last executing test programs: 2m33.255799015s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="66bad004ec66baf80cb8e44eda8def66bafc0cb886e90000effdd93ac744240000980000c74424029100c0fe0f01cb0f011c24c74424002b010000c74424020d000000ff2c243e65f3420f0936262626460f01cf260f01c966b8e7008ec867d9e9", 0x61}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m31.12148865s ago: executing program 2 (id=12): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 1m40.575068917s ago: executing program 0 (id=165): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xb0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x10, 0xfffffffffffffffc}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x3058c0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000049c0)='freezer.self_freezing\x00', 0x275a, 0x0) fallocate(r6, 0x65, 0x0, 0x1000f4) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x2f4, [0x20000780, 0x0, 0x0, 0x200007b0, 0x20000936], 0x0, &(0x7f0000000240), &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x3, 0x4305, 'rose0\x00', 'pimreg0\x00', 'veth1_vlan\x00', 'tunl0\x00', @link_local, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x11e, 0x11e, 0x156, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth0_to_batadv\x00', 'wg0\x00', 0x20, 0x3, 0x7fff, 0x0, 0x1, 0x44a4, {0x8953}, {0x1}}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x1, 0x4}}}], [], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x5, 0x1, 0x899f, 'bridge_slave_0\x00', 'ip6gre0\x00', 'netpci0\x00', 'batadv_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, [0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0xd6, 0x10e, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffd}}}}]}]}, 0x36c) ioctl$FICLONE(r4, 0x40049409, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r1, r0, 0x0, 0x3a) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x85, 0x9a, 0x93, 0x40, 0x57c, 0x2200, 0x390, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd6, 0x47, 0xae}}]}}]}}, 0x0) 1m37.463385891s ago: executing program 0 (id=168): r0 = epoll_create1(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000ac0)={0x2004}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 1m37.374930369s ago: executing program 0 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m37.304333175s ago: executing program 0 (id=170): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f00000014c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff00200000000808"], 0x0) 1m37.179266036s ago: executing program 0 (id=171): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x8100}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000240)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, r1, 0xd2f68000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000140)) socket$inet(0x2, 0x3, 0x5) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xce) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x158) socket(0x1000000000000010, 0x80802, 0x0) chdir(0x0) rt_sigprocmask(0x1, &(0x7f000078b000), 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800060000280003000205119078000000000000000083049a5d00000000001090780200000000000000"], 0x0) 1m36.655448075s ago: executing program 0 (id=172): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 21.600556227s ago: executing program 4 (id=357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x10200}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.224168581s ago: executing program 4 (id=358): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 21.103097223s ago: executing program 4 (id=359): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0) 20.319239414s ago: executing program 4 (id=361): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000ac0)=""/100, 0x64}], 0x1, 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/126) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012, 0x516}}, 0x50) 18.309292238s ago: executing program 4 (id=366): socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") r0 = dup(0xffffffffffffffff) write$FUSE_DIRENTPLUS(r0, 0x0, 0x138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x1a00) symlink(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='./control\x00') 17.261317223s ago: executing program 4 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)='9', 0x1}], 0x3) 8.711176504s ago: executing program 3 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(0x0, 0x1, 0x541002) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) getpid() openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x4080) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x34}}, 0x0) 8.032825286s ago: executing program 3 (id=392): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000001240)='./file1\x00', 0x4c92, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRESOCT], 0xff, 0x69a, &(0x7f0000001440)="$eJzs3ctvHVcdB/DvXF8/biq5bpqmAVXCNFJBRCR2rBTCJgEhFKQKVWHB2mqcxoqTBsdFaRfEPCS2LPgDyiJsYAVCSEhIkcoadhU7i1UlJDZdpV0waObOvb52rl952YbPJ5p7zpkzc+Y3v3ncR2RNgP9bl06lfT+dXDr1xp2qvXZvbmnt3tyNXj3JeJJW0u4WKW4mxYfJxXSnfK6a2QxXbLWdXy2ev/zRJ2sfd1vtrI9XvXS2DrC9m71YbaZMJxlpysewYby3Hm288fVq0c9MlbCTvcTBfhtNUm7ww+PrPcOUIwONLa934PAouu+bA7rX/1RyJMlE7w1ttdvZevYR7mhP96LVpxcHAAAAHBjPP7ib3MnkfscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh0nz/P+imVq9+nSK3vP/xwaesT+2z+FubfvIJnqV+61nEQwAAAAAAAAAPF1feJDfXi7LyV67LOr/83+1bhyrX5/Lu7mdhSzndO5kPitZyXJmk0wNDDR2Z35lZXm2t+ZnZVlusebZoWue3WXAnSex1wAAAAAAAADwP+NCU/40lzK5z7EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAGRTLSLerpWK8+lVY7yUSSsWq51eTvvfphdn+/AwAAAIBn4PkHeZA7mey1y6L+zn+8/t4/kXdzMytZzEqWspAr9W8B3W/9rbV7c0tr9+ZuVNPD437z3+v1P0zuGEY9Yrq/PQzf8ol6iU6uZrGeczpv5Z0s5Upa9ZqVE714hsf1kyqm4kJXWe4uQVeastrzXzblwTBVZ2S0n5GZJrYqGy9sn4nBo/MIW5pNq//Lz7E95PzCtlsp/tM7Jkd6c5Lnvrtzzkf3tDOPZXMmzg6cfce3z0TypT/+7gfXlm5ev1asnjo4p9EejP9z/arZnIm5gUy8vOtMXL19ODOxWSsv9euX8p18P6cynTeznMX8KPNZyUKm8+26Nt+cz9Xr1PaZurih9eZOUYw1x2VkU0xffL5bbhfTq/W6k1nM9/JOrmQhr9f/zmY2X8u5nMv5gSP80i6u+taQq/5PWwd/8stNpZPkF015MFR5fWEgr4P33Km6b3BOK+V4d72jT+ze2Nf+fFOpjsTPmvJg6GdiIv13iV50L/YyMDo0E7+ubyu3l25eX742f2vTuMXq8O29lo27f3BuJNX5crQ6WHVr49lR9b04tG+27jvW72tt7vtNp9+305U61nyGe3iks3Xfy0P75uq+EwN965+3PivLsvt5C4AD78hXjox1/tX5W+eDzs871zpvTHxr/Ovjr4xl9K+j32jPjLzWeqX4fT7Ij7PzN3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBHt997//r80tLC8qZKWZZ3N8xZfXiZJ1lJO9kw5y9/HlgmSf0woN0PWC19sZXUc9ppKnsL7O7ed6d+GFKSR0rCP5pj8jTz/GQrE1ueP5srn5ZleTBi3k2lbByUePajsn/3JODZOLNy49aZ2++9/9XFG/NvL7y9cPP8uXPnZ86fe33uzNXFpYWZ7ut+Rwk8DQOfwAEAAAAAAAAAAIBDYnd/nFM83t/2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyGS6fSvp8iszOnZ6r22r25pWrq1deX/DRJK0kxnRQfJhfTnTKVo/2Fiq22s5pc/uiTtY+7rXYz1cu3tltvd1abKdNJRppyiIlhM8u7W41X1OPc2nq8XSr6e1gl7GQvcbDf/hsAAP//tnwXdA==") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file1\x00', 0x19500cd, 0x0, 0xfe, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 7.486875716s ago: executing program 3 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000202010100000000000000000a0000003c0002800c00028005000100060000002c000180140003"], 0x50}}, 0x0) 7.101021941s ago: executing program 3 (id=394): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000ac0)=""/100, 0x64}], 0x1, 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/126) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012, 0x516}}, 0x50) 5.880323243s ago: executing program 3 (id=396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000280)=[@register_looper, @free_buffer={0x40086303, r4}, @release, @increfs_done={0x40106308, 0x3}], 0x3b, 0x100000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.36106055s ago: executing program 1 (id=398): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_nolock}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ptrace(0x8, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f00000011c0)="95f9adaf84f3e656efa591762667d866201bd77d148bb471546c7ea421ea53ce584e657f43089c9317555f99e96ab9b9e7697cfa232a41e1f12e0b57e47aa5206f9c3410e94c4e73141160ae8475209eeb0501ebc9062c5062df74ed87514a6542597c2b3671f81b3a8765c02ae16f03363833cc9c64ab0d1763d6c6bf3b0fac72d4ea34050cf9b468e879f4ad5702ea8245cec4ba7dcdbb2bd1883b9c328a270028f164d5d0c2aacedc87afea8ae7d2fb95c4aa1386ba4d9510b3aa5a59d7e834db83c1b08ed0e04f96ec947ae62814b7ea57a60269faa77176c59a4a39d9d67bb2128a77116242e98fe561ab82e65c3e781f55390de95bfea45264229951f082d6e8283595b5272c7ff42c2e82c5e34629e85d8a4bc64b79d811d92747cb4882075ae10d74fa638c77039180bf133c5086d604bacfae3039b29302d1d1f9f74cfbfd8b96c401739224579bc5e6318e7b6f2e677ec95b0cd6189735da1883c0d087b9b388040a80554055cb3cbeabaaef9c9738b8f3d38101783be1c93676b4de71d332fcd9509f9470d071125af3de02a89f36d4390538fe4550fb67dc4d430f09554e566414b4c17fec2446a09020e8b88c83783269b26846db806544c40ac89047ab86ec97fedc986eb3703e68591bd02f03c194d65f587e456ee584bc7dedc3b63681a030bf8383e98b5ce94d31fab332da6bb0571643fe959ffddbe2f299b5e9b1f19dba4a47f9d6cffe5bae74841592685f5a7d9da650900034ee730d0f58f533903da93d58a9a94d57cae590ec7971090581dcfb773303f1fc6d073e4731c6a217e50add946d3077420018e04250b542dbf60e1e70283f7101ec1ac688281fb35a651f4bb2688fbe9db27fa4dba705ce3e3c755eedd4e476b68f8d04f8541cdb415487ebd66012244b83ef5d1d5a6bf75d3dbb41cda0c7b4ebb87a637a37b9898222ad19495ef3d571887a394810f51e5483b57794366d74769006d37965e3c3f4714ea43acd060561d547fb42fc5ce41032f9ae61b25e2eee80eadb2d0605350fba493e47d272f3c5e86f3fc3bb8771b34f5b5c900cbf86bee6104d59ec1808ab2e5b25f3caad8029e5addd875e60fc38abeb4f5afba33028d644e25008d643f7303bcd3492e40be65c032bf766fff79c8ae51ab31d44f38730a06142ff03e81b68c3c58a5c94af74e3c945b6668600b001400881e7d1521093f09ab62b79ead8911d3a9e64546ef4c6cf61ef7085a9ff21b09924c442b70568fa01ab3588134239a002d5f0666536c9cbdd8acf59d6aaf085c09d6a62e3f6457a3b591ae502bb5eb04d66243b8c9b1c47f5d3a99f3852de2e8432e194cdedf5484bc002c37d235e040bb7e901a932213af570109d9bb7c8f34f1d75afd03bd889266c162e58be60d18e1e31247188e25eed84cd3cd96f14f3478398cedacf132b7e491909ded5c8031ddc7d3105264e06f905e66f913b15e1c36cce4a13c4eeef756dcf09e6e9d0aac7e7c9ae136f91305fb37f0b97d7cd8f934b7901ca8fa3daf0eeae9c8097cd49699d9ca9a0ddd4629b1475da6f99737f06c320fc928a56d663fba018789e6a4b880158b6d0aebe0875af4993d944552ec38b2e65895c67d4deb9e4a316e6a85e0942cd119981ebf8e77a1c3f8e941e351735d8e262d23d07130f517170bcb4cd1a2dcde1a4e30f26bd8c0e5dc1f8c97d2076a6963d78b5e3cf1ef25df99d7229e0ecc19f31806d9923f2c6d002ba98bcf1df9c60b739bf2533498cebdff03eb3caaf2f9afb532a36a680d70d8b9579a29e2ee5e60f2a0346d8253e56bffb1c2e3ca6776d3f624a4d748f3e375e618b3f975349f1a7952d227f5ee8aa630289ba1b9072d3ace90ce93271cab41a18e27e0b7a46f89d945a6d5d66b9b51a52210cd665be6dc7b2ffe29dab762050cff329da765c236787ee21bc872c7d859ef49872d171a1267737345dc15b9c502389baa683a489dfa7f2a1587d868c8a097f2262566f3a4ce65f92cc44b8dc3fa0ccc2112786c198ca214c3ae77e055af658e3c074ca8856469c83be7a96512271fdbd4f02ff20f237d4a9dde805f9355215041c85cb148a034816d240a39b5c1b4d0b4da42e79a5997b6e45587bd9123c5a9b91e245019680059db003a26296cf75ff503412129040cd6690c166dac9ea46c608c36a72812c72f91a82c476a89d2aa0601e3a445b34aa960e7653bc5bbc6696f78055f323c9d0229290fc84612bf6d8d79140420f8572325548a023727bea719d3d9eb88080f247f22ba292242f4568906e33983ddbde7d2bb6b554f518d3100657a86149b68de726a2f6bdb99b80b805411b84651466ada12dcb428520cd51a17032b8f871d75254d8881e645898136edc583ac9efc04f807ae139740cea3660aed0279e6c2cbd60afc1ee9fcd755fa7e1705c12ad1cff7e5e920ef08cbd85bea7b9d0ceb0404a59267bdf3d8b80d98f4aeb5470f2d826d0b7e3ba820479574d1ab6c8fa909162e961980a6e307272d16ac4a8d4d48818ac0175131f4a9c902d1d16b7f69f668af29f1f28d29268673dae59a7ea370f41170cdfbe131ac60a8d22bd6bc4c8cece88d4465576f379577593e00c2de3ef046c1e7cdb74a0dec088062b3b9639bb19b32d562cb9eb1d889f8324aee384c7cb6d3081618e405d820f07dc73fb8828530c6aee13b680586a634f4950f777d80d460f4c5ac042559b487815c86d72fe991f6ce1e55b689fd9cce868d04c52df35b80e8da37085646f782d4a1fedc8d25efbf79b31096736c4adbcd138ae8c8de8448d2d478c9466e830188296d44ae17ac1dafbe3327946630963309977c05198c7dfb305e8bdaee330ff84373ad084a46b8994235a4fc78b7ed4dc4e921cdccc4a", 0x800}, {&(0x7f00000021c0)="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", 0x1000}], 0x2, 0x7fff, 0x0, 0x0) 5.163748598s ago: executing program 3 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(0x0, 0x1, 0x541002) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) getpid() openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x4080) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x34}}, 0x0) 4.104066925s ago: executing program 1 (id=401): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendto$unix(r3, 0x0, 0x0, 0x2000c101, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 2.765629497s ago: executing program 1 (id=402): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 2.08365741s ago: executing program 1 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x220000, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x290, &(0x7f0000000780)="$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") mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4080, &(0x7f0000000f80)=ANY=[@ANYRESDEC]) socket(0x10, 0x400000000080803, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000fdffffffffffffff00950000000000040000cb97a6b037f12e379abef7477aa126e644a964fc0dde3eab9cd2286b31ab2f57d4ab21895c8b82a50784", @ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) lseek(r5, 0x101, 0x0) getdents(r5, &(0x7f0000000640)=""/103, 0x67) close(0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000008fc0)={&(0x7f0000008f80)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4080) 915.020846ms ago: executing program 1 (id=404): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="fd901400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket(0x2, 0x1, 0xfffffff9) shutdown(r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00128800631177fbac14030a44079f03fe800000ff020000000000000000ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 0s ago: executing program 1 (id=405): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x400) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) sendmsg(0xffffffffffffffff, 0x0, 0x44004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): ed state [ 112.432965][ T4380] device bridge_slave_1 entered promiscuous mode [ 112.484323][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.503535][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.568502][ T4294] device veth1_vlan entered promiscuous mode [ 112.672901][ T4380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.775758][ T4380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.821876][ T4294] device veth0_macvtap entered promiscuous mode [ 112.853621][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.865406][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.888446][ T4400] device bridge_slave_0 entered promiscuous mode [ 112.914961][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.936304][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.966518][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.021553][ T4294] device veth1_macvtap entered promiscuous mode [ 113.038842][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.056383][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.079419][ T4400] device bridge_slave_1 entered promiscuous mode [ 113.190613][ T4380] team0: Port device team_slave_0 added [ 113.206845][ T4400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.216064][ T1966] Bluetooth: hci6: command 0x041b tx timeout [ 113.241924][ T4380] team0: Port device team_slave_1 added [ 113.279453][ T4400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.316641][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.340705][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.352132][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.363378][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.373300][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.384169][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.395705][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.411537][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.422327][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.433269][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.454448][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.529562][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.564054][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.573872][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.587454][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.607730][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.618290][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.629706][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.640098][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.651364][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.666682][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.683810][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.696820][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.708547][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.721322][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.730662][ T4380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.737762][ T4380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.765291][ T4380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.781328][ T4380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.789348][ T4380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.817441][ T4380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.835424][ T4400] team0: Port device team_slave_0 added [ 113.850045][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.863539][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.896511][ T4294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.907091][ T4294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.916091][ T4294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.926088][ T4294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.946411][ T4400] team0: Port device team_slave_1 added [ 114.048256][ T4380] device hsr_slave_0 entered promiscuous mode [ 114.068290][ T4380] device hsr_slave_1 entered promiscuous mode [ 114.083203][ T4380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.091949][ T4380] Cannot create hsr debugfs directory [ 114.113617][ T4400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.120625][ T4400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.161533][ T4400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.216926][ T4400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.225507][ T4400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.252055][ T4400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.266856][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 114.434519][ T3806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.488999][ T4400] device hsr_slave_0 entered promiscuous mode [ 114.496846][ T4400] device hsr_slave_1 entered promiscuous mode [ 114.504978][ T4400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.513822][ T4400] Cannot create hsr debugfs directory [ 114.545741][ T3806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.573236][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.587867][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.600826][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.622826][ T1966] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 114.645707][ T3806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.695457][ T3794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.705416][ T3794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.714493][ T3806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.731911][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.882718][ T1966] usb 4-1: Using ep0 maxpacket: 32 [ 115.178441][ T4380] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.502633][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.804070][ T1966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.819139][ T1966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.834024][ T1966] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 115.845170][ T1966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.894391][ T3616] Bluetooth: hci6: command 0x040f tx timeout [ 115.992881][ T1966] usb 4-1: config 0 descriptor?? [ 116.293814][ T1966] hub 4-1:0.0: USB hub found [ 116.352644][ T13] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 116.359248][ T3646] Bluetooth: hci1: command 0x0419 tx timeout [ 116.370898][ T4380] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.372445][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.410182][ T13] usb 1-1: config 0 descriptor?? [ 116.452136][ T4380] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.455580][ T13] bfusb: probe of 1-1:0.0 failed with error -5 [ 116.522591][ T1966] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 116.565239][ T4380] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.832667][ T1966] usbhid 4-1:0.0: can't add hid device: -71 [ 116.838974][ T1966] usbhid: probe of 4-1:0.0 failed with error -71 [ 116.887008][ T1966] usb 4-1: USB disconnect, device number 10 [ 117.174588][ T4380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.224934][ T4380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.281988][ T4534] loop3: detected capacity change from 0 to 512 [ 117.306776][ T4380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.320481][ T4380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.409705][ T3806] device hsr_slave_0 left promiscuous mode [ 117.410161][ T4534] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.433702][ T4534] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038 (0x7fffffff) [ 117.447488][ T3806] device hsr_slave_1 left promiscuous mode [ 117.462617][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.482097][ T4534] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.166: Directory hole found for htree leaf block 0 [ 117.482439][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.506512][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.509250][ T4534] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz.3.166: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 117.521067][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.553270][ T4534] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz.3.166: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 117.553446][ T3806] device bridge_slave_1 left promiscuous mode [ 117.583450][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.593208][ T4534] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz.3.166: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 117.615633][ T4534] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz.3.166: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 117.623037][ T3806] device bridge_slave_0 left promiscuous mode [ 117.642829][ T4538] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.166: Directory hole found for htree leaf block 0 [ 117.649581][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.659282][ T4534] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz.3.166: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 117.684850][ T4534] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz.3.166: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 117.705589][ T4534] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 18: comm syz.3.166: lblock 23 mapped to illegal pblock 18 (length 1) [ 117.730162][ T4534] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 19: comm syz.3.166: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 117.753592][ T3806] device veth1_macvtap left promiscuous mode [ 117.759930][ T3806] device veth0_macvtap left promiscuous mode [ 117.767083][ T3806] device veth1_vlan left promiscuous mode [ 117.774762][ T3806] device veth0_vlan left promiscuous mode [ 117.942679][ T4506] usb 1-1: USB disconnect, device number 2 [ 117.951361][ T1966] Bluetooth: hci6: command 0x0419 tx timeout [ 118.239788][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 118.281890][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 118.298814][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.314734][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.332596][ T1966] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 118.406986][ T3806] bond0 (unregistering): Released all slaves [ 118.472481][ T4400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.486575][ T4400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.511831][ T4400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.528717][ T4400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.622782][ T1966] usb 4-1: Using ep0 maxpacket: 32 [ 118.771745][ T4380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.772666][ T1966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.824860][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.842692][ T1966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.853737][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.883437][ T1966] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.889843][ T4380] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.911365][ T1966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.926306][ T4400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.937304][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.959691][ T1966] usb 4-1: config 0 descriptor?? [ 118.966052][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.007418][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.015315][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.037179][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.055768][ T1966] hub 4-1:0.0: USB hub found [ 119.082434][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.091325][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.100638][ T3659] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.107794][ T3659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.121460][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.132321][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.140531][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.150686][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.160703][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.173338][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.182686][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.197392][ T4400] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.224527][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.234460][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.244025][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.259692][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.297193][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.313639][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.330445][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.337665][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.346895][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.356256][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.362687][ T1966] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 119.368279][ T3659] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.379276][ T3659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.387665][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.399296][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.409054][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.419603][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.431663][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.450943][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.476265][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.497933][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.514140][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.561669][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.574140][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.596562][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.625690][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.661288][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.663587][ T1966] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 119.687580][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.727011][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.894441][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.914924][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.939970][ T4380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.992993][ T1966] usb 4-1: USB disconnect, device number 11 [ 120.102171][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.124827][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.159633][ T4400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.230187][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.259945][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.328254][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.346782][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.382093][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.411751][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.446927][ T4400] device veth0_vlan entered promiscuous mode [ 120.480921][ T4609] device batadv_slave_1 entered promiscuous mode [ 120.515999][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.526961][ T4609] loop3: detected capacity change from 0 to 512 [ 120.534132][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.554802][ T4400] device veth1_vlan entered promiscuous mode [ 120.633366][ T4609] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 120.682621][ T4609] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038 (0x7fffffff) [ 120.703037][ T4380] device veth0_vlan entered promiscuous mode [ 120.709950][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.718784][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.759068][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.774718][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.810263][ T4400] device veth0_macvtap entered promiscuous mode [ 120.859553][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.894580][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.921352][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.955348][ T4400] device veth1_macvtap entered promiscuous mode [ 121.002182][ T4380] device veth1_vlan entered promiscuous mode [ 121.029714][ T4607] device batadv_slave_1 left promiscuous mode [ 121.060292][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.081337][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.094875][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.108231][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.118889][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.133049][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.143600][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.154566][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.172129][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.191560][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.214182][ T4400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.252728][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.261137][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.308893][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.330013][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.342873][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.354738][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.369307][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.382007][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.411844][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.430401][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.443057][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.452989][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.478736][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.491528][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.503777][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.515433][ T4400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.561426][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.584249][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.601579][ T4631] loop3: detected capacity change from 0 to 1024 [ 121.603782][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.627416][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.644710][ T4380] device veth0_macvtap entered promiscuous mode [ 121.656365][ T4400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.676867][ T4400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.706046][ T4400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.722431][ T4400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.749075][ T4380] device veth1_macvtap entered promiscuous mode [ 121.896428][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.935249][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.946113][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.957908][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.974008][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.991547][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.010954][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.022929][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.035064][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.045619][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.061940][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.073219][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.087668][ T4380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.099238][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.110111][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.121506][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.132429][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.142685][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.155488][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.166734][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.177582][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.187557][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.198193][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.208164][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.218724][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.229977][ T4380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.247644][ T4380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.268904][ T4380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.279230][ T4380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.296605][ T4380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.311070][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.329193][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.353829][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.365246][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.377062][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.389422][ T4635] netlink: 60 bytes leftover after parsing attributes in process `syz.3.177'. [ 122.451537][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.495846][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.521249][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.630785][ T3804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.678127][ T3804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.734928][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.500052][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.518193][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.543866][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.631282][ T3659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.670702][ T3659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.700622][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.737119][ T4647] loop3: detected capacity change from 0 to 16 [ 123.832533][ T4647] erofs: (device loop3): mounted with root inode @ nid 36. [ 123.851668][ T4649] loop4: detected capacity change from 0 to 1024 [ 123.972894][ T4650] attempt to access beyond end of device [ 123.972894][ T4650] loop3: rw=524288, want=1049280, limit=16 [ 124.486642][ T4658] loop4: detected capacity change from 0 to 2048 [ 124.785366][ T4658] loop4: p1 p2 p3 [ 125.312721][ T4660] loop4: detected capacity change from 0 to 1024 [ 125.325866][ T3665] udevd[3665]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 125.340155][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 125.444636][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 125.444873][ T3664] udevd[3664]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 125.475556][ T4660] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.491148][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 125.642411][ T3613] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 125.894368][ T3613] usb 4-1: Using ep0 maxpacket: 32 [ 126.012655][ T3613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.042438][ T3613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.082352][ T3613] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 126.132379][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.173635][ T3613] usb 4-1: config 0 descriptor?? [ 126.213610][ T3613] hub 4-1:0.0: USB hub found [ 126.422484][ T3613] hub 4-1:0.0: 1 port detected [ 126.992469][ T3647] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.072505][ T1075] hub 4-1:0.0: activate --> -90 [ 127.239536][ T4682] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 127.248906][ T4682] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 127.452723][ T3647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 127.472327][ T3647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 127.519900][ T3647] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.552674][ T3647] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.563555][ T3647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.572604][ T4688] loop1: detected capacity change from 0 to 16 [ 127.581995][ T3647] usb 5-1: config 0 descriptor?? [ 127.603284][ T4672] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.645886][ T4688] erofs: (device loop1): mounted with root inode @ nid 36. [ 127.929661][ T3613] usb 4-1: USB disconnect, device number 12 [ 127.936112][ T1075] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 127.943769][ T1075] usb 4-1-port1: connect-debounce failed [ 128.080758][ T3647] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 128.113638][ T3647] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 128.177279][ T3647] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 128.380369][ T3613] usb 5-1: USB disconnect, device number 2 [ 128.653018][ T4702] loop3: detected capacity change from 0 to 128 [ 128.741963][ T4702] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 128.763301][ T4702] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038 (0x7fffffff) [ 128.918101][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 130.118956][ T4724] netlink: 'syz.3.205': attribute type 8 has an invalid length. [ 130.380925][ T4732] netlink: 32 bytes leftover after parsing attributes in process `syz.4.208'. [ 130.432686][ T4734] loop3: detected capacity change from 0 to 512 [ 130.482094][ T4734] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.209: casefold flag without casefold feature [ 130.506740][ T4734] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.209: couldn't read orphan inode 15 (err -117) [ 130.547476][ T4737] loop4: detected capacity change from 0 to 2048 [ 130.566688][ T4734] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.601646][ T4722] chnl_net:caif_netlink_parms(): no params data found [ 130.628625][ T4737] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.741466][ T4741] mmap: syz.3.209 (4741) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 130.877662][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.923740][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.975493][ T4722] device bridge_slave_0 entered promiscuous mode [ 131.007500][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.017196][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.025181][ T4749] loop1: detected capacity change from 0 to 1024 [ 131.033536][ T4722] device bridge_slave_1 entered promiscuous mode [ 131.282432][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.327515][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.517888][ T4722] team0: Port device team_slave_0 added [ 131.581265][ T4722] team0: Port device team_slave_1 added [ 131.668417][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.706391][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.742193][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.810479][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.822842][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.862331][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.986679][ T4722] device hsr_slave_0 entered promiscuous mode [ 132.015059][ T4722] device hsr_slave_1 entered promiscuous mode [ 132.034904][ T4722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.052390][ T4722] Cannot create hsr debugfs directory [ 132.162540][ T3613] Bluetooth: hci5: command 0x0409 tx timeout [ 132.360434][ T4722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.520363][ T4722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.651275][ T4722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.708547][ T4764] Invalid ELF header magic: != ELF [ 132.835383][ T4722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.893894][ T1393] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900249][ T1393] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.982846][ T4766] loop4: detected capacity change from 0 to 2048 [ 133.105507][ T4766] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.120820][ T4722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.209330][ T4722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.260597][ T4722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.299661][ T4722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.379871][ T4768] loop4: detected capacity change from 0 to 256 [ 133.511899][ T4770] loop1: detected capacity change from 0 to 2048 [ 133.717069][ T4770] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.568821][ T1075] Bluetooth: hci5: command 0x041b tx timeout [ 134.610157][ T4770] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.643065][ T4770] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 1 with error 28 [ 134.733132][ T4770] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.733132][ T4770] [ 134.798701][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.815916][ T26] audit: type=1804 audit(1726745752.127:3): pid=4777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.220" name="/newroot/13/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 134.824309][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.852315][ T4770] EXT4-fs (loop1): Total free blocks count 0 [ 134.858698][ T4770] EXT4-fs (loop1): Free/Dirty block details [ 134.910670][ T4770] EXT4-fs (loop1): free_blocks=2415919104 [ 134.944516][ T4770] EXT4-fs (loop1): dirty_blocks=32 [ 134.949760][ T4770] EXT4-fs (loop1): Block reservation details [ 134.974804][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.983877][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.033153][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.040898][ T4770] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 135.073265][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.123038][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.130162][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.172905][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.198947][ T4781] loop4: detected capacity change from 0 to 1024 [ 135.223104][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.255060][ T3659] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.262214][ T3659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.362816][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.407237][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.431307][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.440996][ T155] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 135.442177][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.466647][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.476511][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.482527][ T155] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.482527][ T155] [ 135.487139][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.523441][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.548903][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.602457][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.752776][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.767627][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.791965][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.807760][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.323201][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.336556][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.376735][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.812052][ T4782] chnl_net:caif_netlink_parms(): no params data found [ 137.209322][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.223313][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.312312][ T3632] Bluetooth: hci5: command 0x040f tx timeout [ 137.364357][ T3613] Bluetooth: hci4: command 0x0409 tx timeout [ 137.445238][ T3806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.496489][ T4806] loop4: detected capacity change from 0 to 512 [ 137.498020][ T4808] loop1: detected capacity change from 0 to 512 [ 137.536892][ T3806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.549660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.564676][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.572711][ T4808] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 137.596937][ T4722] device veth0_vlan entered promiscuous mode [ 137.603933][ T4806] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.227: casefold flag without casefold feature [ 137.656078][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.673173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.711572][ T4722] device veth1_vlan entered promiscuous mode [ 137.717888][ T4806] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.227: couldn't read orphan inode 15 (err -117) [ 137.761437][ T4806] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.814558][ T3806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.881020][ T4782] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.890390][ T4782] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.898846][ T4782] device bridge_slave_0 entered promiscuous mode [ 137.907977][ T4782] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.915191][ T4782] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.924628][ T4782] device bridge_slave_1 entered promiscuous mode [ 137.954531][ T4782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.967023][ T4782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.000402][ T4782] team0: Port device team_slave_0 added [ 138.605449][ T3806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.660334][ T4782] team0: Port device team_slave_1 added [ 138.933351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.941686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.961336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.980935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.096590][ T4722] device veth0_macvtap entered promiscuous mode [ 139.224469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.239419][ T4782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.262624][ T4782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.290902][ T4782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.318734][ T4722] device veth1_macvtap entered promiscuous mode [ 139.334741][ T4782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.351735][ T4782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.383365][ T4506] Bluetooth: hci5: command 0x0419 tx timeout [ 139.412621][ T4782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.425309][ T4829] loop3: detected capacity change from 0 to 2048 [ 139.443971][ T3612] Bluetooth: hci4: command 0x041b tx timeout [ 139.520114][ T4829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.538179][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.560873][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.579827][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.618351][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.654023][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.665928][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.676064][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.492888][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.502853][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.513482][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.523428][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.534026][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.544009][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.554540][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.567231][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.769660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.796525][ T4835] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 140.800614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.844078][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.866804][ T4835] kvm: pic: single mode not supported [ 140.867061][ T4835] kvm: pic: non byte read [ 140.878085][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.890040][ T4835] kvm: pic: level sensitive irq not supported [ 140.890131][ T4835] kvm: pic: non byte read [ 140.902748][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.902792][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.902857][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.902872][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.902884][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.902898][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.902919][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.902933][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.902953][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.902990][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.903003][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.903017][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.904819][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.936036][ T4835] kvm: pic: non byte read [ 141.062922][ T4835] kvm: pic: non byte read [ 141.067851][ T4835] kvm: pic: single mode not supported [ 141.067923][ T4835] kvm: pic: non byte read [ 141.102940][ T4835] kvm: pic: non byte read [ 141.120835][ T4835] kvm: pic: non byte read [ 141.133933][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.312857][ T4835] kvm: pic: level sensitive irq not supported [ 141.312931][ T4835] kvm: pic: non byte read [ 141.317423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.320212][ T4835] kvm: pic: single mode not supported [ 141.332413][ T4835] kvm: pic: level sensitive irq not supported [ 141.343384][ T4835] kvm: pic: non byte read [ 141.386432][ T4782] device hsr_slave_0 entered promiscuous mode [ 141.439721][ T4782] device hsr_slave_1 entered promiscuous mode [ 141.523995][ T4782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.532487][ T4506] Bluetooth: hci4: command 0x040f tx timeout [ 141.534558][ T4782] Cannot create hsr debugfs directory [ 141.554893][ T4722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.565531][ T4722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.617310][ T4722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.631736][ T4855] loop1: detected capacity change from 0 to 512 [ 141.639121][ T4852] kvm: emulating exchange as write [ 141.644816][ T4722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.692612][ T4855] EXT4-fs (loop1): Ignoring removed nobh option [ 141.698986][ T4855] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.805878][ T4855] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 141.826173][ T4855] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 142.306315][ T4871] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.242: bg 0: block 224: padding at end of block bitmap is not set [ 142.365352][ T4871] EXT4-fs (loop1): Remounting filesystem read-only [ 142.688999][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.712538][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.851224][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.880334][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.889326][ T4506] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 142.928036][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.973764][ T4846] chnl_net:caif_netlink_parms(): no params data found [ 142.988721][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.162445][ T4506] usb 4-1: Using ep0 maxpacket: 16 [ 143.205539][ T4846] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.213284][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.221739][ T4846] device bridge_slave_0 entered promiscuous mode [ 143.240823][ T4846] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.260448][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.275080][ T4846] device bridge_slave_1 entered promiscuous mode [ 143.304012][ T4506] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 143.314325][ T4782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.332324][ T4506] usb 4-1: config 0 has no interface number 0 [ 143.341384][ T4506] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 143.382758][ T4506] usb 4-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 143.396376][ T4782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.412672][ T4506] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 143.417815][ T4846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.442611][ T4042] Bluetooth: hci1: command 0x0409 tx timeout [ 143.472770][ T4782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.488558][ T4846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.507045][ T4782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.537937][ T3791] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 143.561038][ T3791] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 143.611477][ T4846] team0: Port device team_slave_0 added [ 143.612860][ T1966] Bluetooth: hci4: command 0x0419 tx timeout [ 143.624108][ T4506] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 143.650406][ T4506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.673039][ T4846] team0: Port device team_slave_1 added [ 143.681601][ T4898] loop1: detected capacity change from 0 to 512 [ 143.690785][ T4506] usb 4-1: Product: syz [ 143.703188][ T4506] usb 4-1: Manufacturer: syz [ 143.707879][ T4506] usb 4-1: SerialNumber: syz [ 143.737883][ T4506] usb 4-1: config 0 descriptor?? [ 143.744835][ T4898] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 143.764543][ T4878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.771666][ T4878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.804401][ T4898] EXT4-fs (loop1): invalid journal inode [ 143.826609][ T4898] EXT4-fs (loop1): can't get journal size [ 143.858396][ T4898] EXT4-fs (loop1): 1 truncate cleaned up [ 143.867597][ T4898] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,nouid32,,errors=continue. Quota mode: none. [ 143.875353][ T4846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.898826][ T4898] EXT4-fs error (device loop1): ext4_check_dx_root:2264: inode #2: comm syz.1.247: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 143.918833][ T4846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.958747][ T4846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.974686][ T4846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.981684][ T4846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.009253][ T4846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.114511][ T4846] device hsr_slave_0 entered promiscuous mode [ 144.132963][ T4846] device hsr_slave_1 entered promiscuous mode [ 144.147964][ T4846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.157059][ T4846] Cannot create hsr debugfs directory [ 144.396197][ T4782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.793964][ T4782] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.286234][ T4042] usb 4-1: USB disconnect, device number 13 [ 145.346450][ T4846] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.398293][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.411239][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.419783][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.429493][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.439039][ T3804] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.446171][ T3804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.456196][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.465124][ T3632] kernel read not supported for file /newroot/107/file0 (pid: 3632 comm: kworker/0:7) [ 145.467618][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.487246][ T3804] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.494406][ T3804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.524207][ T3662] Bluetooth: hci1: command 0x041b tx timeout [ 145.540439][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.557889][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.572080][ T4919] loop1: detected capacity change from 0 to 512 [ 145.596761][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.614113][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.625489][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.636010][ T4921] loop3: detected capacity change from 0 to 1024 [ 145.637519][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.651546][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.685017][ T4846] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.697850][ T4919] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 145.707868][ T4921] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.708112][ T4921] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.708155][ T4921] EXT4-fs (loop3): Ignoring removed orlov option [ 145.747903][ T4919] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 145.760157][ T4919] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 145.777322][ T4921] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,i_version,dioread_lock,,errors=continue. Quota mode: writeback. [ 145.777768][ T4919] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 145.814431][ T4919] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c054e11c, mo2=0000] [ 145.822822][ T4919] EXT4-fs (loop1): too many log groups per flexible block group [ 145.831414][ T4919] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 145.839647][ T4919] EXT4-fs (loop1): mount failed [ 145.904066][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.956250][ T4846] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.032967][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.057284][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.159402][ T4846] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.199124][ T3806] device hsr_slave_0 left promiscuous mode [ 146.208088][ T3806] device hsr_slave_1 left promiscuous mode [ 146.221801][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.267174][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.290602][ T4926] loop3: detected capacity change from 0 to 512 [ 146.300582][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.322051][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.334061][ T3806] device bridge_slave_1 left promiscuous mode [ 146.344764][ T4926] EXT4-fs (loop3): bad s_want_extra_isize: 11962 [ 146.351757][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.375850][ T3806] device bridge_slave_0 left promiscuous mode [ 146.392772][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.411886][ T3806] device hsr_slave_0 left promiscuous mode [ 146.421499][ T3806] device hsr_slave_1 left promiscuous mode [ 146.433949][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.442145][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.472959][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.496592][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.530217][ T3806] device bridge_slave_1 left promiscuous mode [ 146.550598][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.576322][ T3806] device bridge_slave_0 left promiscuous mode [ 146.597575][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.652487][ T3806] device veth1_macvtap left promiscuous mode [ 146.658750][ T3806] device veth0_macvtap left promiscuous mode [ 146.670822][ T3806] device veth1_vlan left promiscuous mode [ 146.678592][ T3806] device veth0_vlan left promiscuous mode [ 146.714883][ T3806] device veth1_macvtap left promiscuous mode [ 146.727624][ T3806] device veth0_macvtap left promiscuous mode [ 146.737046][ T3806] device veth1_vlan left promiscuous mode [ 146.746074][ T3806] device veth0_vlan left promiscuous mode [ 146.945126][ T4930] loop1: detected capacity change from 0 to 128 [ 147.316495][ T4934] loop1: detected capacity change from 0 to 16 [ 147.497380][ T4934] erofs: (device loop1): mounted with root inode @ nid 36. [ 147.600254][ T4935] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.749371][ T4506] Bluetooth: hci1: command 0x040f tx timeout [ 149.122267][ C0] sched: RT throttling activated [ 149.150594][ T4935] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 149.166056][ T4935] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 149.204054][ T4935] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 149.213558][ T4935] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 149.228151][ T4935] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 150.358629][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 150.391860][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 150.448608][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.494156][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.760008][ T3806] bond0 (unregistering): Released all slaves [ 151.455477][ T1966] Bluetooth: hci1: command 0x0419 tx timeout [ 151.601477][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 151.620567][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 151.637210][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.655959][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.744100][ T3806] bond0 (unregistering): Released all slaves [ 151.827635][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.838918][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.852763][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.872761][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 152.083844][ T4955] bridge0: port 3(veth3) entered blocking state [ 152.102557][ T4955] bridge0: port 3(veth3) entered disabled state [ 152.112216][ T4955] device veth3 entered promiscuous mode [ 152.167458][ T4846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.274923][ T4846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.291157][ T4846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.306641][ T4963] loop3: detected capacity change from 0 to 2048 [ 152.316487][ T4846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.363623][ T4782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.395101][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.409992][ T4963] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 152.413004][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.436339][ T4963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.523340][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.580285][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.617810][ T4967] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 152.680232][ T4967] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 152.782743][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.960251][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.977133][ T4782] device veth0_vlan entered promiscuous mode [ 153.019060][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.031242][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.141351][ T4782] device veth1_vlan entered promiscuous mode [ 153.371138][ T4846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.409787][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.430994][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.455161][ T4782] device veth0_macvtap entered promiscuous mode [ 153.478293][ T4975] loop1: detected capacity change from 0 to 128 [ 153.490964][ T4782] device veth1_macvtap entered promiscuous mode [ 153.539213][ T4975] 9pnet_virtio: no channels available for device 127.0.0.1 [ 153.581093][ T4846] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.608693][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.621417][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.641830][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.703229][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.748175][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.774009][ T4981] nfs: Unknown parameter '´ ' [ 153.785896][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.809631][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.833663][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.880529][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.891288][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.923522][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.123776][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.289339][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.604999][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.616294][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.653059][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.858832][ T4782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.124028][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.140324][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.155633][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.167364][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.177486][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.188010][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.198154][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.217552][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.238919][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.281070][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.301258][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.322628][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.400401][ T4782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.432188][ T4782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.440986][ T4782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.454963][ T4990] loop1: detected capacity change from 0 to 128 [ 159.483826][ T4782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.502537][ T4782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.529474][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.539081][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.549866][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.559605][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.573061][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.580216][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.592366][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.601459][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.610402][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.617626][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.626882][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.659241][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.674549][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.693553][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.706525][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.862091][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.968166][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.171841][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.286492][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.320793][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.344923][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.363693][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.418315][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.432933][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.529974][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.869574][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.912351][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.976083][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.984466][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.002610][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.149962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.160466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.193104][ T4846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.104396][ T5012] overlayfs: failed to resolve './file1': -2 [ 163.127736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.932429][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.954796][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.021569][ T4846] device veth0_vlan entered promiscuous mode [ 164.041680][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.061492][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.083307][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.091515][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.116748][ T4846] device veth1_vlan entered promiscuous mode [ 164.133256][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.152776][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.152795][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.182976][ T4846] device veth0_macvtap entered promiscuous mode [ 164.202518][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.211319][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.237474][ T4846] device veth1_macvtap entered promiscuous mode [ 164.250410][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.259526][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.288401][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.309419][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.327579][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.348942][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.370870][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.396418][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.412172][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.434660][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.448162][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.459213][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.470816][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.481774][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.493594][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.504782][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.516840][ T4846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.526367][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.536559][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.550889][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.567250][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.585501][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.604537][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.622503][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.642359][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 164.655698][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.672312][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 164.684048][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.694721][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.707744][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.717643][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.728517][ T21] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.737935][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.746470][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.768507][ T21] usb 2-1: config 0 descriptor?? [ 164.774650][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.787578][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.798680][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.810312][ T5026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.818129][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.830075][ T4846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.840115][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.863141][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.885644][ T4846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.896539][ T4846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.905759][ T4846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.914935][ T4846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.030497][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.049842][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.086372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.110434][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.130718][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.144111][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.216893][ T5029] loop3: detected capacity change from 0 to 512 [ 165.289965][ T21] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 165.301061][ T21] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 165.326720][ T21] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 165.408934][ T5029] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.288: bg 0: block 248: padding at end of block bitmap is not set [ 165.482728][ T5029] Quota error (device loop3): write_blk: dquota write failed [ 165.500437][ T5029] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 165.511024][ T5029] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.288: Failed to acquire dquot type 1 [ 165.526564][ T5029] EXT4-fs (loop3): 1 truncate cleaned up [ 165.536325][ T5029] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,nodelalloc,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 165.565252][ T5029] ext4 filesystem being mounted at /119/bus supports timestamps until 2038 (0x7fffffff) [ 165.582846][ T1075] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.632759][ T1966] usb 2-1: USB disconnect, device number 4 [ 165.892526][ T1075] usb 5-1: Using ep0 maxpacket: 32 [ 166.012687][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.025569][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.036135][ T1075] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 166.046288][ T1075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.067740][ T1075] usb 5-1: config 0 descriptor?? [ 166.115037][ T1075] hub 5-1:0.0: USB hub found [ 166.158185][ T5045] loop1: detected capacity change from 0 to 512 [ 166.208799][ T5047] device lo entered promiscuous mode [ 166.312111][ T5045] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.325897][ T5045] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 166.332628][ T1075] hub 5-1:0.0: 1 port detected [ 166.640130][ T3806] device hsr_slave_0 left promiscuous mode [ 166.641608][ T5060] loop1: detected capacity change from 0 to 1024 [ 166.653817][ T3806] device hsr_slave_1 left promiscuous mode [ 166.661812][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.669525][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.679323][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.686967][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.707125][ T5060] hfsplus: request for non-existent node 3 in B*Tree [ 166.717099][ T5060] hfsplus: request for non-existent node 3 in B*Tree [ 166.717454][ T3806] device bridge_slave_1 left promiscuous mode [ 166.736708][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.769697][ T3806] device bridge_slave_0 left promiscuous mode [ 166.776511][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.805090][ T3806] device veth1_macvtap left promiscuous mode [ 166.811143][ T3806] device veth0_macvtap left promiscuous mode [ 166.825097][ T3806] device veth1_vlan left promiscuous mode [ 166.830964][ T3806] device veth0_vlan left promiscuous mode [ 167.012644][ T1075] hub 5-1:0.0: activate --> -90 [ 167.076150][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 167.092020][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 167.110925][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.128891][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.218147][ T3806] bond0 (unregistering): Released all slaves [ 167.399464][ T5064] loop3: detected capacity change from 0 to 512 [ 167.482520][ T5064] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 167.514460][ T5064] EXT4-fs (loop3): invalid journal inode [ 167.521303][ T5064] EXT4-fs (loop3): can't get journal size [ 167.548183][ T5064] EXT4-fs (loop3): 1 truncate cleaned up [ 167.554075][ T5064] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nouid32,,errors=continue. Quota mode: none. [ 167.579393][ T5064] EXT4-fs error (device loop3): ext4_check_dx_root:2264: inode #2: comm syz.3.291: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 167.852801][ T5072] loop1: detected capacity change from 0 to 1024 [ 167.884899][ T3570] usb 5-1: USB disconnect, device number 3 [ 167.892627][ T1075] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 168.142118][ T3632] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 168.512615][ T3632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 168.533756][ T3632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 168.549858][ T5079] loop4: detected capacity change from 0 to 512 [ 168.555102][ T3632] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.589840][ T3632] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.606756][ T3632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.627751][ T3632] usb 4-1: config 0 descriptor?? [ 168.633097][ T5079] EXT4-fs (loop4): Ignoring removed orlov option [ 168.662789][ T5074] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.682637][ T5079] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.757323][ T5079] EXT4-fs (loop4): 1 truncate cleaned up [ 168.766791][ T5079] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 169.049940][ T5085] loop4: detected capacity change from 0 to 2048 [ 169.100553][ T5085] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 169.123151][ T5085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.124522][ T3632] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 169.151193][ T3632] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 169.312629][ T3632] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 169.603750][ T3616] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.096274][ T1966] usb 4-1: USB disconnect, device number 14 [ 170.102572][ T3616] usb 2-1: Using ep0 maxpacket: 8 [ 170.237400][ T3616] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 170.257493][ T3616] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 170.278447][ T3616] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.396888][ T5091] loop4: detected capacity change from 0 to 2048 [ 170.474640][ T5091] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.484066][ T3616] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.500520][ T3616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.525387][ T3616] usb 2-1: Product: syz [ 170.529576][ T3616] usb 2-1: Manufacturer: syz [ 170.534856][ T3616] usb 2-1: SerialNumber: syz [ 171.062333][ T5102] loop3: detected capacity change from 0 to 16 [ 171.137524][ T5102] erofs: (device loop3): mounted with root inode @ nid 36. [ 171.203080][ T3616] usb 2-1: 0:2 : does not exist [ 171.217704][ T5103] attempt to access beyond end of device [ 171.217704][ T5103] loop3: rw=0, want=328, limit=16 [ 171.262806][ T5103] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 171.415559][ T3616] usb 2-1: USB disconnect, device number 5 [ 171.429203][ T5107] loop3: detected capacity change from 0 to 2048 [ 171.509892][ T5107] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 171.530146][ T5107] UDF-fs: Scanning with blocksize 512 failed [ 171.544348][ T5107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.612647][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.893785][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 173.277700][ T5117] loop1: detected capacity change from 0 to 2048 [ 173.302640][ T21] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 173.310965][ T21] usb 5-1: config 0 has no interface number 0 [ 173.321317][ T21] usb 5-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 173.332681][ T21] usb 5-1: config 0 interface 113 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 173.369639][ T5119] loop3: detected capacity change from 0 to 256 [ 173.378007][ T5117] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 173.398120][ T5117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.414217][ T5119] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.513071][ T5119] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.524494][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 173.541691][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.580787][ T21] usb 5-1: Product: syz [ 173.588320][ T21] usb 5-1: Manufacturer: syz [ 173.604335][ T21] usb 5-1: SerialNumber: syz [ 173.798134][ T21] usb 5-1: config 0 descriptor?? [ 174.994171][ T21] usb 5-1: can't set config #0, error -71 [ 175.011730][ T21] usb 5-1: USB disconnect, device number 4 [ 175.215803][ T5127] loop4: detected capacity change from 0 to 512 [ 175.265803][ T5127] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 175.281706][ T5127] UDF-fs: Scanning with blocksize 512 failed [ 175.289765][ T5127] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 175.302402][ T5127] UDF-fs: Scanning with blocksize 1024 failed [ 175.309509][ T5127] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 175.318564][ T5127] UDF-fs: Scanning with blocksize 2048 failed [ 175.325956][ T5127] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 175.382190][ T5127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.406086][ T5131] syz.1.313 uses obsolete (PF_INET,SOCK_PACKET) [ 175.627342][ T26] audit: type=1800 audit(1726745792.937:4): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.312" name="file1" dev="loop4" ino=26 res=0 errno=0 [ 175.765530][ T26] audit: type=1326 audit(1726745793.047:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d2aa9ef9 code=0x7ffc0000 [ 177.582372][ T26] audit: type=1326 audit(1726745793.047:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d2aa9ef9 code=0x7ffc0000 [ 177.667100][ T26] audit: type=1326 audit(1726745793.047:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26d2aa9ef9 code=0x7ffc0000 [ 177.696209][ T26] audit: type=1326 audit(1726745793.047:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d2aa9ef9 code=0x7ffc0000 [ 177.725407][ T3616] Bluetooth: hci0: command 0x0406 tx timeout [ 177.761482][ T26] audit: type=1326 audit(1726745793.047:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d2aa9ef9 code=0x7ffc0000 [ 177.831582][ T3616] Bluetooth: hci2: command 0x0406 tx timeout [ 177.833999][ T26] audit: type=1326 audit(1726745793.047:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26d2aa9ef9 code=0x7ffc0000 [ 177.929852][ T26] audit: type=1326 audit(1726745793.047:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d2aa9ef9 code=0x7ffc0000 [ 177.942833][ T1075] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.955718][ T26] audit: type=1326 audit(1726745793.047:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d2aa9ef9 code=0x7ffc0000 [ 178.004981][ T26] audit: type=1326 audit(1726745793.047:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f26d2aa9ef9 code=0x7ffc0000 [ 178.252719][ T1075] usb 2-1: Using ep0 maxpacket: 32 [ 178.392528][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.414029][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.429307][ T5162] loop3: detected capacity change from 0 to 2048 [ 178.436251][ T1075] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 178.446069][ T1075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.461166][ T1075] usb 2-1: config 0 descriptor?? [ 178.513377][ T5162] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 178.544652][ T1075] hub 2-1:0.0: USB hub found [ 178.583324][ T5162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.004227][ T1075] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 179.242343][ T3570] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 179.250333][ T1075] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 179.512663][ T3570] usb 5-1: Using ep0 maxpacket: 16 [ 179.632699][ T3570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.652363][ T3570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.670032][ T3570] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.686096][ T1966] usb 2-1: USB disconnect, device number 6 [ 179.711492][ T3570] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.729609][ T3570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.745715][ T3570] usb 5-1: config 0 descriptor?? [ 180.608116][ T5174] xt_hashlimit: size too large, truncated to 1048576 [ 180.739378][ T3570] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 180.751815][ T3570] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input14 [ 180.771742][ T3570] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 181.052552][ T3570] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 181.422566][ T3570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.449416][ T3570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.468702][ T3570] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.490685][ T3570] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.501239][ T3570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.554508][ T5180] loop4: detected capacity change from 0 to 512 [ 181.570673][ T3570] usb 4-1: config 0 descriptor?? [ 181.615872][ T5180] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.725341][ T5180] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 181.749216][ T5180] EXT4-fs (loop4): 1 truncate cleaned up [ 181.762053][ T5180] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.345538][ T3570] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max [ 182.425882][ T3570] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 182.479788][ T3570] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 182.838355][ T5187] loop4: detected capacity change from 0 to 512 [ 182.900435][ T5187] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 182.912436][ T5187] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 182.919612][ T5187] EXT4-fs (loop4): DAX unsupported by block device. [ 182.975457][ T1966] usb 5-1: USB disconnect, device number 5 [ 183.510471][ T5189] netlink: 104 bytes leftover after parsing attributes in process `syz.4.328'. [ 184.892362][ T3632] usb 4-1: USB disconnect, device number 15 [ 184.897705][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 184.897723][ T26] audit: type=1326 audit(1726745802.207:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5192 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b4030ef9 code=0x7fc00000 [ 185.529439][ T26] audit: type=1326 audit(1726745802.817:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5192 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98b4030ef9 code=0x7fc00000 [ 186.384806][ T5213] binder: BC_ACQUIRE_RESULT not supported [ 186.390729][ T5213] binder: 5208:5213 ioctl c0306201 20000080 returned -22 [ 187.296590][ T5221] Illegal XDP return value 4294966772, expect packet loss! [ 187.382187][ T5225] device batadv_slave_1 entered promiscuous mode [ 187.409217][ T5225] loop4: detected capacity change from 0 to 512 [ 188.834058][ T5225] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 188.848320][ T5225] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 188.883894][ T1075] Bluetooth: hci1: command 0x0405 tx timeout [ 189.001377][ T5238] loop3: detected capacity change from 0 to 2048 [ 189.631641][ T5238] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.829778][ T5238] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038 (0x7fffffff) [ 190.102865][ T5224] device batadv_slave_1 left promiscuous mode [ 190.229539][ T5247] binder: BC_ACQUIRE_RESULT not supported [ 190.235501][ T5247] binder: 5244:5247 ioctl c0306201 20000080 returned -22 [ 190.725957][ T5252] loop1: detected capacity change from 0 to 128 [ 190.855725][ T5252] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.894655][ T5252] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 191.113292][ T5261] loop3: detected capacity change from 0 to 256 [ 191.206001][ T5199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.276707][ T5261] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 192.104787][ T5199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.633721][ T5199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.590302][ T4042] Bluetooth: hci5: command 0x0409 tx timeout [ 193.662067][ T5199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.676059][ T5281] Error parsing options; rc = [-22] [ 193.720920][ T5283] loop3: detected capacity change from 0 to 16 [ 193.738002][ T5283] erofs: (device loop3): mounted with root inode @ nid 36. [ 193.828190][ T5281] loop1: detected capacity change from 0 to 256 [ 193.942668][ T5255] chnl_net:caif_netlink_parms(): no params data found [ 194.310001][ T5295] binder: BC_ACQUIRE_RESULT not supported [ 194.315898][ T5295] binder: 5288:5295 ioctl c0306201 20000080 returned -22 [ 194.739588][ T1393] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.746038][ T1393] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.106287][ T5303] loop3: detected capacity change from 0 to 2048 [ 195.151948][ T5303] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 195.302287][ T5303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.542862][ T5308] loop4: detected capacity change from 0 to 8192 [ 195.623920][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.882475][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.931901][ T5255] device bridge_slave_0 entered promiscuous mode [ 196.202572][ T3612] Bluetooth: hci5: command 0x041b tx timeout [ 197.583645][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.606051][ T4846] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 197.613937][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.623817][ T4846] FAT-fs (loop4): Filesystem has been set read-only [ 197.633389][ T5255] device bridge_slave_1 entered promiscuous mode [ 197.634417][ T4846] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 197.651444][ T4846] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 197.779136][ T5255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.896051][ T5255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.002427][ T3632] Bluetooth: hci4: command 0x0409 tx timeout [ 198.025724][ T5255] team0: Port device team_slave_0 added [ 198.070899][ T5255] team0: Port device team_slave_1 added [ 198.195575][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.216597][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.261809][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 198.287448][ T5255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.366328][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.375529][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.424013][ T5255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.437073][ T26] audit: type=1800 audit(1726745815.747:28): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.367" name="/" dev="fuse" ino=1 res=0 errno=0 [ 198.676183][ T5255] device hsr_slave_0 entered promiscuous mode [ 198.729169][ T5255] device hsr_slave_1 entered promiscuous mode [ 198.850661][ T5255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.888739][ T5255] Cannot create hsr debugfs directory [ 199.169362][ T5377] loop3: detected capacity change from 0 to 2048 [ 199.206274][ T5322] chnl_net:caif_netlink_parms(): no params data found [ 199.355781][ T5377] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 199.457939][ T5377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.855456][ T5199] device hsr_slave_0 left promiscuous mode [ 199.879739][ T5199] device hsr_slave_1 left promiscuous mode [ 199.929069][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.951655][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.987930][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.042709][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.074136][ T5199] device bridge_slave_1 left promiscuous mode [ 200.092667][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.100294][ T1966] Bluetooth: hci4: command 0x041b tx timeout [ 200.152851][ T5199] device bridge_slave_0 left promiscuous mode [ 200.159114][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.332399][ T3612] Bluetooth: hci5: command 0x0419 tx timeout [ 200.381392][ T5199] device veth1_macvtap left promiscuous mode [ 200.392373][ T5199] device veth0_macvtap left promiscuous mode [ 200.398500][ T5199] device veth1_vlan left promiscuous mode [ 200.427790][ T5199] device veth0_vlan left promiscuous mode [ 200.962525][ T3632] Bluetooth: hci1: command 0x0409 tx timeout [ 201.034656][ T5199] team0 (unregistering): Port device team_slave_1 removed [ 201.054908][ T5199] team0 (unregistering): Port device team_slave_0 removed [ 201.098274][ T5199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.158783][ T5199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.346216][ T5199] bond0 (unregistering): Released all slaves [ 202.155081][ T3612] Bluetooth: hci3: command 0x0406 tx timeout [ 202.164890][ T1075] Bluetooth: hci4: command 0x040f tx timeout [ 202.226496][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 202.402608][ T3612] Bluetooth: hci5: command 0x0405 tx timeout [ 202.469544][ T5413] loop1: detected capacity change from 0 to 256 [ 202.562972][ T5410] loop3: detected capacity change from 0 to 8192 [ 202.603038][ T5322] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.610135][ T5322] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.619581][ T5413] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.683835][ T5322] device bridge_slave_0 entered promiscuous mode [ 202.694956][ T5410] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.707709][ T5413] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.770988][ T26] audit: type=1800 audit(1726745820.077:29): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.378" name="bus" dev="loop3" ino=1048670 res=0 errno=0 [ 202.986754][ T5363] chnl_net:caif_netlink_parms(): no params data found [ 203.034569][ T5322] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.043253][ T1966] Bluetooth: hci1: command 0x041b tx timeout [ 203.045850][ T5322] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.064641][ T5322] device bridge_slave_1 entered promiscuous mode [ 203.439968][ T5322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.544090][ T5322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.776443][ T5430] loop1: detected capacity change from 0 to 2048 [ 203.897345][ T5430] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 203.931867][ T5430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.947047][ T5322] team0: Port device team_slave_0 added [ 204.082442][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.097461][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.146701][ T5363] device bridge_slave_0 entered promiscuous mode [ 204.193448][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.204095][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.221623][ T5363] device bridge_slave_1 entered promiscuous mode [ 204.243202][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 204.328074][ T5322] team0: Port device team_slave_1 added [ 204.635803][ T5322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.661027][ T5322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.747603][ T5322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.799277][ T5322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.822471][ T5322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.903144][ T5322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.088018][ T5453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 205.107199][ T5452] device bridge_slave_1 left promiscuous mode [ 205.132438][ T4506] Bluetooth: hci1: command 0x040f tx timeout [ 205.147633][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.187515][ T5452] bridge1: port 1(bridge_slave_1) entered blocking state [ 205.189400][ T5458] loop1: detected capacity change from 0 to 1764 [ 205.202621][ T5452] bridge1: port 1(bridge_slave_1) entered disabled state [ 205.221255][ T5452] device bridge_slave_1 entered promiscuous mode [ 205.247807][ T5363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.324958][ T5363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.445927][ T5322] device hsr_slave_0 entered promiscuous mode [ 205.463475][ T5322] device hsr_slave_1 entered promiscuous mode [ 205.504120][ T5322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.528354][ T5460] loop3: detected capacity change from 0 to 1024 [ 205.542397][ T5322] Cannot create hsr debugfs directory [ 205.580751][ T5255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.457841][ T5363] team0: Port device team_slave_0 added [ 206.474488][ T5255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.486566][ T5255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.506518][ T5255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.617193][ T5363] team0: Port device team_slave_1 added [ 206.747267][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.761319][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.797287][ T5363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.883263][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.913482][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.993324][ T5363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.202343][ T4506] Bluetooth: hci1: command 0x0419 tx timeout [ 207.377471][ T5363] device hsr_slave_0 entered promiscuous mode [ 207.386654][ T5363] device hsr_slave_1 entered promiscuous mode [ 207.422626][ T5363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.430280][ T5363] Cannot create hsr debugfs directory [ 207.448926][ T5480] loop1: detected capacity change from 0 to 2048 [ 207.495551][ T5322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.508736][ T5485] loop3: detected capacity change from 0 to 1024 [ 207.588908][ T5480] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 207.637812][ T5480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.692717][ T5322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.762705][ T5255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.929094][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.943223][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.280637][ T5255] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.352002][ T5322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.591311][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.594853][ T5497] loop3: detected capacity change from 0 to 8192 [ 208.611578][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.620816][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.628083][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.671375][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.713210][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.742631][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.773230][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.780359][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.816864][ T5500] loop1: detected capacity change from 0 to 512 [ 208.956796][ T5500] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.975618][ T5322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.264487][ T5500] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.395: invalid indirect mapped block 4294967295 (level 1) [ 209.301893][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.331798][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.365413][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.383952][ T5500] EXT4-fs (loop1): Remounting filesystem read-only [ 209.415908][ T5500] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.395: invalid indirect mapped block 4294967295 (level 1) [ 209.430613][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.472766][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.493482][ T5500] EXT4-fs (loop1): 2 truncates cleaned up [ 209.499305][ T5500] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 209.536708][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.574707][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.586617][ T3573] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 209.622629][ T3573] FAT-fs (loop3): Filesystem has been set read-only [ 209.624202][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.635473][ T3573] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 209.638446][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.658546][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.668780][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.702845][ T3573] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 209.733815][ T5500] syz.1.395 (pid 5500) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 209.781051][ T5500] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.395: bg 0: block 5: invalid block bitmap [ 209.823532][ T5500] EXT4-fs (loop1): Remounting filesystem read-only [ 210.060928][ T5199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.133665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.139094][ T5524] loop1: detected capacity change from 0 to 1024 [ 210.141294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.181245][ T5255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.207844][ T5524] EXT4-fs (loop1): Ignoring removed oldalloc option [ 210.223338][ T5524] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.298758][ T5199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.314830][ T5524] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 210.362914][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.383161][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.426072][ T5199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.479295][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.502187][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.517796][ T5255] device veth0_vlan entered promiscuous mode [ 210.533302][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.543829][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.587491][ T5255] device veth1_vlan entered promiscuous mode [ 210.662320][ T5199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.113922][ T5255] device veth0_macvtap entered promiscuous mode [ 211.136633][ T5255] device veth1_macvtap entered promiscuous mode [ 211.171013][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.199977][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.223614][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.264299][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.283439][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.312928][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.421403][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.444881][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.456544][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.467125][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.477231][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.487948][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.498439][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.510066][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.520098][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.530929][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.541300][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.552745][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.565361][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.608108][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.643202][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.764828][ T5322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.824557][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.844758][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.854731][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.972948][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.024809][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.079314][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.130087][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.252045][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.349380][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.446932][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.519797][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.545415][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.565706][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.605425][ T5255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.644722][ T5255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.665003][ T3613] Bluetooth: hci2: command 0x0409 tx timeout [ 212.685955][ T5255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.712740][ T5255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.781605][ T5322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.814108][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.823761][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.866583][ T5563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 213.177765][ T5322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.296132][ T5322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.374386][ T5582] loop1: detected capacity change from 0 to 128 [ 213.482635][ T3933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.490921][ T3933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.529102][ T5582] 9pnet_virtio: no channels available for device 127.0.0.1 [ 213.707843][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.748630][ T5535] chnl_net:caif_netlink_parms(): no params data found [ 214.274517][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.288458][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.386488][ T5322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.452352][ T5322] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.491932][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.502831][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.526844][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.535966][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.545912][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.555597][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.562859][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.571420][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.580939][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.593855][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.601005][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.609833][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.942113][ T3570] Bluetooth: hci2: command 0x041b tx timeout [ 215.005270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.201171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.370173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.405765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.415060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.424443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.452688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.457123][ T27] INFO: task syz-executor:3567 blocked for more than 144 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.472407][ T27] Not tainted 5.15.167-syzkaller #0 [ 215.478185][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.483787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.501988][ T27] task:syz-executor state:D stack:19448 pid: 3567 ppid: 1 flags:0x00004004 [ 215.562457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.578392][ T27] Call Trace: [ 215.581746][ T27] [ 215.597026][ T27] __schedule+0x12c4/0x45b0 [ 215.599287][ T5535] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.601599][ T27] ? __switch_to_asm+0x34/0x60 [ 215.622396][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.632730][ T5535] device bridge_slave_0 entered promiscuous mode [ 215.634941][ T27] ? release_firmware_map_entry+0x190/0x190 [ 215.646082][ T27] schedule+0x11b/0x1f0 [ 215.650291][ T27] schedule_timeout+0xac/0x300 [ 215.659960][ T27] ? console_conditional_schedule+0x40/0x40 [ 215.690566][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 215.697789][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 215.722426][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 215.727795][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 215.733555][ T27] do_wait_for_common+0x2d9/0x480 [ 215.738633][ T27] ? console_conditional_schedule+0x40/0x40 [ 215.745219][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 215.753796][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 215.766276][ T27] wait_for_completion+0x48/0x60 [ 215.771283][ T27] kthread_stop+0x178/0x580 [ 215.775901][ T27] ext4_stop_mmpd+0x43/0xb0 [ 215.780441][ T27] ext4_put_super+0xac5/0x1060 [ 215.785410][ T27] ? ext4_drop_inode+0x250/0x250 [ 215.790387][ T27] generic_shutdown_super+0x136/0x2c0 [ 215.800707][ T27] kill_block_super+0x7a/0xe0 [ 215.805562][ T27] deactivate_locked_super+0xa0/0x110 [ 215.810977][ T27] cleanup_mnt+0x44e/0x500 [ 215.815563][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 215.820800][ T27] task_work_run+0x129/0x1a0 [ 215.826047][ T27] exit_to_user_mode_loop+0x106/0x130 [ 215.831479][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 215.837128][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 215.843533][ T27] do_syscall_64+0x47/0xb0 [ 215.847999][ T27] ? clear_bhb_loop+0x15/0x70 [ 215.854487][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.863664][ T27] RIP: 0033:0x7f1f068e4227 [ 215.868133][ T27] RSP: 002b:00007ffd5da4da38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 215.881290][ T27] RAX: 0000000000000000 RBX: 00007f1f06955a14 RCX: 00007f1f068e4227 [ 215.889699][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5da4daf0 [ 215.921315][ T27] RBP: 00007ffd5da4daf0 R08: 0000000000000000 R09: 0000000000000000 [ 215.942384][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5da4eb70 [ 215.950429][ T27] R13: 00007f1f06955a14 R14: 000000000000f2b9 R15: 00007ffd5da4ebb0 [ 215.972407][ T27] [ 215.975558][ T27] INFO: task kmmpd-loop0:3684 blocked for more than 145 seconds. [ 215.991050][ T27] Not tainted 5.15.167-syzkaller #0 [ 216.001409][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.023039][ T27] task:kmmpd-loop0 state:D stack:26592 pid: 3684 ppid: 2 flags:0x00004000 [ 216.042822][ T27] Call Trace: [ 216.046165][ T27] [ 216.049123][ T27] __schedule+0x12c4/0x45b0 [ 216.066747][ T27] ? release_firmware_map_entry+0x190/0x190 [ 216.077296][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 216.084171][ T27] ? print_irqtrace_events+0x210/0x210 [ 216.089682][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 216.096499][ T27] schedule+0x11b/0x1f0 [ 216.100696][ T27] percpu_rwsem_wait+0x3e1/0x470 [ 216.106129][ T27] ? read_lock_is_recursive+0x10/0x10 [ 216.111540][ T27] ? __percpu_down_read+0x100/0x100 [ 216.119667][ T27] ? percpu_up_write+0x90/0x90 [ 216.124725][ T27] __percpu_down_read+0xd0/0x100 [ 216.129796][ T27] ? kmmpd+0x292/0xa90 [ 216.142275][ T27] write_mmp_block+0x2f0/0x390 [ 216.147194][ T27] kmmpd+0x292/0xa90 [ 216.151133][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 216.159101][ T27] ? write_mmp_block_thawed+0x590/0x590 [ 216.165656][ T27] kthread+0x3f6/0x4f0 [ 216.169771][ T27] ? write_mmp_block_thawed+0x590/0x590 [ 216.175689][ T27] ? kthread_blkcg+0xd0/0xd0 [ 216.180316][ T27] ret_from_fork+0x1f/0x30 [ 216.185540][ T27] [ 216.213900][ T27] [ 216.213900][ T27] Showing all locks held in the system: [ 216.221677][ T27] 1 lock held by khungtaskd/27: [ 216.292573][ T27] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 216.301993][ T27] 2 locks held by kworker/u4:4/1245: [ 216.333633][ T27] 2 locks held by kworker/1:2/1966: [ 216.338878][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 216.382287][ T27] #1: ffffc90006037d20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 216.392082][ T27] 2 locks held by getty/3324: [ 216.412645][ T27] #0: ffff88802a444098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 216.432123][ T27] #1: ffffc90002bab2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 216.451872][ T27] 1 lock held by syz-executor/3567: [ 216.457563][ T27] #0: ffff888079f020e0 (&type->s_umount_key#32){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 216.469858][ T27] 3 locks held by kworker/1:3/3612: [ 216.475546][ T27] #0: ffff88802902bd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 216.487396][ T27] #1: ffffc90002f87d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 216.500099][ T27] #2: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 216.510045][ T27] 3 locks held by kworker/0:6/3615: [ 216.515887][ T27] #0: ffff88802902bd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 216.528958][ T27] #1: ffffc90002fb7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 216.541695][ T27] #2: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 216.552977][ T27] 2 locks held by kworker/1:7/3647: [ 216.558222][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 216.583197][ T27] #1: ffffc90003037d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 216.609679][ T27] 1 lock held by kmmpd-loop0/3684: [ 216.615065][ T27] #0: ffff888079f02460 (sb_writers#5){++++}-{0:0}, at: kmmpd+0x292/0xa90 [ 216.623993][ T27] 1 lock held by syz.4.56/4227: [ 216.629128][ T27] #0: ffff888079f020e0 (&type->s_umount_key#32){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 216.639345][ T27] 5 locks held by kworker/u4:17/5199: [ 216.645537][ T27] #0: ffff8880171d5938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 216.656148][ T27] #1: ffffc90002e97d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 216.666194][ T27] #2: ffffffff8da261d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 216.676336][ T27] #3: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xc9/0x330 [ 216.686866][ T27] #4: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 216.698538][ T27] 3 locks held by syz-executor/5255: [ 216.703940][ T27] #0: ffff8880211f4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 216.713869][ T27] #1: ffff8880211f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 216.724438][ T27] #2: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 216.735466][ T27] 3 locks held by syz-executor/5322: [ 216.740857][ T27] #0: ffff88807800cff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 216.750800][ T27] #1: ffff88807800c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 216.760376][ T27] #2: ffffffff8db7b128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 216.770495][ T27] 3 locks held by syz-executor/5363: [ 216.776803][ T27] #0: ffff8880775f0ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 216.786731][ T27] #1: ffff8880775f0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 216.796848][ T27] #2: ffffffff8db7b128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 216.808049][ T27] 3 locks held by syz-executor/5535: [ 216.813461][ T27] #0: ffff888078bbcff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 216.823315][ T27] #1: ffff888078bbc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 216.832987][ T27] #2: ffffffff8db7b128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 216.843220][ T27] 3 locks held by syz.1.405/5595: [ 216.848260][ T27] #0: ffff88801c314ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 216.858133][ T27] #1: ffff88801c314078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 216.867809][ T27] #2: ffffffff8db7b128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 216.878719][ T27] [ 216.881100][ T27] ============================================= [ 216.881100][ T27] [ 216.892634][ T27] NMI backtrace for cpu 0 [ 216.897021][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 216.905018][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.915092][ T27] Call Trace: [ 216.918396][ T27] [ 216.921325][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 216.926199][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 216.931841][ T27] ? panic+0x860/0x860 [ 216.935922][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 216.941032][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 216.945982][ T27] ? __wake_up_klogd+0xd5/0x100 [ 216.951026][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 216.957186][ T27] ? _printk+0xd1/0x120 [ 216.961372][ T27] ? panic+0x860/0x860 [ 216.965454][ T27] ? __wake_up_klogd+0xcc/0x100 [ 216.970304][ T27] ? panic+0x860/0x860 [ 216.974389][ T27] ? __rcu_read_unlock+0x92/0x100 [ 216.979415][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 216.985490][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 216.991480][ T27] watchdog+0xe72/0xeb0 [ 216.995638][ T27] kthread+0x3f6/0x4f0 [ 216.999734][ T27] ? hungtask_pm_notify+0x50/0x50 [ 217.004761][ T27] ? kthread_blkcg+0xd0/0xd0 [ 217.009377][ T27] ret_from_fork+0x1f/0x30 [ 217.013909][ T27] [ 217.018175][ T27] Sending NMI from CPU 0 to CPUs 1: [ 217.023832][ C1] NMI backtrace for cpu 1 [ 217.023847][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.167-syzkaller #0 [ 217.023866][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.023877][ C1] Workqueue: phy11 ieee80211_iface_work [ 217.023911][ C1] RIP: 0010:____kasan_kmalloc+0x6/0xf0 [ 217.023930][ C1] Code: 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 1f 84 00 00 00 00 00 eb 0e 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 48 89 e5 41 57 <41> 56 41 54 53 48 83 e4 f0 48 81 ec 00 02 00 00 41 89 ce 48 89 d3 [ 217.023945][ C1] RSP: 0018:ffffc90000ce7548 EFLAGS: 00000202 [ 217.023959][ C1] RAX: 0000000000263601 RBX: ffff88801f431d00 RCX: 0000000000000b20 [ 217.023970][ C1] RDX: 0000000000000048 RSI: ffff88801f431d00 RDI: ffff888017041780 [ 217.023982][ C1] RBP: ffffc90000ce7550 R08: 0000000000000080 R09: ffff88801f431d00 [ 217.023994][ C1] R10: 0000000000000005 R11: ffff888017d78000 R12: ffff88801f431d00 [ 217.024006][ C1] R13: ffff888017041780 R14: 0000000000000048 R15: 0000000000000b20 [ 217.024017][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 217.024031][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.024043][ C1] CR2: 000055c5156f6038 CR3: 000000001fa04000 CR4: 00000000003506e0 [ 217.024057][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.024067][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.024077][ C1] Call Trace: [ 217.024082][ C1] [ 217.024088][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 217.024108][ C1] ? read_lock_is_recursive+0x10/0x10 [ 217.024143][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 217.024162][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 217.024187][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 217.024204][ C1] ? nmi_handle+0xf7/0x370 [ 217.024222][ C1] ? ____kasan_kmalloc+0x6/0xf0 [ 217.024237][ C1] ? default_do_nmi+0x62/0x150 [ 217.024256][ C1] ? exc_nmi+0xa8/0x100 [ 217.024272][ C1] ? end_repeat_nmi+0x16/0x31 [ 217.024294][ C1] ? ____kasan_kmalloc+0x6/0xf0 [ 217.024309][ C1] ? ____kasan_kmalloc+0x6/0xf0 [ 217.024326][ C1] ? ____kasan_kmalloc+0x6/0xf0 [ 217.024341][ C1] [ 217.024345][ C1] [ 217.024350][ C1] __kmalloc+0x168/0x300 [ 217.024366][ C1] ? cfg80211_inform_bss_frame_data+0x4f8/0x20f0 [ 217.024392][ C1] cfg80211_inform_bss_frame_data+0x4f8/0x20f0 [ 217.024424][ C1] ? cfg80211_parse_mbssid_data+0x3410/0x3410 [ 217.024453][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 217.024477][ C1] ieee80211_bss_info_update+0x7a6/0xc80 [ 217.024500][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 217.024525][ C1] ieee80211_ibss_rx_queued_mgmt+0x175e/0x2af0 [ 217.024546][ C1] ? mark_lock+0x98/0x340 [ 217.024570][ C1] ? ieee80211_ibss_rx_no_sta+0x720/0x720 [ 217.024589][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 217.024608][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 217.024627][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 217.024646][ C1] ? _raw_spin_unlock+0x40/0x40 [ 217.024665][ C1] ? kcov_remote_start+0x6f/0x480 [ 217.024687][ C1] ? kcov_remote_start+0xf2/0x480 [ 217.024706][ C1] ieee80211_iface_work+0x78f/0xcc0 [ 217.024731][ C1] process_one_work+0x8a1/0x10c0 [ 217.024758][ C1] ? worker_detach_from_pool+0x260/0x260 [ 217.024778][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 217.024796][ C1] ? kthread_data+0x4e/0xc0 [ 217.024812][ C1] ? wq_worker_running+0x97/0x170 [ 217.024829][ C1] worker_thread+0xaca/0x1280 [ 217.024860][ C1] kthread+0x3f6/0x4f0 [ 217.024874][ C1] ? rcu_lock_release+0x20/0x20 [ 217.024891][ C1] ? kthread_blkcg+0xd0/0xd0 [ 217.024913][ C1] ret_from_fork+0x1f/0x30 [ 217.024939][ C1] [ 217.027213][ T3570] Bluetooth: hci2: command 0x040f tx timeout [ 217.028740][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 217.398115][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 217.406092][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.416237][ T27] Call Trace: [ 217.419523][ T27] [ 217.422465][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 217.427262][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 217.432997][ T27] ? panic+0x860/0x860 [ 217.437162][ T27] panic+0x318/0x860 [ 217.441052][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 217.446697][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 217.452854][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 217.458228][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 217.464294][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 217.470449][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 217.476625][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 217.482819][ T27] watchdog+0xeb0/0xeb0 [ 217.486992][ T27] kthread+0x3f6/0x4f0 [ 217.491063][ T27] ? hungtask_pm_notify+0x50/0x50 [ 217.496095][ T27] ? kthread_blkcg+0xd0/0xd0 [ 217.500771][ T27] ret_from_fork+0x1f/0x30 [ 217.505296][ T27] [ 217.508714][ T27] Kernel Offset: disabled [ 217.513129][ T27] Rebooting in 86400 seconds..