last executing test programs: 20.775450263s ago: executing program 4 (id=3072): ioprio_get$pid(0x2, 0xffffffffffffffff) 19.820442831s ago: executing program 0 (id=3075): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) 19.740892517s ago: executing program 0 (id=3076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a0000000000006111500000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f]}}, &(0x7f00000004c0)=""/228, 0x2c, 0xe4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x26}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001ac0)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x1d, 0x12, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3f}, @generic={0x80, 0xc, 0x9, 0x1b, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000008c0)=""/195, 0x41000, 0x4, '\x00', r4, 0x2b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a80)={0x4, 0x0, 0xffff, 0x5}, 0x10, r5, 0xffffffffffffffff, 0x6, &(0x7f0000001b00)=[r0, r1], &(0x7f0000001b40)=[{0x3, 0x1, 0xa, 0x9}, {0x5, 0x3, 0x5, 0x5}, {0x1, 0x1, 0xc, 0xb}, {0x5, 0x1, 0x8, 0xb}, {0x3, 0x4, 0x7, 0xa}, {0x4, 0x3, 0x3}], 0x10, 0x684c7a03}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000001d00fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000022850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25b45}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r6}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000f40)=""/57, 0x39, 0x0, &(0x7f0000000f00)=""/50, 0x32}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r11, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x1, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="255881a600080000635504b154d7d6248066976a388043da444473bc8da9391bcb7a3c00e4ef27a988b742"], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r12, 0x0, r13, 0x8, &(0x7f0000000480)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x1, 0x40000ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, r14]}, 0x90) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r15, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x22, 0x4, 0x9, 0x0, r15}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x1f, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x48, '\x00', r12, 0x0, r2, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x0, 0x800, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r15], &(0x7f0000000380)=[{0x3, 0x4, 0xa, 0xc}, {0x1, 0x2, 0xa, 0x3}], 0x10, 0x80}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c80)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 19.688329062s ago: executing program 0 (id=3077): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 17.848322292s ago: executing program 0 (id=3078): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x20001c, 0x0, 0x800}}) 17.781824388s ago: executing program 0 (id=3079): mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 17.698824874s ago: executing program 0 (id=3080): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12}}, 0x24}}, 0x0) 4.553849628s ago: executing program 3 (id=3120): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00', 0x9}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 3.631868004s ago: executing program 3 (id=3121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff2201"]) 3.521059303s ago: executing program 3 (id=3122): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mlock(&(0x7f0000399000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 3.203842208s ago: executing program 3 (id=3124): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000003c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3f}}, {@dioread_lock}]}, 0x10, 0x4d2, &(0x7f0000002d00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r1, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) clock_gettime(0x0, &(0x7f0000001b40)) 3.040717482s ago: executing program 1 (id=3126): syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0xc0481273, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 2.956337649s ago: executing program 1 (id=3127): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12}}, 0x24}}, 0x0) 2.193588221s ago: executing program 2 (id=3128): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x2b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 2.130343926s ago: executing program 3 (id=3129): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00', 0x9}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 2.07904929s ago: executing program 2 (id=3130): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0xb25, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f00000004c0)=0x1e) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r9, r7, 0x11, 0x0, r9}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r6, r7, 0x11, 0x0, r6}, 0x11) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e1d, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001980)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0047b1d19bec420fd311bb340000001cf8fe961a000000000000000000009923aa3d89753fcb5400"/53, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC, @ANYRESOCT], 0xffffffa1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MAP={0x24}]}, 0x58}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) 2.051971133s ago: executing program 1 (id=3131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff2201"]) 1.924534053s ago: executing program 4 (id=3091): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0xb) 1.916722844s ago: executing program 1 (id=3132): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mlock(&(0x7f0000399000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 1.827989991s ago: executing program 4 (id=3133): socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.696402951s ago: executing program 2 (id=3134): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000000)="2e0200000000e0ffffbf8de16fc1121f17", 0x0, 0x0, 0x0}, 0x38) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xfd}}]}, 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x1, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @loopback, @dev}, "0000b50800000000"}}}}}, 0x0) 1.658905685s ago: executing program 2 (id=3135): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 1.610033879s ago: executing program 2 (id=3136): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000880)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r1, 0x0, 0x100801701) 1.458754301s ago: executing program 3 (id=3137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x505dc2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000840)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}, 0x22}, {@bh}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mincore(&(0x7f0000465000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a2f000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00005b7000/0x3000)=nil) process_vm_writev(0x0, &(0x7f00000005c0)=[{&(0x7f00000006c0)=""/132, 0x84}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000440)=""/144, 0x90}], 0x3, 0x0, 0x0, 0x0) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000180)="66b9800000c00f326635000100000f306664f26f660fc4c309baf80c66b8297eed8766efbafc0cb000eeb880068ee03e660f38814aaa0f20e06635000001000f22e00fc738f20f1009660fc737", 0x4d}], 0x1, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000006c0)=""/248) fcntl$dupfd(r6, 0x0, r1) gettid() timer_create(0x4, &(0x7f0000000100)={0x0, 0x28, 0x0, @thr={&(0x7f0000000e80)="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", &(0x7f0000000d80)="91844e72396b1e235e70b414dba6c34a86955d2cf7069bc7021f25c15beb48b39474315f51fd84c25986fe6d22f2a069b47cf8287fd718441d68a1ca260ee45dc5f67ea7c88db305d16b0f05c29649bbe1649859c2766b639c270360a5e31e457ccda17ae180fb48b218e2a7d2ef09871d66494abce497814ba682d99e906031bcd6e0439cc43cf7253a2dc177d2c87f8db5a71be676572e7818ed45335509537fb37dab5c2f7243d9772276faefdb27595dc5a4605f8ba906ae6bae371788dcf8"}}, &(0x7f0000bbdffc)) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x40000000}}, 0x120) readv(0xffffffffffffffff, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000080)) 1.408349315s ago: executing program 1 (id=3139): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x2b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 1.269595456s ago: executing program 1 (id=3140): close(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x9, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 1.042352435s ago: executing program 2 (id=3141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff2201"]) 65.384715ms ago: executing program 4 (id=3142): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0xb) 44.713516ms ago: executing program 4 (id=3143): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) chdir(&(0x7f0000000540)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) 0s ago: executing program 4 (id=3144): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000000)="2e0200000000e0ffffbf8de16fc1121f17", 0x0, 0x0, 0x0}, 0x38) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xfd}}]}, 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x1, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @loopback, @dev}, "0000b50800000000"}}}}}, 0x0) kernel console output (not intermixed with test programs): miscuous mode [ 486.007476][T12154] device veth1_macvtap entered promiscuous mode [ 486.122370][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 486.143931][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 486.154950][T12347] loop4: detected capacity change from 0 to 64 [ 486.660435][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 487.074302][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 487.083100][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 487.094117][T12130] device veth1_macvtap entered promiscuous mode [ 487.139211][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.179061][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.211386][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.234454][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.250676][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.269159][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.279877][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.293726][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.304773][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.318501][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.357676][T12154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.388002][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.409462][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.423622][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.447545][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.620917][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.631881][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.645953][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.656827][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.666818][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.677387][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.688062][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.700958][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.798164][T12365] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 487.941198][T12130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.202551][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.482170][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.513462][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.549341][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.559450][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.570048][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.580461][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.592265][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.609199][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.620671][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.633345][T12130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.644083][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 488.660660][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 488.686130][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.687442][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2767'. [ 488.703995][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.713272][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.722309][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.732531][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 488.741638][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 488.753878][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.780889][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.811865][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.843550][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.867850][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.892049][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.929067][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.941646][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.968884][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.988834][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.018900][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.036817][T12363] loop4: detected capacity change from 0 to 32768 [ 489.043630][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.056396][T12154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.084265][ T7490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.093043][ T7490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.125515][T12363] XFS (loop4): Mounting V5 Filesystem [ 489.131396][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.142309][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.156317][T12154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.167288][T12154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.177479][T12154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.188712][T12154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.206163][T12130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.251674][T12363] XFS (loop4): Ending clean mount [ 489.256964][T12130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.307590][T12130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.335143][T12386] loop3: detected capacity change from 0 to 512 [ 489.356424][T12130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.448121][T12386] EXT4-fs (loop3): Unsupported encryption level 9 [ 489.479526][T12390] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 489.487599][T12390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.609566][T12390] vhci_hcd vhci_hcd.0: Device attached [ 489.679591][T12102] XFS (loop4): Unmounting Filesystem [ 489.794095][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.809555][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.809569][ T7490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.871355][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 489.910082][ T7490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.942661][ T3823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.966479][ T1346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.000580][ T1346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.017635][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 490.035959][ T3823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.077426][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.090106][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.438390][T12406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2776'. [ 490.475638][T12406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2776'. [ 490.794904][T12410] loop2: detected capacity change from 0 to 4096 [ 490.866983][T12420] loop4: detected capacity change from 0 to 512 [ 490.899231][T12410] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 490.929020][T12410] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 490.950854][T12422] tipc: Failed to remove unknown binding: 66,1,1/0:2742480291/2742480293 [ 490.982545][T12422] tipc: Failed to remove unknown binding: 66,1,1/0:2742480291/2742480293 [ 491.010059][T12410] ntfs: volume version 3.1. [ 491.023348][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2783'. [ 491.042797][T12410] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 491.080408][ T26] audit: type=1800 audit(1720036102.839:92): pid=12420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2782" name="file1" dev="loop4" ino=1048780 res=0 errno=0 [ 491.113265][T12420] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 491.134298][T12410] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 491.147851][T12420] FAT-fs (loop4): Filesystem has been set read-only [ 491.155883][T12410] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 491.172601][T12420] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 491.188145][T12420] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 491.255001][T12424] loop3: detected capacity change from 0 to 2048 [ 491.278403][T12391] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 491.329219][T12419] FAT-fs (loop4): error, invalid access to FAT (entry 0x8e210000) [ 491.350597][T10128] vhci_hcd: stop threads [ 491.385254][T10128] vhci_hcd: release socket [ 491.399040][T10128] vhci_hcd: disconnect device [ 491.417548][ T144] device hsr_slave_0 left promiscuous mode [ 491.423543][T12403] loop1: detected capacity change from 0 to 32768 [ 491.431827][ T144] device hsr_slave_1 left promiscuous mode [ 491.443173][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.452477][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.491237][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.496733][T12428] autofs4:pid:12428:autofs_fill_super: called with bogus options [ 491.525355][T12403] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.2708 (12403) [ 491.550328][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.581735][ T144] device bridge_slave_1 left promiscuous mode [ 491.588232][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.617865][T12433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2789'. [ 491.650348][T12403] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 491.659808][T12433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2789'. [ 491.661188][T12403] BTRFS info (device loop1): using free space tree [ 491.670857][ T144] device bridge_slave_0 left promiscuous mode [ 491.677804][T12403] BTRFS info (device loop1): has skinny extents [ 491.702388][T12430] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 491.704218][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.728129][T12430] kvm: pic: non byte read [ 491.735869][T12430] kvm: pic: level sensitive irq not supported [ 491.736011][T12430] kvm: pic: non byte read [ 491.810577][ T144] device veth1_macvtap left promiscuous mode [ 491.819554][ T144] device veth0_macvtap left promiscuous mode [ 491.827317][ T144] device veth1_vlan left promiscuous mode [ 491.916886][ T144] device veth0_vlan left promiscuous mode [ 492.047694][T12403] BTRFS info (device loop1): enabling ssd optimizations [ 492.078941][ T3297] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 492.192019][T12467] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 492.905833][ T26] audit: type=1800 audit(1720036104.639:93): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2708" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 492.996770][T12473] loop2: detected capacity change from 0 to 512 [ 493.003302][ T26] audit: type=1800 audit(1720036104.749:94): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2708" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 493.089874][ T26] audit: type=1800 audit(1720036104.849:95): pid=12473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2795" name="file1" dev="loop2" ino=1048781 res=0 errno=0 [ 493.114112][T12473] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 493.139896][T12473] FAT-fs (loop2): Filesystem has been set read-only [ 493.147949][T12473] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 493.161246][T12473] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 493.279270][T12472] FAT-fs (loop2): error, invalid access to FAT (entry 0x8e210000) [ 493.349399][ T3297] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.372452][ T3297] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 493.391438][ T3297] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.402394][ T3297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.429363][T12446] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 493.578960][ T5009] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 493.671002][ T3559] usb 4-1: USB disconnect, device number 27 [ 493.725538][T12482] loop2: detected capacity change from 0 to 2048 [ 493.803134][ T144] team0 (unregistering): Port device team_slave_1 removed [ 493.827237][ T144] team0 (unregistering): Port device team_slave_0 removed [ 493.857448][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.886055][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.989389][ T5009] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=79.b0 [ 494.008934][ T5009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.017932][T12484] loop2: detected capacity change from 0 to 4096 [ 494.026462][ T5009] usb 5-1: config 0 descriptor?? [ 494.088411][ T144] bond0 (unregistering): Released all slaves [ 494.111040][ T5009] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 494.122845][ T5009] dvb-usb: bulk message failed: -22 (2/0) [ 494.133118][ T5009] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 494.150284][ T5009] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 494.159974][ T5009] dvb_usb_cxusb: probe of 5-1:0.0 failed with error -22 [ 494.377195][ T5009] usb 5-1: USB disconnect, device number 15 [ 494.544469][T12492] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 494.843352][T12502] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 495.594556][T12504] loop2: detected capacity change from 0 to 512 [ 495.726820][T12507] loop3: detected capacity change from 0 to 2048 [ 495.765993][ T26] audit: type=1800 audit(1720036107.519:96): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2807" name="file1" dev="loop2" ino=1048782 res=0 errno=0 [ 495.800222][T12504] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 495.868281][T12504] FAT-fs (loop2): Filesystem has been set read-only [ 495.911814][T12504] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 495.933780][T12504] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 496.079198][T12503] FAT-fs (loop2): error, invalid access to FAT (entry 0x8e210000) [ 496.238359][T12524] loop2: detected capacity change from 0 to 512 [ 496.256816][T12520] loop3: detected capacity change from 0 to 4096 [ 496.328030][T12524] EXT4-fs (loop2): Unsupported encryption level 9 [ 496.328931][ T3992] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 496.869932][T12544] loop3: detected capacity change from 0 to 256 [ 496.914568][T12534] loop1: detected capacity change from 0 to 65536 [ 497.190332][T12534] XFS (loop1): Mounting V5 Filesystem [ 497.219033][ T5009] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 497.736756][ T3992] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 497.748459][ T3992] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 497.760958][ T3992] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 497.770159][ T3992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.819706][T12517] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 497.905945][T12534] XFS (loop1): Ending clean mount [ 497.923547][T12534] XFS (loop1): Quotacheck needed: Please wait. [ 497.946011][ T5009] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=79.b0 [ 497.959474][ T5009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.971889][ T5009] usb 1-1: config 0 descriptor?? [ 498.021319][ T5009] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 498.038874][ T5009] dvb-usb: bulk message failed: -22 (2/0) [ 498.075010][T12534] XFS (loop1): Quotacheck: Done. [ 498.079393][ T5009] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 498.180865][ T5009] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 498.221857][ T5009] dvb_usb_cxusb: probe of 1-1:0.0 failed with error -22 [ 498.268534][ T5009] usb 1-1: USB disconnect, device number 20 [ 498.316112][ T23] usb 5-1: USB disconnect, device number 16 [ 499.183175][T12154] XFS (loop1): Unmounting Filesystem [ 499.295028][T12569] loop2: detected capacity change from 0 to 16 [ 499.378979][T12569] erofs: (device loop2): mounted with root inode @ nid 36. [ 499.716305][ T23] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 499.811638][T12575] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 499.851502][T12565] loop3: detected capacity change from 0 to 40427 [ 499.937143][T12565] F2FS-fs (loop3): invalid crc value [ 499.937172][T12575] CIFS mount error: No usable UNC path provided in device string! [ 499.937172][T12575] [ 499.983440][T12565] F2FS-fs (loop3): Found nat_bits in checkpoint [ 499.984242][T12575] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 500.043818][T12577] loop4: detected capacity change from 0 to 4096 [ 500.113990][T12565] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 500.143971][T12565] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 500.189197][ T23] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 500.197795][ T23] usb 3-1: config 179 has no interface number 0 [ 500.229339][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 500.267104][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 500.280326][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 500.298857][ T23] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 500.323280][ T23] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 500.341488][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.379582][T12569] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 500.386696][T12569] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 500.456342][ T7476] attempt to access beyond end of device [ 500.456342][ T7476] loop3: rw=2049, want=45104, limit=40427 [ 500.461063][ T23] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input28 [ 500.562103][T12592] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 501.422144][ T23] usb 3-1: USB disconnect, device number 28 [ 501.450242][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 501.464521][ T23] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 501.583173][ T1383] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.590617][ T1383] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.002397][T12598] loop1: detected capacity change from 0 to 65536 [ 502.202784][T12598] XFS (loop1): Mounting V5 Filesystem [ 502.358878][ T4146] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 502.444143][T12622] loop4: detected capacity change from 0 to 1024 [ 502.837452][T12598] XFS (loop1): Ending clean mount [ 502.853890][T12598] XFS (loop1): Quotacheck needed: Please wait. [ 502.949465][ T4146] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.991478][ T4146] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.014445][T12625] CIFS mount error: No usable UNC path provided in device string! [ 503.014445][T12625] [ 503.041343][ T4146] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.041585][T12627] netlink: 'syz.3.2847': attribute type 6 has an invalid length. [ 503.051383][ T4146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.058949][T12625] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 503.087737][T12627] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2847'. [ 503.090327][T12598] XFS (loop1): Quotacheck: Done. [ 503.109383][T12612] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 503.355736][ T4146] usb 1-1: USB disconnect, device number 21 [ 504.143658][T12154] XFS (loop1): Unmounting Filesystem [ 504.565512][T12629] loop3: detected capacity change from 0 to 40427 [ 504.637666][T12629] F2FS-fs (loop3): invalid crc value [ 504.676663][T12629] F2FS-fs (loop3): Found nat_bits in checkpoint [ 504.751340][T12655] ALSA: mixer_oss: invalid OSS volume '' [ 504.772738][T12660] loop1: detected capacity change from 0 to 256 [ 504.786665][T12629] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 504.806667][T12629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 504.878528][ T7476] attempt to access beyond end of device [ 504.878528][ T7476] loop3: rw=2049, want=45104, limit=40427 [ 504.949568][T12663] loop2: detected capacity change from 0 to 4096 [ 505.020428][T12663] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 505.089210][T12666] Process accounting resumed [ 505.130018][T12663] ntfs3: loop2: ino=5, "/" directory corrupted [ 505.209203][T12670] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 505.290069][T12663] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 505.560454][T12666] Process accounting resumed [ 505.977345][T12676] loop4: detected capacity change from 0 to 512 [ 506.063133][T12676] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 506.086216][T12676] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 506.099266][T12676] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.2867: casefold flag without casefold feature [ 506.113246][T12676] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.2867: unexpected EA_INODE flag [ 506.127804][T12676] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2867: couldn't read orphan inode 13 (err -117) [ 506.141315][T12676] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,abort,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 506.362850][T12695] loop3: detected capacity change from 0 to 64 [ 506.449178][ T4146] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 506.939334][ T4146] usb 2-1: config index 0 descriptor too short (expected 61801, got 105) [ 506.998477][ T4146] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.134279][ T4146] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.294453][ T23] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 507.367103][T12709] loop3: detected capacity change from 0 to 64 [ 507.389947][ T4146] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.415070][ T4146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.444097][ T4146] usb 2-1: Product: syz [ 507.451034][ T4146] usb 2-1: Manufacturer: syz [ 507.455849][ T4146] usb 2-1: SerialNumber: syz [ 507.484736][T12714] netlink: 'syz.2.2880': attribute type 6 has an invalid length. [ 507.510940][T12714] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2880'. [ 507.521642][ T4146] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 507.528581][ T4146] cdc_ncm 2-1:1.0: bind() failure [ 507.548905][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 507.645413][T12724] loop3: detected capacity change from 0 to 256 [ 507.669204][ T23] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 507.677536][ T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 507.691235][ T23] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 507.704734][ T23] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 507.718143][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 507.901877][ T23] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 507.922922][ T23] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 507.956499][ T23] usb 5-1: Product: syz [ 507.961113][ T23] usb 5-1: Manufacturer: syz [ 507.965778][ T23] usb 5-1: SerialNumber: syz [ 507.986238][ T23] usb 5-1: config 0 descriptor?? [ 508.051095][ T23] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 508.072124][ T5009] usb 2-1: USB disconnect, device number 15 [ 508.078374][ T23] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 508.212127][T12750] loop2: detected capacity change from 0 to 2048 [ 508.265481][ T23] usb 5-1: USB disconnect, device number 17 [ 508.283754][ T23] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 508.315606][T12756] netlink: 'syz.3.2896': attribute type 6 has an invalid length. [ 508.349219][T12756] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2896'. [ 508.356518][T12750] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.2895: casefold flag without casefold feature [ 508.420536][T12750] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 508.458665][T12750] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 508.472003][T12750] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 508.578192][ T482] device hsr_slave_0 left promiscuous mode [ 508.610104][ T482] device hsr_slave_1 left promiscuous mode [ 508.651758][ T482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.679220][ T482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.690225][ T482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.697979][ T482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.719899][ T482] device bridge_slave_1 left promiscuous mode [ 508.728033][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.812644][ T482] device bridge_slave_0 left promiscuous mode [ 508.829063][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.855344][ T482] device veth1_macvtap left promiscuous mode [ 508.859141][ T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 508.861704][ T482] device veth0_macvtap left promiscuous mode [ 508.895966][ T482] device veth1_vlan left promiscuous mode [ 508.908704][ T482] device veth0_vlan left promiscuous mode [ 509.058327][T12794] loop2: detected capacity change from 0 to 64 [ 509.119131][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 509.239111][ T23] usb 4-1: config 1 has an invalid interface number: 6 but max is 0 [ 509.254502][ T23] usb 4-1: config 1 has no interface number 0 [ 509.273369][ T23] usb 4-1: config 1 interface 6 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 509.290024][ T23] usb 4-1: config 1 interface 6 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 509.357110][ T482] team0 (unregistering): Port device team_slave_1 removed [ 509.374400][ T482] team0 (unregistering): Port device team_slave_0 removed [ 509.401713][ T482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.433762][ T482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.459277][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 509.473315][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.486945][ T23] usb 4-1: Product: syz [ 509.496136][ T23] usb 4-1: Manufacturer: syz [ 509.506466][ T23] usb 4-1: SerialNumber: syz [ 509.620032][ T482] bond0 (unregistering): Released all slaves [ 509.714675][T12797] netlink: 'syz.1.2909': attribute type 6 has an invalid length. [ 509.733670][T12797] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2909'. [ 509.793961][ T23] usblp 4-1:1.6: usblp0: USB Unidirectional printer dev 28 if 6 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 510.107942][ T5629] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 510.108944][ T23] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 510.183999][ T3297] usb 4-1: USB disconnect, device number 28 [ 510.206831][ T3297] usblp0: removed [ 510.509336][ T23] usb 5-1: config index 0 descriptor too short (expected 61801, got 105) [ 510.528432][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.539265][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.560258][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.577997][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 510.598956][ T5629] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 510.608600][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.661571][ T5629] usb 3-1: config 0 descriptor?? [ 510.769133][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.809429][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.817635][ T23] usb 5-1: Product: syz [ 510.862128][ T23] usb 5-1: Manufacturer: syz [ 510.873130][ T23] usb 5-1: SerialNumber: syz [ 510.942346][ T23] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 510.956775][ T23] cdc_ncm 5-1:1.0: bind() failure [ 511.293327][T12860] loop1: detected capacity change from 0 to 1024 [ 511.919302][ T5629] usb 3-1: string descriptor 0 read error: -71 [ 511.959062][ T5629] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71 [ 511.986332][ T5629] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 512.029833][ T5629] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71 [ 512.060287][ T5629] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 512.080022][ T5629] uclogic: probe of 0003:256C:006D.0010 failed with error -71 [ 512.102431][ T5629] usb 3-1: USB disconnect, device number 29 [ 512.185230][ T3297] usb 5-1: USB disconnect, device number 18 [ 512.399712][T12878] loop2: detected capacity change from 0 to 2048 [ 512.508911][ T5630] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 512.517241][T12878] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.2931: casefold flag without casefold feature [ 512.560076][T12878] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 512.608304][T12878] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 512.627569][T12878] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 512.808954][ T5630] usb 2-1: Using ep0 maxpacket: 32 [ 512.949265][ T5630] usb 2-1: config 1 has an invalid interface number: 6 but max is 0 [ 512.957734][ T5630] usb 2-1: config 1 has no interface number 0 [ 513.008859][ T5630] usb 2-1: config 1 interface 6 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 513.045334][ T5630] usb 2-1: config 1 interface 6 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 513.067240][T12888] loop4: detected capacity change from 0 to 256 [ 513.137395][ T26] audit: type=1800 audit(1720036124.889:97): pid=12888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2934" name="bus" dev="loop4" ino=1048786 res=0 errno=0 [ 513.289849][ T5630] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 513.350362][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.616700][ T5630] usb 2-1: Product: syz [ 513.624198][ T5630] usb 2-1: Manufacturer: syz [ 513.630325][ T5630] usb 2-1: SerialNumber: syz [ 514.040175][ T5630] usblp 2-1:1.6: usblp0: USB Unidirectional printer dev 16 if 6 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 514.160637][T12904] loop4: detected capacity change from 0 to 1024 [ 514.215508][T12904] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 514.293634][T12904] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,bsdgroups,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 514.376197][ T3297] usb 2-1: USB disconnect, device number 16 [ 514.401707][ T3297] usblp0: removed [ 514.703829][T12892] loop3: detected capacity change from 0 to 32768 [ 514.784949][T12892] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.2937 (12892) [ 514.886076][T12892] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 514.925018][T12892] BTRFS info (device loop3): enabling disk space caching [ 514.933483][T12928] loop4: detected capacity change from 0 to 256 [ 514.945440][T12892] BTRFS info (device loop3): force clearing of disk cache [ 514.979585][T12892] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 514.996399][T12892] BTRFS info (device loop3): use zstd compression, level 3 [ 515.018814][T12892] BTRFS info (device loop3): disk space caching is enabled [ 515.038821][T12892] BTRFS info (device loop3): has skinny extents [ 515.084940][ T26] audit: type=1800 audit(1720036126.839:98): pid=12928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2952" name="bus" dev="loop4" ino=1048787 res=0 errno=0 [ 515.182026][T12930] loop1: detected capacity change from 0 to 512 [ 515.190760][T12892] BTRFS info (device loop3): enabling ssd optimizations [ 515.223194][T12892] BTRFS info (device loop3): clearing free space tree [ 515.230544][T12892] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 515.244168][T12892] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 515.319918][T12930] EXT4-fs (loop1): orphan cleanup on readonly fs [ 515.341454][T12930] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.2953: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 515.525963][T12930] EXT4-fs error (device loop1): ext4_quota_enable:6390: comm syz.1.2953: Bad quota inode: 4, type: 1 [ 515.597238][T12930] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 515.689116][T12930] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 515.715487][T12930] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 515.769467][T12914] loop2: detected capacity change from 0 to 32768 [ 515.818643][T12930] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 516.047497][T12930] EXT4-fs warning (device loop1): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 516.047497][T12930] [ 516.212276][T12914] XFS (loop2): Mounting V5 Filesystem [ 516.293780][T12968] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 517.057486][T12914] XFS (loop2): Ending clean mount [ 517.077320][T12914] XFS (loop2): Quotacheck needed: Please wait. [ 517.299775][T12914] XFS (loop2): Quotacheck: Done. [ 517.324582][T12980] loop1: detected capacity change from 0 to 1024 [ 517.355096][T12130] XFS (loop2): Unmounting Filesystem [ 517.365852][T12980] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 517.450590][T12980] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,bsdgroups,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 517.658988][ T3561] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 517.758926][ T3552] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 517.818023][T12996] loop2: detected capacity change from 0 to 16 [ 517.885909][T12996] erofs: (device loop2): mounted with root inode @ nid 36. [ 517.899157][ T3561] usb 5-1: Using ep0 maxpacket: 16 [ 517.911957][T12996] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 517.943208][T12996] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 517.979019][T12996] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 517.999488][T12997] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 518.019363][ T3561] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 518.039834][ T3561] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 518.059575][T12997] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 518.063343][ T3561] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 518.087813][ T3561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.104666][T12997] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 518.107391][ T3561] usb 5-1: config 0 descriptor?? [ 518.129272][ T3552] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 518.143051][ T3552] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 518.154141][ T3552] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 518.165069][ T3552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.189302][T12991] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 518.276500][T13002] loop2: detected capacity change from 0 to 256 [ 518.524906][ T5630] usb 1-1: USB disconnect, device number 22 [ 518.617279][T13011] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 518.797574][T12984] udc-core: couldn't find an available UDC or it's busy [ 518.867537][T12984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 519.423808][ T3561] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 519.434060][ T3561] hid-generic 0003:0158:0100.0011: unexpected long global item [ 519.444604][ T3561] hid-generic: probe of 0003:0158:0100.0011 failed with error -22 [ 519.460513][ T3561] usb 5-1: USB disconnect, device number 19 [ 519.727017][ T5629] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 519.883184][T13020] loop2: detected capacity change from 0 to 1024 [ 520.029004][ T5629] usb 4-1: Using ep0 maxpacket: 16 [ 520.199408][ T5629] usb 4-1: unable to get BOS descriptor or descriptor too short [ 520.347529][ T5629] usb 4-1: config 2 has an invalid interface number: 226 but max is 2 [ 520.438904][ T5629] usb 4-1: config 2 has an invalid interface number: 216 but max is 2 [ 520.447164][ T5629] usb 4-1: config 2 has an invalid interface number: 216 but max is 2 [ 520.506853][ T5629] usb 4-1: config 2 has no interface number 1 [ 520.534535][ T5629] usb 4-1: config 2 has no interface number 2 [ 520.565458][ T5629] usb 4-1: too many endpoints for config 2 interface 226 altsetting 143: 247, using maximum allowed: 30 [ 520.583975][ T5629] usb 4-1: config 2 interface 226 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 520.648991][ T5629] usb 4-1: config 2 interface 216 altsetting 54 has an invalid endpoint with address 0x80, skipping [ 520.694461][ T5629] usb 4-1: config 2 interface 216 altsetting 54 has a duplicate endpoint with address 0x1, skipping [ 520.699922][T13016] loop1: detected capacity change from 0 to 32768 [ 520.712274][ T5629] usb 4-1: config 2 interface 216 altsetting 54 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 520.724287][ T5629] usb 4-1: config 2 interface 216 altsetting 54 has a duplicate endpoint with address 0xB, skipping [ 520.735948][ T5629] usb 4-1: config 2 interface 216 altsetting 54 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 520.747260][ T5629] usb 4-1: config 2 interface 216 altsetting 54 has a duplicate endpoint with address 0x6, skipping [ 520.758236][ T5629] usb 4-1: config 2 interface 216 altsetting 54 has a duplicate endpoint with address 0x2, skipping [ 520.769199][ T5629] usb 4-1: config 2 interface 216 altsetting 9 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 520.776718][T13016] XFS (loop1): Mounting V5 Filesystem [ 520.786467][ T5629] usb 4-1: config 2 interface 216 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 520.798252][ T5629] usb 4-1: config 2 interface 216 altsetting 9 endpoint 0x8 has an invalid bInterval 174, changing to 11 [ 520.809802][ T5629] usb 4-1: config 2 interface 216 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 520.820701][ T5629] usb 4-1: config 2 interface 216 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 520.831630][ T5629] usb 4-1: config 2 interface 216 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 520.842520][ T5629] usb 4-1: config 2 interface 216 altsetting 9 has an invalid endpoint with address 0x12, skipping [ 520.853394][ T5629] usb 4-1: config 2 interface 216 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.863398][ T5629] usb 4-1: config 2 interface 216 altsetting 9 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 520.874565][ T5629] usb 4-1: config 2 interface 216 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 520.885381][ T5629] usb 4-1: config 2 interface 216 altsetting 9 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 520.906860][T13016] XFS (loop1): Ending clean mount [ 520.908828][ T5629] usb 4-1: config 2 interface 226 has no altsetting 0 [ 520.915900][T13016] XFS (loop1): Quotacheck needed: Please wait. [ 520.918751][ T5629] usb 4-1: config 2 interface 216 has no altsetting 0 [ 520.932631][ T5629] usb 4-1: config 2 interface 216 has no altsetting 1 [ 521.060139][T13039] loop2: detected capacity change from 0 to 128 [ 521.066664][T13016] XFS (loop1): Quotacheck: Done. [ 521.102317][ T5629] usb 4-1: New USB device found, idVendor=413c, idProduct=81e4, bcdDevice=fd.d9 [ 521.122337][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.142997][ T5629] usb 4-1: Product: 븟眅뻸꽻꺇螝歧齤켃壪䆓ꛇ⯟蹞扫홓᪡營┯犜炪⫉麒蛙︲쿰븁䕖뭭뜄벩ʔ݅礃逜뻓렃ꃄ궨Šퟚ뜾됆ꨔ落뀜꽢ٻ륰쌶뺭䲔ϯ뀯ꅰ雾ුᰭ㿓〝ᕅﭏ鯕䳱⍠쌤⸮節঺큓빊ॱ셺꧅밓輷뒂酢鼕国艾ၘ羓扃룘蘐ᗿ㷋囊爓ኈꓘᾑ䭁콰ꢽꁿ湛Ꮫ⿜ﵾ墯ꭆ滾晻筀闵⓸ᙥᔛ폰봘ﱽ [ 521.178088][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.184658][ T5629] usb 4-1: Manufacturer: Щ [ 521.189411][ T5629] usb 4-1: SerialNumber: 陶㾏鄰鏪ꃲꖣ秼뮶▛ہ뇳銤孴셩ᓵ肇ପ맊绐ㄞ㾞⯍㔲熤킱꘭ᬔ [ 521.222006][T12154] XFS (loop1): Unmounting Filesystem [ 522.162025][ T5629] option 4-1:2.226: GSM modem (1-port) converter detected [ 522.399278][ T5629] option 4-1:2.216: GSM modem (1-port) converter detected [ 522.736986][ T5629] usb 4-1: USB disconnect, device number 29 [ 522.837076][ T5629] option 4-1:2.226: device disconnected [ 522.877885][ T5629] option 4-1:2.216: device disconnected [ 523.034636][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'. [ 523.418882][ T5629] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 523.525095][T13076] loop4: detected capacity change from 0 to 4096 [ 523.618001][T13076] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 523.634510][T13076] ntfs3: loop4: Failed to load $Extend. [ 523.704821][ T26] audit: type=1800 audit(1720036135.459:99): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2995" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 523.754744][T13072] loop2: detected capacity change from 0 to 32768 [ 523.830455][T13072] XFS (loop2): Mounting V5 Filesystem [ 523.853532][ T5629] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 523.873327][ T5629] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 523.888084][ T5629] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 523.898260][ T5629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.929980][T13061] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 523.939461][T13095] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 523.987632][T13072] XFS (loop2): Ending clean mount [ 523.996191][T13072] XFS (loop2): Quotacheck needed: Please wait. [ 524.052536][T13072] XFS (loop2): Quotacheck: Done. [ 524.096295][T12130] XFS (loop2): Unmounting Filesystem [ 524.229844][ T3726] kernel read not supported for file /audio (pid: 3726 comm: kworker/0:8) [ 524.238740][ T3559] usb 4-1: USB disconnect, device number 30 [ 524.289627][ T5629] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 524.539720][ T5629] usb 5-1: Using ep0 maxpacket: 16 [ 525.614289][ T1346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.658184][ T5629] usb 5-1: unable to get BOS descriptor or descriptor too short [ 525.758993][ T5629] usb 5-1: config 2 has an invalid interface number: 226 but max is 2 [ 525.767205][ T5629] usb 5-1: config 2 has an invalid interface number: 216 but max is 2 [ 525.779709][ T5629] usb 5-1: config 2 has an invalid interface number: 216 but max is 2 [ 525.800415][ T5629] usb 5-1: config 2 has no interface number 1 [ 525.806797][ T5629] usb 5-1: config 2 has no interface number 2 [ 525.813648][ T5629] usb 5-1: too many endpoints for config 2 interface 226 altsetting 143: 247, using maximum allowed: 30 [ 525.846718][ T5629] usb 5-1: config 2 interface 226 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 525.859245][ T1346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.868910][ T5629] usb 5-1: config 2 interface 216 altsetting 54 has an invalid endpoint with address 0x80, skipping [ 525.891463][ T5629] usb 5-1: config 2 interface 216 altsetting 54 has a duplicate endpoint with address 0x1, skipping [ 525.909147][ T5629] usb 5-1: config 2 interface 216 altsetting 54 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 525.920965][ T5629] usb 5-1: config 2 interface 216 altsetting 54 has a duplicate endpoint with address 0xB, skipping [ 525.931995][ T5629] usb 5-1: config 2 interface 216 altsetting 54 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 525.943298][ T5629] usb 5-1: config 2 interface 216 altsetting 54 has a duplicate endpoint with address 0x6, skipping [ 525.958330][ T5629] usb 5-1: config 2 interface 216 altsetting 54 has a duplicate endpoint with address 0x2, skipping [ 525.969459][ T5629] usb 5-1: config 2 interface 216 altsetting 9 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 525.984387][ T5629] usb 5-1: config 2 interface 216 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 525.995566][ T5629] usb 5-1: config 2 interface 216 altsetting 9 endpoint 0x8 has an invalid bInterval 174, changing to 11 [ 526.017564][ T1346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.028855][ T5629] usb 5-1: config 2 interface 216 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 526.048844][ T5629] usb 5-1: config 2 interface 216 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 526.070105][ T5629] usb 5-1: config 2 interface 216 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 526.095007][ T5629] usb 5-1: config 2 interface 216 altsetting 9 has an invalid endpoint with address 0x12, skipping [ 526.114269][T13129] loop3: detected capacity change from 0 to 256 [ 526.121665][ T5629] usb 5-1: config 2 interface 216 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0 [ 526.131838][ T5629] usb 5-1: config 2 interface 216 altsetting 9 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 526.136692][ T1346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.143004][ T5629] usb 5-1: config 2 interface 216 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 526.163979][ T5629] usb 5-1: config 2 interface 216 altsetting 9 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 526.180301][T13129] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 526.195616][T13129] FAT-fs (loop3): invalid media value (0x29) [ 526.206050][T13129] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 526.217726][ T5629] usb 5-1: config 2 interface 226 has no altsetting 0 [ 526.225722][ T5629] usb 5-1: config 2 interface 216 has no altsetting 0 [ 526.235454][T13129] FAT-fs (loop3): Can't find a valid FAT filesystem [ 526.244449][ T5629] usb 5-1: config 2 interface 216 has no altsetting 1 [ 526.288191][T13133] loop2: detected capacity change from 0 to 256 [ 526.402495][T13122] chnl_net:caif_netlink_parms(): no params data found [ 526.430189][ T5629] usb 5-1: New USB device found, idVendor=413c, idProduct=81e4, bcdDevice=fd.d9 [ 526.442095][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.450524][ T5629] usb 5-1: Product: 븟眅뻸꽻꺇螝歧齤켃壪䆓ꛇ⯟蹞扫홓᪡營┯犜炪⫉麒蛙︲쿰븁䕖뭭뜄벩ʔ݅礃逜뻓렃ꃄ궨Šퟚ뜾됆ꨔ落뀜꽢ٻ륰쌶뺭䲔ϯ뀯ꅰ雾ුᰭ㿓〝ᕅﭏ鯕䳱⍠쌤⸮節঺큓빊ॱ셺꧅밓輷뒂酢鼕国艾ၘ羓扃룘蘐ᗿ㷋囊爓ኈꓘᾑ䭁콰ꢽꁿ湛Ꮫ⿜ﵾ墯ꭆ滾晻筀闵⓸ᙥᔛ폰봘ﱽ [ 526.506281][ T5629] usb 5-1: Manufacturer: Щ [ 526.512641][ T5629] usb 5-1: SerialNumber: 陶㾏鄰鏪ꃲꖣ秼뮶▛ہ뇳銤孴셩ᓵ肇ପ맊绐ㄞ㾞⯍㔲熤킱꘭ᬔ [ 526.537598][T13133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3016'. [ 526.588073][T13133] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.636413][T13133] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.740090][T13122] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.747591][T13122] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.757146][T13122] device bridge_slave_0 entered promiscuous mode [ 526.779114][T13122] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.786385][T13122] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.794550][T13122] device bridge_slave_1 entered promiscuous mode [ 526.856678][T13122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.888688][T13122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.906910][ T5629] option 5-1:2.226: GSM modem (1-port) converter detected [ 526.990298][ T5629] option 5-1:2.216: GSM modem (1-port) converter detected [ 527.011592][ T5629] usb 5-1: USB disconnect, device number 20 [ 527.032354][ T5629] option 5-1:2.226: device disconnected [ 527.046174][ T5629] option 5-1:2.216: device disconnected [ 527.085212][T13122] team0: Port device team_slave_0 added [ 527.172805][T13122] team0: Port device team_slave_1 added [ 527.360645][T13122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.369861][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.415286][T13122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.443067][T13122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.477058][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.512039][T13122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.685360][T13122] device hsr_slave_0 entered promiscuous mode [ 527.701627][T13122] device hsr_slave_1 entered promiscuous mode [ 527.715345][T13122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.726014][T13122] Cannot create hsr debugfs directory [ 527.858979][ T5629] Bluetooth: hci4: command 0x0409 tx timeout [ 527.914963][ T1346] device hsr_slave_0 left promiscuous mode [ 527.936218][ T1346] device hsr_slave_1 left promiscuous mode [ 527.957627][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.967247][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.991780][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.999810][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.039448][ T1346] device bridge_slave_1 left promiscuous mode [ 528.046276][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.061419][ T1346] device bridge_slave_0 left promiscuous mode [ 528.069499][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.107109][ T1346] device veth1_macvtap left promiscuous mode [ 528.113555][ T1346] device veth0_macvtap left promiscuous mode [ 528.125860][ T1346] device veth1_vlan left promiscuous mode [ 528.335478][ T1346] team0 (unregistering): Port device team_slave_1 removed [ 528.352199][ T1346] team0 (unregistering): Port device team_slave_0 removed [ 528.365160][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.385852][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.497915][ T1346] bond0 (unregistering): Released all slaves [ 528.756520][T13185] loop4: detected capacity change from 0 to 64 [ 528.843977][T13185] hfs: unable to parse mount options [ 528.957397][T13185] syz.4.3038 sent an empty control message without MSG_MORE. [ 528.988112][ T26] audit: type=1400 audit(1720036140.739:100): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13184 comm="syz.4.3038" [ 529.378139][T13170] chnl_net:caif_netlink_parms(): no params data found [ 529.603535][T13192] chnl_net:caif_netlink_parms(): no params data found [ 529.675257][T13170] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.739672][T13170] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.747713][T13170] device bridge_slave_0 entered promiscuous mode [ 529.826110][T13170] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.839587][T13170] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.847513][T13170] device bridge_slave_1 entered promiscuous mode [ 529.918662][T13122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 529.929085][ T3561] Bluetooth: hci4: command 0x041b tx timeout [ 529.981059][T13216] loop4: detected capacity change from 0 to 64 [ 529.993658][T13122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 530.031236][T13122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.040299][T13216] hfs: unable to parse mount options [ 530.060650][T13170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.076525][T13122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 530.089024][ T3559] Bluetooth: hci3: command 0x0409 tx timeout [ 530.128586][T13170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.173878][ T26] audit: type=1400 audit(1720036141.929:101): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13215 comm="syz.4.3050" [ 530.268520][T13192] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.285466][T13192] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.311072][T13192] device bridge_slave_0 entered promiscuous mode [ 530.334263][T13170] team0: Port device team_slave_0 added [ 530.371293][T13170] team0: Port device team_slave_1 added [ 530.449762][T13192] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.456974][T13192] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.465831][T13192] device bridge_slave_1 entered promiscuous mode [ 530.495893][T13192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.508035][T13192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.543501][T13192] team0: Port device team_slave_0 added [ 530.557500][T13192] team0: Port device team_slave_1 added [ 530.583488][T13192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.618507][T13192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.653700][T13192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.694758][T13192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.708835][T13192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.739508][T13192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.325627][T13192] device hsr_slave_0 entered promiscuous mode [ 531.353950][T13192] device hsr_slave_1 entered promiscuous mode [ 531.373894][T13192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.403553][T13192] Cannot create hsr debugfs directory [ 531.476033][ T3552] Bluetooth: hci0: command 0x0409 tx timeout [ 531.515753][T13170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.547199][T13170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.599449][T13170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.697340][T13209] chnl_net:caif_netlink_parms(): no params data found [ 531.726102][T13170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.748884][T13170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.776125][T13170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.789264][ T5630] Bluetooth: hci1: command 0x0409 tx timeout [ 531.888476][T13170] device hsr_slave_0 entered promiscuous mode [ 531.912649][T13170] device hsr_slave_1 entered promiscuous mode [ 531.940110][T13170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.967234][T13170] Cannot create hsr debugfs directory [ 532.018936][ T4146] Bluetooth: hci4: command 0x040f tx timeout [ 532.169004][ T4146] Bluetooth: hci3: command 0x041b tx timeout [ 532.224950][T13209] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.233676][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.248229][T13209] device bridge_slave_0 entered promiscuous mode [ 532.349255][T13209] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.364643][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.397133][T13209] device bridge_slave_1 entered promiscuous mode [ 532.463079][T13192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.533199][T13209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.577170][T13192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.615506][T13122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.633967][T13209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.695601][T13192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.735129][T13122] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.743418][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 532.751784][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 532.769281][T13209] team0: Port device team_slave_0 added [ 532.781574][T13209] team0: Port device team_slave_1 added [ 532.800231][T13192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.838110][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.853437][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.862841][ T3726] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.870057][ T3726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.881449][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.898433][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.908712][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.918519][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.925746][ T5630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.929093][ T3559] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 532.955927][T13209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.963190][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.992916][T13209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.020263][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 533.030218][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 533.041072][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 533.051360][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 533.061564][T13209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.068559][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.097725][T13209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.150436][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 533.158654][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 533.177404][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 533.201171][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 533.211001][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 533.220634][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 533.230356][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 533.252941][T13122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 533.277792][T13209] device hsr_slave_0 entered promiscuous mode [ 533.288363][T13209] device hsr_slave_1 entered promiscuous mode [ 533.296459][T13209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.305521][T13209] Cannot create hsr debugfs directory [ 533.329137][ T3559] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 533.365249][ T3559] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 533.385979][ T3559] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 533.396280][ T3559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.419364][T13242] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 533.443787][ T1346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.529211][ T4146] Bluetooth: hci0: command 0x041b tx timeout [ 533.560753][ T1346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.596797][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.604592][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.619137][T13122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.637898][ T1346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.686110][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.686377][ T5630] usb 5-1: USB disconnect, device number 21 [ 533.702325][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 533.741498][ T1346] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.756917][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 533.766604][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 533.779434][T13122] device veth0_vlan entered promiscuous mode [ 533.793734][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.802427][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 533.814097][T13122] device veth1_vlan entered promiscuous mode [ 533.850150][ T5629] Bluetooth: hci1: command 0x041b tx timeout [ 533.875687][T13170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.905916][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 533.915159][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 533.924080][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 533.940292][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.978549][T13122] device veth0_macvtap entered promiscuous mode [ 534.000759][T13192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 534.066653][T13192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 534.089603][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 534.111221][T13192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 534.137572][T13122] device veth1_macvtap entered promiscuous mode [ 534.165426][T13170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.191901][T13192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 534.227352][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.237877][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.249133][ T5630] Bluetooth: hci3: command 0x040f tx timeout [ 534.251517][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.265999][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.276003][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.287191][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.297530][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.308126][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.321036][T13122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.342885][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 534.351882][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 534.360636][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 534.370047][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 534.382717][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.393491][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.405496][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.417823][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.427869][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.447893][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.458471][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.475316][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.486559][T13122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.505850][T13170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.594149][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 534.605873][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 534.621239][T13122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.631910][T13122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.657678][T13122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.668678][T13122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.692434][T13170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.718400][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3060'. [ 534.934656][T13252] loop4: detected capacity change from 0 to 4096 [ 534.993671][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.005520][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.074344][T13192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.091673][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 535.144232][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 535.157992][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 535.169986][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.172454][T13192] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.195072][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.245622][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 535.255529][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 535.267696][ T3992] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.274845][ T3992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.307964][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 535.316579][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 535.345864][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 535.355156][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 535.366160][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.374742][ T5629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.399504][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 535.413951][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 535.465640][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 535.483789][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 535.502739][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 535.513303][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 535.525038][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 535.535995][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 535.556081][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 535.568592][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 535.590736][T13192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 535.619482][ T3992] Bluetooth: hci0: command 0x040f tx timeout [ 535.627558][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 535.825303][T13170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 535.859959][T13170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 535.929480][ T4657] Bluetooth: hci1: command 0x040f tx timeout [ 535.938592][T13170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 535.984225][T13209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 536.014328][T13170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 536.038210][T13209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 536.055778][T13209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 536.077318][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 536.088728][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.103206][T13192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.164630][T13209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 536.322316][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 536.329323][ T3552] Bluetooth: hci3: command 0x0419 tx timeout [ 536.351021][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 536.388210][T13266] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 536.476567][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 536.491753][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 536.515528][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 536.533258][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 536.554208][T13192] device veth0_vlan entered promiscuous mode [ 536.637732][T13192] device veth1_vlan entered promiscuous mode [ 536.728520][T13170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.789146][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 536.803046][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 536.901025][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3067'. [ 536.919784][T13192] device veth0_macvtap entered promiscuous mode [ 536.960785][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 536.969958][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 536.978323][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.994657][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 537.040645][T13170] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.056706][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 537.074647][T13192] device veth1_macvtap entered promiscuous mode [ 537.122834][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 537.134561][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 537.155743][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.172552][ T3992] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.179868][ T3992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.194674][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 537.210095][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.233709][ T3992] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.240938][ T3992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.294587][T13209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.329723][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 537.342029][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 537.354806][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 537.365790][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 537.384409][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 537.394303][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 537.410297][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 537.425705][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 537.465973][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.478957][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.490806][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.502412][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.513604][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.525511][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.536059][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.553077][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.564714][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.583957][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.597939][T13192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.606982][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 537.616453][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 537.625294][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 537.634499][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 537.657638][T13170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.671174][T13170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 537.685257][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.696949][T11262] Bluetooth: hci0: command 0x0419 tx timeout [ 537.703991][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.723973][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.736643][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.753321][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.765627][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.784144][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.795831][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.806997][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.818327][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.831098][T13192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.839253][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 537.850803][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.864589][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 537.873311][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.883426][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 537.892349][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.952892][T13209] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.975251][T13192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.992025][T13192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.009456][ T3552] Bluetooth: hci1: command 0x0419 tx timeout [ 538.019402][T13192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.029263][T13192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.051392][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 538.061182][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 538.071162][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.078280][ T5629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.153067][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 538.214139][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 538.224218][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 538.233555][ T4146] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.240777][ T4146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.249489][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 538.349250][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 538.356832][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 538.366489][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 538.376552][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 538.387324][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 538.399804][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 538.411631][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 538.422083][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3075'. [ 538.439573][T13170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.470222][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 538.529313][ T3823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.551589][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 538.560855][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.571484][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 538.578965][ T3823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.580456][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 538.637043][T13209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 538.655919][ T1346] device hsr_slave_0 left promiscuous mode [ 538.662691][ T1346] device hsr_slave_1 left promiscuous mode [ 538.670470][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.677926][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.688231][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.696548][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.705903][ T1346] device bridge_slave_1 left promiscuous mode [ 538.712374][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.723472][ T1346] device bridge_slave_0 left promiscuous mode [ 538.731586][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.746967][ T1346] device hsr_slave_0 left promiscuous mode [ 538.754083][ T1346] device hsr_slave_1 left promiscuous mode [ 538.761385][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.769235][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.778964][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.787056][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.796490][ T1346] device bridge_slave_1 left promiscuous mode [ 538.802815][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.812640][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.828264][ T1346] device hsr_slave_0 left promiscuous mode [ 538.836418][ T1346] device hsr_slave_1 left promiscuous mode [ 538.851012][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.858616][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.871529][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.882618][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.893736][ T1346] device bridge_slave_0 left promiscuous mode [ 538.901469][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.924780][ T1346] device veth1_macvtap left promiscuous mode [ 538.933433][ T1346] device veth0_macvtap left promiscuous mode [ 538.940315][ T1346] device veth1_vlan left promiscuous mode [ 538.947782][ T1346] device veth0_vlan left promiscuous mode [ 538.957526][ T1346] device veth1_macvtap left promiscuous mode [ 538.965765][ T1346] device veth0_macvtap left promiscuous mode [ 538.980861][ T1346] device veth1_vlan left promiscuous mode [ 538.987097][ T1346] device veth0_vlan left promiscuous mode [ 538.997684][ T1346] device veth1_macvtap left promiscuous mode [ 539.004278][ T1346] device veth0_macvtap left promiscuous mode [ 539.010958][ T1346] device veth1_vlan left promiscuous mode [ 539.016854][ T1346] device veth0_vlan left promiscuous mode [ 539.477077][ T1346] team0 (unregistering): Port device team_slave_1 removed [ 539.496320][ T1346] team0 (unregistering): Port device team_slave_0 removed [ 539.510727][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.533437][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.628291][ T1346] bond0 (unregistering): Released all slaves [ 539.695671][ T1346] bond1 (unregistering): Released all slaves [ 539.814981][ T1346] team0 (unregistering): Port device team_slave_1 removed [ 539.835491][ T1346] team0 (unregistering): Port device team_slave_0 removed [ 539.853837][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.877871][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.967103][ T1346] bond0 (unregistering): Released all slaves [ 540.118060][ T1346] team0 (unregistering): Port device team_slave_1 removed [ 540.135022][ T1346] team0 (unregistering): Port device team_slave_0 removed [ 540.150550][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.173551][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.266543][ T1346] bond0 (unregistering): Released all slaves [ 540.348504][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.350059][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 540.375278][T13170] device veth0_vlan entered promiscuous mode [ 540.392908][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.420018][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 540.430314][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 540.463969][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 540.483114][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 540.494183][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 540.509240][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 540.517957][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 540.614697][T13170] device veth1_vlan entered promiscuous mode [ 540.660511][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 540.677821][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.685568][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.714287][T13209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.754960][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 540.770648][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 540.780159][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 540.791432][T13170] device veth0_macvtap entered promiscuous mode [ 540.816399][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 540.826138][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 540.835325][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 540.849977][T13170] device veth1_macvtap entered promiscuous mode [ 540.882312][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 540.891886][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 540.900644][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 540.920413][T13209] device veth0_vlan entered promiscuous mode [ 540.939157][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 540.947069][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 540.957515][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.971817][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.982850][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.993505][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.004133][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.014617][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.026778][T13170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.041262][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 541.051449][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 541.061880][T13209] device veth1_vlan entered promiscuous mode [ 541.071169][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.084224][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.094973][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.105504][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.115629][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.126531][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.138005][T13170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.151995][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 541.161928][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 541.170595][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 541.180238][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 541.193156][T13170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.203670][T13170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.214768][T13170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.224279][T13170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.315762][T13209] device veth0_macvtap entered promiscuous mode [ 541.351638][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 541.361761][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 541.372013][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 541.386704][T13209] device veth1_macvtap entered promiscuous mode [ 541.475661][ T4027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.494229][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.500000][ T4027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.511113][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.524071][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.535665][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.547382][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.558634][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.568594][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.579860][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.606244][T13209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.632079][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.653316][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.671181][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.682574][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.697068][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.708344][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.722319][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.733141][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.745381][T13209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.759165][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 541.767141][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 541.784582][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 541.803175][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 541.814811][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 541.828567][ T3823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.833315][T13209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.850927][ T3823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.851267][T13209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.874759][T13209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.884473][T13209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.896940][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3083'. [ 541.928409][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 542.131206][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.149125][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.215035][T11261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 542.241491][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.271001][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.326755][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 542.436068][T13326] loop2: detected capacity change from 0 to 4096 [ 542.469997][T13328] loop1: detected capacity change from 0 to 1024 [ 542.530377][T13326] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_mubtiplier. [ 542.556890][T13328] hfsplus: failed to load root directory [ 542.637066][T13321] loop3: detected capacity change from 0 to 32768 [ 542.695448][T13321] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3085 (13321) [ 543.811198][T13321] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 543.849291][T13321] BTRFS info (device loop3): enabling auto defrag [ 543.856011][T13321] BTRFS info (device loop3): max_inline at 0 [ 543.864855][T13336] loop2: detected capacity change from 0 to 256 [ 543.882357][T13321] BTRFS info (device loop3): enabling ssd optimizations [ 543.890860][T13321] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 543.900649][T13321] BTRFS info (device loop3): use lzo compression, level 0 [ 543.907900][T13321] BTRFS info (device loop3): using free space tree [ 543.922998][T13321] BTRFS info (device loop3): has skinny extents [ 548.281154][T13321] BTRFS error (device loop3): open_ctree failed [ 548.579097][ T4233] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 548.719769][T13365] chnl_net:caif_netlink_parms(): no params data found [ 548.784359][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.792797][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.803354][T13365] device bridge_slave_0 entered promiscuous mode [ 548.813096][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.821958][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.832253][T13365] device bridge_slave_1 entered promiscuous mode [ 548.872605][T13365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.885554][T13365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.940605][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.946657][ T13] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 548.960070][T13365] team0: Port device team_slave_0 added [ 548.963048][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.979166][T13365] team0: Port device team_slave_1 added [ 548.994365][ T4233] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 549.004448][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.015065][ T4233] usb 3-1: config 0 descriptor?? [ 549.037165][T13365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.044746][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.076363][T13365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.089833][T13365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.097872][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.125754][T13365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.185634][T13365] device hsr_slave_0 entered promiscuous mode [ 549.194972][T13365] device hsr_slave_1 entered promiscuous mode [ 549.268990][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 549.387823][T13365] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.417841][T13382] loop1: detected capacity change from 0 to 4096 [ 549.454928][T13365] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.467351][T13382] ntfs: (device loop1): parse_options(): Unrecognized mount option mft_zone_mubtiplier. [ 549.522815][ T4233] prodikeys 0003:041E:2801.0012: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 549.579022][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=ca.76 [ 549.589301][T13365] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.598489][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.615820][ T13] usb 4-1: Product: syz [ 549.621139][ T13] usb 4-1: Manufacturer: syz [ 549.637809][ T13] usb 4-1: SerialNumber: syz [ 549.664680][ T13] usb 4-1: config 0 descriptor?? [ 549.674048][T13365] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.711977][ T13] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input29 [ 549.767248][T13386] loop1: detected capacity change from 0 to 1024 [ 549.820434][T13362] udc-core: couldn't find an available UDC or it's busy [ 549.849152][T13362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 549.886116][T13386] hfsplus: failed to load root directory [ 549.893976][T13365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 549.916759][T13365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 549.931859][T13376] udc-core: couldn't find an available UDC or it's busy [ 549.942759][T13376] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 549.954582][ T3992] usb 4-1: USB disconnect, device number 31 [ 549.962057][T13365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 549.969503][ T2947] bcm5974 4-1:0.0: could not read from device [ 549.985692][ T2947] bcm5974 4-1:0.0: could not read from device [ 550.006084][ T13] usb 3-1: USB disconnect, device number 30 [ 550.019776][T13365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 550.236551][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.270585][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 550.278507][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.329894][ T3297] Bluetooth: hci5: command 0x0409 tx timeout [ 551.182330][T13365] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.199488][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.229849][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.238578][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.245727][ T4657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.329344][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.356050][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.385819][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.425325][ T4657] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.432517][ T4657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.468286][T13394] loop1: detected capacity change from 0 to 1024 [ 551.483882][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.542014][T13394] hfsplus: bad catalog entry type [ 551.585970][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.673547][ T3599] hfsplus: b-tree write err: -5, ino 4 [ 551.713579][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.731356][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.749821][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.760490][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.785144][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.794110][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.837550][T13406] loop1: detected capacity change from 0 to 512 [ 551.855864][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 551.882729][T13365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.904240][T13408] loop3: detected capacity change from 0 to 256 [ 551.912735][T13365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.932916][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.936720][T13406] EXT4-fs (loop1): user quota file already specified [ 551.947645][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 552.690513][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 552.704994][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 552.752137][T13431] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 552.781394][T13365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.866837][T13395] chnl_net:caif_netlink_parms(): no params data found [ 553.085543][T13395] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.093533][T13395] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.102645][T13395] device bridge_slave_0 entered promiscuous mode [ 553.113555][T13395] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.128499][T13395] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.137633][T13395] device bridge_slave_1 entered promiscuous mode [ 553.139696][ T3993] Bluetooth: hci5: command 0x041b tx timeout [ 553.149034][ T4230] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 553.185862][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 553.195148][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.229375][T13395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.245458][T13395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.264796][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 553.276187][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 553.289129][T13365] device veth0_vlan entered promiscuous mode [ 553.331974][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 553.341822][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 553.354115][T13365] device veth1_vlan entered promiscuous mode [ 553.389532][T13395] team0: Port device team_slave_0 added [ 553.399306][ T13] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 553.437121][T13395] team0: Port device team_slave_1 added [ 553.478805][T13395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.485937][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.509083][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.514033][T13395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.535929][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.536193][ T3993] Bluetooth: hci2: command 0x0409 tx timeout [ 553.547420][ T4230] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 553.557497][T13395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.569117][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.571670][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.596146][T13395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.634777][ T4230] usb 2-1: config 0 descriptor?? [ 553.678125][T13365] device veth0_macvtap entered promiscuous mode [ 553.700722][T13365] device veth1_macvtap entered promiscuous mode [ 553.715401][ T1346] device hsr_slave_0 left promiscuous mode [ 553.719935][T13459] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 553.732907][ T1346] device hsr_slave_1 left promiscuous mode [ 553.742841][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.753810][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.765686][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.775443][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.785284][ T1346] device bridge_slave_1 left promiscuous mode [ 553.791690][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.801265][ T1346] device bridge_slave_0 left promiscuous mode [ 553.807546][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.819255][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.829677][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.842118][ T1346] device veth1_macvtap left promiscuous mode [ 553.848213][ T1346] device veth0_macvtap left promiscuous mode [ 553.857411][ T1346] device veth1_vlan left promiscuous mode [ 553.868019][ T1346] device veth0_vlan left promiscuous mode [ 553.935323][ T13] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 553.953369][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.962309][ T13] usb 3-1: SerialNumber: syz [ 554.132118][ T4230] prodikeys 0003:041E:2801.0013: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 554.179376][ T1346] team0 (unregistering): Port device team_slave_1 removed [ 554.202591][ T1346] team0 (unregistering): Port device team_slave_0 removed [ 554.220637][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.236294][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.252367][ T13] usb 3-1: 0:2 : does not exist [ 554.294084][ T13] usb 3-1: USB disconnect, device number 31 [ 554.360377][T13435] udc-core: couldn't find an available UDC or it's busy [ 554.367657][T13435] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 554.379712][ T1346] bond0 (unregistering): Released all slaves [ 554.415332][ T4230] usb 2-1: USB disconnect, device number 17 [ 554.450481][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 554.459375][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 554.468118][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 554.478337][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 554.505417][T13395] device hsr_slave_0 entered promiscuous mode [ 554.513618][T13395] device hsr_slave_1 entered promiscuous mode [ 554.521044][T13395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.530375][T13395] Cannot create hsr debugfs directory [ 554.581204][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.598381][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.612152][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.626103][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.637593][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.652714][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.698984][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.711701][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.725797][T13365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.815032][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 554.824686][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 554.837479][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.863274][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.894672][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.918052][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.939139][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.957588][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.973842][T13467] loop2: detected capacity change from 0 to 512 [ 554.987881][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.008932][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.028286][T13365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.059043][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.072700][T13469] loop3: detected capacity change from 0 to 512 [ 555.083919][T13467] EXT4-fs (loop2): user quota file already specified [ 555.084315][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.108938][T13365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.121756][T13365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.132398][T13365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.141339][T13365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.143653][T13471] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 555.231182][ T3726] Bluetooth: hci5: command 0x040f tx timeout [ 555.344627][T13469] EXT4-fs (loop3): 1 orphan inode deleted [ 555.355724][T13469] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,auto_da_alloc=0x000000000000003f,dioread_lock,. Quota mode: writeback. [ 555.389191][T13469] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 555.698508][ T3993] Bluetooth: hci2: command 0x041b tx timeout [ 555.784104][T13395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.862899][T13469] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz.3.3124: bad extent address lblock: 1, depth: 1 pblock 0 [ 555.915752][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.973923][T13395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.985350][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.003453][T13469] EXT4-fs (loop3): Remounting filesystem read-only [ 556.057029][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.082228][ T7490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.102898][T13192] EXT4-fs error (device loop3): ext4_map_blocks:601: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 556.116929][ T7490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.133253][T13395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.192872][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 556.294267][T13395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.375083][T13489] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 556.672760][T13395] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 556.683441][T13506] loop2: detected capacity change from 0 to 512 [ 556.693000][T13395] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 556.727042][T13395] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 556.744081][ T3993] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 556.763531][T13395] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 556.810193][T13506] EXT4-fs (loop2): 1 orphan inode deleted [ 556.846744][T13506] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x000000000000ffff,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 556.971989][T13506] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 557.128963][ T3993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.139778][ T3993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.187080][T13170] EXT4-fs error (device loop2): ext4_map_blocks:601: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 557.210326][T13170] EXT4-fs (loop2): Remounting filesystem read-only [ 557.216950][T13170] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 557.261274][ T3993] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 557.278183][ T3993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 557.289772][ T3993] usb 5-1: SerialNumber: syz [ 557.307995][ T3726] Bluetooth: hci5: command 0x0419 tx timeout [ 557.601804][ T3993] usb 5-1: 0:2 : does not exist [ 557.629641][ T3993] usb 5-1: USB disconnect, device number 22 [ 557.771024][ T3726] Bluetooth: hci2: command 0x040f tx timeout [ 559.129105][ T3726] Bluetooth: hci0: command 0x0409 tx timeout [ 559.848884][ T3992] Bluetooth: hci2: command 0x0419 tx timeout [ 561.209142][ T3992] Bluetooth: hci0: command 0x041b tx timeout [ 562.973065][ T1383] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.979427][ T1383] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.288849][ T3726] Bluetooth: hci0: command 0x040f tx timeout [ 565.368977][ T3992] Bluetooth: hci0: command 0x0419 tx timeout [ 569.858954][ T3992] Bluetooth: hci3: command 0x0409 tx timeout [ 569.929156][ T3992] Bluetooth: hci4: command 0x0409 tx timeout [ 570.809051][ T3992] Bluetooth: hci6: command 0x0409 tx timeout [ 571.931510][ T3726] Bluetooth: hci3: command 0x041b tx timeout [ 572.009013][ T3726] Bluetooth: hci4: command 0x041b tx timeout [ 572.898974][ T3726] Bluetooth: hci6: command 0x041b tx timeout [ 574.009006][ T3992] Bluetooth: hci3: command 0x040f tx timeout [ 574.101372][ T3992] Bluetooth: hci4: command 0x040f tx timeout [ 574.969157][ T3993] Bluetooth: hci6: command 0x040f tx timeout [ 576.089029][ T3726] Bluetooth: hci3: command 0x0419 tx timeout [ 576.169075][ T3726] Bluetooth: hci4: command 0x0419 tx timeout [ 577.049312][ T3993] Bluetooth: hci6: command 0x0419 tx timeout [ 613.848904][ T3548] Bluetooth: hci7: command 0x0409 tx timeout [ 615.929160][ T3993] Bluetooth: hci7: command 0x041b tx timeout [ 618.019219][ T3993] Bluetooth: hci7: command 0x040f tx timeout [ 619.849061][ T3726] Bluetooth: hci8: command 0x0409 tx timeout [ 620.088857][ T5009] Bluetooth: hci7: command 0x0419 tx timeout [ 621.928993][ T4657] Bluetooth: hci8: command 0x041b tx timeout [ 624.009012][ T4657] Bluetooth: hci8: command 0x040f tx timeout [ 624.410603][ T1383] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.417201][ T1383] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.089107][ T5009] Bluetooth: hci8: command 0x0419 tx timeout [ 629.928984][ T4657] Bluetooth: hci9: command 0x0409 tx timeout [ 630.968878][ T5009] Bluetooth: hci10: command 0x0409 tx timeout [ 631.048863][ T5009] Bluetooth: hci11: command 0x0409 tx timeout [ 632.008983][ T3297] Bluetooth: hci9: command 0x041b tx timeout [ 633.048964][ T3297] Bluetooth: hci10: command 0x041b tx timeout [ 633.128837][ T3297] Bluetooth: hci11: command 0x041b tx timeout [ 634.088892][ T3993] Bluetooth: hci9: command 0x040f tx timeout [ 635.138860][ T3993] Bluetooth: hci10: command 0x040f tx timeout [ 635.218826][ T3993] Bluetooth: hci11: command 0x040f tx timeout [ 636.178835][ T3993] Bluetooth: hci9: command 0x0419 tx timeout [ 637.208921][ T3993] Bluetooth: hci10: command 0x0419 tx timeout [ 637.288878][ T3993] Bluetooth: hci11: command 0x0419 tx timeout [ 652.088836][ T3993] Bluetooth: hci1: command 0x0406 tx timeout [ 672.568913][ T3297] Bluetooth: hci5: command 0x0406 tx timeout [ 674.009040][ T3726] Bluetooth: hci12: command 0x0409 tx timeout [ 676.088969][ T3993] Bluetooth: hci12: command 0x041b tx timeout [ 677.689523][ T3297] Bluetooth: hci2: command 0x0406 tx timeout [ 678.168916][ T3993] Bluetooth: hci12: command 0x040f tx timeout [ 680.018957][ T3993] Bluetooth: hci13: command 0x0409 tx timeout [ 680.248991][ T5009] Bluetooth: hci12: command 0x0419 tx timeout [ 682.088847][ T5009] Bluetooth: hci13: command 0x041b tx timeout [ 682.808901][ T5009] Bluetooth: hci0: command 0x0406 tx timeout [ 684.168945][ T3297] Bluetooth: hci13: command 0x040f tx timeout [ 685.850341][ T1383] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.856697][ T1383] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.248991][ T3726] Bluetooth: hci13: command 0x0419 tx timeout [ 689.928927][ T3726] Bluetooth: hci14: command 0x0409 tx timeout [ 690.969563][ T5009] Bluetooth: hci15: command 0x0409 tx timeout [ 691.048815][ T5009] Bluetooth: hci16: command 0x0409 tx timeout [ 692.008788][ T4657] Bluetooth: hci14: command 0x041b tx timeout [ 693.048917][ T3726] Bluetooth: hci15: command 0x041b tx timeout [ 693.057948][ T3726] Bluetooth: hci3: command 0x0406 tx timeout [ 693.074570][ T3726] Bluetooth: hci4: command 0x0406 tx timeout [ 693.083388][ T3726] Bluetooth: hci6: command 0x0406 tx timeout [ 693.129004][ T3726] Bluetooth: hci16: command 0x041b tx timeout [ 694.089055][ T3726] Bluetooth: hci14: command 0x040f tx timeout [ 695.128986][ T3297] Bluetooth: hci15: command 0x040f tx timeout [ 695.208956][ T3297] Bluetooth: hci16: command 0x040f tx timeout [ 696.168861][ T3297] Bluetooth: hci14: command 0x0419 tx timeout [ 697.208829][ T3993] Bluetooth: hci15: command 0x0419 tx timeout [ 697.289036][ T3993] Bluetooth: hci16: command 0x0419 tx timeout [ 707.610783][ T27] INFO: task kworker/0:1:13 blocked for more than 143 seconds. [ 707.618574][ T27] Not tainted 5.15.161-syzkaller #0 [ 707.632022][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 707.643935][ T27] task:kworker/0:1 state:D stack:22720 pid: 13 ppid: 2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 707.657672][ T27] Workqueue: ipv6_addrconf addrconf_dad_work [ 707.702429][ T27] Call Trace: [ 707.705895][ T27] [ 707.712958][ T27] __schedule+0x12c4/0x45b0 [ 707.717534][ T27] ? mark_lock+0x98/0x340 [ 707.726928][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 707.738436][ T27] ? release_firmware_map_entry+0x190/0x190 [ 707.747582][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 707.758109][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 707.766120][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 707.776544][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 707.784135][ T27] schedule+0x11b/0x1f0 [ 707.788319][ T27] schedule_preempt_disabled+0xf/0x20 [ 707.794186][ T27] __mutex_lock_common+0xe34/0x25a0 [ 707.799704][ T27] ? addrconf_dad_work+0xcc/0x1720 [ 707.804933][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 707.810582][ T27] mutex_lock_nested+0x17/0x20 [ 707.815543][ T27] addrconf_dad_work+0xcc/0x1720 [ 707.820938][ T27] ? read_lock_is_recursive+0x10/0x10 [ 707.826337][ T27] ? rcu_lock_release+0x20/0x20 [ 707.833548][ T27] ? print_irqtrace_events+0x210/0x210 [ 707.839430][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 707.845346][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 707.850966][ T27] process_one_work+0x8a1/0x10c0 [ 707.855945][ T27] ? worker_detach_from_pool+0x260/0x260 [ 707.862044][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 707.867673][ T27] ? kthread_data+0x4e/0xc0 [ 707.872568][ T27] ? wq_worker_running+0x97/0x170 [ 707.877618][ T27] worker_thread+0xaca/0x1280 [ 707.883771][ T27] kthread+0x3f6/0x4f0 [ 707.888137][ T27] ? rcu_lock_release+0x20/0x20 [ 707.893368][ T27] ? kthread_blkcg+0xd0/0xd0 [ 707.898076][ T27] ret_from_fork+0x1f/0x30 [ 707.903020][ T27] [ 707.906160][ T27] INFO: task kworker/u4:4:1346 blocked for more than 143 seconds. [ 707.914552][ T27] Not tainted 5.15.161-syzkaller #0 [ 707.920666][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 707.930359][ T27] task:kworker/u4:4 state:D stack:19744 pid: 1346 ppid: 2 flags:0x00004000 [ 707.941928][ T27] Workqueue: netns cleanup_net [ 707.946857][ T27] Call Trace: [ 707.950677][ T27] [ 707.953652][ T27] __schedule+0x12c4/0x45b0 [ 707.958209][ T27] ? release_firmware_map_entry+0x190/0x190 [ 707.965004][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 707.970765][ T27] ? kthread_data+0x4e/0xc0 [ 707.975377][ T27] ? wq_worker_sleeping+0x5d/0x200 [ 707.981312][ T27] schedule+0x11b/0x1f0 [ 707.986456][ T27] schedule_preempt_disabled+0xf/0x20 [ 707.997779][ T27] __mutex_lock_common+0xe34/0x25a0 [ 708.005748][ T27] ? cangw_pernet_exit+0xe/0x20 [ 708.015869][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 708.024071][ T27] ? slab_free_freelist_hook+0xdd/0x160 [ 708.034856][ T27] ? kfree+0xf1/0x270 [ 708.042443][ T27] mutex_lock_nested+0x17/0x20 [ 708.047233][ T27] cangw_pernet_exit+0xe/0x20 [ 708.059040][ T27] cleanup_net+0x6ce/0xb60 [ 708.063493][ T27] ? ops_free_list+0x340/0x340 [ 708.068279][ T27] process_one_work+0x8a1/0x10c0 [ 708.081031][ T27] ? worker_detach_from_pool+0x260/0x260 [ 708.087343][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 708.102273][ T27] ? kthread_data+0x4e/0xc0 [ 708.106814][ T27] ? wq_worker_running+0x97/0x170 [ 708.115816][ T27] worker_thread+0xaca/0x1280 [ 708.124954][ T27] kthread+0x3f6/0x4f0 [ 708.133026][ T27] ? rcu_lock_release+0x20/0x20 [ 708.137922][ T27] ? kthread_blkcg+0xd0/0xd0 [ 708.146526][ T27] ret_from_fork+0x1f/0x30 [ 708.155154][ T27] [ 708.158330][ T27] INFO: task kworker/1:12:4233 blocked for more than 143 seconds. [ 708.174060][ T27] Not tainted 5.15.161-syzkaller #0 [ 708.186155][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.196602][ T27] task:kworker/1:12 state:D stack:20088 pid: 4233 ppid: 2 flags:0x00004000 [ 708.206285][ T27] Workqueue: ipv6_addrconf addrconf_dad_work [ 708.212609][ T27] Call Trace: [ 708.215906][ T27] [ 708.219302][ T27] __schedule+0x12c4/0x45b0 [ 708.223934][ T27] ? mark_lock+0x98/0x340 [ 708.228291][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 708.235052][ T27] ? release_firmware_map_entry+0x190/0x190 [ 708.242301][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 708.248227][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 708.254430][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 708.260252][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 708.265483][ T27] schedule+0x11b/0x1f0 [ 708.270081][ T27] schedule_preempt_disabled+0xf/0x20 [ 708.275480][ T27] __mutex_lock_common+0xe34/0x25a0 [ 708.282856][ T27] ? addrconf_dad_work+0xcc/0x1720 [ 708.288141][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 708.296308][ T27] mutex_lock_nested+0x17/0x20 [ 708.301473][ T27] addrconf_dad_work+0xcc/0x1720 [ 708.306568][ T27] ? read_lock_is_recursive+0x10/0x10 [ 708.312479][ T27] ? rcu_lock_release+0x20/0x20 [ 708.317365][ T27] ? print_irqtrace_events+0x210/0x210 [ 708.323930][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 708.338902][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 708.344336][ T27] process_one_work+0x8a1/0x10c0 [ 708.349913][ T27] ? worker_detach_from_pool+0x260/0x260 [ 708.355701][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 708.361691][ T27] ? kthread_data+0x4e/0xc0 [ 708.366216][ T27] ? wq_worker_running+0x97/0x170 [ 708.371676][ T27] worker_thread+0xaca/0x1280 [ 708.376494][ T27] kthread+0x3f6/0x4f0 [ 708.382057][ T27] ? rcu_lock_release+0x20/0x20 [ 708.386933][ T27] ? kthread_blkcg+0xd0/0xd0 [ 708.394067][ T27] ret_from_fork+0x1f/0x30 [ 708.398559][ T27] [ 708.402743][ T27] INFO: task syz-executor:13170 blocked for more than 144 seconds. [ 708.411437][ T27] Not tainted 5.15.161-syzkaller #0 [ 708.417183][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.427502][ T27] task:syz-executor state:D stack:21016 pid:13170 ppid: 1 flags:0x00004002 [ 708.438247][ T27] Call Trace: [ 708.441871][ T27] [ 708.444831][ T27] __schedule+0x12c4/0x45b0 [ 708.449787][ T27] ? release_firmware_map_entry+0x190/0x190 [ 708.455698][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 708.461620][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 708.466847][ T27] schedule+0x11b/0x1f0 [ 708.471413][ T27] schedule_preempt_disabled+0xf/0x20 [ 708.476892][ T27] __mutex_lock_common+0xe34/0x25a0 [ 708.482585][ T27] ? tun_chr_close+0x3a/0x1b0 [ 708.487284][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 708.494583][ T27] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 708.503727][ T27] mutex_lock_nested+0x17/0x20 [ 708.510515][ T27] tun_chr_close+0x3a/0x1b0 [ 708.515054][ T27] ? tun_chr_open+0x4d0/0x4d0 [ 708.520277][ T27] __fput+0x3bf/0x890 [ 708.524299][ T27] task_work_run+0x129/0x1a0 [ 708.529436][ T27] do_exit+0x6a3/0x2480 [ 708.533632][ T27] ? rcu_is_watching+0x11/0xa0 [ 708.538637][ T27] ? put_task_struct+0x80/0x80 [ 708.544135][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 708.550472][ T27] ? vtime_user_exit+0x2d1/0x400 [ 708.555530][ T27] do_group_exit+0x144/0x310 [ 708.560571][ T27] __x64_sys_exit_group+0x3b/0x40 [ 708.565633][ T27] do_syscall_64+0x3b/0xb0 [ 708.570569][ T27] ? clear_bhb_loop+0x15/0x70 [ 708.575478][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 708.582118][ T27] RIP: 0033:0x7fcdd4242bd9 [ 708.586561][ T27] RSP: 002b:00007fffb0308a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 708.595730][ T27] RAX: ffffffffffffffda RBX: 00007fcdd42b0587 RCX: 00007fcdd4242bd9 [ 708.605103][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 708.621986][ T27] RBP: 0000000000000010 R08: 00007fffb03067d6 R09: 00007fffb0309cf0 [ 708.636252][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb0309cf0 [ 708.647157][ T27] R13: 00007fcdd42b0515 R14: 00005555574e84a8 R15: 000000000000000c [ 708.661969][ T27] [ 708.665232][ T27] INFO: task syz-executor:13395 blocked for more than 144 seconds. [ 708.677057][ T27] Not tainted 5.15.161-syzkaller #0 [ 708.686697][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.703903][ T27] task:syz-executor state:D stack:21088 pid:13395 ppid: 1 flags:0x00004004 [ 708.718248][ T27] Call Trace: [ 708.724002][ T27] [ 708.726957][ T27] __schedule+0x12c4/0x45b0 [ 708.738579][ T27] ? release_firmware_map_entry+0x190/0x190 [ 708.747529][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 708.757890][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 708.765547][ T27] schedule+0x11b/0x1f0 [ 708.774618][ T27] schedule_preempt_disabled+0xf/0x20 [ 708.782457][ T27] __mutex_lock_common+0xe34/0x25a0 [ 708.787707][ T27] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 708.798443][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 708.805553][ T27] mutex_lock_nested+0x17/0x20 [ 708.810530][ T27] rtnetlink_rcv_msg+0x94c/0xee0 [ 708.815586][ T27] ? reacquire_held_locks+0x660/0x660 [ 708.821052][ T27] ? rtnetlink_bind+0x80/0x80 [ 708.825783][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 708.832191][ T27] ? __kernel_text_address+0x94/0x100 [ 708.837871][ T27] ? unwind_get_return_address+0x49/0x80 [ 708.845336][ T27] ? reacquire_held_locks+0x660/0x660 [ 708.851768][ T27] ? arch_stack_walk+0xf3/0x140 [ 708.856826][ T27] ? mark_lock+0x98/0x340 [ 708.861586][ T27] ? mark_lock+0x98/0x340 [ 708.865945][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 708.871970][ T27] netlink_rcv_skb+0x1cf/0x410 [ 708.876758][ T27] ? rtnetlink_bind+0x80/0x80 [ 708.881856][ T27] ? netlink_ack+0xb10/0xb10 [ 708.886593][ T27] netlink_unicast+0x7b6/0x980 [ 708.891902][ T27] ? netlink_detachskb+0x90/0x90 [ 708.896992][ T27] ? __virt_addr_valid+0x39e/0x450 [ 708.902939][ T27] ? 0xffffffff81000000 [ 708.908179][ T27] ? __check_object_size+0x300/0x410 [ 708.914567][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 708.920195][ T27] netlink_sendmsg+0xa30/0xd60 [ 708.925175][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 708.930975][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 708.936232][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 708.942027][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 708.947953][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 708.955004][ T27] __sys_sendto+0x564/0x720 [ 708.961070][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 708.966487][ T27] ? __fput+0x683/0x890 [ 708.971233][ T27] ? print_irqtrace_events+0x210/0x210 [ 708.976714][ T27] ? vtime_user_exit+0x2d1/0x400 [ 708.982094][ T27] __x64_sys_sendto+0xda/0xf0 [ 708.986806][ T27] do_syscall_64+0x3b/0xb0 [ 708.991724][ T27] ? clear_bhb_loop+0x15/0x70 [ 708.996514][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 709.002835][ T27] RIP: 0033:0x7f196fe8296c [ 709.008476][ T27] RSP: 002b:00007ffc00d97970 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 709.017849][ T27] RAX: ffffffffffffffda RBX: 00007f1970b3f620 RCX: 00007f196fe8296c [ 709.026255][ T27] RDX: 0000000000000028 RSI: 00007f1970b3f670 RDI: 0000000000000003 [ 709.034750][ T27] RBP: 0000000000000000 R08: 00007ffc00d979c4 R09: 000000000000000c [ 709.044150][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 709.052799][ T27] R13: 0000000000000000 R14: 00007f1970b3f670 R15: 0000000000000000 [ 709.062436][ T27] [ 709.065550][ T27] INFO: task syz-executor:13515 blocked for more than 144 seconds. [ 709.074576][ T27] Not tainted 5.15.161-syzkaller #0 [ 709.080668][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 709.090595][ T27] task:syz-executor state:D stack:25536 pid:13515 ppid: 1 flags:0x00004004 [ 709.100244][ T27] Call Trace: [ 709.103809][ T27] [ 709.106888][ T27] __schedule+0x12c4/0x45b0 [ 709.113353][ T27] ? release_firmware_map_entry+0x190/0x190 [ 709.119963][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 709.125752][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 709.131651][ T27] schedule+0x11b/0x1f0 [ 709.135849][ T27] schedule_preempt_disabled+0xf/0x20 [ 709.141803][ T27] __mutex_lock_common+0xe34/0x25a0 [ 709.147127][ T27] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 709.152886][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 709.158133][ T27] mutex_lock_nested+0x17/0x20 [ 709.163638][ T27] rtnetlink_rcv_msg+0x94c/0xee0 [ 709.168608][ T27] ? reacquire_held_locks+0x660/0x660 [ 709.176019][ T27] ? rtnetlink_bind+0x80/0x80 [ 709.181807][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 709.186864][ T27] ? __kernel_text_address+0x94/0x100 [ 709.193172][ T27] ? unwind_get_return_address+0x49/0x80 [ 709.199165][ T27] ? reacquire_held_locks+0x660/0x660 [ 709.204566][ T27] ? arch_stack_walk+0xf3/0x140 [ 709.212404][ T27] ? mark_lock+0x98/0x340 [ 709.217079][ T27] ? mark_lock+0x98/0x340 [ 709.222004][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 709.227091][ T27] netlink_rcv_skb+0x1cf/0x410 [ 709.232330][ T27] ? rtnetlink_bind+0x80/0x80 [ 709.237211][ T27] ? netlink_ack+0xb10/0xb10 [ 709.243388][ T27] netlink_unicast+0x7b6/0x980 [ 709.248346][ T27] ? netlink_detachskb+0x90/0x90 [ 709.254126][ T27] ? __virt_addr_valid+0x39e/0x450 [ 709.259694][ T27] ? 0xffffffff81000000 [ 709.263904][ T27] ? __check_object_size+0x300/0x410 [ 709.269711][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 709.274852][ T27] netlink_sendmsg+0xa30/0xd60 [ 709.281564][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 709.286900][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 709.293254][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 709.298669][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 709.304688][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 709.310191][ T27] __sys_sendto+0x564/0x720 [ 709.316046][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 709.322077][ T27] ? print_irqtrace_events+0x210/0x210 [ 709.328311][ T27] ? vtime_user_exit+0x2d1/0x400 [ 709.333940][ T27] __x64_sys_sendto+0xda/0xf0 [ 709.339403][ T27] do_syscall_64+0x3b/0xb0 [ 709.343849][ T27] ? clear_bhb_loop+0x15/0x70 [ 709.348573][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 709.354999][ T27] RIP: 0033:0x7f578615e96c [ 709.359861][ T27] RSP: 002b:00007ffd444d02b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 709.368297][ T27] RAX: ffffffffffffffda RBX: 00007f5786e1b620 RCX: 00007f578615e96c [ 709.385426][ T27] RDX: 0000000000000028 RSI: 00007f5786e1b670 RDI: 0000000000000003 [ 709.395598][ T27] RBP: 0000000000000000 R08: 00007ffd444d0304 R09: 000000000000000c [ 709.405402][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 709.416571][ T27] R13: 0000000000000000 R14: 00007f5786e1b670 R15: 0000000000000000 [ 709.425397][ T27] [ 709.428596][ T27] INFO: task syz.4.3144:13521 blocked for more than 145 seconds. [ 709.437246][ T27] Not tainted 5.15.161-syzkaller #0 [ 709.445047][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 709.454922][ T27] task:syz.4.3144 state:D stack:27168 pid:13521 ppid: 13365 flags:0x00004004 [ 709.464645][ T27] Call Trace: [ 709.467942][ T27] [ 709.471291][ T27] __schedule+0x12c4/0x45b0 [ 709.475849][ T27] ? release_firmware_map_entry+0x190/0x190 [ 709.483639][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 709.489423][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 709.494652][ T27] schedule+0x11b/0x1f0 [ 709.500758][ T27] schedule_preempt_disabled+0xf/0x20 [ 709.506154][ T27] __mutex_lock_common+0xe34/0x25a0 [ 709.512471][ T27] ? tun_chr_close+0x3a/0x1b0 [ 709.518119][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 709.523814][ T27] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 709.531748][ T27] ? __rwlock_init+0x140/0x140 [ 709.536561][ T27] mutex_lock_nested+0x17/0x20 [ 709.541842][ T27] tun_chr_close+0x3a/0x1b0 [ 709.547354][ T27] ? tun_chr_open+0x4d0/0x4d0 [ 709.552712][ T27] __fput+0x3bf/0x890 [ 709.556836][ T27] task_work_run+0x129/0x1a0 [ 709.561937][ T27] exit_to_user_mode_loop+0x106/0x130 [ 709.567359][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 709.573374][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 709.579250][ T27] do_syscall_64+0x47/0xb0 [ 709.583684][ T27] ? clear_bhb_loop+0x15/0x70 [ 709.588382][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 709.594822][ T27] RIP: 0033:0x7f4dbf04ebd9 [ 709.599549][ T27] RSP: 002b:00007ffe3090af18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 709.608068][ T27] RAX: 0000000000000000 RBX: 00000000000884b1 RCX: 00007f4dbf04ebd9 [ 709.618985][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 709.628276][ T27] RBP: ffffffffffffffff R08: 0000000000000001 R09: 000000053090b24f [ 709.644944][ T27] R10: 00007f4dbeed9000 R11: 0000000000000246 R12: 00007f4dbf1dcf6c [ 709.655357][ T27] R13: 0000000000000032 R14: 00007f4dbf1dea60 R15: 00007f4dbf1dcf60 [ 709.669678][ T27] [ 709.672804][ T27] [ 709.672804][ T27] Showing all locks held in the system: [ 709.687038][ T27] 3 locks held by kworker/0:1/13: [ 709.695632][ T27] #0: ffff8880230eb138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 709.713373][ T27] #1: ffffc90000d27d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 709.736176][ T27] #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 709.747444][ T27] 1 lock held by khungtaskd/27: [ 709.759440][ T27] #0: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 709.775913][ T27] 4 locks held by kworker/u4:4/1346: [ 709.782772][ T27] #0: ffff888011dcd138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 709.799489][ T27] #1: ffffc9000562fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 709.815595][ T27] #2: ffffffff8d9dc790 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 709.828142][ T27] #3: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit+0xe/0x20 [ 709.843662][ T27] 2 locks held by getty/3264: [ 709.848461][ T27] #0: ffff88814b4c6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 709.862033][ T27] #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 709.877814][ T27] 3 locks held by kworker/0:11/3992: [ 709.885639][ T27] #0: ffff888011c71938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 709.902713][ T27] #1: ffffc90003377d20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 709.916297][ T27] #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x7f/0xb70 [ 709.933913][ T27] 3 locks held by kworker/1:12/4233: [ 709.941705][ T27] #0: ffff8880230eb138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 709.957602][ T27] #1: ffffc900037d7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 709.978550][ T27] #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 709.988927][ T27] 1 lock held by syz-executor/13170: [ 709.994256][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 710.011909][ T27] 1 lock held by syz-executor/13395: [ 710.017223][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.036381][ T27] 1 lock held by syz.1.3140/13514: [ 710.044080][ T27] 1 lock held by syz-executor/13515: [ 710.054382][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.066573][ T27] 1 lock held by syz.4.3144/13521: [ 710.076522][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 710.089405][ T27] 1 lock held by syz-executor/13525: [ 710.094714][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.112446][ T27] 1 lock held by syz-executor/13527: [ 710.117786][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.129692][ T27] 1 lock held by syz-executor/13530: [ 710.136734][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.152423][ T27] 1 lock held by syz-executor/13536: [ 710.158184][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.175819][ T27] 1 lock held by syz-executor/13540: [ 710.186840][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.198878][ T27] 1 lock held by syz-executor/13543: [ 710.204191][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.221803][ T27] 1 lock held by syz-executor/13547: [ 710.227949][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.245297][ T27] 1 lock held by syz-executor/13548: [ 710.251055][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.260850][ T27] 1 lock held by syz-executor/13554: [ 710.266148][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.275763][ T27] 1 lock held by syz-executor/13557: [ 710.281220][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.290905][ T27] 1 lock held by syz-executor/13560: [ 710.296301][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.305967][ T27] 1 lock held by syz-executor/13564: [ 710.311390][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.320938][ T27] 1 lock held by syz-executor/13566: [ 710.326243][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 710.348316][ T27] [ 710.350830][ T27] ============================================= [ 710.350830][ T27] [ 710.359579][ T27] NMI backtrace for cpu 0 [ 710.363943][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.161-syzkaller #0 [ 710.372118][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 710.382683][ T27] Call Trace: [ 710.385972][ T27] [ 710.389400][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 710.394283][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 710.400087][ T27] ? panic+0x860/0x860 [ 710.404326][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 710.409643][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 710.414615][ T27] ? __wake_up_klogd+0xd5/0x100 [ 710.419942][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 710.426244][ T27] ? _printk+0xd1/0x120 [ 710.430435][ T27] ? panic+0x860/0x860 [ 710.434524][ T27] ? __wake_up_klogd+0xcc/0x100 [ 710.439390][ T27] ? panic+0x860/0x860 [ 710.443482][ T27] ? __rcu_read_unlock+0x92/0x100 [ 710.448526][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 710.454611][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 710.460702][ T27] watchdog+0xe72/0xeb0 [ 710.464885][ T27] kthread+0x3f6/0x4f0 [ 710.468962][ T27] ? hungtask_pm_notify+0x50/0x50 [ 710.474087][ T27] ? kthread_blkcg+0xd0/0xd0 [ 710.478694][ T27] ret_from_fork+0x1f/0x30 [ 710.483145][ T27] [ 710.486956][ T27] Sending NMI from CPU 0 to CPUs 1: [ 710.492620][ C1] NMI backtrace for cpu 1 [ 710.492634][ C1] CPU: 1 PID: 13514 Comm: syz.1.3140 Not tainted 5.15.161-syzkaller #0 [ 710.492654][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 710.492664][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x60 [ 710.492690][ C1] Code: ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 83 fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 14 16 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 [ 710.492705][ C1] RSP: 0018:ffffc90003816808 EFLAGS: 00000246 [ 710.492721][ C1] RAX: ffffffff842c97b3 RBX: 0000000000000001 RCX: ffff888057af0000 [ 710.492735][ C1] RDX: ffffc9000b3aa000 RSI: 000000000003ffff RDI: ffff888019bb5490 [ 710.492748][ C1] RBP: ffff888019bb5490 R08: dffffc0000000000 R09: fffff52000702cc9 [ 710.492762][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 710.492775][ C1] R13: ffff888019bb5400 R14: dffffc0000000000 R15: 0000000000000001 [ 710.492788][ C1] FS: 00007f1e6e16a6c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 710.492804][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 710.492817][ C1] CR2: 0000560161290f20 CR3: 0000000018674000 CR4: 00000000003506e0 [ 710.492832][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 710.492843][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 710.492854][ C1] Call Trace: [ 710.492859][ C1] [ 710.492866][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 710.492886][ C1] ? read_lock_is_recursive+0x10/0x10 [ 710.492905][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 710.492923][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 710.492949][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 710.492967][ C1] ? nmi_handle+0xf7/0x370 [ 710.492986][ C1] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 710.493004][ C1] ? default_do_nmi+0x62/0x150 [ 710.493024][ C1] ? exc_nmi+0xa8/0x100 [ 710.493041][ C1] ? end_repeat_nmi+0x16/0x31 [ 710.493062][ C1] ? radix_tree_lookup+0x23/0x280 [ 710.493081][ C1] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 710.493100][ C1] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 710.493119][ C1] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 710.493138][ C1] [ 710.493143][ C1] [ 710.493148][ C1] radix_tree_lookup+0x23/0x280 [ 710.493168][ C1] tcf_idr_check_alloc+0x87/0x380 [ 710.493189][ C1] tcf_police_init+0x294/0x17c0 [ 710.493206][ C1] ? netlink_rcv_skb+0x1cf/0x410 [ 710.493221][ C1] ? netlink_unicast+0x7b6/0x980 [ 710.493241][ C1] ? __se_sys_sendmsg+0x19a/0x260 [ 710.493266][ C1] ? tcf_police_search+0x40/0x40 [ 710.493296][ C1] ? tcf_action_init_1+0x226/0x7f0 [ 710.493313][ C1] ? nla_memcpy+0x56/0xb0 [ 710.493333][ C1] ? memcpy+0x3c/0x60 [ 710.493353][ C1] ? tcf_police_search+0x40/0x40 [ 710.493370][ C1] tcf_action_init_1+0x50f/0x7f0 [ 710.493394][ C1] ? tc_action_load_ops+0x550/0x550 [ 710.493412][ C1] ? read_lock_is_recursive+0x10/0x10 [ 710.493429][ C1] ? rcu_lock_release+0x5/0x20 [ 710.493459][ C1] tcf_action_init+0x2f3/0x750 [ 710.493480][ C1] ? tcf_action_init_1+0x7f0/0x7f0 [ 710.493513][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 710.493546][ C1] ? apparmor_capable+0x12e/0x190 [ 710.493567][ C1] ? __nla_parse+0x3c/0x50 [ 710.493591][ C1] tc_ctl_action+0x49b/0xd00 [ 710.493615][ C1] ? tcf_free_cookie_rcu+0x40/0x40 [ 710.493633][ C1] ? __mutex_lock_common+0x15a0/0x25a0 [ 710.493685][ C1] ? tcf_free_cookie_rcu+0x40/0x40 [ 710.493704][ C1] rtnetlink_rcv_msg+0x993/0xee0 [ 710.493729][ C1] ? rtnetlink_bind+0x80/0x80 [ 710.493749][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 710.493767][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 710.493786][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 710.493804][ C1] ? local_bh_enable+0x5/0x20 [ 710.493821][ C1] ? _local_bh_enable+0xa0/0xa0 [ 710.493843][ C1] ? __dev_queue_xmit+0x1c56/0x3230 [ 710.493869][ C1] ? __copy_skb_header+0x47b/0x600 [ 710.493888][ C1] ? dev_queue_xmit+0x20/0x20 [ 710.493903][ C1] ? memcpy+0x3c/0x60 [ 710.493920][ C1] ? __copy_skb_header+0x47b/0x600 [ 710.493945][ C1] netlink_rcv_skb+0x1cf/0x410 [ 710.493962][ C1] ? rtnetlink_bind+0x80/0x80 [ 710.493982][ C1] ? netlink_ack+0xb10/0xb10 [ 710.494006][ C1] netlink_unicast+0x7b6/0x980 [ 710.494030][ C1] ? netlink_detachskb+0x90/0x90 [ 710.494050][ C1] ? __virt_addr_valid+0x39e/0x450 [ 710.494066][ C1] ? 0xffffffff81000000 [ 710.494079][ C1] ? __check_object_size+0x300/0x410 [ 710.494099][ C1] ? bpf_lsm_netlink_send+0x5/0x10 [ 710.494117][ C1] netlink_sendmsg+0xa30/0xd60 [ 710.494140][ C1] ? netlink_getsockopt+0x5b0/0x5b0 [ 710.494156][ C1] ? plist_check_list+0x20d/0x220 [ 710.494175][ C1] ? aa_sock_msg_perm+0x91/0x150 [ 710.494194][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 710.494210][ C1] ? security_socket_sendmsg+0x7d/0xa0 [ 710.494227][ C1] ? netlink_getsockopt+0x5b0/0x5b0 [ 710.494245][ C1] ____sys_sendmsg+0x59e/0x8f0 [ 710.494263][ C1] ? iovec_from_user+0x300/0x390 [ 710.494286][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 710.494314][ C1] ___sys_sendmsg+0x252/0x2e0 [ 710.494337][ C1] ? __sys_sendmsg+0x260/0x260 [ 710.494380][ C1] ? __fdget+0x191/0x220 [ 710.494400][ C1] __se_sys_sendmsg+0x19a/0x260 [ 710.494420][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 710.494445][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 710.494465][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 710.494485][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 710.494507][ C1] do_syscall_64+0x3b/0xb0 [ 710.494524][ C1] ? clear_bhb_loop+0x15/0x70 [ 710.494541][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 710.494559][ C1] RIP: 0033:0x7f1e6f6e9bd9 [ 710.494574][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.494593][ C1] RSP: 002b:00007f1e6e16a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.494611][ C1] RAX: ffffffffffffffda RBX: 00007f1e6f877f60 RCX: 00007f1e6f6e9bd9 [ 710.494624][ C1] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 710.494635][ C1] RBP: 00007f1e6f758a98 R08: 0000000000000000 R09: 0000000000000000 [ 710.494646][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.494657][ C1] R13: 000000000000000b R14: 00007f1e6f877f60 R15: 00007ffdb63e10e8 [ 710.494678][ C1] [ 710.703010][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 711.135715][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.161-syzkaller #0 [ 711.143792][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 711.153852][ T27] Call Trace: [ 711.157138][ T27] [ 711.160080][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 711.164789][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 711.170620][ T27] ? panic+0x860/0x860 [ 711.175432][ T27] panic+0x318/0x860 [ 711.179433][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 711.185164][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 711.191437][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 711.196830][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 711.203435][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 711.209605][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 711.215814][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 711.221978][ T27] watchdog+0xeb0/0xeb0 [ 711.226154][ T27] kthread+0x3f6/0x4f0 [ 711.230226][ T27] ? hungtask_pm_notify+0x50/0x50 [ 711.235261][ T27] ? kthread_blkcg+0xd0/0xd0 [ 711.240132][ T27] ret_from_fork+0x1f/0x30 [ 711.244707][ T27] [ 711.248036][ T27] Kernel Offset: disabled [ 711.252377][ T27] Rebooting in 86400 seconds..