching failed at offset 5/9 [ 205.954706][ T26] audit: type=1326 audit(1723212973.610:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35935779f9 code=0x7ffc0000 [ 205.997701][ T4318] elecom: probe of 0003:056E:00FD.0006 failed with error -22 [ 206.029464][ T26] audit: type=1326 audit(1723212973.610:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f35935779f9 code=0x7ffc0000 [ 206.076955][ T26] audit: type=1326 audit(1723212973.630:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35935779f9 code=0x7ffc0000 [ 206.145471][ T26] audit: type=1326 audit(1723212973.630:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35935779f9 code=0x7ffc0000 [ 206.189036][ T3684] usb 2-1: USB disconnect, device number 6 [ 206.254608][ T26] audit: type=1326 audit(1723212973.630:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f35935779f9 code=0x7ffc0000 [ 206.345964][ T26] audit: type=1326 audit(1723212973.630:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35935779f9 code=0x7ffc0000 [ 207.004918][ T5783] loop1: detected capacity change from 0 to 2048 [ 207.060104][ T5783] EXT4-fs: Ignoring removed orlov option [ 207.127037][ T4313] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 207.135405][ T5774] syz.4.570 (5774): drop_caches: 2 [ 207.170446][ T5774] syz.4.570 (5774): drop_caches: 2 [ 207.185119][ T5773] syz.4.570 (5773): drop_caches: 2 [ 207.196475][ T5773] syz.4.570 (5773): drop_caches: 2 [ 207.377159][ T4313] usb 3-1: Using ep0 maxpacket: 16 [ 207.418688][ T5769] syz.4.570 (5769): drop_caches: 2 [ 207.463720][ T5783] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 207.497203][ T4313] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 207.505824][ T4313] usb 3-1: config 0 has no interface number 0 [ 207.556004][ T4313] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.576969][ T5783] EXT4-fs (loop1): shut down requested (0) [ 207.637005][ T4313] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.680848][ T4313] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 207.710513][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.742512][ T5782] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 207.754465][ T4313] usb 3-1: config 0 descriptor?? [ 207.841574][ T5782] EXT4-fs (loop1): Remounting filesystem read-only [ 207.976306][ T4615] EXT4-fs (loop1): unmounting filesystem. [ 208.484753][ T4312] usb 3-1: USB disconnect, device number 12 [ 209.139085][ T5807] loop2: detected capacity change from 0 to 128 [ 209.197676][ T5807] sysv_free_block: flc_count > flc_size [ 209.219954][ T5807] sysv_free_block: flc_count > flc_size [ 209.225566][ T5807] sysv_free_block: flc_count > flc_size [ 209.258525][ T5807] sysv_free_block: flc_count > flc_size [ 209.268760][ T5807] sysv_free_block: flc_count > flc_size [ 209.274360][ T5807] sysv_free_block: flc_count > flc_size [ 209.287665][ T5807] sysv_free_block: flc_count > flc_size [ 209.294306][ T5807] sysv_free_block: flc_count > flc_size [ 209.306888][ T5807] sysv_free_block: flc_count > flc_size [ 209.312685][ T5807] sysv_free_block: flc_count > flc_size [ 209.330759][ T5807] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 209.573961][ T5811] mmap: syz.4.589 (5811): VmData 49221632 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 209.602982][ T5813] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 209.747710][ T5815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.601'. [ 209.786106][ T5815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.601'. [ 209.957785][ T5819] loop2: detected capacity change from 0 to 1024 [ 209.964924][ T5819] EXT4-fs: Invalid want_extra_isize 131 [ 210.015900][ T5819] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.246911][ T3864] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 210.637291][ T3864] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 210.656668][ T3864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.664869][ T3684] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 210.685118][ T3864] usb 5-1: config 0 descriptor?? [ 210.725532][ T5827] loop2: detected capacity change from 0 to 32768 [ 210.738650][ T3864] dw2102: su3000_identify_state [ 210.743523][ T3864] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 210.766557][ T3864] dw2102: su3000_power_ctrl: 1, initialized 0 [ 210.773258][ T3864] dvb-usb: bulk message failed: -22 (2/0) [ 210.810663][ T3864] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-22) [ 210.855640][ T5827] XFS (loop2): Mounting V5 Filesystem [ 210.922215][ T5827] XFS (loop2): Ending clean mount [ 210.988972][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.002871][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.057085][ T3684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.073691][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 211.101985][ T3684] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 211.115345][ T3684] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 211.124821][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.142636][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 211.142654][ T26] audit: type=1804 audit(1723212979.090:67): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.596" name="/newroot/134/file0/file1" dev="loop2" ino=9286 res=1 errno=0 [ 211.143782][ T3684] usb 4-1: config 0 descriptor?? [ 211.188066][ T26] audit: type=1804 audit(1723212979.140:68): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.596" name="/newroot/134/file0/file1" dev="loop2" ino=9286 res=1 errno=0 [ 211.230388][ T4313] usb 5-1: USB disconnect, device number 6 [ 211.248669][ T3684] radioshark2 4-1:0.0: Invalid radioSHARK2 device [ 211.255154][ T3684] radioshark2: probe of 4-1:0.0 failed with error -22 [ 211.287322][ T3684] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 211.596561][ T3864] usb 4-1: USB disconnect, device number 11 [ 211.644057][ T3638] XFS (loop2): Unmounting Filesystem [ 212.085326][ T5841] netlink: 'syz.2.598': attribute type 12 has an invalid length. [ 212.236554][ T5841] loop2: detected capacity change from 0 to 8192 [ 212.276244][ T5841] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 212.296910][ T5841] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 212.307868][ T5841] REISERFS (device loop2): using ordered data mode [ 212.309656][ T5844] device ipip0 entered promiscuous mode [ 212.314431][ T5841] reiserfs: using flush barriers [ 212.345011][ T5841] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.372299][ T5841] REISERFS (device loop2): checking transaction log (loop2) [ 212.399378][ T5841] REISERFS (device loop2): Using r5 hash to sort names [ 212.416373][ T5841] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 212.430266][ T5841] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 212.556238][ T5852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.599'. [ 213.422955][ T5841] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 213.848130][ C0] eth0: bad gso: type: 1, size: 1408 [ 214.004818][ T3648] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.017370][ T3648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.026323][ T3648] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.047574][ T3648] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.055176][ T3648] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.065539][ T3648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.206886][ T3684] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 214.486893][ T3684] usb 4-1: Using ep0 maxpacket: 8 [ 214.626705][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 215.378223][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.397045][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.427518][ T5865] device bridge_slave_0 entered promiscuous mode [ 215.478520][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.485739][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.494405][ T5865] device bridge_slave_1 entered promiscuous mode [ 215.553697][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.570261][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.587407][ T3684] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 215.617001][ T3684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.625057][ T3684] usb 4-1: Product: syz [ 215.634198][ T3684] usb 4-1: Manufacturer: syz [ 215.639184][ T3684] usb 4-1: SerialNumber: syz [ 215.647643][ T3684] usb 4-1: config 0 descriptor?? [ 215.673997][ T5865] team0: Port device team_slave_0 added [ 215.685021][ T5865] team0: Port device team_slave_1 added [ 215.691743][ T3684] hub 4-1:0.0: bad descriptor, ignoring hub [ 215.707138][ T3684] hub: probe of 4-1:0.0 failed with error -5 [ 215.717582][ T3684] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 215.745495][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.752697][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.778646][ T4312] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 215.826870][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.851245][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.885455][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.928887][ T4313] usb 4-1: USB disconnect, device number 12 [ 215.949401][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.023850][ T5865] device hsr_slave_0 entered promiscuous mode [ 216.026987][ T4312] usb 3-1: Using ep0 maxpacket: 32 [ 216.035620][ T5865] device hsr_slave_1 entered promiscuous mode [ 216.047586][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.056225][ T5865] Cannot create hsr debugfs directory [ 216.147182][ T3644] Bluetooth: hci7: command tx timeout [ 216.291874][ T5865] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.327149][ T4312] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 216.336243][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.344500][ T4312] usb 3-1: Product: syz [ 216.348746][ T4312] usb 3-1: Manufacturer: syz [ 216.353376][ T4312] usb 3-1: SerialNumber: syz [ 216.361068][ T4312] usb 3-1: config 0 descriptor?? [ 216.430778][ T5865] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.551003][ T5865] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.631469][ T3644] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 216.640567][ T3644] Bluetooth: hci5: Injecting HCI hardware error event [ 216.650647][ T3639] Bluetooth: hci5: hardware error 0x00 [ 216.676311][ T4312] usb 3-1: USB disconnect, device number 13 [ 216.755929][ T5865] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.936522][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.947143][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.958229][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.969081][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.069553][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.086425][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.096277][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.109146][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.124693][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.134876][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.143819][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.151090][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.172766][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.182267][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.194075][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.207812][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.214939][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.223327][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.247274][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.257519][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.274249][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.305745][ T5865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.317506][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.330697][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.340181][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.349787][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.358897][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.368179][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.377470][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.386558][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.403549][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.658685][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.666362][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.694256][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.721101][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.731130][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.770222][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.779558][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.792109][ T5865] device veth0_vlan entered promiscuous mode [ 217.800552][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.809916][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.825782][ T5865] device veth1_vlan entered promiscuous mode [ 217.862031][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.871586][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.880490][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.890474][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.903248][ T5865] device veth0_macvtap entered promiscuous mode [ 217.918365][ T5865] device veth1_macvtap entered promiscuous mode [ 217.938947][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.949964][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.960954][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.972856][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.983028][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.994244][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.005099][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.055410][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.086939][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.116909][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.126785][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.159956][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.190592][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.216953][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.227154][ T3644] Bluetooth: hci7: command tx timeout [ 218.241800][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.272777][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.297872][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.306588][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.337112][ T4593] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 218.348054][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.399927][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.427461][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.440807][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.467993][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.501428][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.527115][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.556883][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.566585][ T5896] loop2: detected capacity change from 0 to 1024 [ 218.573372][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.594275][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.606423][ T3648] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 218.618161][ T3648] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 218.626484][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.628536][ T3648] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 218.635428][ T5896] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 218.653950][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.666000][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.676558][ T3648] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 218.684258][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.684447][ T3648] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 218.684719][ T5896] EXT4-fs (loop2): write access will be enabled during recovery [ 218.697146][ T4593] usb 5-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df [ 218.719952][ T4593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.721985][ T4593] usb 5-1: config 0 descriptor?? [ 218.734020][ T3648] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 218.742281][ T5896] JBD2: no valid journal superblock found [ 218.750747][ T5896] EXT4-fs (loop2): error loading journal [ 218.759870][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.774346][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.784079][ T4593] gspca_main: benq-2.14.0 probing 04a5:3035 [ 218.790837][ T3639] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 218.824990][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.872431][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.901747][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.922485][ T5896] loop2: detected capacity change from 0 to 16 [ 218.931357][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.948578][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.978552][ T5896] erofs: (device loop2): mounted with root inode @ nid 36. [ 218.979037][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.068765][ T4312] usb 5-1: USB disconnect, device number 7 [ 219.318113][ T3736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.326653][ T3736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.398633][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.440444][ T3714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.462212][ T3714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.511003][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.531120][ T3648] Bluetooth: hci9: sending frame failed (-49) [ 219.541334][ T3639] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 219.855507][ T5909] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 219.890699][ T5908] loop2: detected capacity change from 0 to 128 [ 219.931640][ T5897] chnl_net:caif_netlink_parms(): no params data found [ 220.021625][ T5908] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 220.038479][ T5913] netlink: 108 bytes leftover after parsing attributes in process `syz.4.617'. [ 220.109036][ T5908] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038 (0x7fffffff) [ 220.316923][ T3639] Bluetooth: hci7: command tx timeout [ 220.407013][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.446993][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.467000][ T4593] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 220.475235][ T5897] device bridge_slave_0 entered promiscuous mode [ 220.507611][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.537023][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.555504][ T5897] device bridge_slave_1 entered promiscuous mode [ 220.557080][ T5908] fscrypt: key with descriptor e8dab99234bb312e is too short (got 33 bytes, need 64+ bytes) [ 220.680864][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.700241][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 220.730315][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.797017][ T3639] Bluetooth: hci8: command tx timeout [ 220.847235][ T4593] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 220.866118][ T5897] team0: Port device team_slave_0 added [ 220.866767][ T4593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.908754][ T4593] usb 1-1: config 0 descriptor?? [ 220.949933][ T4593] dw2102: su3000_identify_state [ 220.954846][ T4593] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 220.990002][ T5897] team0: Port device team_slave_1 added [ 221.006407][ T4593] dw2102: su3000_power_ctrl: 1, initialized 0 [ 221.023091][ T4593] dvb-usb: bulk message failed: -22 (2/0) [ 221.068916][ T4593] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-22) [ 221.147134][ T3864] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 221.499549][ T5919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.626008][ T5919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.876439][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.910196][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.983734][ T3725] usb 1-1: USB disconnect, device number 8 [ 221.984874][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.023066][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.047065][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.087780][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.116886][ T3864] usb 5-1: Using ep0 maxpacket: 32 [ 222.154353][ T5897] device hsr_slave_0 entered promiscuous mode [ 222.188106][ T5897] device hsr_slave_1 entered promiscuous mode [ 222.219499][ T5897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.238346][ T5897] Cannot create hsr debugfs directory [ 222.299737][ T5942] netlink: 'syz.3.623': attribute type 12 has an invalid length. [ 222.387085][ T3639] Bluetooth: hci7: command tx timeout [ 222.437484][ T3864] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 222.446595][ T3864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.526946][ T3864] usb 5-1: Product: syz [ 222.531203][ T3864] usb 5-1: Manufacturer: syz [ 222.535844][ T3864] usb 5-1: SerialNumber: syz [ 222.563723][ T3864] usb 5-1: config 0 descriptor?? [ 222.677664][ T5897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.837344][ T4313] usb 5-1: USB disconnect, device number 8 [ 222.867495][ T3639] Bluetooth: hci8: command tx timeout [ 222.898046][ T5897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.989918][ T5956] device ipip0 entered promiscuous mode [ 223.195683][ T5897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.268309][ T5960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.629'. [ 223.288794][ T5960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.629'. [ 223.306556][ T5958] loop2: detected capacity change from 0 to 4096 [ 223.416435][ T5897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.889849][ T5897] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.948303][ T5897] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.979091][ T5897] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.154824][ T5897] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.946961][ T3639] Bluetooth: hci8: command tx timeout [ 224.994561][ T5992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.641'. [ 225.058712][ T5992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.641'. [ 225.263999][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.324568][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.345411][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.411338][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 225.547788][ T5897] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.863188][ T6006] netlink: 'syz.4.644': attribute type 12 has an invalid length. [ 226.187181][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.247830][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.287335][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.294522][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.432642][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 226.559256][ T6010] netlink: 160 bytes leftover after parsing attributes in process `syz.3.647'. [ 226.610305][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.647902][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.677154][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.685788][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.693006][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.725352][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.783405][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.820705][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.870468][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.934671][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.027121][ T3639] Bluetooth: hci8: command tx timeout [ 227.097259][ T6001] loop2: detected capacity change from 0 to 32768 [ 227.149593][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.173060][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.240732][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.287762][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.319836][ T6001] XFS (loop2): Mounting V5 Filesystem [ 227.336376][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.345156][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.358786][ T5897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.487013][ T6001] XFS (loop2): Ending clean mount [ 227.519155][ T6001] XFS (loop2): Quotacheck needed: Please wait. [ 227.590701][ T6001] XFS (loop2): Quotacheck: Done. [ 227.957192][ T3638] XFS (loop2): Unmounting Filesystem [ 228.673386][ T6053] Invalid ELF header len 1 [ 228.848700][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.861621][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.893281][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.961593][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.977763][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.068378][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.100348][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.164651][ T5897] device veth0_vlan entered promiscuous mode [ 229.211478][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.700801][ T6066] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.709916][ T6066] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.753560][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.808966][ T5897] device veth1_vlan entered promiscuous mode [ 229.856724][ T6065] loop2: detected capacity change from 0 to 4096 [ 229.942680][ T6065] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 230.018434][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.026721][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.072912][ T6065] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 230.110331][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.308894][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.320699][ T5897] device veth0_macvtap entered promiscuous mode [ 230.342516][ T5897] device veth1_macvtap entered promiscuous mode [ 230.362319][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.455727][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.729517][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.987728][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.087666][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.166858][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.177105][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.191649][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.201876][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.226857][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.236759][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.269835][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.280215][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.291037][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.316078][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.326971][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.338524][ T11] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 231.351204][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.363511][ T3638] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 231.417141][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.426039][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.435580][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.445726][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.457596][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.490915][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.541841][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.568494][ T6094] loop2: detected capacity change from 0 to 512 [ 231.571245][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.600870][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.640204][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 231.648371][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.674145][ T6094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 231.682632][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.695148][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.698587][ T6094] EXT4-fs (loop2): orphan cleanup on readonly fs [ 231.709171][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.722936][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.734039][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.745402][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.756260][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.758183][ T6094] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 231.767386][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.791845][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.808392][ T6094] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 231.829002][ T6094] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.673: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 231.832101][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.886998][ T6094] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.673: couldn't read orphan inode 13 (err -117) [ 231.914959][ T6094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.954831][ T6094] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 231.977329][ T6094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 231.982367][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.027638][ T6094] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 232.037394][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.064224][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.088039][ T6103] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 232.092100][ T5897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.134598][ T5897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.155376][ T5897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.155986][ T6103] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 232.188153][ T5897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.217249][ T4312] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 232.370018][ T6103] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 232.471957][ T4104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.546132][ T4104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.025157][ T6112] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 233.034181][ T6112] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 233.098152][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 233.122164][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.127898][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.138718][ T4312] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 233.139542][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.152640][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.202912][ T4312] usb 1-1: config 0 descriptor?? [ 233.231385][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 233.242646][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 233.257343][ T4312] cp210x 1-1:0.0: cp210x converter detected [ 233.345140][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.254215][ T4312] usb 1-1: cp210x converter now attached to ttyUSB0 [ 234.517042][ T4593] usb 1-1: USB disconnect, device number 9 [ 234.558234][ T4593] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 234.632682][ T4593] cp210x 1-1:0.0: device disconnected [ 234.747991][ T6131] netlink: 94 bytes leftover after parsing attributes in process `syz.4.686'. [ 236.568934][ T6162] loop2: detected capacity change from 0 to 16 [ 236.610849][ T6162] erofs: (device loop2): mounted with root inode @ nid 36. [ 237.740921][ T6168] loop2: detected capacity change from 0 to 1024 [ 237.858066][ T6168] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 237.888897][ T6168] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038 (0x7fffffff) [ 238.089193][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 238.466607][ T6186] loop2: detected capacity change from 0 to 128 [ 238.611909][ T6186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 238.645608][ T6186] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 238.716935][ T3860] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 239.299459][ T3860] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 239.532202][ T3860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.605715][ T3860] usb 4-1: config 0 descriptor?? [ 239.611838][ T6186] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 239.667698][ T6186] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 239.684521][ T6186] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 239.703010][ T3860] dw2102: su3000_identify_state [ 239.704064][ T6186] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 239.712386][ T3860] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 239.739742][ T6186] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 239.757484][ T3860] dw2102: su3000_power_ctrl: 1, initialized 0 [ 239.762330][ T6186] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 239.787966][ T3860] dvb-usb: bulk message failed: -22 (2/0) [ 239.814795][ T3860] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-22) [ 239.859498][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 239.927236][ T4313] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 240.090133][ T6207] syz.2.710[6207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.090557][ T6207] syz.2.710[6207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.116056][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.710'. [ 240.477339][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.589124][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.758518][ T4313] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 241.054983][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.057861][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.076912][ T4313] usb 1-1: config 0 descriptor?? [ 241.123512][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.185948][ T6214] loop2: detected capacity change from 0 to 128 [ 241.274676][ T6214] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 241.327388][ T6214] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 241.460198][ T3860] usb 4-1: USB disconnect, device number 13 [ 241.591417][ T4313] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 241.639750][ T4313] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 241.763191][ T6225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.714'. [ 241.783983][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.875583][ T4313] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 241.974378][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.109067][ T4313] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 242.245333][ T4313] sony 0003:054C:024B.0008: item fetching failed at offset 4/5 [ 242.426025][ T3644] Bluetooth: hci3: command 0x0406 tx timeout [ 242.471167][ T4313] sony 0003:054C:024B.0008: parse failed [ 242.496974][ T4313] sony: probe of 0003:054C:024B.0008 failed with error -22 [ 242.534848][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 242.543429][ C0] eth0: bad gso: type: 1, size: 1408 [ 242.844628][ T6240] 9pnet_fd: Insufficient options for proto=fd [ 242.848199][ T6244] loop2: detected capacity change from 0 to 256 [ 243.066963][ T3866] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 243.334974][ T26] audit: type=1326 audit(1723213011.280:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c0d1779f9 code=0x0 [ 243.830006][ T26] audit: type=1326 audit(1723213011.570:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c0d1779f9 code=0x0 [ 243.922400][ T4313] usb 1-1: USB disconnect, device number 10 [ 244.106887][ T3866] usb 5-1: Using ep0 maxpacket: 8 [ 244.479160][ T3866] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 244.506831][ T3866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.535589][ T3866] usb 5-1: Product: syz [ 244.545771][ T3866] usb 5-1: Manufacturer: syz [ 244.595470][ T3866] usb 5-1: SerialNumber: syz [ 244.616928][ T4313] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 244.619753][ T3866] usb 5-1: config 0 descriptor?? [ 244.857043][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 244.977529][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.010448][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.066057][ T4313] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 245.113981][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.467259][ T4313] usb 1-1: config 0 descriptor?? [ 245.499127][ T3866] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 245.747488][ T3648] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 245.757035][ T3648] Bluetooth: hci8: Injecting HCI hardware error event [ 245.767204][ T3648] Bluetooth: hci8: hardware error 0x00 [ 245.969069][ T4313] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0935.0009/input/input16 [ 246.083453][ T4313] uclogic 0003:28BD:0935.0009: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.0-1/input0 [ 246.084925][ T6282] loop2: detected capacity change from 0 to 4096 [ 246.102134][ T3866] gspca_m5602: Failed to find a sensor [ 246.108154][ T3866] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 246.128278][ T3866] usb 5-1: USB disconnect, device number 9 [ 246.166484][ T6282] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 246.172034][ T4313] usb 1-1: USB disconnect, device number 11 [ 246.187007][ T3860] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 246.219851][ T6282] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 246.372327][ T9] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 246.478036][ T9] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 246.488796][ T3638] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 246.577156][ T3860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.615099][ T3860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.645696][ T3860] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 246.676107][ T3860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.698448][ T3860] usb 2-1: config 0 descriptor?? [ 246.723003][ T6291] loop2: detected capacity change from 0 to 1024 [ 246.777669][ T6291] EXT4-fs: Ignoring removed orlov option [ 246.810227][ T6291] EXT4-fs (loop2): Test dummy encryption mode enabled [ 246.847421][ T6295] netlink: 'syz.4.742': attribute type 11 has an invalid length. [ 246.889832][ T6291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.170164][ T3860] cougar 0003:060B:700A.000A: item fetching failed at offset 2/5 [ 247.194542][ T6306] device vlan1 entered promiscuous mode [ 247.197383][ T3860] cougar 0003:060B:700A.000A: parse failed [ 247.222432][ T6306] device batadv_slave_1 entered promiscuous mode [ 247.225301][ T3860] cougar: probe of 0003:060B:700A.000A failed with error -22 [ 247.259102][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.745'. [ 247.394401][ T3861] usb 2-1: USB disconnect, device number 7 [ 247.475169][ T6306] device vlan1 left promiscuous mode [ 247.513141][ T6300] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 247.610102][ T6305] device batadv_slave_1 left promiscuous mode [ 247.801585][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 247.828421][ T3648] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 248.754638][ T6344] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 249.120970][ T6355] loop2: detected capacity change from 0 to 8192 [ 249.161765][ T6355] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 249.206957][ T6355] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 249.237662][ T6355] REISERFS (device loop2): using ordered data mode [ 249.244383][ T6355] reiserfs: using flush barriers [ 249.251493][ T6355] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 249.268435][ T6355] REISERFS (device loop2): checking transaction log (loop2) [ 249.289075][ T6362] all (unregistering): Released all slaves [ 249.296110][ T6355] REISERFS (device loop2): Using r5 hash to sort names [ 249.305640][ T6355] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 249.941318][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.768'. [ 250.776980][ T3861] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 251.037054][ T3861] usb 5-1: Using ep0 maxpacket: 8 [ 251.195918][ T3861] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.381965][ T3861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.440671][ T3861] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 251.464523][ T3648] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 251.513596][ T3861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 251.585892][ T3861] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.647743][ T3861] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.666236][ T3861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.057259][ T3861] usb 5-1: GET_CAPABILITIES returned 0 [ 252.064003][ T3861] usbtmc 5-1:16.0: can't read capabilities [ 252.644342][ T4314] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 252.896941][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 252.997111][ T6414] loop2: detected capacity change from 0 to 1024 [ 253.004704][ T6397] device vlan2 entered promiscuous mode [ 253.017340][ T6397] device bridge0 entered promiscuous mode [ 253.034972][ T6397] device bridge0 left promiscuous mode [ 253.093087][ T6414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 253.180747][ T14] usb 5-1: USB disconnect, device number 10 [ 253.199680][ T6409] netlink: 'syz.0.782': attribute type 49 has an invalid length. [ 253.330451][ T6414] overlayfs: failed to resolve './file0': -2 [ 253.418696][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 253.420896][ T4314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.462072][ T4314] usb 2-1: no configurations [ 253.477711][ T4314] usb 2-1: can't read configurations, error -22 [ 253.499599][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 253.767011][ T4315] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 254.070437][ T6446] input: syz0 as /devices/virtual/input/input17 [ 254.847088][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.873598][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.899315][ T4315] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 254.954148][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.014452][ T4315] usb 1-1: config 0 descriptor?? [ 255.156165][ T6460] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 255.367104][ T3861] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 255.486966][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 255.507554][ T3648] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 255.518535][ T3648] Bluetooth: hci1: Injecting HCI hardware error event [ 255.532472][ T3648] Bluetooth: hci1: hardware error 0x00 [ 255.592529][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.600965][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.601069][ T4315] uclogic 0003:5543:0781.000B: item fetching failed at offset 5/7 [ 255.631328][ T4315] uclogic 0003:5543:0781.000B: parse failed [ 255.649763][ T4315] uclogic: probe of 0003:5543:0781.000B failed with error -22 [ 255.951241][ T4315] usb 1-1: USB disconnect, device number 12 [ 256.493959][ T3861] usb 3-1: Using ep0 maxpacket: 8 [ 256.627073][ T3861] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 256.635437][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 256.863010][ T3861] usb 3-1: config 179 has no interface number 0 [ 256.870313][ T3861] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 256.881749][ T3861] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 256.894191][ T3861] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.907441][ T3861] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.925891][ T3861] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.936467][ T3861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.947481][ T14] usb 2-1: config 0 has no interfaces? [ 257.438425][ T14] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 257.477316][ T6461] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.489627][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.652045][ T14] usb 2-1: config 0 descriptor?? [ 257.666978][ T3648] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 257.674014][ T3648] Bluetooth: hci6: command 0x0406 tx timeout [ 257.782722][ T14] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input18 [ 257.980853][ T4315] usb 3-1: USB disconnect, device number 14 [ 257.998081][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 258.006505][ T4315] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 258.225872][ T6498] netlink: 'syz.0.814': attribute type 5 has an invalid length. [ 259.281502][ T6509] loop2: detected capacity change from 0 to 128 [ 259.343245][ T6501] device wg1 entered promiscuous mode [ 259.353834][ T6509] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 259.389719][ T6509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.651783][ T14] usb 2-1: USB disconnect, device number 10 [ 260.029670][ T6517] netlink: 'syz.0.819': attribute type 6 has an invalid length. [ 261.987427][ T27] INFO: task syz-executor:3650 blocked for more than 143 seconds. [ 261.997019][ T27] Not tainted 6.1.103-syzkaller #0 [ 262.002686][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.059126][ T27] task:syz-executor state:D stack:19504 pid:3650 ppid:1 flags:0x00004006 [ 262.074158][ T27] Call Trace: [ 262.081058][ T27] [ 262.088573][ T27] __schedule+0x143f/0x4570 [ 262.121306][ T27] ? release_firmware_map_entry+0x186/0x186 [ 262.153910][ T27] schedule+0xbf/0x180 [ 262.186550][ T27] schedule_timeout+0xac/0x300 [ 262.198390][ T27] ? console_conditional_schedule+0x40/0x40 [ 262.207770][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 262.235725][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 262.244683][ T27] ? wait_for_completion+0x2f9/0x610 [ 262.256562][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 262.265433][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 262.274221][ T27] ? wait_for_completion+0x2f9/0x610 [ 262.283048][ T27] wait_for_completion+0x350/0x610 [ 262.291716][ T27] ? io_schedule+0x100/0x100 [ 262.298662][ T27] ? kasan_quarantine_put+0xd4/0x220 [ 262.307070][ T27] ? kthread_unpark+0x175/0x200 [ 262.315412][ T27] kthread_stop+0x1ab/0x690 [ 262.323656][ T27] ext4_stop_mmpd+0x43/0xb0 [ 262.332803][ T27] ext4_put_super+0xb49/0x10e0 [ 262.341532][ T27] ? ext4_put_super+0x3cc/0x10e0 [ 262.350176][ T27] ? ext4_drop_inode+0x2e0/0x2e0 [ 262.362126][ T27] generic_shutdown_super+0x130/0x340 [ 262.373211][ T27] kill_block_super+0x7a/0xe0 [ 262.383624][ T27] deactivate_locked_super+0xa0/0x110 [ 262.394944][ T27] cleanup_mnt+0x490/0x520 [ 262.405156][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 262.416625][ T27] task_work_run+0x246/0x300 [ 262.427500][ T27] ? task_work_cancel+0x2e0/0x2e0 [ 262.438309][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 262.450769][ T27] exit_to_user_mode_loop+0xde/0x100 [ 262.461754][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 262.477398][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 262.488650][ T27] do_syscall_64+0x47/0xb0 [ 262.498773][ T27] ? clear_bhb_loop+0x45/0xa0 [ 262.509269][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.520890][ T27] RIP: 0033:0x7f4452b78d27 [ 262.531015][ T27] RSP: 002b:00007fff00349e78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 262.549762][ T27] RAX: 0000000000000000 RBX: 00007f4452be578c RCX: 00007f4452b78d27 [ 262.567193][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff00349f30 [ 262.587800][ T27] RBP: 00007fff00349f30 R08: 0000000000000000 R09: 0000000000000000 [ 262.603855][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0034afb0 [ 262.620941][ T27] R13: 00007f4452be578c R14: 000000000001c9a4 R15: 00007fff0034aff0 [ 262.638211][ T27] [ 262.646255][ T27] INFO: task kmmpd-loop4:4603 blocked for more than 144 seconds. [ 262.663906][ T27] Not tainted 6.1.103-syzkaller #0 [ 262.675267][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.697423][ T27] task:kmmpd-loop4 state:D stack:28376 pid:4603 ppid:2 flags:0x00024000 [ 262.707486][ T27] Call Trace: [ 262.710889][ T27] [ 262.713927][ T27] __schedule+0x143f/0x4570 [ 262.719400][ T27] ? mark_lock+0x9a/0x340 [ 262.723875][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 262.730472][ T27] ? print_irqtrace_events+0x210/0x210 [ 262.736056][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 262.743210][ T27] ? release_firmware_map_entry+0x186/0x186 [ 262.750864][ T27] schedule+0xbf/0x180 [ 262.755311][ T27] ? percpu_rwsem_wait+0x343/0x450 [ 262.760960][ T27] percpu_rwsem_wait+0x3b9/0x450 [ 262.766084][ T27] ? trace_contention_begin+0x1a0/0x1a0 [ 262.772202][ T27] ? percpu_up_write+0x90/0x90 [ 262.777395][ T27] ? rcu_is_watching+0x11/0xb0 [ 262.782277][ T27] __percpu_down_read+0xe6/0x130 [ 262.788159][ T27] ? kmmpd+0x263/0xa70 [ 262.792342][ T27] write_mmp_block+0x2ee/0x390 [ 262.800606][ T27] kmmpd+0x263/0xa70 [ 262.804726][ T27] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 262.810857][ T27] ? __kthread_parkme+0x168/0x1c0 [ 262.816021][ T27] kthread+0x28d/0x320 [ 262.820679][ T27] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 262.826401][ T27] ? kthread_blkcg+0xd0/0xd0 [ 262.831622][ T27] ret_from_fork+0x1f/0x30 [ 262.836174][ T27] [ 262.840028][ T27] [ 262.840028][ T27] Showing all locks held in the system: [ 262.848937][ T27] 1 lock held by rcu_tasks_kthre/12: [ 262.854401][ T27] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 262.865802][ T27] 1 lock held by rcu_tasks_trace/13: [ 262.896896][ T27] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 262.916882][ T27] 1 lock held by khungtaskd/27: [ 262.951157][ T27] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 262.974881][ T27] 2 locks held by kworker/u4:2/35: [ 262.980509][ T27] 2 locks held by getty/3390: [ 262.985221][ T27] #0: ffff88807e918098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 262.995584][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 263.016187][ T27] 1 lock held by syz-executor/3650: [ 263.024476][ T27] #0: ffff8880732800e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 263.035774][ T27] 2 locks held by kworker/u4:6/3736: [ 263.041753][ T27] 2 locks held by syz.3.126/4233: [ 263.047006][ T27] 1 lock held by kmmpd-loop4/4603: [ 263.053745][ T27] #0: ffff888073280460 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x263/0xa70 [ 263.062912][ T27] 1 lock held by syz-executor/4615: [ 263.068262][ T27] #0: ffff88807b34c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 263.078793][ T27] 1 lock held by syz.0.559/5734: [ 263.083902][ T27] #0: ffff8880732800e0 (&type->s_umount_key#31){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 263.094198][ T27] 1 lock held by syz.0.559/5736: [ 263.099399][ T27] #0: ffff8880732800e0 (&type->s_umount_key#31){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 263.109707][ T27] 1 lock held by kmmpd-loop1/5784: [ 263.114992][ T27] #0: ffff88807b34c460 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x263/0xa70 [ 263.123822][ T27] [ 263.126176][ T27] ============================================= [ 263.126176][ T27] [ 263.137836][ T27] NMI backtrace for cpu 1 [ 263.142198][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 263.150114][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 263.160194][ T27] Call Trace: [ 263.163498][ T27] [ 263.166455][ T27] dump_stack_lvl+0x1e3/0x2cb [ 263.171174][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 263.176689][ T27] ? panic+0x764/0x764 [ 263.180784][ T27] ? vprintk_emit+0x622/0x740 [ 263.185508][ T27] ? printk_sprint+0x490/0x490 [ 263.190316][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 263.195470][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 263.200454][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 263.206636][ T27] ? _printk+0xd1/0x111 [ 263.210819][ T27] ? panic+0x764/0x764 [ 263.214920][ T27] ? __wake_up_klogd+0xcc/0x100 [ 263.219797][ T27] ? panic+0x764/0x764 [ 263.223892][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 263.230000][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 263.236110][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 263.242137][ T27] watchdog+0xf88/0xfd0 [ 263.246334][ T27] ? watchdog+0x1f8/0xfd0 [ 263.250711][ T27] kthread+0x28d/0x320 [ 263.254806][ T27] ? hungtask_pm_notify+0x50/0x50 [ 263.259877][ T27] ? kthread_blkcg+0xd0/0xd0 [ 263.264505][ T27] ret_from_fork+0x1f/0x30 [ 263.268978][ T27] [ 263.273233][ T27] Sending NMI from CPU 1 to CPUs 0: [ 263.278947][ C0] NMI backtrace for cpu 0 [ 263.278958][ C0] CPU: 0 PID: 3736 Comm: kworker/u4:6 Not tainted 6.1.103-syzkaller #0 [ 263.278976][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 263.278987][ C0] Workqueue: phy26 ieee80211_iface_work [ 263.279011][ C0] RIP: 0010:mark_lock+0xa2/0x340 [ 263.279039][ C0] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 20 92 73 90 be 08 00 00 00 e8 76 3e 77 00 48 0f a3 1d 3e b2 08 0f <73> 11 48 8d 04 5b 48 c1 e0 06 48 8d 98 20 f1 42 90 eb 23 48 c7 c0 [ 263.279054][ C0] RSP: 0018:ffffc900049978f8 EFLAGS: 00000057 [ 263.279067][ C0] RAX: 0000000000000001 RBX: 000000000000035f RCX: ffffffff816adfda [ 263.279078][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90739288 [ 263.279090][ C0] RBP: 0000000000000008 R08: dffffc0000000000 R09: fffffbfff20e7252 [ 263.279101][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888026cd6418 [ 263.279113][ C0] R13: dffffc0000000000 R14: 0000000000000100 R15: ffff888026cd6498 [ 263.279125][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 263.279139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.279151][ C0] CR2: 00007f3814ad2ab8 CR3: 000000007dd0b000 CR4: 00000000003506f0 [ 263.279166][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 263.279176][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 263.279186][ C0] Call Trace: [ 263.279191][ C0] [ 263.279197][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 263.279222][ C0] ? read_lock_is_recursive+0x10/0x10 [ 263.279249][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 263.279283][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 263.279309][ C0] ? nmi_handle+0x12e/0x440 [ 263.279336][ C0] ? nmi_handle+0x25/0x440 [ 263.279360][ C0] ? mark_lock+0xa2/0x340 [ 263.279384][ C0] ? default_do_nmi+0x62/0x150 [ 263.279410][ C0] ? exc_nmi+0xa8/0x100 [ 263.279440][ C0] ? end_repeat_nmi+0x16/0x31 [ 263.279466][ C0] ? mark_lock+0x9a/0x340 [ 263.279491][ C0] ? mark_lock+0xa2/0x340 [ 263.279515][ C0] ? mark_lock+0xa2/0x340 [ 263.279540][ C0] ? mark_lock+0xa2/0x340 [ 263.279564][ C0] [ 263.279569][ C0] [ 263.279577][ C0] __lock_acquire+0xc6a/0x1f80 [ 263.279608][ C0] lock_acquire+0x1f8/0x5a0 [ 263.279632][ C0] ? kcov_remote_start+0x109/0x7d0 [ 263.279656][ C0] ? read_lock_is_recursive+0x10/0x10 [ 263.279683][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 263.279700][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 263.279719][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 263.279736][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 263.279755][ C0] ? _raw_spin_unlock+0x40/0x40 [ 263.279774][ C0] ? kcov_remote_start+0x93/0x7d0 [ 263.279796][ C0] _raw_spin_lock+0x2a/0x40 [ 263.279813][ C0] ? kcov_remote_start+0x109/0x7d0 [ 263.279833][ C0] kcov_remote_start+0x109/0x7d0 [ 263.279854][ C0] ? skb_dequeue+0x10f/0x140 [ 263.279871][ C0] ieee80211_iface_work+0x211/0xce0 [ 263.279889][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 263.279909][ C0] ? process_one_work+0x7a9/0x11d0 [ 263.279928][ C0] process_one_work+0x8a9/0x11d0 [ 263.279954][ C0] ? worker_detach_from_pool+0x260/0x260 [ 263.279976][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 263.279994][ C0] ? kthread_data+0x4e/0xc0 [ 263.280020][ C0] ? wq_worker_running+0x97/0x190 [ 263.280048][ C0] worker_thread+0xa47/0x1200 [ 263.280079][ C0] kthread+0x28d/0x320 [ 263.280092][ C0] ? worker_clr_flags+0x190/0x190 [ 263.280111][ C0] ? kthread_blkcg+0xd0/0xd0 [ 263.280126][ C0] ret_from_fork+0x1f/0x30 [ 263.280156][ C0] [ 263.284112][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 263.645156][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 263.653222][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 263.663371][ T27] Call Trace: [ 263.666685][ T27] [ 263.669637][ T27] dump_stack_lvl+0x1e3/0x2cb [ 263.674339][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 263.679810][ T27] ? panic+0x764/0x764 [ 263.683880][ T27] ? llist_add_batch+0x160/0x1d0 [ 263.688828][ T27] ? vscnprintf+0x59/0x80 [ 263.693162][ T27] panic+0x318/0x764 [ 263.697068][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 263.703235][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 263.708706][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 263.714878][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 263.721044][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 263.727209][ T27] watchdog+0xfc7/0xfd0 [ 263.731399][ T27] ? watchdog+0x1f8/0xfd0 [ 263.735746][ T27] kthread+0x28d/0x320 [ 263.739822][ T27] ? hungtask_pm_notify+0x50/0x50 [ 263.744852][ T27] ? kthread_blkcg+0xd0/0xd0 [ 263.749450][ T27] ret_from_fork+0x1f/0x30 [ 263.753889][ T27] [ 263.757187][ T27] Kernel Offset: disabled [ 263.761515][ T27] Rebooting in 86400 seconds..